From f9b489ad0effc859c47328359dbcb010c2abc055 Mon Sep 17 00:00:00 2001
From: Sai Harsha Vardhan
 <56996463+sai-harsha-vardhan@users.noreply.github.com>
Date: Tue, 3 Sep 2024 15:43:34 +0530
Subject: [PATCH] fix(router): send post message to window.parent instead of
 window.top in external 3ds flow (#5778)

---
 crates/router/src/core/utils.rs | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/crates/router/src/core/utils.rs b/crates/router/src/core/utils.rs
index 2fcf8a24773c..eb7a3af5751e 100644
--- a/crates/router/src/core/utils.rs
+++ b/crates/router/src/core/utils.rs
@@ -1240,7 +1240,7 @@ pub fn get_html_redirect_response_for_external_authentication(
                                     try {{
                                         // if inside iframe, send post message to parent for redirection
                                         if (window.self !== window.parent) {{
-                                            window.top.postMessage({{poll_status: poll_status_data}}, '*')
+                                            window.parent.postMessage({{poll_status: poll_status_data}}, '*')
                                         // if parent, redirect self to return_url
                                         }} else {{
                                             window.location.href = return_url
@@ -1248,7 +1248,7 @@ pub fn get_html_redirect_response_for_external_authentication(
                                     }}
                                     catch(err) {{
                                         // if error occurs, send post message to parent and wait for 10 secs to redirect. if doesn't redirect, redirect self to return_url
-                                        window.top.postMessage({{poll_status: poll_status_data}}, '*')
+                                        window.parent.postMessage({{poll_status: poll_status_data}}, '*')
                                         setTimeout(function() {{
                                             window.location.href = return_url
                                         }}, 10000);
@@ -1270,7 +1270,7 @@ pub fn get_html_redirect_response_for_external_authentication(
                                     try {{
                                         // if inside iframe, send post message to parent for redirection
                                         if (window.self !== window.parent) {{
-                                            window.top.postMessage({{openurl_if_required: return_url}}, '*')
+                                            window.parent.postMessage({{openurl_if_required: return_url}}, '*')
                                         // if parent, redirect self to return_url
                                         }} else {{
                                             window.location.href = return_url
@@ -1278,7 +1278,7 @@ pub fn get_html_redirect_response_for_external_authentication(
                                     }}
                                     catch(err) {{
                                         // if error occurs, send post message to parent and wait for 10 secs to redirect. if doesn't redirect, redirect self to return_url
-                                        window.top.postMessage({{openurl_if_required: return_url}}, '*')
+                                        window.parent.postMessage({{openurl_if_required: return_url}}, '*')
                                         setTimeout(function() {{
                                             window.location.href = return_url
                                         }}, 10000);