feat: added security measures

near · Jan 28, 2025 · 5f3649e · 5f3649e
1 parent 5af278e
commit 5f3649e
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/packages/my-near-wallet/src/lib/my-near-wallet-connection.ts b/packages/my-near-wallet/src/lib/my-near-wallet-connection.ts
@@ -232,6 +232,11 @@ export class MyNearWalletConnection {
 
             const message = event.data as WalletMessage;
 
+            console.log('message', message);
+
+            if (event.origin != this._walletBaseUrl) {
+                return;
+            }
             switch (message.status) {
                 case 'success':
                     childWindow?.close();

diff --git a/packages/my-near-wallet/src/lib/my-near-wallet.ts b/packages/my-near-wallet/src/lib/my-near-wallet.ts
@@ -179,7 +179,8 @@ const MyNearWallet: WalletBehaviourFactory<
       if (!url) {
         throw new Error(`The callbackUrl is missing for ${metadata.name}`);
       }
-
+      console.log("signMessage", {message, nonce, recipient, url, state});
+
       const href = new URL(params.walletUrl);
       href.pathname = "sign-message";
       href.searchParams.append("message", message);