MirrorSave
/
budibase
mirror of https://github.com/Budibase/budibase.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

adding conditional to prevent embedprovider handler firing

This commit is contained in:
Martin McKeaveney 2024-08-28 16:56:51 +01:00
parent 8e40e98b6a
commit 8c769140bb
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
packages/client/src/components/context/EmbedProvider.svelte
View File

@ -12,6 +12,10 @@
} }
function handleMessage(event) { function handleMessage(event) {
if (event.data?.type !== "bb-parent-window-event") {
return
}
// Validate the event origin to ensure it's coming from a trusted source // Validate the event origin to ensure it's coming from a trusted source
// Allow different subdomains but must match TLD // Allow different subdomains but must match TLD
const appOrigin = extractDomainFromUrl(window.location.origin) const appOrigin = extractDomainFromUrl(window.location.origin)