MDL-74288 enrol_lti: fix cross-origin postMessage call in registration

This isn't using the targetOrigin, which should be passed as 2nd param.
2022-03-22 11:06:23 +08:00
parent 0d0f09bc7f
commit afbf15cd97
1 changed files with 3 additions and 1 deletions
@@ -188,4 +188,6 @@ if ($regresponse) {
    }
 }

-echo "<script>(window.opener || window.parent).postMessage({subject: 'org.imsglobal.lti.close'});</script>";
+echo "<script>
+(window.opener || window.parent).postMessage({subject: 'org.imsglobal.lti.close'}, '$openidconfig->issuer');
+</script>";