blob: f9dae5a34ecdbd43c4572b7482772976f03c3c91 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
<!doctype html>
<html>
<meta charset="utf-8">
<script>
const SEARCH_PARAMS = new URL(location.href).searchParams;
const ORIGIN = SEARCH_PARAMS.get('origin') || '';
const FRAME_ORIGIN = new URL(location.href).origin;
const TOKEN = SEARCH_PARAMS.get('token') || '';
const METHOD = SEARCH_PARAMS.get('method') || 'GET';
const SEND_ON_EVENT = SEARCH_PARAMS.get('sendOn') || 'load';
const MODE = SEARCH_PARAMS.get('mode') || 'cors';
const DISALLOW_CROSS_ORIGIN = SEARCH_PARAMS.get('disallowCrossOrigin') || '';
// CORS requests are allowed by this URL by default.
const url = `${ORIGIN}/fetch/api/resources/stash-put.py?key=${TOKEN}&value=on&mode=${MODE}`
+ `&frame_origin=${FRAME_ORIGIN}` + (DISALLOW_CROSS_ORIGIN ? `&disallow_cross_origin=1` : '');
addEventListener(SEND_ON_EVENT, () => {
let p = fetch(url, {keepalive: true, method: METHOD, mode: MODE});
window.parent.postMessage(TOKEN, '*');
});
</script>
</html>
|
