Files
page-agent/packages/extension
Simon 13d952dc9d fix(ext): guard postMessage listeners against iframe sources
Add `e.source !== window` check to both content script and main-world
script message handlers, preventing iframes from injecting or
intercepting extension bridge messages.
2026-04-02 18:53:59 +08:00
..
2026-02-14 16:51:37 +08:00
2026-01-20 20:38:02 +08:00