Validate origin and restrict child command dispatch on postMessage #19020 - #8

Merged

sayahweb2-png merged 5 commits into

19020-postmessage-origin-hardening

Aug 20, 2026

Commits on Aug 7, 2026

fix: validate origin + restrict child command dispatch on postMessage #19020

Vvanlaar
and
claude
committed
c6c0a7e
fix: address review findings on the bridge postMessage guard #19020

Vvanlaar
and
claude
committed
e44d584
ci: use stock actions in pr-checks; gh-workflows is not resolvable here

Vvanlaar
and
claude
committed
c0297f6
fix: address PR #8 review comments #19020

Vvanlaar
and
claude
committed
e9232d2
fix: don't warn on iframeReady, a notification the bridge never handled #19020

Vvanlaar
and
claude
committed
a0d232e