This commit is contained in:
+1
-5
@@ -36,11 +36,7 @@ VA pushes a JSON payload to the iframe via `window.postMessage` whenever the sel
|
|||||||
|
|
||||||
If VA sends an empty / unmatched message the editor falls back to the unfiltered view but stays in VA mode.
|
If VA sends an empty / unmatched message the editor falls back to the unfiltered view but stays in VA mode.
|
||||||
|
|
||||||
## Security
|
More logic available in [`va-messaging.service.ts'](https://git.datacontroller.io/dc/dc/src/branch/main/client/src/app/services/va-messaging.service.ts).
|
||||||
|
|
||||||
Only postMessage events from the hosting parent frame (or the same origin in
|
|
||||||
dev/tests) are honoured - see [`VaMessagingService.isTrustedSource()`](
|
|
||||||
https://git.datacontroller.io/dc/dc/src/branch/main/client/src/app/services/va-messaging.service.ts).
|
|
||||||
|
|
||||||
## Configuration in VA
|
## Configuration in VA
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user