Arsharth/hydrogen-web
1
0
Fork 0
forked from mystiq/hydrogen-web
Code Issues Pull requests Projects Releases Packages Wiki Activity

check origin in download sandbox

Browse source
This commit is contained in:
Bruno Windels 2021-03-03 17:50:23 +01:00
parent f8264f1726
commit 423a0664cd
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
assets/download-sandbox.html
View file

@ -4,7 +4,7 @@
<meta charset="utf-8">
</head>
<body>
<a id="link" href="#">Download!</a>
<a id="link" href="#">Download</a>
<script type="text/javascript">
var link = document.getElementById("link");
function download(blob, filename) {
@ -15,7 +15,7 @@
URL.revokeObjectURL(url);
}
window.addEventListener("message", function(event) {
if (event.data.type === "download") {
if (event.origin === window.location.origin && event.data.type === "download") {
download(event.data.blob, event.data.filename);
}
});