Code

Stronger xdomain checks#971

Code

Merged

protonate merged 6 commits intoprebid:masterprebid/Prebid.js:masterfrom brondsem:stronger_xdomain_checksbrondsem/Prebid.js:stronger_xdomain_checksCopy head branch name to clipboardFeb 8, 2017

+7-2

Commits

Commits on Jan 25, 2017

• Make x-domain safe frame example work out of the box

  Show description for 21c9d39
  brondsem

  committed
  21c9d39

  Copy full SHA for 21c9d39

Commits on Feb 2, 2017

• Replace doc.write in x-domain safe frame code, so IE works

  Show description for 49e7d15
  brondsem

  committed
  49e7d15

  Copy full SHA for 49e7d15

Commits on Feb 7, 2017

• Verify event "message" type, and event origin, as recommended by https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage#Security_concerns

  brondsem

  committed
  0665400

  Copy full SHA for 0665400

• Ensure an incorrect ad can never be accidentally or maliciously rendered

  brondsem

  committed
  02b0ccd

  Copy full SHA for 02b0ccd

• IE includes :443 in .host even though it shouldn't, so use hostname instead

  brondsem

  committed
  398c04b

  Copy full SHA for 398c04b

Commits on Feb 8, 2017

• Merge branch 'master' into stronger_xdomain_checks

  brondsem

  authored
  f6e2a55

  Copy full SHA for f6e2a55