mirror of https://github.com/mastodon/mastodon
6e736f2452
also including some refactoring: - add `// @ts-check` - use Map to completely avoid prototype pollution - assign random id to each iframe for reduce chance to brute-force attack, and leak of iframe counts - check iframe.contentWindow and MessageEvent.source to validate message is coming from correct iframe (it works on latest Chrome/Firefox/Safari but I'm not sure this is allowed by spec) follow-up of #17420 fix #18299 |
3 years ago | |
|---|---|---|
| .. | ||
| avatars/original | ||
| emoji | 3 years ago | |
| headers/original | ||
| ocr/lang-data | 6 years ago | |
| shortcuts | 4 years ago | |
| sounds | ||
| 500.html | ||
| android-chrome-192x192.png | 7 years ago | |
| apple-touch-icon.png | 7 years ago | |
| badge.png | 7 years ago | |
| browserconfig.xml | ||
| embed.js | 3 years ago | |
| favicon-dev.ico | ||
| favicon.ico | ||
| inert.css | 5 years ago | |
| mask-icon.svg | ||
| mstile-150x150.png | 7 years ago | |
| oops.gif | ||
| oops.png | 6 years ago | |
| robots.txt | 6 years ago | |
| sw.js | ||
| web-push-icon_expand.png | 7 years ago | |
| web-push-icon_favourite.png | 7 years ago | |
| web-push-icon_reblog.png | ||
