Session - 4.2 Errors in the Javascript example for the OP iframe

There are some errors in the Javascript example for the OP iframe:

'function receiveMessage(e){ // e has client_id and session_state'
- The comment of the function header is incorrect: e only has 'data', 'origin' and 'source' (see https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage)
Typos in the (re-)computation of the session state stored in the variable ss: var ss = CryptoJS.SHA256(client_id + ' ' + e.origin + ' ' + opbs + [' ' + salt]) [+ "." + salt];
- should be: 'var ss = CryptoJS.SHA256(client_id + ' ' + e.origin + ' ' + opbs + ' ' + salt) + ["." + salt];
'if (e.session_state == ss) {'
- as per the first error above, e.session_state is not defined, it should just be 'if (session_state == ss) {'

Further enhancements:

Make the variables 'client_id', 'session_state' and 'stat' local to the function receiveMessage

See the attached patch for all above changes.

Comments (1)