6425b2f53bb2d307e5f197a9dc75e06b5a3041d9
Change default allowedOrigin from '*' to null. Derive from window.location.origin when init() is called without explicit origin. Always validate event.origin — reject messages when origin is not set. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Releases
71
Languages
Rust
45.6%
Vue
20%
TypeScript
10.3%
Shell
9.3%
JavaScript
5.7%
Other
9.1%