workadventure/maps/tests/EmbeddedWebsite
David Négrier 41fd848fa0 Fixed potential injection by switching map container to PHP
Some HTML files were importing iframe_api.js automatically by detecting the referrer document.

While this was done in a safe way (the map container does not use cookies), it is not
a best practice to load a script originating from document.referrer.

This PR solves the issue by using PHP to inject the correct domain name in the HTML files.
2021-11-29 19:05:13 +01:00
..
integrated_website_1.html Making embedded iframes scriptable using the WA.room.website namespace. 2021-08-05 12:37:05 +02:00
website_in_map.json Making embedded iframes scriptable using the WA.room.website namespace. 2021-08-05 12:37:05 +02:00
website_in_map_script.json Fixed potential injection by switching map container to PHP 2021-11-29 19:05:13 +01:00
website_in_map_script.php Fixed potential injection by switching map container to PHP 2021-11-29 19:05:13 +01:00