From b3fce3a28a7b8ec237f8fa800ed9c2d0b8bf12a6 Mon Sep 17 00:00:00 2001
From: j <0x006A@0x2620.org>
Date: Sat, 19 May 2012 15:37:24 +0200
Subject: [PATCH] check same origin in examples

---
 examples/cities/index.html         | 2 +-
 examples/flight_paths/index.html   | 2 +-
 examples/json_to_list/index.html   | 2 +-
 examples/lenna/index.html          | 2 +-
 examples/manhattan_grid/index.html | 2 +-
 examples/mouse_events/index.html   | 2 +-
 examples/progress/index.html       | 2 +-
 examples/steganography/index.html  | 2 +-
 examples/symbols/index.html        | 2 +-
 9 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/examples/cities/index.html b/examples/cities/index.html
index 56d9c600..e4f6fb5c 100644
--- a/examples/cities/index.html
+++ b/examples/cities/index.html
@@ -7,7 +7,7 @@
         <link rel="stylesheet" type="text/css" href="css/example.css"/>
         <script type="text/javascript" src="../../dev/Ox.js"></script>
         <script type="text/javascript" src="js/example.js"></script>
-        <script>window.addEventListener('message', function(e) { eval(e.data); });</script>
+        <script>window.addEventListener('message', function(e) { e.origin == window.location.origin && eval(e.data); });</script>
     </head>
     <body></body>
 </html>
\ No newline at end of file
diff --git a/examples/flight_paths/index.html b/examples/flight_paths/index.html
index 655bdccb..8055e884 100644
--- a/examples/flight_paths/index.html
+++ b/examples/flight_paths/index.html
@@ -7,7 +7,7 @@
         <link rel="stylesheet" type="text/css" href="css/example.css"/>
         <script type="text/javascript" src="../../dev/Ox.js"></script>
         <script type="text/javascript" src="js/example.js"></script>
-        <script>window.addEventListener('message', function(e) { eval(e.data); });</script>
+        <script>window.addEventListener('message', function(e) { e.origin == window.location.origin && eval(e.data); });</script>
     </head>
     <body></body>
 </html>
\ No newline at end of file
diff --git a/examples/json_to_list/index.html b/examples/json_to_list/index.html
index 667e7a29..e4b67b7d 100644
--- a/examples/json_to_list/index.html
+++ b/examples/json_to_list/index.html
@@ -7,7 +7,7 @@
         <link rel="stylesheet" type="text/css" href="css/example.css"/>
         <script type="text/javascript" src="../../dev/Ox.js"></script>
         <script type="text/javascript" src="js/example.js"></script>
-        <script>window.addEventListener('message', function(e) { eval(e.data); });</script>
+        <script>window.addEventListener('message', function(e) { e.origin == window.location.origin && eval(e.data); });</script>
     </head>
     <body></body>
 </html>
\ No newline at end of file
diff --git a/examples/lenna/index.html b/examples/lenna/index.html
index f5b541f0..8b789a96 100644
--- a/examples/lenna/index.html
+++ b/examples/lenna/index.html
@@ -7,7 +7,7 @@
         <link rel="stylesheet" type="text/css" href="css/example.css"/>
         <script type="text/javascript" src="../../dev/Ox.js"></script>
         <script type="text/javascript" src="js/example.js"></script>
-        <script>window.addEventListener('message', function(e) { eval(e.data); });</script>
+        <script>window.addEventListener('message', function(e) { e.origin == window.location.origin && eval(e.data); });</script>
     </head>
     <body></body>
 </html>
\ No newline at end of file
diff --git a/examples/manhattan_grid/index.html b/examples/manhattan_grid/index.html
index 8629bd89..0ab5e794 100644
--- a/examples/manhattan_grid/index.html
+++ b/examples/manhattan_grid/index.html
@@ -7,7 +7,7 @@
         <link rel="stylesheet" type="text/css" href="css/example.css"/>
         <script type="text/javascript" src="../../dev/Ox.js"></script>
         <script type="text/javascript" src="js/example.js"></script>
-        <script>window.addEventListener('message', function(e) { eval(e.data); });</script>
+        <script>window.addEventListener('message', function(e) { e.origin == window.location.origin && eval(e.data); });</script>
     </head>
     <body></body>
 </html>
\ No newline at end of file
diff --git a/examples/mouse_events/index.html b/examples/mouse_events/index.html
index 428bde84..ec9a0d51 100644
--- a/examples/mouse_events/index.html
+++ b/examples/mouse_events/index.html
@@ -7,7 +7,7 @@
         <link rel="stylesheet" type="text/css" href="css/example.css"/>
         <script type="text/javascript" src="../../dev/Ox.js"></script>
         <script type="text/javascript" src="js/example.js"></script>
-        <script>window.addEventListener('message', function(e) { eval(e.data); });</script>
+        <script>window.addEventListener('message', function(e) { e.origin == window.location.origin && eval(e.data); });</script>
     </head>
     <body></body>
 </html>
\ No newline at end of file
diff --git a/examples/progress/index.html b/examples/progress/index.html
index ffee5783..9edcb2e4 100644
--- a/examples/progress/index.html
+++ b/examples/progress/index.html
@@ -7,7 +7,7 @@
         <link rel="stylesheet" type="text/css" href="css/example.css"/>
         <script type="text/javascript" src="../../dev/Ox.js"></script>
         <script type="text/javascript" src="js/example.js"></script>
-        <script>window.addEventListener('message', function(e) { eval(e.data); });</script>
+        <script>window.addEventListener('message', function(e) { e.origin == window.location.origin && eval(e.data); });</script>
     </head>
     <body></body>
 </html>
\ No newline at end of file
diff --git a/examples/steganography/index.html b/examples/steganography/index.html
index eca4144a..f9cab086 100644
--- a/examples/steganography/index.html
+++ b/examples/steganography/index.html
@@ -7,7 +7,7 @@
         <link rel="stylesheet" type="text/css" href="css/example.css"/>
         <script type="text/javascript" src="../../dev/Ox.js"></script>
         <script type="text/javascript" src="js/example.js"></script>
-        <script>window.addEventListener('message', function(e) { eval(e.data); });</script>
+        <script>window.addEventListener('message', function(e) { e.origin == window.location.origin && eval(e.data); });</script>
     </head>
     <body></body>
 </html>
\ No newline at end of file
diff --git a/examples/symbols/index.html b/examples/symbols/index.html
index 779af578..b8f63dee 100644
--- a/examples/symbols/index.html
+++ b/examples/symbols/index.html
@@ -7,7 +7,7 @@
         <link rel="stylesheet" type="text/css" href="css/example.css"/>
         <script type="text/javascript" src="../../dev/Ox.js"></script>
         <script type="text/javascript" src="js/example.js"></script>
-        <script>window.addEventListener('message', function(e) { eval(e.data); });</script>
+        <script>window.addEventListener('message', function(e) { e.origin == window.location.origin && eval(e.data); });</script>
     </head>
     <body></body>
 </html>
\ No newline at end of file
