Merge pull request #4006 from diego0020/patch-1
Verify message comes from loginIframe
This commit is contained in:
commit
802f648757
1 changed files with 2 additions and 1 deletions
|
@ -832,9 +832,10 @@
|
|||
document.body.appendChild(iframe);
|
||||
|
||||
var messageCallback = function(event) {
|
||||
if (event.origin !== loginIframe.iframeOrigin) {
|
||||
if ((event.origin !== loginIframe.iframeOrigin) || (loginIframe.iframe.contentWindow !== event.source)) {
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
if (event.data != "unchanged") {
|
||||
kc.clearToken();
|
||||
|
|
Loading…
Reference in a new issue