3 ms·
window.name was never safe because it was shared by all domains. (You could use it for cross-origin communicate, in a very lame way.)
by mmahemoff 14y ago
window.name was never safe because it was shared by all domains. (You could use it for cross-origin communicate, in a very lame way.)
- homakov 14y agoshared by all origin1 domains. I'm origin2 and now i can also read it. this is the hack :)
- ricardobeat 14y agowindow.name can be read by any domain, that's why it was used for cross-domain messaging before postMessage came along.