| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2022-12-15 | Embed js height fix (#22141) | Matt Hodges | |
| * only begin iframe reheight once document state is complete * format * lint fixes * Update public/embed.js to use readystatechange event listener Co-authored-by: Claire <claire.github-309c@sitedethib.com> * Call loaded() if ready, otherwise add listenter * lint fix Co-authored-by: Claire <claire.github-309c@sitedethib.com> | |||
| 2022-05-04 | fix: embed.js doesn't expands iframes height (#18301) | rinsuki | |
| also including some refactoring: - add `// @ts-check` - use Map to completely avoid prototype pollution - assign random id to each iframe for reduce chance to brute-force attack, and leak of iframe counts - check iframe.contentWindow and MessageEvent.source to validate message is coming from correct iframe (it works on latest Chrome/Firefox/Safari but I'm not sure this is allowed by spec) follow-up of #17420 fix #18299 | |||
| 2022-02-01 | Fixed prototype pollution bug and only allow trusted origin (#17420) | Rohan Sharma | |
| 2017-09-09 | Add script to make embedded iframes autosize (#4853) | Eugen Rochko | |
 |
index : mastodon | |
| Plural Café fork of Mastodon/Glitch Social |
| about summary refs log tree commit diff |