@builder.io/sdk 4.0.0 → 4.0.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @builder.io/sdk
 
+## 4.0.1
+
+### Patch Changes
+
+- cf33d45: Fix: increase coverage of `trustedHost` check to all messages.
+
 ## 4.0.0
 
 ### Major Changes

package/dist/index.browser.js

@@ -1052,7 +1052,7 @@
 
     var DEFAULT_API_VERSION = 'v3';
 
-    var SDK_VERSION = '4.0.0';
+    var SDK_VERSION = '4.0.1';
 
     function datePlusMinutes(minutes) {
         if (minutes === void 0) { minutes = 30; }
@@ -1379,11 +1379,16 @@
             this.serverContext = context;
         };
         Builder.isTrustedHost = function (hostname) {
-            return (this.trustedHosts.findIndex(function (trustedHost) {
+            var isTrusted = this.trustedHosts.findIndex(function (trustedHost) {
                 return trustedHost.startsWith('*.')
                     ? hostname.endsWith(trustedHost.slice(1))
                     : trustedHost === hostname;
-            }) > -1);
+            }) > -1;
+            return isTrusted;
+        };
+        Builder.isTrustedHostForEvent = function (event) {
+            var url = parse(event.origin);
+            return url.hostname && Builder.isTrustedHost(url.hostname);
         };
         Builder.runAction = function (action) {
             // TODO
@@ -1933,18 +1938,16 @@
             var _this = this;
             if (isBrowser) {
                 addEventListener('message', function (event) {
-                    var _a, _b, _c, _d, _e;
-                    var url = parse(event.origin);
-                    var isRestricted = ['builder.register', 'builder.registerComponent'].indexOf((_a = event.data) === null || _a === void 0 ? void 0 : _a.type) === -1;
-                    var isTrusted = url.hostname && Builder.isTrustedHost(url.hostname);
-                    if (isRestricted && !isTrusted) {
+                    var _a, _b, _c, _d;
+                    var isTrusted = Builder.isTrustedHostForEvent(event);
+                    if (!isTrusted) {
                         return;
                     }
                     var data = event.data;
                     if (data) {
                         switch (data.type) {
                             case 'builder.ping': {
-                                (_b = window.parent) === null || _b === void 0 ? void 0 : _b.postMessage({
+                                (_a = window.parent) === null || _a === void 0 ? void 0 : _a.postMessage({
                                     type: 'builder.pong',
                                     data: {},
                                 }, '*');
@@ -2019,7 +2022,7 @@
                                 }
                                 break;
                             case 'builder.getComponents':
-                                (_c = window.parent) === null || _c === void 0 ? void 0 : _c.postMessage({
+                                (_b = window.parent) === null || _b === void 0 ? void 0 : _b.postMessage({
                                     type: 'builder.components',
                                     data: Builder.components.map(function (item) { return Builder.prepareComponentSpecToSend(item); }),
                                 }, '*');
@@ -2058,7 +2061,7 @@
                                 // TODO: refetch too
                                 break;
                             case 'builder.overrideTestGroup':
-                                var _f = data.data, variationId = _f.variationId, contentId = _f.contentId;
+                                var _e = data.data, variationId = _e.variationId, contentId = _e.contentId;
                                 if (variationId && contentId) {
                                     _this.setTestCookie(contentId, variationId);
                                     _this.flushGetContentQueue(true);
@@ -2079,7 +2082,7 @@
                                     error = toError(err);
                                 }
                                 if (error) {
-                                    (_d = window.parent) === null || _d === void 0 ? void 0 : _d.postMessage({
+                                    (_c = window.parent) === null || _c === void 0 ? void 0 : _c.postMessage({
                                         type: 'builder.evaluateError',
                                         data: { id: id_1, error: error.message },
                                     }, '*');
@@ -2097,7 +2100,7 @@
                                             .catch(console.error);
                                     }
                                     else {
-                                        (_e = window.parent) === null || _e === void 0 ? void 0 : _e.postMessage({
+                                        (_d = window.parent) === null || _d === void 0 ? void 0 : _d.postMessage({
                                             type: 'builder.evaluateResult',
                                             data: { result: result, id: id_1 },
                                         }, '*');