codeninjasllc/codecombat
1
0
Fork 0
mirror of https://github.com/codeninjasllc/codecombat.git synced 2024-12-12 16:51:35 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
codecombat/app/templates/play/level/web-surface-view.jade

2 lines
75 B
Text
Raw Normal View History

Filter domains for webdev iFrame This serves the web-dev surface iFrame from another domain, such that user-created levels can't sniff cookies from a visitor to their page. It forces a redirect if a path is accesses through the wrong domain. Use ENV variables for hostnames Allow messages from all relevant domains Use the right iFrame URL for different domains Let the load balancer check /healthcheck Add special handling for china server Generalize subdomain handling
2016-08-19 16:22:14 -04:00
iframe(src="http://" + fullUnsafeContentHostname + "/web-dev-iframe.html")
Reference in a new issue Copy permalink