DorianandClaude Opus 4.6 6425b2f53b fix(app): restrict postMessage origin in archyBridge
Change default allowedOrigin from '*' to null. Derive from
window.location.origin when init() is called without explicit origin.
Always validate event.origin — reject messages when origin is not set.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-06 01:31:45 +00:00
S
Description
No description provided
MIT
3 GiB
2026-07-24 08:06:36 +00:00
Languages
Rust 45.6%
Vue 20%
TypeScript 10.3%
Shell 9.3%
JavaScript 5.7%
Other 9.1%