Kevin Veen-Birkenbach a7a6d205e1 fix(iframe): stop observing when the iframe's first location is cross-origin ...

observeIframeNavigation read iframe.contentWindow.location.href once,
outside any guard. For a cross-origin iframe that read throws a
SecurityError, which escaped as an uncaught exception and never reached
the polling loop, whose own read of the same property is already guarded.
The first read is now guarded as well, and the observer returns because it
cannot follow a cross-origin frame anyway.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-11 23:25:51 +02:00

..

container.js

Solved container height bug

2025-07-06 22:18:28 +02:00

fullscreen.js

Added logo to navbar when in fullscreen

2025-07-21 11:39:59 +02:00

fullwidth.js

Added fullwidth animation

2025-07-06 17:35:40 +02:00

iframe.js

fix(iframe): stop observing when the iframe's first location is cross-origin

2026-09-11 23:25:51 +02:00

modal.js

fix(csp): ship the interface strings as a JSON data block, not an inline script

2026-09-11 23:25:51 +02:00

navigation.js

build(make): run e2e without act, lint yaml, js and shell

2026-08-22 01:18:27 +02:00

tooltip.js

Replaced German by English comments

2025-03-18 14:27:07 +01:00