@elliemae/ssf-host 2.23.4 → 2.23.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (20) hide show
  1. package/dist/cjs/host.js +10 -8
  2. package/dist/esm/host.js +10 -8
  3. package/dist/public/index.html +1 -1
  4. package/dist/public/js/emuiSsfHost.7d167a52cf87253649bc.js +3 -0
  5. package/dist/public/js/emuiSsfHost.7d167a52cf87253649bc.js.br +0 -0
  6. package/dist/public/js/emuiSsfHost.7d167a52cf87253649bc.js.gz +0 -0
  7. package/dist/public/js/emuiSsfHost.7d167a52cf87253649bc.js.map +1 -0
  8. package/dist/public/v1-guest-v2-host.html +1 -1
  9. package/dist/public/v2-host-v1-guest.html +1 -1
  10. package/dist/types/lib/ihost.d.ts +8 -0
  11. package/dist/types/tsconfig.tsbuildinfo +1 -1
  12. package/dist/umd/index.js +1 -1
  13. package/dist/umd/index.js.br +0 -0
  14. package/dist/umd/index.js.gz +0 -0
  15. package/dist/umd/index.js.map +1 -1
  16. package/package.json +3 -3
  17. package/dist/public/js/emuiSsfHost.a4526c5eda64df08190f.js +0 -3
  18. package/dist/public/js/emuiSsfHost.a4526c5eda64df08190f.js.br +0 -0
  19. package/dist/public/js/emuiSsfHost.a4526c5eda64df08190f.js.gz +0 -0
  20. package/dist/public/js/emuiSsfHost.a4526c5eda64df08190f.js.map +0 -1
package/dist/public/v2-host-v1-guest.html CHANGED
@@ -1 +1 @@
1
- <!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><title>Host V2 -> V1 Guest</title><style>body,html,main{height:100%;margin:4px;padding:0}iframe{width:100%;height:100%;border:none}#guest-container{height:100%}</style><script src="https://cdn.mortgagetech.q1.ice.com/pui-diagnostics@3"></script><script defer="defer" src="js/emuiSsfHost.a4526c5eda64df08190f.js"></script></head><body><main><h1>Host V2 nesting V1 Guest</h1><button id="save-btn" type="button" onclick="saveLoan()">Save Loan</button><div id="results"><p id="pre-save-feedback-result"></p></div><div id="guest-container"></div></main><script type="module">import{Loan}from"./loan-object.js";import{getGuestBaseUrl,getHost}from"./utils.js";import{Analytics}from"./analytics-object-v2.js";const analyticsObj=new Analytics,hostV2=getHost(analyticsObj),loanObj=new Loan;hostV2.addScriptingObject(loanObj);const params=new URLSearchParams(document.location.search),{id:id}=hostV2.loadGuest({id:"guestV1",url:new URL("true"!==params.get("nestV1GuestV2Host")?"./v1-guest.html":"./v1-guest-v2-host.html",window.location.href).href,searchParams:{nestHostV1:!0},title:"Guest V1",targetElement:document.getElementById("guest-container")});window.saveLoan=async()=>{const e=loanObj.getLoanDetails();(await hostV2.dispatchEvent({event:loanObj.onPreSave,eventParams:e,eventOptions:{timeout:1e3}})).some(e=>!1===e)?document.getElementById("pre-save-feedback-result").innerText="Pre save failed":document.getElementById("pre-save-feedback-result").innerText="Pre save succeeded"}</script></body></html>
1
+ <!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><title>Host V2 -> V1 Guest</title><style>body,html,main{height:100%;margin:4px;padding:0}iframe{width:100%;height:100%;border:none}#guest-container{height:100%}</style><script src="https://cdn.mortgagetech.q1.ice.com/pui-diagnostics@3"></script><script defer="defer" src="js/emuiSsfHost.7d167a52cf87253649bc.js"></script></head><body><main><h1>Host V2 nesting V1 Guest</h1><button id="save-btn" type="button" onclick="saveLoan()">Save Loan</button><div id="results"><p id="pre-save-feedback-result"></p></div><div id="guest-container"></div></main><script type="module">import{Loan}from"./loan-object.js";import{getGuestBaseUrl,getHost}from"./utils.js";import{Analytics}from"./analytics-object-v2.js";const analyticsObj=new Analytics,hostV2=getHost(analyticsObj),loanObj=new Loan;hostV2.addScriptingObject(loanObj);const params=new URLSearchParams(document.location.search),{id:id}=hostV2.loadGuest({id:"guestV1",url:new URL("true"!==params.get("nestV1GuestV2Host")?"./v1-guest.html":"./v1-guest-v2-host.html",window.location.href).href,searchParams:{nestHostV1:!0},title:"Guest V1",targetElement:document.getElementById("guest-container")});window.saveLoan=async()=>{const e=loanObj.getLoanDetails();(await hostV2.dispatchEvent({event:loanObj.onPreSave,eventParams:e,eventOptions:{timeout:1e3}})).some(e=>!1===e)?document.getElementById("pre-save-feedback-result").innerText="Pre save failed":document.getElementById("pre-save-feedback-result").innerText="Pre save succeeded"}</script></body></html>
package/dist/types/lib/ihost.d.ts CHANGED
@@ -61,6 +61,14 @@ export type HostOption = {
61
61
  * callback to process guest event unsubscription
62
62
  */
63
63
  onGuestEventUnsubscribe?: GuestEventUnsubscribeCallback;
64
+ /**
65
+ * **UNSAFE**: When true, uses '*' as the targetOrigin for all outbound postMessage calls from host to guest,
66
+ * allowing messages to be delivered regardless of the guest window's current origin. This means any window
67
+ * can receive messages intended for the guest, potentially exposing sensitive data.
68
+ * Only enable this if you fully understand the security implications.
69
+ * @default false
70
+ */
71
+ unsafeAllowAnyGuestOrigin?: boolean;
64
72
  };
65
73
  /**
66
74
  * parameters for rendering a guest