Archived
1
0

feat(patches): add parent-origin bypass

This commit is contained in:
Joe Previte 2022-04-27 16:09:46 -07:00
parent 202630dc19
commit 5e98158c8b
No known key found for this signature in database
GPG Key ID: 2C91590C6B742C24
2 changed files with 26 additions and 0 deletions

View File

@ -0,0 +1,25 @@
Remove parentOriginHash checko
This fixes webviews from not working properly due to a change upstream.
Upstream added a check to ensure parent authority is encoded into the webview
origin. Since our webview origin is the parent authority, we can bypass this
check.
Index: code-server/lib/vscode/src/vs/workbench/contrib/webview/browser/pre/main.js
===================================================================
--- code-server.orig/lib/vscode/src/vs/workbench/contrib/webview/browser/pre/main.js
+++ code-server/lib/vscode/src/vs/workbench/contrib/webview/browser/pre/main.js
@@ -339,12 +339,7 @@ const hostMessaging = new class HostMess
throw err instanceof Error ? err : new Error(String(err));
}
- if (hostname === parentOriginHash || hostname.startsWith(parentOriginHash + '.')) {
- // validation succeeded!
- return start(parentOrigin);
- }
-
- throw new Error(`Expected '${parentOriginHash}' as hostname or subdomain!`);
+ return start(parentOrigin);
}
}();

View File

@ -18,3 +18,4 @@ service-worker.diff
connection-type.diff
sourcemaps.diff
disable-downloads.diff
parent-origin.diff