Satanas1275 b8d2c84e6e fix: replace postMessage wildcard '*' with window.location.origin ... All 18 window.postMessage(..., '*') calls across the codebase now use window.location.origin as the targetOrigin: - src/utils/extensionProxy.ts: EXTENSION_REQUEST message - extension/Chrome/injected.js: 4 message helpers (extract, extractAll, detect, setupHeaders) - extension/Chrome/content.js: 4 response forwards (error/success/catch + EXTRACTION_RESULT) - extension/Firefox/injected.js: 4 message helpers (mirror of Chrome) - extension/Firefox/content.js: 4 response forwards (mirror of Chrome) - userscript/movix.user.js: postExtensionResponse call This prevents any cross-origin script (iframe, rogue extension, etc.) from intercepting Movix extension messages.		2026-07-02 00:08:37 +02:00
..
background.js	Nouveautés	2026-06-20 18:40:49 +02:00
content.js	fix: replace postMessage wildcard '*' with window.location.origin	2026-07-02 00:08:37 +02:00
extractors.js	chore: drop firebase + perf wave + mobile v2.5.3 + uqload HLS + multi-receiver cast + SW gateway	2026-05-10 13:28:51 +02:00
Firefox.zip	tird release	2026-04-28 17:55:00 +02:00
injected.js	fix: replace postMessage wildcard '*' with window.location.origin	2026-07-02 00:08:37 +02:00
manifest.json	Nouveautés	2026-06-20 18:40:49 +02:00
movix.png	tird release	2026-04-28 17:55:00 +02:00
popup.html	Extension et Userscript Nouvelle Adresse	2026-06-18 20:39:19 +02:00
popup.js	tird release	2026-04-28 17:55:00 +02:00