-
Notifications
You must be signed in to change notification settings - Fork 4.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
IFrame windows can easily be hijacked. #25
Milestone
Comments
oi |
@ghost what tf are you doing that's not a thing on github you know |
the user is trying to use Github to cross-ping on Discord. |
their old username was @enfiree, btw |
@VillainsRule does it work? |
no ofc not |
it puts the ping inside embed content which doesn’t ping |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
This will require restricting access to windows from other origins. The final product should keep or preserve
postMessage
behavior and still support captchas.The text was updated successfully, but these errors were encountered: