Bug 126617 - Same-origin check throw exception
Summary: Same-origin check throw exception
Status: RESOLVED FIXED
Alias: None
Product: LibreOffice Online
Classification: Unclassified
Component: LibreOffice (show other bugs)
Version:
(earliest affected)
unspecified
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard: target:7.0.0
Keywords:
Depends on:
Blocks:
 
Reported: 2019-07-30 09:42 UTC by Clément Lafont
Modified: 2020-02-22 02:49 UTC (History)
4 users (show)

See Also:
Crash report or crash signature:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Clément Lafont 2019-07-30 09:42:32 UTC 
In the Leaflet postMessageListener, there is a condition to verify the parent window has the same origin. But if the parent has a different origin, the condition throw the following exception when trying to access to the parent window:

SecurityError: Permission denied to access property "origin" on cross-origin object

The file is Map.WOPI.js and the line number is 145.

I tried with the X-Frame-Options header, but nothing change.