[
https://issues.apache.org/jira/browse/SHINDIG-1413?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13260097#comment-13260097
]
Henry Saputra commented on SHINDIG-1413:
----------------------------------------
Looks like wrong logic for the patch =(
I think it was trying to do document.location.protocol + '://' +
document.location.host.
You can override it in your container page by calling:
shindig.container.setParentUrl() function.
If you need patch for the 2.0.x branch you can send request to
[email protected] so if more requests for backport to 2.0.x branch are
needed we could prepare patch release in the 2.0.x branch.
> this.parentUrl_ in the gadgets.Container can only be used with http
> -------------------------------------------------------------------
>
> Key: SHINDIG-1413
> URL: https://issues.apache.org/jira/browse/SHINDIG-1413
> Project: Shindig
> Issue Type: Bug
> Components: Javascript
> Reporter: Arn Waßmann
> Priority: Trivial
> Fix For: 2.0.0
>
>
> Hello,
> i use Apache Shindig with https (nightly build from june) and an security
> error occurred. I must patched my version:
> old:
> gadgets.Container = function() {
> this.gadgets_ = {};
> this.parentUrl_ = 'http://' + document.location.host;
> new:
> gadgets.Container = function() {
> this.gadgets_ = {};
> this.parentUrl_ = document.location.href + '://' + document.location.host;
> thx
> Arn
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
