Simon 13d952dc9d fix(ext): guard postMessage listeners against iframe sources ...

Add `e.source !== window` check to both content script and main-world
script message handlers, preventing iframes from injecting or
intercepting extension bridge messages.

2026-04-02 18:53:59 +08:00

..

core

chore(version): bump version to 1.7.0

2026-03-31 20:45:12 +08:00

extension

fix(ext): guard postMessage listeners against iframe sources

2026-04-02 18:53:59 +08:00

llms

chore(version): bump version to 1.7.0

2026-03-31 20:45:12 +08:00

mcp

chore(version): bump version to 1.7.0

2026-03-31 20:45:12 +08:00

page-agent

fix: extract currentScript outside setTimeout to avoid null pointer

2026-04-02 16:17:46 +08:00

page-controller

Merge branch 'main' into fix/scroll-direction-pixels

2026-04-02 18:31:56 +08:00

ui

chore(version): bump version to 1.7.0

2026-03-31 20:45:12 +08:00

website

feat(ext): add systemInstruction to ExecuteConfig

2026-04-02 16:34:57 +08:00