Add code comment to OriginScheme

Author: sea-snake

src/frontend/src/lib/utils/transport/legacy.ts

@@ -28,7 +28,7 @@ const REDIRECT_SESSION_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes
 const OUTER_DELEGATION_EXPIRATION_MS = 30 * 24 * 60 * 60 * 1000; // 30 days
 
 const RedirectMessageSchema = z.object({
-  origin: OriginSchema,
+  origin: OriginSchema, // Accepts http, https, chrome-extension, etc.
   data: z.unknown(),
 });
 

src/frontend/src/lib/utils/transport/utils.ts

@@ -133,6 +133,11 @@ export const StringOrNumberToBigIntCodec = z.codec(
   },
 );
 
+/**
+ * Validates that a string is a valid origin with
+ * no path, query, or fragment. Accepts any URL
+ * scheme (e.g. http, https, chrome-extension).
+ */
 export const OriginSchema = z.string().refine(
   (value) => {
     try {