OpenCloud
/
element-web
mirror of https://github.com/vector-im/element-web
1
0
Fork 0
Code Issues Releases Wiki Activity

Log when integration manager origin is invalid

pull/21833/head
J. Ryan Stinnett 2019-07-12 19:04:20 +01:00
parent 380639516b
commit dc9b5fa996
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/ScalarMessaging.js
View File

@ -549,13 +549,14 @@ const onMessage = function(event) {
// //
// All strings start with the empty string, so for sanity return if the length // All strings start with the empty string, so for sanity return if the length
// of the event origin is 0. // of the event origin is 0.
// const url = SdkConfig.get().integrations_ui_url;
if (event.origin.length === 0 || !url.startsWith(event.origin + '/')) {
console.warn(`Message from IM with invalid origin ${event.origin} ignored`);
return;
}
// TODO -- Scalar postMessage API should be namespaced with event.data.api field // TODO -- Scalar postMessage API should be namespaced with event.data.api field
// Fix following "if" statement to respond only to specific API messages. // Fix following "if" statement to respond only to specific API messages.
const url = SdkConfig.get().integrations_ui_url;
if ( if (
event.origin.length === 0 ||
!url.startsWith(event.origin + '/') ||
!event.data.action || !event.data.action ||
event.data.api // Ignore messages with specific API set event.data.api // Ignore messages with specific API set
) { ) {