fix silent-check-sso.html to use the correct origin for postMessage

ls1intum · Oct 15, 2024 · 01bf9df · 01bf9df
1 parent 75fcb08
commit 01bf9df
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/webapp/Dockerfile b/webapp/Dockerfile
@@ -37,6 +37,17 @@ export const environment = {
 };
 EOF
 
+# Fix silent-check-sso.html
+RUN cat public/silent-check-sso.html <<EOF
+<html>
+  <body>
+    <script>
+      parent.postMessage(location.href, '${APPLICATION_CLIENT_URL}');
+    </script>
+  </body>
+</html>
+EOF
+
 RUN npm install
 RUN npm run build
 

diff --git a/webapp/public/silent-check-sso.html b/webapp/public/silent-check-sso.html
@@ -1,7 +1,7 @@
 <html>
   <body>
     <script>
-      parent.postMessage(location.href, '*');
+      parent.postMessage(location.href, location.origin);
     </script>
   </body>
 </html>