Guard PortalTransport message origin#11

Open

giwaov wants to merge 1 commit into

canopy-network:mainfrom

giwaov:guard-portal-transport-origin

giwaov commented Jul 6, 2026

Summary

ignore PortalTransport message events from unexpected origins
keep wildcard parentOrigin behavior available for callers that explicitly use *
add coverage for rejected and accepted portal messages

Tests

npx vitest run src/tests/transport.test.ts
npm run build


          Guard PortalTransport message origin

7702e1b

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet