diff options
| author | Starfall <us@starfall.systems> | 2022-02-01 11:30:21 -0600 |
|---|---|---|
| committer | Starfall <us@starfall.systems> | 2022-02-01 11:30:21 -0600 |
| commit | 71022b8a93167706e658dbc21d7ab15e71566b37 (patch) | |
| tree | f37b4a9fd3a58293483135685f00787bc3263e1f /public | |
| parent | 88005748e7f368cfbd829615915582c146ea8533 (diff) | |
| parent | 4d6d4b43c6186a13e67b92eaf70fe1b70ea24a09 (diff) | |
Merge remote-tracking branch 'vanilla-gh/main'
Diffstat (limited to 'public')
| -rw-r--r-- | public/embed.js | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/public/embed.js b/public/embed.js index dac507453..d597fd33c 100644 --- a/public/embed.js +++ b/public/embed.js @@ -15,7 +15,7 @@ window.addEventListener('message', function(e) { var data = e.data || {}; - if (data.type !== 'setHeight' || !iframes[data.id]) { + if (data.type !== 'setHeight' || !iframes[data.id] || window.location.origin !== e.origin || data.id.toString() === '__proto__') { return; } |