Join GitHub today
GitHub is home to over 50 million developers working together to host and review code, manage projects, and build software together.
Sign upSame-origin loads that redirect to a cross-origin page are considered same-origin #6276
Comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
That is, we initiate a same-origin load in a script task and assume that when it completes it will still be same origin. This means that
window.frameElementwill yield cross-origin data, etc. We should check the resulting response and redirect it to the constellation for further processing if necessary.Blocks #5236