Web Penetration Testing with Kali Linux - Third Edition

Web Messaging

Web Messaging permits communication between two documents that do not require DOM, and it can be used across domains (sometimes called, Cross-Domain Messaging). For an application to receive messages, it needs to set up an event handler that processes the incoming messages. The event triggered on receiving a message has the following properties:

• data: The message data
• origin: The domain name and port of the sender
• lastEventId: The unique ID of the current message event
• source: This contains a reference to the document's window that originated the message
• ports: This is an array containing any MessagePort objects sent with the message

In the following code snippet, you can see an example of an event handler, where the origin ...