Skip to content

Commit d2e2356

Browse files
committed
fix: postMessage origin check for tlink embedded viewer
1 parent 2b40f36 commit d2e2356

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

javascript/card-sdk/src/messaging/PostMessageAdapter.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ export class PostMessageAdapter implements IEngineAdapter {
3030

3131
private async handleMessageResponse(event: MessageEvent) {
3232

33-
if (event.origin !== this.sdk.instanceData.engineOrigin)
33+
if (this.sdk.instanceData.engineOrigin !== "*" && event.origin !== this.sdk.instanceData.engineOrigin)
3434
return;
3535

3636
const params = event.data?.params;

javascript/engine-js/src/view/sdk/v1.txt

Lines changed: 1 addition & 1 deletion
Large diffs are not rendered by default.

javascript/tokenscript-viewer/src/integration/abstractViewBinding.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -179,7 +179,7 @@ export abstract class AbstractViewBinding implements IViewBinding {
179179

180180
console.log("ViewEvent.TOKENS_UPDATED");
181181

182-
this.postMessageToView(event, {oldTokens: tokens, updatedTokens: tokens, cardId: id});
182+
this.postMessageToView(event, {oldTokens: tokens, updatedTokens: tokens, cardId: id, id});
183183

184184
this.hideLoader();
185185
return;

0 commit comments

Comments
 (0)