v1.html

<html>
<head>
<!--
Hello! If you're reading this, perhaps you're wondering what this
file is doing and why your Riot is using it.

In short, this allows Riot to isolate potentially unsafe encrypted
attachments into their own origin, away from your Riot. See
https://github.com/matrix-org/usercontent/blob/master/README.md
for more info, or https://github.com/vector-im/riot-web/blob/master/README.md#configjson
if you'd like to host your own. See also https://github.com/vector-im/riot-web/issues/6173
for progress on replacing this with something better.

Stay curious!
-->
<script>
var params = window.location.search.substring(1).split('&');
var lockOrigin;
for (var i = 0; i < params.length; ++i) {
    var parts = params[i].split('=');
    if (parts[0] == 'origin') lockOrigin = decodeURIComponent(parts[1]);
}
window.onmessage=function(e){
    if (lockOrigin === undefined || e.origin === lockOrigin) eval("("+e.data.code+")")(e);
}
</script>
</head>
<body></body>
</html>