You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently the parentOrigin option on connectToParent is optional but highly recommended. If it isn't specified, the child is allowed to communicate with any parent origin (rather than a specific parent origin). Instead, I think it should be required, and if a developer would like the child to communicate with any parent origin, they should provide a value of *. This change would force developers to consider the ramifications for their applications and make a more deliberate decision.
The text was updated successfully, but these errors were encountered:
Currently the
parentOrigin
option onconnectToParent
is optional but highly recommended. If it isn't specified, the child is allowed to communicate with any parent origin (rather than a specific parent origin). Instead, I think it should be required, and if a developer would like the child to communicate with any parent origin, they should provide a value of*
. This change would force developers to consider the ramifications for their applications and make a more deliberate decision.The text was updated successfully, but these errors were encountered: