feat(replay): Expose rrweb recordCrossOriginIframes under _experiments (#14916)

Closes #14809.

I have tested this with my project and it sort of works. While it's not
perfect (sometimes produces an unplayable replay), it might unblock
other users looking to experiment with this feature.

Verify:
- [ ] If you've added code that should be tested, please add tests.
- [x] Ensure your code lints and the test suite passes (`yarn lint`) &
(`yarn test`).

This just exposes the API under experiments, as such I don't think it
requires tests.

---------

Co-authored-by: Billy Vong <[email protected]>

Author: dgavranic

packages/replay-internal/src/integration.ts

@@ -150,6 +150,8 @@ export class Replay implements Integration {
           // this can happen if the error is frozen or does not allow mutation for other reasons
         }
       },
+      // experimental support for recording iframes from different origins
+      recordCrossOriginIframes: Boolean(_experiments.recordCrossOriginIframes),
     };
 
     this._initialOptions = {

packages/replay-internal/src/types/replay.ts

@@ -229,6 +229,11 @@ export interface ReplayPluginOptions extends ReplayNetworkOptions {
     captureExceptions: boolean;
     traceInternals: boolean;
     continuousCheckout: number;
+    /**
+     * Before enabling, please read the security considerations:
+     * https://github.com/rrweb-io/rrweb/blob/master/docs/recipes/cross-origin-iframes.md#considerations
+     */
+    recordCrossOriginIframes: boolean;
     autoFlushOnFeedback: boolean;
   }>;
 }

packages/replay-internal/src/types/rrweb.ts

@@ -43,6 +43,7 @@ export type RrwebRecordOptions = {
   maskTextSelector?: string;
   blockSelector?: string;
   maskInputOptions?: Record<string, boolean>;
+  recordCrossOriginIframes?: boolean;
 } & Record<string, unknown>;
 
 export interface CanvasManagerInterface {

packages/replay-internal/test/integration/rrweb.test.ts

@@ -40,6 +40,7 @@ describe('Integration | rrweb', () => {
         "maskTextFn": undefined,
         "maskTextSelector": ".sentry-mask,[data-sentry-mask]",
         "onMutation": [Function],
+        "recordCrossOriginIframes": false,
         "slimDOMOptions": "all",
         "unblockSelector": "",
         "unmaskTextSelector": "",
@@ -80,6 +81,7 @@ describe('Integration | rrweb', () => {
         "maskTextFn": undefined,
         "maskTextSelector": ".sentry-mask,[data-sentry-mask]",
         "onMutation": [Function],
+        "recordCrossOriginIframes": false,
         "slimDOMOptions": "all",
         "unblockSelector": "",
         "unmaskTextSelector": "",
@@ -131,6 +133,7 @@ describe('Integration | rrweb', () => {
         "maskTextFn": undefined,
         "maskTextSelector": ".sentry-mask,[data-sentry-mask]",
         "onMutation": [Function],
+        "recordCrossOriginIframes": false,
         "sampling": {
           "mousemove": false,
         },