search

firebug / pixel-perfect

Other
55 stars 15 forks source link

DOMContentLoaded listener in popup-frame-script.js #59

Open janodvarko opened 9 years ago

janodvarko commented 9 years ago

DOMContentLoaded listener in popup-frame-script.js needs to check that the window has the expected URL, or at least to unregister itself after the first response, so that it doesn't wind up injecting a privileged function into a remote document if the window somehow navigates somewhere unexpected.

(from AMO review)

Honza

janodvarko commented 9 years ago

@aliuk2012 This came from the AMO reviewer, would you be interested to take a look?

Honza