Skip to content

C
coopwire-hypothesis
Commit 68e85f01 authored by Robert Hodan's avatar Robert Hodan Committed by Juan Corona
Browse files
Options

Do not accept messages from sources outside of our specified destination

parent cb4fc4ab
Hide whitespace changes
Inline Side-by-side
Showing with 1 addition and 0 deletions
src/shared/frame-rpc.js
View file @ 68e85f01
...@@ -52,6 +52,7 @@ function RPC (src, dst, origin, methods) { ...@@ -52,6 +52,7 @@ function RPC (src, dst, origin, methods) {
this._onmessage = function (ev) { this._onmessage = function (ev) {
if (self._destroyed) return; if (self._destroyed) return;
if (self.dst != ev.source) return;
if (self.origin !== '*' && ev.origin !== self.origin) return; if (self.origin !== '*' && ev.origin !== self.origin) return;
if (!ev.data || typeof ev.data !== 'object') return; if (!ev.data || typeof ev.data !== 'object') return;
if (ev.data.protocol !== 'frame-rpc') return; if (ev.data.protocol !== 'frame-rpc') return;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment