Check origin

simatec · Sep 12, 2024 · 9a38826 · 9a38826
1 parent 58b7f31
commit 9a38826
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src-admin/src/GoogleDrive.jsx b/src-admin/src/GoogleDrive.jsx
@@ -20,6 +20,9 @@ class GoogleDrive extends ConfigGeneric {
 
     onMessage = (event) => {
         console.log(event);
+        if (event.origin !== 'https://googleauth.iobroker.in') {
+            return;
+        }
         if ((typeof event.data === 'string' && event.data.startsWith('google-authentication:')) ||
             (typeof event.message === 'string' && event.message.startsWith('google-authentication:'))
         ) {