Merge pull request #36 from Countly/content-whitelist

Content Whitelisting

Author: turtledreams

CHANGELOG.md

@@ -9,6 +9,7 @@
 
 * Added `refreshContentZone` method to Content interface for refreshing Content Zone requests
 * Added `behavior_settings` init time method for providing server configuration during first initialization
+* Added `content_whitelist` init time method that lets you whitelist your other domains for diplaying Content
 
 * `max_logs` config option value will not be used anymore (use `max_breadcrumb_count` instead)
 

modules/CountlyClass.js

@@ -390,6 +390,7 @@ class CountlyClass {
         this.storage = getConfig("storage", ob, "default");
         this.enableOrientationTracking = !isBrowser ? undefined : getConfig("enable_orientation_tracking", ob, true);
         this.heatmapWhitelist = getConfig("heatmap_whitelist", ob, []);
+        this.contentWhitelist = getConfig("content_whitelist", ob, []);
         this.salt = getConfig("salt", ob, null);
         this.hcErrorCount = this.#getValueFromStorage(healthCheckCounterEnum.errorCount) || 0;
         this.hcWarningCount = this.#getValueFromStorage(healthCheckCounterEnum.warningCount) || 0;
@@ -439,6 +440,14 @@ class CountlyClass {
             }
         }
 
+        if (Array.isArray(this.contentWhitelist)) {
+            this.contentWhitelist.push(this.url);
+            this.contentWhitelist = this.contentWhitelist.map((e) => {
+                // remove trailing slashes from the entries
+                return stripTrailingSlash(e);
+            });
+        }
+
         if ((this.passed_data && this.passed_data.app_key && this.passed_data.app_key === this.app_key) || (this.passed_data && !this.passed_data.app_key && this.#global)) {
             if (this.passed_data.token && this.passed_data.purpose) {
                 if (this.passed_data.token !== this.#getValueFromStorage("cly_old_token")) {
@@ -4012,7 +4021,7 @@ class CountlyClass {
     };
 
     #interpretContentMessage = (messageEvent) => {
-        if (messageEvent.origin !== this.url) {
+        if (this.contentWhitelist.indexOf(messageEvent.origin) === -1) {
             // this.#log(logLevelEnums.ERROR, "interpretContentMessage, Received message from invalid origin");
             // silent ignore
             return;