[Webkit-unassigned] [Bug 163412] REGRESSION (iOS 10): Same-origin iframe'`postMessage` has wrong `event.source`.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Oct 14 10:16:55 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=163412

--- Comment #3 from Chris Dumez <cdumez at apple.com> ---
(In reply to comment #1)
> [Sorry, early send.]
> 
> On iOS 10 Safari, a `postMessage` from an iframe with the same origin as the
> parent window results in a MessageEvent with the `.source` property set to
> the parent window. It should be set to the window of the message source.
> 
> This is a behavior change from iOS 9.
> 
> P.S.: Because `.source` is scrubbed, if the parent has two child frames with
> the parent's origin, there's no data on the event object which could
> distinguish one frame's messages from the other's.

Do you have a test case / example?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161014/4472e899/attachment-0001.html>


More information about the webkit-unassigned mailing list