You've already forked matrix-react-sdk
mirror of
https://github.com/matrix-org/matrix-react-sdk.git
synced 2025-11-13 08:02:38 +03:00
Better check of jitsi widget message origin.
This commit is contained in:
@@ -278,7 +278,12 @@ export default class AppTile extends React.Component {
|
|||||||
event.origin = event.originalEvent.origin;
|
event.origin = event.originalEvent.origin;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (!this.state.widgetUrl.startsWith(event.origin)) {
|
const widgetUrlObj = url.parse(this.state.widgetUrl);
|
||||||
|
const eventOrigin = url.parse(event.origin);
|
||||||
|
if (
|
||||||
|
eventOrigin.protocol !== widgetUrlObj.protocol ||
|
||||||
|
eventOrigin.host !== widgetUrlObj.host
|
||||||
|
) {
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user