From af12864d7263f88743960d18d2c95a0f0327d827 Mon Sep 17 00:00:00 2001 From: orbisai0security Date: Fri, 7 Nov 2025 12:17:40 +0530 Subject: [PATCH] Fix: Messages Sent to Any Website Without Verifying Recipient in apps/web/app/(navigation)/page.tsx (#565) --- apps/web/app/(navigation)/page.tsx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/web/app/(navigation)/page.tsx b/apps/web/app/(navigation)/page.tsx index d2be1ad8..212f33c0 100644 --- a/apps/web/app/(navigation)/page.tsx +++ b/apps/web/app/(navigation)/page.tsx @@ -33,7 +33,7 @@ export default function Page() { if (sessionToken && userData?.email) { const encodedToken = encodeURIComponent(sessionToken) - window.postMessage({ token: encodedToken, userData }, "*") + window.postMessage({ token: encodedToken, userData }, window.location.origin) url.searchParams.delete("extension-auth-success") window.history.replaceState({}, "", url.toString()) }