rinsuki 6e736f2452 fix: embed.js doesn't expands iframes height (#18301) ... also including some refactoring: - add `// @ts-check` - use Map to completely avoid prototype pollution - assign random id to each iframe for reduce chance to brute-force attack, and leak of iframe counts - check iframe.contentWindow and MessageEvent.source to validate message is coming from correct iframe (it works on latest Chrome/Firefox/Safari but I'm not sure this is allowed by spec) follow-up of #17420 fix #18299		2022-05-04 03:20:44 +02:00
..
avatars/original	…
emoji	Fix light-mode emoji borders. (#18131)	2022-04-29 19:23:03 +02:00
headers/original	…
ocr/lang-data	…
shortcuts	Add app shortcuts (#15234)	2020-12-15 02:04:56 +01:00
sounds	…
500.html	…
android-chrome-192x192.png	…
apple-touch-icon.png	…
badge.png	…
browserconfig.xml	…
embed.js	fix: embed.js doesn't expands iframes height (#18301)	2022-05-04 03:20:44 +02:00
favicon-dev.ico	…
favicon.ico	…
inert.css	Remove 'unsafe-inline' from Content-Security-Policy style-src (#13679)	2020-05-08 21:22:57 +02:00
mask-icon.svg	…
mstile-150x150.png	…
oops.gif	…
oops.png	…
robots.txt	…
sw.js	…
web-push-icon_expand.png	…
web-push-icon_favourite.png	…
web-push-icon_reblog.png	…