From 98373637835f4c0c64040d76a861d86e117ec17d Mon Sep 17 00:00:00 2001
From: Brandon Thomas <echelon@gmail.com>
Date: Sat, 9 Mar 2024 13:26:08 -0500
Subject: [PATCH] cleanup removal of iframe origin checks

---
 .../lib/iframe-messaging-bridge.element.ts    | 43 +------------------
 1 file changed, 2 insertions(+), 41 deletions(-)

diff --git a/studio-web/src/lib/iframe-messaging-bridge.element.ts b/studio-web/src/lib/iframe-messaging-bridge.element.ts
index d0bfa1c..deca809 100644
--- a/studio-web/src/lib/iframe-messaging-bridge.element.ts
+++ b/studio-web/src/lib/iframe-messaging-bridge.element.ts
@@ -4,52 +4,23 @@ import { SceneState, type SceneStateEvent } from "@storyteller/studio";
 import { LitElement, nothing } from "lit";
 import { customElement } from "lit/decorators.js";
 
-//const PARENT_ORIGIN_WHITELIST: readonly string[] = [
-//	"https://fakeyou.com",
-//	"https://storyteller.ai",
-//	"https://staging.fakeyou.com",
-//	"https://staging.storyteller.ai",
-//	"https://feature-mvp--fakeyou.netlify.app",
-//	"https://feature-mvp--storyteller-ai.netlify.app",
-//	"http://dev.fakeyou.com:7000",
-//	"http://dev.fakeyou.com:7001",
-//	"http://dev.fakeyou.com:7002",
-//	"http://devproxy.fakeyou.com:7000",
-//	"http://devproxy.fakeyou.com:7001",
-//	"http://devproxy.fakeyou.com:7002",
-//	"http://dev.storyteller.ai:7000",
-//	"http://dev.storyteller.ai:7001",
-//	"http://dev.storyteller.ai:7002",
-//	"http://devproxy.storyteller.ai:7000",
-//	"http://devproxy.storyteller.ai:7001",
-//	"http://devproxy.storyteller.ai:7002",
-//	"http://localhost:7000",
-//	"http://localhost:7001",
-//	"http://localhost:7002",
-//];
-
 @customElement("sts-iframe-messaging-bridge")
 export class IframeMessagingBridgeElement extends LitElement {
 	#parentWindow?: Window;
-	//#parentOrigin?: string;
 
 	override connectedCallback(): void {
 		console.log('window.parent', window.parent);
-		//console.log('window.parent.origin', window.parent.origin);
 		
 		try {
 			if (
 				window.parent
 				&& window.parent !== window
-				//&& PARENT_ORIGIN_WHITELIST.includes(window.parent.origin)
 			) {
 				this.#parentWindow = window.parent;
-				//this.#parentOrigin = window.parent.origin;
 			}
 		}
 		catch {
 			this.#parentWindow = undefined;
-			//this.#parentOrigin = undefined;
 		}
 
 		super.connectedCallback();
@@ -58,10 +29,6 @@ export class IframeMessagingBridgeElement extends LitElement {
 	@on("window:message")
 	onParentMessage(event: MessageEvent<string>): void {
 		console.log('window.parent', window.parent);
-		//console.log('window.parent.origin', window.parent.origin);
-
-		//if (!this.#parentOrigin || event.origin !== this.#parentOrigin)
-		//	return;
 
 		if (event.data === "save-scene")
 			studio.saveScene();
@@ -70,27 +37,21 @@ export class IframeMessagingBridgeElement extends LitElement {
 	@on("window:scene-uploaded")
 	onSceneUploaded(event: CustomEvent<string>): void {
 		console.log('window.parent', window.parent);
-		//console.log('window.parent.origin', window.parent.origin);
 
-		if (!this.#parentWindow  /*|| !this.#parentOrigin */)
+		if (!this.#parentWindow)
 			return;
 
-		// NB: We'll need to receive and validate the targetOrigin by another method since CORS 
-		// removes our ability to inspect this via `window.parent.origin`.
-		//this.#parentWindow.postMessage(`scene-saved:${event.detail}`, this.#parentOrigin);
 		this.#parentWindow.postMessage(`scene-saved:${event.detail}`, "*");
 	}
 
 	@on("window:scene-state")
 	onSceneStateChange({ detail: state }: SceneStateEvent): void {
 		console.log('window.parent', window.parent);
-		//console.log('window.parent.origin', window.parent.origin);
 
-		if (!this.#parentWindow /* || !this.#parentOrigin */)
+		if (!this.#parentWindow)
 			return;
 
 		if (state === SceneState.Active)
-			//this.#parentWindow.postMessage("studio-ready", this.#parentOrigin);
 			this.#parentWindow.postMessage("studio-ready", "*");
 	}