Loading...

XML

Word

Printable

JSON

Specification:

SMART Web Messaging (FHIR)
Raised in Version:

0.1.0
Work Group:

FHIR Infrastructure
Related URL:
http://hl7.org/fhir/uv/smart-web-messaging/2020SEP/index.html#request-parameters
Related Page(s):

Home
Related Section(s):
1.2.1
Resolution Description:

Hide

Voted-on wording is:

Applications SHOULD NOT use `"*"` for the `targetOrigin` parameter for [security reasons](https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage#Security_concerns).

Show
Voted-on wording is: Applications SHOULD NOT use `"*"` for the `targetOrigin` parameter for [security reasons] ( https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage#Security_concerns ).
Resolution Vote:
Carl Anderson / Neal Holt: 10-0-0
Change Category:
Clarification
Change Impact:
Non-substantive
Pre Applied:
Yes
Applied for Version:

current

Could you please clarify what conequences can cause using "*" in the targetOrigin?

Applications SHOULD refrain from using "*" for the targetOrigin parameter for security reasons.

is voted on by

BALLOT-13980 Affirmative - Bas van den Heuvel : 2020-Sep-FHIR IG SMARTWEBMSG R1 STU