Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: restrict sendToFrame to same-process frames by default #26925

Merged
merged 1 commit into from Dec 11, 2020

Conversation

@nornagon
Copy link
Member

@nornagon nornagon commented Dec 10, 2020

Backport of #26875. See that change for details.

Notes: Fixed an issue where event.reply could sometimes not deliver a reply to an IPC message when cross-site iframes were present.

miniak
miniak approved these changes Dec 10, 2020
@nornagon nornagon changed the title fix: restrict sendToFrame to same-process frames by default (#26875) fix: restrict sendToFrame to same-process frames by default Dec 10, 2020
@MarshallOfSound MarshallOfSound merged commit 36c695c into 12-x-y Dec 11, 2020
17 of 18 checks passed
Loading
@release-clerk
Copy link

@release-clerk release-clerk bot commented Dec 11, 2020

Release Notes Persisted

Fixed an issue where event.reply could sometimes not deliver a reply to an IPC message when cross-site iframes were present.

Loading

@MarshallOfSound MarshallOfSound deleted the backport/12-x-y/fix-sendtoframe branch Dec 11, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked issues

Successfully merging this pull request may close these issues.

None yet

3 participants