All users were logged out of Bugzilla on October 13th, 2018
Currently call_screen/js/controller_communications.js controls who can post events by the origin of the page posting the events. But the accepted event origin is hardcoded, when it really should be just the origin of the window hosting the code.
Created attachment 8504718 [details] [review] Removes the hardcoded URL
Attachment #8504718 - Flags: review?(borja.bugzilla)
Attachment #8504718 - Flags: review?(borja.bugzilla) → review+
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.