1
0
mirror of https://github.com/hakimel/reveal.js.git synced 2025-04-21 04:52:14 +02:00

fix xss issue reported by @realansgar, regression from 3dade6117628beb7706b4abdc61c268ce281abbc

This commit is contained in:
Hakim El Hattab 2024-01-30 14:08:24 +01:00
parent 5d131cea20
commit 16f6633014
3 changed files with 9 additions and 2 deletions

File diff suppressed because one or more lines are too long

File diff suppressed because one or more lines are too long

View File

@ -383,6 +383,13 @@
window.addEventListener( 'message', function( event ) {
// Validate the origin of all messages to avoid parsing messages
// that aren't meant for us. Ignore when running off file:// so
// that the speaker view continues to work without a web server.
if( window.location.origin !== event.origin && window.location.origin !== 'file://' ) {
return
}
clearTimeout( connectionTimeout );
connectionStatus.style.display = 'none';