Bug ID 428923: Potral Access getting of onmessage event origin property value

Last Modified: Oct 17, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.4, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0, 11.4.1

Opened: Aug 27, 2013

Severity: 3-Major

Related Article: K15291

Symptoms

The onmessage event handler gets the wrong event.origin value. This may display the error message: '...invalid origin...'

Impact

Web-application logic can be broken, if it checks event.origin value in onmessage handler.

Conditions

When web application uses interwindow postMessage communications between windows with different domains.

Workaround

None.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips