web/cryptpad
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Better way to check if we're using the safe origin in bounce

Browse Source
This commit is contained in:
yflory 2017-12-12 10:44:20 +01:00
parent b1765c6ae3
commit b30efff5d1
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
www/bounce/main.js
View File

@ -1,5 +1,5 @@
define([], function () { define(['/api/config'], function (ApiConfig) {
if (window.localStorage && window.localStorage.FS_hash) { if (ApiConfig.httpSafeOrigin === window.location.origin) {
window.alert('The bounce application must only be used from the sandbox domain, ' + window.alert('The bounce application must only be used from the sandbox domain, ' +
'please report this issue on https://github.com/xwiki-labs/cryptpad'); 'please report this issue on https://github.com/xwiki-labs/cryptpad');
return; return;