3 ms·
I was puzzled when I first saw cross tab communication in impress.js for their slide control tab (slid.es) and I am still wondering about the proper use case of
by tiplus 10y ago
I was puzzled when I first saw cross tab communication in impress.js for their slide control tab (slid.es) and I am still wondering about the proper use case of this feature today. Isn't this a security nightmare?
- tyingq 10y agoIt maps back to window.postMessage. There's a security concerns section on Mozilla's docs: https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage https://developer.mozilla.org/en-US/docs/Web/API/Window/post... All boils down the sender using a specific target, and the receiver remembering to check the origin.
- d--b 10y agoDoesn't most Oauth2 things work that way? http://www.riskcompletefailure.com/2013/03/postmessage-oauth-20.html?m=1 http://www.riskcompletefailure.com/2013/03/postmessage-oauth...