prehistoric-systems/keepassxc-browser
1
0
Fork 0
mirror of https://github.com/keepassxreboot/keepassxc-browser.git synced 2026-03-11 08:54:43 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Do not allow sandboxed iframes

Browse source
This commit is contained in:
varjolintu 2025-08-23 08:59:29 +03:00
parent 23d7305f3a
commit 780443b280
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
keepassxc-browser/content/keepassxc-browser.js
View file

@ -1028,6 +1028,13 @@ kpxc.reconnect = async function() {
const isIframeAllowed = async function() {
sendMessage('iframe_detected', false);
// Don't allow sandboxed iframes
if (self.origin === null || self.origin === 'null') {
logDebug('Error: Sandboxed iframes are not allowed');
return false;
}
try {
// Check for Cross-domain security error when inspecting window.top.location.href
const currentLocation = window.top.location.href;