mirror of
https://github.com/hakimel/reveal.js.git
synced 2025-04-21 04:52:14 +02:00
fix xss issue reported by @realansgar, regression from 3dade6117628beb7706b4abdc61c268ce281abbc
This commit is contained in:
parent
5d131cea20
commit
16f6633014
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@ -383,6 +383,13 @@
|
||||
|
||||
window.addEventListener( 'message', function( event ) {
|
||||
|
||||
// Validate the origin of all messages to avoid parsing messages
|
||||
// that aren't meant for us. Ignore when running off file:// so
|
||||
// that the speaker view continues to work without a web server.
|
||||
if( window.location.origin !== event.origin && window.location.origin !== 'file://' ) {
|
||||
return
|
||||
}
|
||||
|
||||
clearTimeout( connectionTimeout );
|
||||
connectionStatus.style.display = 'none';
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user