haskal
/
jiti-meet
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

(fix): Do not allow external css customization for static prejoin 

This prevents CSS spoofing.
This commit is contained in:
Vlad Piersec 2021-06-24 09:20:37 +03:00 committed by vp8x8
parent 07a69ba040
commit f82d46337b
1 changed files with 0 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
static/prejoin.html
View File

@ -16,10 +16,6 @@
const showAvatar = params.get('showAvatar') === 'true'; const showAvatar = params.get('showAvatar') === 'true';
const showJoinActions = params.get('showJoinActions') === 'true'; const showJoinActions = params.get('showJoinActions') === 'true';
const showSkipPrejoin = params.get('showSkipPrejoin') === 'true'; const showSkipPrejoin = params.get('showSkipPrejoin') === 'true';
const css = params.get('style');
const style = document.createElement('style');
style.appendChild(document.createTextNode(css));
document.head.appendChild(style);
JitsiMeetJS.app.renderEntryPoint({ JitsiMeetJS.app.renderEntryPoint({
Component: JitsiMeetJS.app.entryPoints.PREJOIN, Component: JitsiMeetJS.app.entryPoints.PREJOIN,