Include wildcard origin in postMessage calls. #454

crosshare-org · Dec 18, 2023 · 5d46de3 · 5d46de3
1 parent 0de9205
commit 5d46de3
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 14 deletions.
diff --git a/app/components/Puzzle.tsx b/app/components/Puzzle.tsx
@@ -392,10 +392,13 @@ export const Puzzle = ({
   // Pause when page goes out of focus
   function prodPause() {
     if (process.env.NODE_ENV !== 'development') {
-      window.parent.postMessage({
-        type: 'pause',
-        elapsed: state.displaySeconds,
-      });
+      window.parent.postMessage(
+        {
+          type: 'pause',
+          elapsed: state.displaySeconds,
+        },
+        '*'
+      );
       dispatch({ type: 'PAUSEACTION' });
       writePlayToDBIfNeeded();
     }
@@ -616,11 +619,14 @@ export const Puzzle = ({
 
   useEffect(() => {
     if (state.success) {
-      window.parent.postMessage({
-        type: 'complete',
-        elapsed: state.bankedSeconds,
-        didCheat: state.didCheat,
-      });
+      window.parent.postMessage(
+        {
+          type: 'complete',
+          elapsed: state.bankedSeconds,
+          didCheat: state.didCheat,
+        },
+        '*'
+      );
     }
   }, [state.success, state.bankedSeconds, state.didCheat]);
 
@@ -1283,10 +1289,13 @@ export const Puzzle = ({
                             : timeString(state.displaySeconds, true)
                         }
                         onClick={() => {
-                          window.parent.postMessage({
-                            type: 'pause',
-                            elapsed: state.displaySeconds,
-                          });
+                          window.parent.postMessage(
+                            {
+                              type: 'pause',
+                              elapsed: state.displaySeconds,
+                            },
+                            '*'
+                          );
                           dispatch({ type: 'PAUSEACTION' });
                           writePlayToDBIfNeeded();
                         }}

diff --git a/app/components/PuzzleOverlay.tsx b/app/components/PuzzleOverlay.tsx
@@ -214,7 +214,7 @@ export const PuzzleOverlay = (props: SuccessOverlayProps | BeginPauseProps) => {
                 <div css={{ marginBottom: '1em' }}>{props.message}</div>
                 <Button
                   onClick={() => {
-                    window.parent.postMessage({ type: 'resume' });
+                    window.parent.postMessage({ type: 'resume' }, '*');
                     props.dispatch({ type: 'RESUMEACTION' });
                   }}
                   text={props.dismissMessage}