From 2f207a274a871bee4461b3cbf211090c8839718f Mon Sep 17 00:00:00 2001 From: Henry Jameson Date: Wed, 5 Aug 2026 19:27:50 +0300 Subject: [PATCH] fix security issue sonarqube detected --- src/sw.js | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/sw.js b/src/sw.js index b7629b5f2..908e86567 100644 --- a/src/sw.js +++ b/src/sw.js @@ -198,6 +198,10 @@ self.addEventListener('push', async (event) => { self.addEventListener('message', async (event) => { await setSettings() const { type, content } = event.data + if (self.location.origin !== event.origin) { + console.error('SW Message with strange origin received', event) + return + } if (type === 'desktopNotification') { const { title, ...rest } = content