Merge branch 'main' into glitch-soc/merge-upstream

2022-02-01 20:59:28 +01:00
parent d6f3261c6c d0d15bf49c
commit 098f2bc1e1
5 changed files with 34 additions and 3 deletions
--- a/public/embed.js
+++ b/public/embed.js
@@ -15,7 +15,7 @@
    window.addEventListener('message', function(e) {
      var data = e.data || {};

-      if (data.type !== 'setHeight' || !iframes[data.id]) {
+      if (data.type !== 'setHeight' || !iframes[data.id] || window.location.origin !== e.origin || data.id.toString() === '__proto__') {
        return;
      }