Skip to content

Commit

Permalink
Disallow simple dialogs from different-origin domain iframes
Browse files Browse the repository at this point in the history
Closes #5407.
  • Loading branch information
domenic committed Jan 27, 2021
1 parent ecd23cf commit 26412c5
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions source
Original file line number Diff line number Diff line change
Expand Up @@ -93527,6 +93527,11 @@ function sendData(data) {
data-x="concept-document-window">associated <code>Document</code></span> has the <span>sandboxed
modals flag</span> set, then return true.</p></li>

<li><p>If <var>window</var>'s <span>relevant settings object</span>'s <span
data-x="concept-settings-object-origin">origin</span> and <var>window</var>'s <span>relevant
settings object</span>'s <span>top-level origin</span> are not <span>same origin-domain</span>,
then return true.</p></li>

<li>If <var>window</var>'s <span>relevant agent</span>'s <span
data-x="concept-agent-event-loop">event loop</span>'s <span>termination nesting level</span> is
nonzero, then optionally return true.</li>
Expand Down Expand Up @@ -123225,6 +123230,7 @@ INSERT INTERFACES HERE
Cao Yipeng,
Carlos Amengual,
Carlos Gabriel Cardona,
Carlos Ibarra L&oacute;pez, <!-- carlosjoan91 on GitHub -->
Carlos Perell&oacute; Mar&iacute;n,
Carolyn MacLeod,
Casey Leask,
Expand Down

0 comments on commit 26412c5

Please sign in to comment.