Browse Source

Fix DOM XSS

r0hanSH 3 years ago
parent
commit
32cdd3b187
1 changed files with 4 additions and 0 deletions
  1. 4 0
      plugin/notes/speaker-view.html

+ 4 - 0
plugin/notes/speaker-view.html

@@ -368,6 +368,10 @@
 
 
 				window.addEventListener( 'message', function( event ) {
 				window.addEventListener( 'message', function( event ) {
 
 
+					if (window.location.origin !== event.origin){
+						return;
+					}
+
 					clearTimeout( connectionTimeout );
 					clearTimeout( connectionTimeout );
 					connectionStatus.style.display = 'none';
 					connectionStatus.style.display = 'none';