-
Notifications
You must be signed in to change notification settings - Fork 8
Open
Description
In your tutorial on security, you present a coffeescript example for tuning Browser Policies.
It's published here: http://orionjs.org/tutorials/securing-orion
On te second to last line
origin = "#{protocol}://#{origin}"a variable origin is reused. But this is done in a loop! So the second iteration this will become something like https://http://*.example.com Which is wrong ofcourse...
It would be solved by changing the last 2 line with:
pattern = "#{protocol}://#{origin}"
BrowserPolicy.content.allowOriginForAll patternReactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels