Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: restrict sendToFrame to same-process frames by default #26928

Merged
merged 4 commits into from Dec 11, 2020

Conversation

nornagon
Copy link
Member

Backport of #26875. See that change for details.

Notes: Fixed an issue where event.reply could sometimes not deliver a reply to an IPC message when cross-site iframes were present.

@trop trop bot added 9-x-y backport This is a backport PR labels Dec 10, 2020
@codebytere codebytere changed the title fix: restrict sendToFrame to same-process frames by default (#26875) fix: restrict sendToFrame to same-process frames by default Dec 10, 2020
@nornagon nornagon added the semver/minor backwards-compatible functionality label Dec 10, 2020
@MarshallOfSound MarshallOfSound merged commit 5c8e7e8 into 9-x-y Dec 11, 2020
@release-clerk
Copy link

release-clerk bot commented Dec 11, 2020

Release Notes Persisted

Fixed an issue where event.reply could sometimes not deliver a reply to an IPC message when cross-site iframes were present.

This was referenced Mar 15, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
9-x-y api-review/requested 🗳 backport This is a backport PR semver/minor backwards-compatible functionality
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants