Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Refuse to migrate from top into non-top documents #42

Merged
merged 8 commits into from
Oct 4, 2024
Merged

Conversation

weizman
Copy link
Member

@weizman weizman commented May 28, 2024

Context @ #35

poc following @masatokinugawa finding #35 (comment) for making sure lavadome instances refuse to load within iframes so they can't be attacked

(consider adding a warning)

@weizman weizman changed the title make sure lavadome refuses to load within non top documents Refuse to load LavaDome within non-top documents Jun 2, 2024
@weizman weizman marked this pull request as ready for review June 2, 2024 14:42
@weizman weizman changed the title Refuse to load LavaDome within non-top documents Refuse to migrate a LavaDome instance from top into non-top documents Jun 23, 2024
@weizman weizman linked an issue Jul 4, 2024 that may be closed by this pull request
@weizman weizman self-assigned this Jul 25, 2024
@weizman weizman changed the title Refuse to migrate a LavaDome instance from top into non-top documents Refuse to migrate from top into non-top documents Sep 18, 2024
@weizman weizman merged commit 6e6e212 into main Oct 4, 2024
2 checks passed
@weizman weizman deleted the weizman/issue-35 branch October 4, 2024 10:06
@weizman weizman mentioned this pull request Oct 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

LavaDome bypass via text fragments
2 participants