fix: postMessage origin check for tlink embedded viewer

SmartTokenLabs · Oct 25, 2024 · d2e2356 · d2e2356
1 parent 2b40f36
commit d2e2356
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/javascript/card-sdk/src/messaging/PostMessageAdapter.ts b/javascript/card-sdk/src/messaging/PostMessageAdapter.ts
@@ -30,7 +30,7 @@ export class PostMessageAdapter implements IEngineAdapter {
 
 	private async handleMessageResponse(event: MessageEvent) {
 
-		if (event.origin !== this.sdk.instanceData.engineOrigin)
+		if (this.sdk.instanceData.engineOrigin !== "*" && event.origin !== this.sdk.instanceData.engineOrigin)
 			return;
 
 		const params = event.data?.params;

diff --git a/javascript/engine-js/src/view/sdk/v1.txt b/javascript/engine-js/src/view/sdk/v1.txt
diff --git a/javascript/tokenscript-viewer/src/integration/abstractViewBinding.ts b/javascript/tokenscript-viewer/src/integration/abstractViewBinding.ts
@@ -179,7 +179,7 @@ export abstract class AbstractViewBinding implements IViewBinding {
 
 				console.log("ViewEvent.TOKENS_UPDATED");
 
-				this.postMessageToView(event, {oldTokens: tokens, updatedTokens: tokens, cardId: id});
+				this.postMessageToView(event, {oldTokens: tokens, updatedTokens: tokens, cardId: id, id});
 
 				this.hideLoader();
 				return;