search

LavaMoat / snow

Use Snow to finally secure your web app's same origin realms!
https://lavamoat.github.io/snow/demo/
MIT License
100 stars 9 forks source link

fix: direct srcdoc assignment bypass #150

Open naugtur opened 9 months ago

naugtur commented 9 months ago

Fixes a bypass from Gareth

I'm not sure if my test works because my local setup broke.

(edit) It fixes the bypass, but might be too strict, as it also triggers an earlier error in one other test.