Faked 'load' event should set 'target' pointing to XHR instance

jpillora / xdomain

A pure JavaScript CORS alternative

https://jpillora.com/xdomain/

3.13k stars 269 forks source link

Faked 'load' event should set 'target' pointing to XHR instance #210

Open matsbryntse opened 6 years ago

matsbryntse commented 6 years ago

Anyone listening to 'load' event of an XHR should be able to access the XHR instance through the 'target' property. This breaks any website assuming this 'target' property exists