fix!: require eventSource in PostMessageTransport + add security tests (#208)

This commit is contained in:
Olivier Chafik 2026-01-07 20:57:50 +00:00 • committed by GitHub
commit 2411c71aa5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -117,7 +117,10 @@ export function useApp({
async function connect() {
try {
const transport = new PostMessageTransport(window.parent);
const transport = new PostMessageTransport(
window.parent,
window.parent,
);
const app = new App(appInfo, capabilities);
// Register handlers BEFORE connecting