sockjs-client - npm Package Compare versions

Comparing version 1.0.1 to 1.0.2

Changelog.md

@@ -0,1 +1,7 @@
+1.0.2
+==
+
+ * Fix iframe info receiver url
+ * Move iframe.contentWindow check inside setTimeout - #246
+
 1.0.1
@@ -2,0 +8,0 @@ ==

lib/info-iframe-receiver.js

@@ -10,7 +10,7 @@ 'use strict';
 
-function InfoReceiverIframe(transUrl, baseUrl) {
+function InfoReceiverIframe(transUrl) {
   var self = this;
   EventEmitter.call(this);
 
-  this.ir = new InfoAjax(baseUrl, XHRLocalObject);
+  this.ir = new InfoAjax(transUrl, XHRLocalObject);
   this.ir.once('finish', function(info, rtt) {
@@ -17,0 +17,0 @@ self.ir = null;

lib/utils/iframe.js

@@ -75,7 +75,7 @@ 'use strict';
         // on 'contentWindow'.
-        if (iframe && iframe.contentWindow) {
-          setTimeout(function() {
+        setTimeout(function() {
+          if (iframe && iframe.contentWindow) {
             iframe.contentWindow.postMessage(msg, origin);
-          }, 0);
-        }
+          }
+        }, 0);
       } catch (x) {}
@@ -142,7 +142,7 @@ };
         // on 'contentWindow'.
-        if (iframe && iframe.contentWindow) {
-          setTimeout(function() {
-            iframe.contentWindow.postMessage(msg, origin);
-          }, 0);
-        }
+        setTimeout(function() {
+          if (iframe && iframe.contentWindow) {
+              iframe.contentWindow.postMessage(msg, origin);
+          }
+        }, 0);
       } catch (x) {}
@@ -149,0 +149,0 @@ };

lib/version.js

@@ -1,1 +0,1 @@
-module.exports = '1.0.1';
+module.exports = '1.0.2';

package.json

 {
   "name": "sockjs-client",
   "description": "SockJS-client is a browser JavaScript library that provides a WebSocket-like object. SockJS gives you a coherent, cross-browser, Javascript API which creates a low latency, full duplex, cross-domain communication channel between the browser and the web server.",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "author": "Bryce Kahle",
@@ -6,0 +6,0 @@ "browser": {

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

128560

increased by0.08%

Worsened metrics

Number of low supply chain risk alerts

44

increased by91.3%

No dependency changes