DorianandClaude Opus 4.6 6425b2f53b fix(app): restrict postMessage origin in archyBridge ...

Change default allowedOrigin from '*' to null. Derive from
window.location.origin when init() is called without explicit origin.
Always validate event.origin — reject messages when origin is not set.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-06 01:31:45 +00:00

..

app

fix(app): restrict postMessage origin in archyBridge

2026-03-06 01:31:45 +00:00

core

feat(app): video player, guide page, free films, PWA cache fix

2026-03-06 00:56:39 +00:00