MirrorSave
/
budibase
mirror of https://github.com/Budibase/budibase.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

PR comments

This commit is contained in:
Martin McKeaveney 2024-08-28 16:49:00 +01:00
parent a21e8123c6
commit b3f51e2766
3 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
packages/account-portal

@ -1 +1 @@
Subproject commit 32b8fa4643b4f0f74ee89760deffe431ab347ad9 Subproject commit 851072fce67c48173aa03e8c5ac549d6fd20628e

1
packages/builder/src/dataBinding.js
View File

@ -829,7 +829,6 @@ const getEmbedBindings = () => {
readableBinding: `ParentWindow`, readableBinding: `ParentWindow`,
category: "Embed", category: "Embed",
icon: "DistributeVertically", icon: "DistributeVertically",
display: { type: "object", name: "Parent Window" },
}, },
] ]
return bindings return bindings

6
packages/client/src/components/context/EmbedProvider.svelte
View File

@ -4,20 +4,20 @@
let data = {} let data = {}
export function extractDomainFromUrl(url) { function extractDomainFromUrl(url) {
const { hostname } = new URL(url) const { hostname } = new URL(url)
const parts = hostname.split('.'); const parts = hostname.split('.');
const tld = parts.slice(-2).join(".") const tld = parts.slice(-2).join(".")
return tld return tld
} }
export function handleMessage(event) { function handleMessage(event) {
// Validate the event origin to ensure it's coming from a trusted source // Validate the event origin to ensure it's coming from a trusted source
// Allow different subdomains but must match TLD // Allow different subdomains but must match TLD
const appOrigin = extractDomainFromUrl(window.location.origin) const appOrigin = extractDomainFromUrl(window.location.origin)
const eventOrigin = extractDomainFromUrl(event.origin) const eventOrigin = extractDomainFromUrl(event.origin)
if (appOrigin !== eventOrigin) { if (appOrigin === eventOrigin) {
data = event.data data = event.data
} else { } else {
console.error( console.error(