bugfix for origin detection in xdomain_cookie

trilogy-group · Oct 26, 2016 · 1a859c0 · 1a859c0
1 parent db81273
commit 1a859c0
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/dev/xdomain_cookie.dev.js b/dev/xdomain_cookie.dev.js
@@ -31,7 +31,7 @@
 			_log("_inbound_postmessage", event.origin, event.data);
 
 			var origin = event.origin || event.originalEvent.origin; // For Chrome, the origin property is in the event.originalEvent object.
-			if (origin !== iframe_path) return; //incoming message not from iframe
+			if (iframe_path.substr(0,origin.length) !== origin) return; //incoming message not from iframe
 
 			if(typeof event.data !== 'string') return; //expected json string encoded payload
 			var data = null;

diff --git a/src/xdomain_cookie.js b/src/xdomain_cookie.js
@@ -33,7 +33,7 @@
 			_log("_inbound_postmessage", event.origin, event.data);
 
 			var origin = event.origin || event.originalEvent.origin; // For Chrome, the origin property is in the event.originalEvent object.
-			if (origin !== iframe_path) return; //incoming message not from iframe
+			if (iframe_path.substr(0,origin.length) !== origin) return; //incoming message not from iframe
 
 			if(typeof event.data !== 'string') return; //expected json string encoded payload
 			var data = null;

diff --git a/src/xdomain_cookie.min.js b/src/xdomain_cookie.min.js