Skip to content

5.0.18

Choose a tag to compare

View all tags
@zbryikt zbryikt released this 20 Aug 18:21
· 1 commit to release since this release
v5.0.18
0d66c05
  • fix bug: forging event.source mutated the shared Event object, so the forged value leaked
    to every message listener registered after ours. libraries identifying their own iframe
    with event.source == iframe.contentWindow ( e.g. recaptcha ) then ignored their own
    messages and hung. the event is now left untouched and the callback gets a proxied view.
    this applies to both addEventListener and onmessage.
  • fix bug: the options argument ( capture / once / passive / signal ) of addEventListener
    and removeEventListener was dropped by the wrapper.
Assets 2
Loading