We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent c89c43e commit 86c05a5Copy full SHA for 86c05a5
1 file changed
specs/LaunchingRegisteredProtocols.md
@@ -265,7 +265,8 @@ interface ICoreWebView2LaunchingExternalProtocolEventArgs: IUnknown {
265
[propget] HRESULT IsUserInitiated([out, retval] BOOL* value);
266
267
/// `TRUE` when the external protocol request was initiated via a non-main frame that
268
- /// has a different origin then the owning top-level page.
+ /// has a different origin then the owning top-level page. When this property is `TRUE`
269
+ /// this may indicate a potential security issue and it is advised to block this request.
270
271
[propget] HRESULT IsCrossOriginIframe([out, retval] BOOL* value);
272
0 commit comments