Merge pull request #1428 from bbc/fix/postMessageOrigin

jstarpl · web-flow · commit 4c2f99b96cc2 · 2025-04-14T11:06:31.000+02:00
diff --git a/packages/webui/src/client/ui/PreviewPopUp/Previews/IFramePreview.tsx b/packages/webui/src/client/ui/PreviewPopUp/Previews/IFramePreview.tsx
@@ -16,7 +16,8 @@ export function IFramePreview({ content }: IFramePreviewProps): React.ReactEleme
 
 	const onLoadListener = useCallback(() => {
 		if (content.postMessage) {
-			iFrameElement.current?.contentWindow?.postMessage(content.postMessage)
+			const url = new URL(content.href)
+			iFrameElement.current?.contentWindow?.postMessage(content.postMessage, url.origin)
 		}
 	}, [])
 

Original file line number	Diff line number	Diff line change
`@@ -16,7 +16,8 @@ export function IFramePreview({ content }: IFramePreviewProps): React.ReactEleme`
`16`	`16`
`17`	`17`	`const onLoadListener = useCallback(() => {`
`18`	`18`	`if (content.postMessage) {`
`19`		`- iFrameElement.current?.contentWindow?.postMessage(content.postMessage)`
	`19`	`+ const url = new URL(content.href)`
	`20`	`+ iFrameElement.current?.contentWindow?.postMessage(content.postMessage, url.origin)`
`20`	`21`	`}`
`21`	`22`	`}, [])`
`22`	`23`