You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
With #207 top.document should be used to attach the event handlers. When the top window is from a different origin (e.g. the site is embedded in an iframe from a different origin) then access to window.top (and therefore top.document) is prohibited by the browser. This leads to the following exception:
Therefore access to window.top should be avoided or at least there should be a check if its safe to acces it (try catch?).
edit:
I don't know why, but there is a commit that reverts the changes from #207
see 106c198
But its not already releaset so that the current released version still contains the access of window.top
The text was updated successfully, but these errors were encountered:
sdir456
changed the title
Check for SameOriginPolicy before using window.top
Check for same origin before using window.top
Dec 27, 2017
With #207 top.document should be used to attach the event handlers. When the top window is from a different origin (e.g. the site is embedded in an iframe from a different origin) then access to window.top (and therefore top.document) is prohibited by the browser. This leads to the following exception:
Therefore access to window.top should be avoided or at least there should be a check if its safe to acces it (try catch?).
edit:
I don't know why, but there is a commit that reverts the changes from #207
see 106c198
But its not already releaset so that the current released version still contains the access of window.top
The text was updated successfully, but these errors were encountered: