fix: running in iframe with different origin

AzureAD / azure-activedirectory-library-for-js

The code for ADAL.js and ADAL Angular has been moved to the MSAL.js repo. Please open any issues or PRs at the link below.

Apache License 2.0

626 stars 373 forks source link

Closed HonzaKubatMS closed 4 years ago

HonzaKubatMS commented 5 years ago

Enables page runnin inside iframe with different origin then parent to authenticate rather then causing DOMException.

This was happening because of unsafe access to window.parent._adalInstance.

Check whether access is possible was added on multiple places inside handleWindowCallback.

This fixes issue: #797

msftclas commented 5 years ago

All CLA requirements met.