Arsharth/hydrogen-web
1
0
Fork 0
forked from mystiq/hydrogen-web
Code Issues Pull requests Projects Releases Packages Wiki Activity

check origin in download sandbox

Browse source
This commit is contained in:
Bruno Windels 2021-03-03 17:50:23 +01:00
parent f8264f1726
commit 423a0664cd
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
assets/download-sandbox.html
View file

@ -4,7 +4,7 @@
<meta charset="utf-8"> <meta charset="utf-8">
</head> </head>
<body> <body>
<a id="link" href="#">Download!</a> <a id="link" href="#">Download</a>
<script type="text/javascript"> <script type="text/javascript">
var link = document.getElementById("link"); var link = document.getElementById("link");
function download(blob, filename) { function download(blob, filename) {
@ -15,7 +15,7 @@
URL.revokeObjectURL(url); URL.revokeObjectURL(url);
} }
window.addEventListener("message", function(event) { window.addEventListener("message", function(event) {
if (event.data.type === "download") { if (event.origin === window.location.origin && event.data.type === "download") {
download(event.data.blob, event.data.filename); download(event.data.blob, event.data.filename);
} }
}); });