oracle-samples / xfc

A javascript library for Cross Frame Communication
Apache License 2.0
17 stars 24 forks source link

Remove code that blocks whitelisting if you have your own acl #43

Closed roxjcalderon closed 5 years ago

roxjcalderon commented 5 years ago

Summary

We found an issue where inner iframe redirects do not work if you have your own ACLs whitelisted. The referrer in this code is setting the wrong activeACL so we can never properly authorize the proper URL. Because the removed codes benefit is minimal (mainly removed excess logs), it was decided it should be omitted.