Merge pull request #5657 from matrix-org/t3chguy/usercontent

Remove redundant lockOrigin parameter from usercontent
This commit is contained in:
Michael Telatynski 2021-02-16 18:23:55 +00:00 committed by GitHub
commit b386f0c73b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 9 deletions

View file

@ -288,7 +288,7 @@ export default class MFileBody extends React.Component {
<a ref={this._dummyLink} />
</div>
<iframe
src={`${url}?origin=${encodeURIComponent(window.location.origin)}`}
src={url}
onLoad={onIframeLoad}
ref={this._iframe}
sandbox="allow-scripts allow-downloads allow-downloads-without-user-activation" />

View file

@ -1,10 +1,3 @@
const params = window.location.search.substring(1).split('&');
let lockOrigin;
for (let i = 0; i < params.length; ++i) {
const parts = params[i].split('=');
if (parts[0] === 'origin') lockOrigin = decodeURIComponent(parts[1]);
}
function remoteRender(event) {
const data = event.data;
@ -45,7 +38,7 @@ function remoteSetTint(event) {
}
window.onmessage = function(e) {
if (e.origin === lockOrigin) {
if (e.origin === window.location.origin) {
if (e.data.blob) remoteRender(e);
else remoteSetTint(e);
}