Fix: Messages Sent to Any Website Without Verifying Recipient in apps/web/app/(navigation)/page.tsx (#565)

This commit is contained in:
orbisai0security 2025-11-07 12:17:40 +05:30 • committed by GitHub
parent 7e692f9862
commit af12864d72
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -33,7 +33,7 @@ export default function Page() {
if (sessionToken && userData?.email) {
const encodedToken = encodeURIComponent(sessionToken)
window.postMessage({ token: encodedToken, userData }, "*")
window.postMessage({ token: encodedToken, userData }, window.location.origin)
url.searchParams.delete("extension-auth-success")
window.history.replaceState({}, "", url.toString())
}