Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

Fix typo; add to frame whitelist [issue #174]

  • Loading branch information...
commit 4bde5e33c378091c09032aa2182f10574c085181 1 parent 921504e
@brianloveswords brianloveswords authored
Showing with 3 additions and 2 deletions.
  1. +1 −1  app.js
  2. +2 −1  static/js/issuer-parts/issuer-core.js
View
2  app.js
@@ -38,7 +38,7 @@ app.dynamicHelpers({
// Middleware. See `middleware.js`
app.use(express.static(path.join(__dirname, "static")));
app.use(express.static(path.join(configuration.get('var_dir'), "badges")));
-app.use(middleware.noFrame({ whitelist: [ '/issuer/frame', '/', '/share/.*' ] }));
+app.use(middleware.noFrame({ whitelist: [ '/issuer/frame.*', '/', '/share/.*' ] }));
app.use(express.bodyParser({ uploadDir: configuration.get('badge_path') }));
app.use(express.cookieParser());
app.use(express.methodOverride());
View
3  static/js/issuer-parts/issuer-core.js
@@ -94,7 +94,8 @@ var OpenBadges = (function() {
}).appendTo(document.body);
var iframe = document.createElement("iframe");
// add Date.now() to aggressively cache-bust.
- iframe.setAttribute("src", root + "issuer/frame" + Date.now());
+ var url = root + "issuer/frame?" + Date.now();
+ iframe.setAttribute("src", url);
iframe.setAttribute("scrolling", "no");
var baseStyles = {
border: "none",
Please sign in to comment.
Something went wrong with that request. Please try again.