@kudzujs/core 0.16.38 → 0.16.40

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -177,6 +177,7 @@ async function loadCapabilities(parsed) {
177
177
  }
178
178
 
179
179
  async function fetchDocument(url, record, signal) {
180
+ if (url.origin !== location.origin) throw new Error("Navigation request must be same-origin")
180
181
  let response
181
182
  try {
182
183
  response = await fetch(url, { signal, redirect: "manual", headers: { accept: "text/html" } })
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@kudzujs/core",
3
- "version": "0.16.38",
3
+ "version": "0.16.40",
4
4
  "description": "HTML-first TSX framework with synchronous state semantics and no virtual DOM",
5
5
  "type": "module",
6
6
  "license": "MIT",