infra
/
cryptpad
2
1
Fork 0
Code Issues Pull Requests Projects Releases 1 Activity

Better way to check if we're using the safe origin in bounce

pull/1/head
yflory 2017-12-12 10:44:20 +01:00
parent b1765c6ae3
commit b30efff5d1
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
www/bounce/main.js
View File

@ -1,5 +1,5 @@
define([], function () {
if (window.localStorage && window.localStorage.FS_hash) {
define(['/api/config'], function (ApiConfig) {
if (ApiConfig.httpSafeOrigin === window.location.origin) {
window.alert('The bounce application must only be used from the sandbox domain, ' +
'please report this issue on https://github.com/xwiki-labs/cryptpad');
return;