storytold/storyteller-bevy
2
0
Fork 0
mirror of https://github.com/storytold/storyteller-bevy.git synced 2026-10-17 00:13:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

cleanup removal of iframe origin checks

Browse Source
This commit is contained in:
Brandon Thomas
2024-03-09 13:26:08 -05:00
parent a958cc8283
commit 9837363783
1 changed files with 2 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files
studio-web/src/lib/iframe-messaging-bridge.element.ts
+2 -41
View File
@@ -4,52 +4,23 @@ import { SceneState, type SceneStateEvent } from "@storyteller/studio";
import { LitElement, nothing } from "lit";
import { customElement } from "lit/decorators.js";
//const PARENT_ORIGIN_WHITELIST: readonly string[] = [
// "https://fakeyou.com",
// "https://storyteller.ai",
// "https://staging.fakeyou.com",
// "https://staging.storyteller.ai",
// "https://feature-mvp--fakeyou.netlify.app",
// "https://feature-mvp--storyteller-ai.netlify.app",
// "http://dev.fakeyou.com:7000",
// "http://dev.fakeyou.com:7001",
// "http://dev.fakeyou.com:7002",
// "http://devproxy.fakeyou.com:7000",
// "http://devproxy.fakeyou.com:7001",
// "http://devproxy.fakeyou.com:7002",
// "http://dev.storyteller.ai:7000",
// "http://dev.storyteller.ai:7001",
// "http://dev.storyteller.ai:7002",
// "http://devproxy.storyteller.ai:7000",
// "http://devproxy.storyteller.ai:7001",
// "http://devproxy.storyteller.ai:7002",
// "http://localhost:7000",
// "http://localhost:7001",
// "http://localhost:7002",
//];
@customElement("sts-iframe-messaging-bridge")
export class IframeMessagingBridgeElement extends LitElement {
#parentWindow?: Window;
//#parentOrigin?: string;
override connectedCallback(): void {
console.log('window.parent', window.parent);
//console.log('window.parent.origin', window.parent.origin);
try {
if (
window.parent
&& window.parent !== window
//&& PARENT_ORIGIN_WHITELIST.includes(window.parent.origin)
) {
this.#parentWindow = window.parent;
//this.#parentOrigin = window.parent.origin;
}
}
catch {
this.#parentWindow = undefined;
//this.#parentOrigin = undefined;
}
super.connectedCallback();
@@ -58,10 +29,6 @@ export class IframeMessagingBridgeElement extends LitElement {
@on("window:message")
onParentMessage(event: MessageEvent<string>): void {
console.log('window.parent', window.parent);
//console.log('window.parent.origin', window.parent.origin);
//if (!this.#parentOrigin || event.origin !== this.#parentOrigin)
// return;
if (event.data === "save-scene")
studio.saveScene();
@@ -70,27 +37,21 @@ export class IframeMessagingBridgeElement extends LitElement {
@on("window:scene-uploaded")
onSceneUploaded(event: CustomEvent<string>): void {
console.log('window.parent', window.parent);
//console.log('window.parent.origin', window.parent.origin);
if (!this.#parentWindow /*|| !this.#parentOrigin */)
if (!this.#parentWindow)
return;
// NB: We'll need to receive and validate the targetOrigin by another method since CORS
// removes our ability to inspect this via `window.parent.origin`.
//this.#parentWindow.postMessage(`scene-saved:${event.detail}`, this.#parentOrigin);
this.#parentWindow.postMessage(`scene-saved:${event.detail}`, "*");
}
@on("window:scene-state")
onSceneStateChange({ detail: state }: SceneStateEvent): void {
console.log('window.parent', window.parent);
//console.log('window.parent.origin', window.parent.origin);
if (!this.#parentWindow /* || !this.#parentOrigin */)
if (!this.#parentWindow)
return;
if (state === SceneState.Active)
//this.#parentWindow.postMessage("studio-ready", this.#parentOrigin);
this.#parentWindow.postMessage("studio-ready", "*");
}