PostMessage from a sandboxed iFrame to the main window, origin is always null

Question

There\'s something I don\'t get about the event origin with javascript postMessage event.

Here is my main page:

Test         


        

Answer 1

Since the iframe is sandboxed it lost access to its origin data.

adding allow-same-origin to the iframe sandbox property will make it work again.