We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 3735214 commit cb65f9cCopy full SHA for cb65f9c
packages/auth/src/platform_browser/index.ts
@@ -92,7 +92,9 @@ export function getAuth(app: FirebaseApp = getApp()): Auth {
92
const authTokenSyncPath = getExperimentalSetting('authTokenSyncURL');
93
if (authTokenSyncPath) {
94
// Reduce the chances of an XSS attack by only allowing secure contexts or the same origin.
95
- const isLocalHost = ['localhost', '127.0.0.1', '0.0.0.0'].includes(location.hostname);
+ const isLocalHost = ['localhost', '127.0.0.1', '0.0.0.0'].includes(
96
+ location.hostname
97
+ );
98
if (isSecureContext || isLocalHost) {
99
const authTokenSyncUrl = new URL(authTokenSyncPath, location.origin);
100
if (location.origin === authTokenSyncUrl.origin) {
0 commit comments