From afbf15cd97f5441e6043e2c896fc2da658281e87 Mon Sep 17 00:00:00 2001
From: Jake Dallimore <jake@moodle.com>
Date: Tue, 22 Mar 2022 10:35:52 +0800
Subject: [PATCH] MDL-74288 enrol_lti: fix cross-origin postMessage call in
 registration

This isn't using the targetOrigin, which should be passed as 2nd param.
---
 enrol/lti/register.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/enrol/lti/register.php b/enrol/lti/register.php
index fba690d49b4..2a795fcba0a 100644
--- a/enrol/lti/register.php
+++ b/enrol/lti/register.php
@@ -188,4 +188,6 @@ if ($regresponse) {
     }
 }
 
-echo "<script>(window.opener || window.parent).postMessage({subject: 'org.imsglobal.lti.close'});</script>";
+echo "<script>
+(window.opener || window.parent).postMessage({subject: 'org.imsglobal.lti.close'}, '$openidconfig->issuer');
+</script>";