Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Track registration conflicts #49

Open
julien51 opened this issue Nov 6, 2013 · 1 comment
Open

Track registration conflicts #49

julien51 opened this issue Nov 6, 2013 · 1 comment

Comments

@julien51
Copy link
Member

julien51 commented Nov 6, 2013

When 2 services register the same name, we should track and eventually blacklist any domain that's trying to hijack another service's name.

@julien51
Copy link
Member Author

Let's rather avoid conflicts using a SOP pattern. When the registration iframe is opened, we must check that the registered url matches the window.parent url's domain. If it does, then accept the subscription. If it does not, then, refuse it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

1 participant