| <!DOCTYPE html> |
| <html> |
| <head><meta charset="utf-8"></head> |
| <body> |
| <script> |
| (function () { |
| var params = new URLSearchParams(window.location.hash.slice(1)); |
| var widgetId = params.get('id') || ''; |
| var widgetToken = params.get('token') || ''; |
| var parentOrigin = ''; |
| var handled = false; |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| var ALLOWED_VERCEL_TEAM_SLUGS = ['eliewm']; |
| |
| function isAllowedVercelPreview(hostname) { |
| for (var i = 0; i < ALLOWED_VERCEL_TEAM_SLUGS.length; i++) { |
| var team = ALLOWED_VERCEL_TEAM_SLUGS[i]; |
| if (!/^[a-z0-9-]+$/.test(team)) continue; |
| var re = new RegExp('^worldmonitor-[a-z0-9-]+-' + team + '\\.vercel\\.app$'); |
| if (re.test(hostname)) return true; |
| } |
| return false; |
| } |
| |
| function isAllowedParentOrigin(origin) { |
| try { |
| var url = new URL(origin); |
| var isLocalhost = url.hostname === 'localhost' || url.hostname === '127.0.0.1'; |
| if ((url.protocol === 'http:' || url.protocol === 'https:') && isLocalhost) { |
| return true; |
| } |
| if (url.protocol !== 'https:') { |
| return false; |
| } |
| if (url.hostname === 'worldmonitor.app' || url.hostname.endsWith('.worldmonitor.app')) { |
| return true; |
| } |
| return isAllowedVercelPreview(url.hostname); |
| } catch (_err) { |
| return false; |
| } |
| } |
| |
| var nativeAddEventListener = EventTarget.prototype.addEventListener; |
| var nativeStopImmediatePropagation = Event.prototype.stopImmediatePropagation; |
| |
| function installBeforeUnloadStopper() { |
| nativeAddEventListener.call(window, 'beforeunload', function (event) { |
| nativeStopImmediatePropagation.call(event); |
| }, true); |
| } |
| |
| function installBeforeUnloadGuard() { |
| Object.defineProperty(window, 'onbeforeunload', { |
| configurable: false, |
| get: function () { |
| return null; |
| }, |
| set: function () {}, |
| }); |
| |
| EventTarget.prototype.addEventListener = function (type, listener, options) { |
| if (this === window && type === 'beforeunload') return; |
| return nativeAddEventListener.call(this, type, listener, options); |
| }; |
| } |
| |
| try { |
| parentOrigin = document.referrer ? new URL(document.referrer).origin : ''; |
| } catch (_err) { |
| parentOrigin = ''; |
| } |
| |
| installBeforeUnloadGuard(); |
| |
| window.addEventListener('message', function (e) { |
| if (handled) return; |
| if (!e.data || e.data.type !== 'wm-html') return; |
| if (!widgetId || !widgetToken || e.data.id !== widgetId || e.data.token !== widgetToken) return; |
| if (e.source !== window.parent) return; |
| if (!parentOrigin || e.origin !== parentOrigin || !isAllowedParentOrigin(parentOrigin)) return; |
| if (typeof e.data.html !== 'string') return; |
| handled = true; |
| document.open(); |
| |
| |
| |
| installBeforeUnloadStopper(); |
| document.write(e.data.html); |
| document.close(); |
| }); |
| |
| if (widgetId && widgetToken && parentOrigin && isAllowedParentOrigin(parentOrigin)) { |
| window.parent.postMessage( |
| { type: 'wm-widget-ready', id: widgetId, token: widgetToken }, |
| parentOrigin, |
| ); |
| } |
| }()); |
| </script> |
| </body> |
| </html> |
|
|
