modelcontextprotocol/ext-apps
Watch
1
0
Fork
You've already forked ext-apps
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix!: require eventSource in PostMessageTransport + add security tests (#208)

Browse source
This commit is contained in:
Olivier Chafik 2026-01-07 20:57:50 +00:00 • committed by GitHub
commit 2411c71aa5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 433 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/message-transport.ts
View file

@ -73,7 +73,7 @@ export class PostMessageTransport implements Transport {
*/
constructor(
private eventTarget: Window = window.parent,
private eventSource?: MessageEventSource,
private eventSource: MessageEventSource,
) {
this.messageListener = (event) => {
if (eventSource && event.source !== this.eventSource) {