Because we use postMessage to communicate with the parent. We shouldn't be
running function on parent window. I realize it works in same origin, but
that might encourage devs to use it in their code.


On Fri, May 2, 2014 at 11:04 PM, Jan Paul Posma <notifications@github.com>wrote:

> In test/test_gadget.html:
>
> > @@ -0,0 +1,12 @@
> > +<script>
> > +  window.addEventListener('message', function(event) {
> > +    window.parent.recordPlayerEvent(event.data);
>
> Why do you think it is dangerous?
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/Versal/iframe-launcher/pull/5/files#r12243000>
> .
>