News for hackers. Stuff that matters.

A comment on Show HN: AcrossTabs – Easy communication between cross-origin browser tabs. Parent comment

Re:Show HN: AcrossTabs – Easy communication between cross-or... by softvar on Wednesday April 05, 2017 @11:07AM (#14042608)
Does that mean, the library should not act when an origin is not specified and throw some kinda message in the console?

How can it be enforced? Any suggestions?

Users can also make it a bit more complicated while using `*` to get hacked by accepting responses which match some kinda pattern(it's not bullet-proof though) and simply discarding others.

[ Parent | on HN ]
Re:Show HN: AcrossTabs – Easy communication between cross-or... by cryptarch on Wednesday April 05, 2017 @12:39PM (#14043384)
Put the wildcard functionality behind a setter with a long name and make the default the current domain?
[ Parent | on HN ]
Re:Show HN: AcrossTabs – Easy communication between cross-or... by Bartkusa on Wednesday April 05, 2017 @02:28PM (#14044375)
Put it behind a setter with "doNotUseOrYouWillBeFired" in the function name.

https://github.com/facebook/react/blob/80bff5397bf854750dbe7...

[ Parent | on HN ]