From 964434af0a5e24efdbb3d2fa04dc31dc39b59c43 Mon Sep 17 00:00:00 2001 From: allan Date: Wed, 1 Jul 2026 13:14:29 +0100 Subject: [PATCH] fix: link --- docs/embed-va.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/docs/embed-va.md b/docs/embed-va.md index 35970f3..7ef0415 100644 --- a/docs/embed-va.md +++ b/docs/embed-va.md @@ -36,11 +36,7 @@ VA pushes a JSON payload to the iframe via `window.postMessage` whenever the sel If VA sends an empty / unmatched message the editor falls back to the unfiltered view but stays in VA mode. -## Security - -Only postMessage events from the hosting parent frame (or the same origin in -dev/tests) are honoured - see [`VaMessagingService.isTrustedSource()`]( -https://git.datacontroller.io/dc/dc/src/branch/main/client/src/app/services/va-messaging.service.ts). +More logic available in [`va-messaging.service.ts'](https://git.datacontroller.io/dc/dc/src/branch/main/client/src/app/services/va-messaging.service.ts). ## Configuration in VA