IVYPORTAL-18029 High - Client-side cross-site scripting

- Fixed security check
axonivy-market · Dec 16, 2024 · 6b4aa0a · 6b4aa0a
1 parent 622cb7a
commit 6b4aa0a
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/AxonIvyPortal/portal/webContent/resources/js/iframe-task-template.js b/AxonIvyPortal/portal/webContent/resources/js/iframe-task-template.js
@@ -1,15 +1,14 @@
 var invalidIFrameSrcPath = false;
 
 let taskUrl = new URLSearchParams(window.location.search).get("taskUrl");
-let updateIframeSrc = (newSrc) => {
-  getPortalIframe().src = newSrc;
-}
+
 if (taskUrl){
   if(taskUrl.endsWith('blank')){
     window.history.back(document.referrer);
   }
-  updateIframeSrc(taskUrl)
+  getPortalIframe().src = taskUrl;
 }
+
 loadIframe(false);
 var recheckFrameTimer;
 function loadIframe(recheckIndicator) {