6425b2f53bb2d307e5f197a9dc75e06b5a3041d9
Change default allowedOrigin from '*' to null. Derive from window.location.origin when init() is called without explicit origin. Always validate event.origin — reject messages when origin is not set. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Releases
74
Languages
Rust
41.7%
Vue
21.8%
TypeScript
15%
Shell
8.1%
JavaScript
5.5%
Other
7.9%