Kevin Veen-Birkenbach a7a6d205e1 fix(iframe): stop observing when the iframe's first location is cross-origin ...

observeIframeNavigation read iframe.contentWindow.location.href once,
outside any guard. For a cross-origin iframe that read throws a
SecurityError, which escaped as an uncaught exception and never reached
the polling loop, whose own read of the same property is already guarded.
The first read is now guarded as well, and the observer returns because it
cannot follow a cross-origin frame anyway.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-11 23:25:51 +02:00

6.8 KiB

Raw Blame History

View Raw