Merge pull request #3137 from r0hanSH/fix_dom_xss

Fix DOM XSS
hakimel · Feb 28, 2022 · c47bf21 · c47bf21
2 parents e33c3c7 + 32cdd3b
commit c47bf21
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/plugin/notes/speaker-view.html b/plugin/notes/speaker-view.html
@@ -368,6 +368,10 @@ <h4 class="label">Notes</h4>
 
 				window.addEventListener( 'message', function( event ) {
 
+					if (window.location.origin !== event.origin){
+						return;
+					}
+
 					clearTimeout( connectionTimeout );
 					connectionStatus.style.display = 'none';