Sakurai/pdf.js
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #4197 from Rob--W/firefox-verify-message-source

Browse Source 
[security] Verify message source in Firefox add-on
This commit is contained in:
Yury Delendik 2014-01-26 12:31:02 -08:00
commit 10b9824cd0
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
web/viewer.js
View File

@ -446,6 +446,7 @@ var PDFView = {
(this.container.scrollWidth > this.container.clientWidth));
},
//#if (FIREFOX || MOZCENTRAL)
initPassiveLoading: function pdfViewInitPassiveLoading() {
var pdfDataRangeTransport = {
rangeListeners: [],
@ -482,6 +483,11 @@ var PDFView = {
};
window.addEventListener('message', function windowMessage(e) {
if (e.source !== null) {
// The message MUST originate from Chrome code.
console.warn('Rejected untrusted message from ' + e.origin);
return;
}
var args = e.data;
if (typeof args !== 'object' || !('pdfjsLoadAction' in args))
@ -514,6 +520,7 @@ var PDFView = {
});
FirefoxCom.requestSync('initPassiveLoading', null);
},
//#endif
setTitleUsingUrl: function pdfViewSetTitleUsingUrl(url) {
this.url = url;