Well this is a first. I have noStrudel setup to embed tidal music links in iframes and this one popped up and recognized I have a nostr extension. Did Tidal add a nostr integration?
A wild XSS appears!
Please Login to reply.
I think alby might be adding window.nostr to iframes. which makes sense but feels strange to see it :)
Yeah, it's an interesting trade-off. Probably ok, as long as the parent frame is ok with embedding the iframe.
