LavaMoat / snow

Use Snow to finally secure your web app's same origin realms!
https://lavamoat.github.io/snow/demo/
MIT License
102 stars 9 forks source link

Open window, than open iframe seems to bypass Snow #83

Closed weizman closed 1 year ago

weizman commented 1 year ago

It seems like:

Bypasses Snow..

This should be tested, and also trace back where this bug was introduced first (unless was always the case which seems unlikely to me)

weizman commented 1 year ago

84 fix