fix(agent-browser): defer preview origin exposure

This commit is contained in:
2026-08-27 02:21:08 +08:00
parent 0a4f526c2c
commit afb5c10fae
3 changed files with 145 additions and 5 deletions

View File

@@ -1944,14 +1944,15 @@ function previewDataInjectionScript(
if (!serializedOrigin || !serializedValue) {
throw new Error('Preview data injection value is not serializable');
}
return `if (globalThis.location?.origin === ${serializedOrigin}) {
return `(() => {
const expectedOrigin = ${serializedOrigin};
const value = ${serializedValue};
Object.defineProperty(globalThis, "__MAKELORE_DATA__", {
value: ${serializedValue},
get: () => globalThis.location?.origin === expectedOrigin ? value : undefined,
enumerable: false,
writable: false,
configurable: false,
});
}`;
})();`;
}
function crossOriginNavigation(previousUrl: string, nextUrl: string): boolean {