moparisthebest/mail
1
0
Fork 0
mirror of https://github.com/moparisthebest/mail synced 2025-02-07 02:20:14 -05:00
Code Issues Releases Wiki Activity

Revert "[WO-03-008] Fix no Origin Checks for postMessage Communication (High)"

Browse Source 
This reverts commit 2aa166ac19.
This commit is contained in:
Tankred Hase 2015-05-04 14:56:31 +02:00
parent 9454739818
commit bcaef5c330
1 changed files with 0 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/js/controller/app/read-sandbox.js
View File

@ -12,11 +12,6 @@ DOMPurify.addHook('afterSanitizeAttributes', function(node) {
window.onmessage = function(e) { window.onmessage = function(e) {
var html = ''; var html = '';
// ignore messages from other origins to prevent XSS
if (e.origin !== location.origin) {
return;
}
if (e.data.html) { if (e.data.html) {
// display html mail body // display html mail body
html = e.data.html; html = e.data.html;