Skip to content

[Feature Request]: Allow configuring target origin of postMessage when recordCrossOriginIframes is enabled #1680

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
1 task done
econte-sprig opened this issue Apr 10, 2025 · 0 comments
Open
1 task done

[Feature Request]: Allow configuring target origin of postMessage when recordCrossOriginIframes is enabled #1680

econte-sprig opened this issue Apr 10, 2025 · 0 comments
Labels
feature request Things want to be added

Comments

@econte-sprig
Copy link

Preflight Checklist

  • I have searched the issue tracker for a feature request that matches the one I want to file, without success.

What package is this feature request for?

rrweb

Problem Description

Presently, when recordCrossOriginIframes is enabled, recording data is posted with postMessage with a target origin of '*'. As outlined in the docs this is a security concern.

Proposed Solution

rrweb should allow configuring the target origin of this message.

#1679

Alternatives Considered

None

Additional Information

No response
@econte-sprig econte-sprig added the feature request Things want to be added label Apr 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
feature request Things want to be added
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@econte-sprig