mirror of
https://github.com/hakimel/reveal.js.git
synced 2025-07-31 03:40:28 +02:00
fix xss issue reported by @realansgar, regression from 3dade61176
This commit is contained in:
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -383,6 +383,13 @@
|
|||||||
|
|
||||||
window.addEventListener( 'message', function( event ) {
|
window.addEventListener( 'message', function( event ) {
|
||||||
|
|
||||||
|
// Validate the origin of all messages to avoid parsing messages
|
||||||
|
// that aren't meant for us. Ignore when running off file:// so
|
||||||
|
// that the speaker view continues to work without a web server.
|
||||||
|
if( window.location.origin !== event.origin && window.location.origin !== 'file://' ) {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
clearTimeout( connectionTimeout );
|
clearTimeout( connectionTimeout );
|
||||||
connectionStatus.style.display = 'none';
|
connectionStatus.style.display = 'none';
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user