[Webkit-unassigned] [Bug 163412] Same-origin iframe'`postMessage` has wrong `event.source`.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Oct 13 15:45:18 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=163412

--- Comment #1 from lee.wang.zhong+wk at gmail.com ---
[Sorry, early send.]

On iOS 10 Safari, a `postMessage` from an iframe with the same origin as the parent window results in a MessageEvent with the `.source` property set to the parent window. It should be set to the window of the message source.

This is a behavior change from iOS 9.

P.S.: Because `.source` is scrubbed, if the parent has two child frames with the parent's origin, there's no data on the event object which could distinguish one frame's messages from the other's.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161013/6ce9a285/attachment.html>


More information about the webkit-unassigned mailing list