[Libreoffice-bugs] [Bug 126617] New: Same-origin check throw exception

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=126617

            Bug ID: 126617
           Summary: Same-origin check throw exception
           Product: LibreOffice Online
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: LibreOffice
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: johnrazeur at gmail.com

In the Leaflet postMessageListener, there is a condition to verify the parent
window has the same origin. But if the parent has a different origin, the
condition throw the following exception when trying to access to the parent
window:

SecurityError: Permission denied to access property "origin" on cross-origin
object

The file is Map.WOPI.js and the line number is 145.

I tried with the X-Frame-Options header, but nothing change.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20190730/0d4ec877/attachment.html>