mirror of
https://github.com/garrytan/gstack.git
synced 2026-05-07 14:06:42 +02:00
Merge remote-tracking branch 'origin/main' into garrytan/sidebar-css-inspector
# Conflicts: # browse/src/server.ts # browse/src/sidebar-agent.ts
This commit is contained in:
@@ -228,6 +228,21 @@ async function sendToContentScript(tabId, message) {
|
||||
// ─── Message Handling ──────────────────────────────────────────
|
||||
|
||||
chrome.runtime.onMessage.addListener((msg, sender, sendResponse) => {
|
||||
// Security: only accept messages from this extension's own scripts
|
||||
if (sender.id !== chrome.runtime.id) {
|
||||
console.warn('[gstack] Rejected message from unknown sender:', sender.id);
|
||||
return;
|
||||
}
|
||||
|
||||
const ALLOWED_TYPES = new Set([
|
||||
'getPort', 'setPort', 'getServerUrl', 'fetchRefs',
|
||||
'openSidePanel', 'command', 'sidebar-command'
|
||||
]);
|
||||
if (!ALLOWED_TYPES.has(msg.type)) {
|
||||
console.warn('[gstack] Rejected unknown message type:', msg.type);
|
||||
return;
|
||||
}
|
||||
|
||||
if (msg.type === 'getPort') {
|
||||
sendResponse({ port: serverPort, connected: isConnected });
|
||||
return true;
|
||||
|
||||
Reference in New Issue
Block a user