external-repos/squoosh
1
0
Fork 1
mirror of https://github.com/GoogleChromeLabs/squoosh.git synced 2025-11-13 09:17:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

Only allow iframe embedding

Browse Source
This commit is contained in:
Surma
2019-03-20 17:51:32 +00:00
parent 5270553f27
commit 956e064c8c
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/components/App/client-api.ts
View File

@@ -9,6 +9,11 @@ export interface ReadyMessage {
} }
export function exposeAPI(app: App) { export function exposeAPI(app: App) {
if (window === top) {
// Someone opened Squoosh in a window rather than an iframe.
// This can be deceiving and we won’t allow that.
return;
}
self.parent.postMessage({ type: 'READY', version: MAJOR_VERSION }, '*'); self.parent.postMessage({ type: 'READY', version: MAJOR_VERSION }, '*');
self.addEventListener('message', (event: MessageEvent) => { self.addEventListener('message', (event: MessageEvent) => {
if (event.data !== 'READY?') { if (event.data !== 'READY?') {