jpillora / xdomain

A pure JavaScript CORS alternative
https://jpillora.com/xdomain/
3.13k stars 270 forks source link

Faked 'load' event should set 'target' pointing to XHR instance #210

Open matsbryntse opened 6 years ago

matsbryntse commented 6 years ago

Anyone listening to 'load' event of an XHR should be able to access the XHR instance through the 'target' property. This breaks any website assuming this 'target' property exists