From 31c7eb51f167102d155056e5181e59510a550f66 Mon Sep 17 00:00:00 2001 From: Antariksh Mahajan Date: Sat, 12 Oct 2024 16:08:23 +0800 Subject: [PATCH] fix: remove localhost from trusted origins --- frontend/src/features/public-form/utils/iframeMessaging.ts | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/frontend/src/features/public-form/utils/iframeMessaging.ts b/frontend/src/features/public-form/utils/iframeMessaging.ts index 1b4e9c7ef1..199ccf8f19 100644 --- a/frontend/src/features/public-form/utils/iframeMessaging.ts +++ b/frontend/src/features/public-form/utils/iframeMessaging.ts @@ -6,9 +6,7 @@ const TRUSTED_TARGET_ORIGINS = [ 'https://pay.gov.sg', 'https://exp.pay.gov.sg', 'https://staging.pay.gov.sg', -].concat( - process.env.NODE_ENV === 'development' ? ['http://localhost:3000'] : [], -) +] export const postIFrameMessage = (message: PublicFormIFrameMessage): void => { // De-risk by wrapping in try-catch even though this is synchronous. This should