Better check of jitsi widget message origin.
parent
a13d58f6c2
commit
9753ee8d82
|
@ -278,7 +278,12 @@ export default class AppTile extends React.Component {
|
||||||
event.origin = event.originalEvent.origin;
|
event.origin = event.originalEvent.origin;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (!this.state.widgetUrl.startsWith(event.origin)) {
|
const widgetUrlObj = url.parse(this.state.widgetUrl);
|
||||||
|
const eventOrigin = url.parse(event.origin);
|
||||||
|
if (
|
||||||
|
eventOrigin.protocol !== widgetUrlObj.protocol ||
|
||||||
|
eventOrigin.host !== widgetUrlObj.host
|
||||||
|
) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue