external_api: filter postis events origin

modules/API/external/external_api.js

@@ -278,6 +278,7 @@ export default class JitsiMeetExternalAPI extends EventEmitter {
         this._transport = new Transport({
             backend: new PostMessageTransportBackend({
                 postisOptions: {
+                    allowedOrigin: new URL(this._url).origin,
                     scope: `jitsi_meet_external_api_${id}`,
                     window: this._frame.contentWindow
                 }

package-lock.json

@@ -3100,13 +3100,12 @@
       }
     },
     "@jitsi/js-utils": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/@jitsi/js-utils/-/js-utils-1.0.0.tgz",
-      "integrity": "sha512-at9GPMP7IL0v6QS1Gs9c5MbbiN2AT0uKzsgKM8qS2wqXxqvpfT3p4U3+LH2IUyXiHlkmvlBMcNM02MltBdyRmQ==",
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@jitsi/js-utils/-/js-utils-1.0.1.tgz",
+      "integrity": "sha512-Lj4SKc3TBJAdAyNoY03BfYiHSXE3cesZMnkzTna9xSkhWVq/ftWUFc6qw6aQj4fPrgbqysyim7AMJnuKBoLaUw==",
       "requires": {
         "bowser": "2.7.0",
-        "js-md5": "0.7.3",
-        "postis": "2.2.0"
+        "js-md5": "0.7.3"
       },
       "dependencies": {
         "js-md5": {
@@ -11008,6 +11007,23 @@
         "strophejs-plugin-disco": "0.0.2",
         "strophejs-plugin-stream-management": "github:jitsi/strophejs-plugin-stream-management#001cf02bef2357234e1ac5d163611b4d60bf2b6a",
         "webrtc-adapter": "7.5.0"
+      },
+      "dependencies": {
+        "@jitsi/js-utils": {
+          "version": "1.0.0",
+          "resolved": "https://registry.npmjs.org/@jitsi/js-utils/-/js-utils-1.0.0.tgz",
+          "integrity": "sha512-at9GPMP7IL0v6QS1Gs9c5MbbiN2AT0uKzsgKM8qS2wqXxqvpfT3p4U3+LH2IUyXiHlkmvlBMcNM02MltBdyRmQ==",
+          "requires": {
+            "bowser": "2.7.0",
+            "js-md5": "0.7.3",
+            "postis": "2.2.0"
+          }
+        },
+        "js-md5": {
+          "version": "0.7.3",
+          "resolved": "https://registry.npmjs.org/js-md5/-/js-md5-0.7.3.tgz",
+          "integrity": "sha512-ZC41vPSTLKGwIRjqDh8DfXoCrdQIyBgspJVPXHBGu4nZlAEvG3nf+jO9avM9RmLiGakg7vz974ms99nEV0tmTQ=="
+        }
       }
     },
     "libflacjs": {
@@ -15275,6 +15291,23 @@
       "from": "github:jitsi/rtcstats#v6.1.3",
       "requires": {
         "@jitsi/js-utils": "1.0.0"
+      },
+      "dependencies": {
+        "@jitsi/js-utils": {
+          "version": "1.0.0",
+          "resolved": "https://registry.npmjs.org/@jitsi/js-utils/-/js-utils-1.0.0.tgz",
+          "integrity": "sha512-at9GPMP7IL0v6QS1Gs9c5MbbiN2AT0uKzsgKM8qS2wqXxqvpfT3p4U3+LH2IUyXiHlkmvlBMcNM02MltBdyRmQ==",
+          "requires": {
+            "bowser": "2.7.0",
+            "js-md5": "0.7.3",
+            "postis": "2.2.0"
+          }
+        },
+        "js-md5": {
+          "version": "0.7.3",
+          "resolved": "https://registry.npmjs.org/js-md5/-/js-md5-0.7.3.tgz",
+          "integrity": "sha512-ZC41vPSTLKGwIRjqDh8DfXoCrdQIyBgspJVPXHBGu4nZlAEvG3nf+jO9avM9RmLiGakg7vz974ms99nEV0tmTQ=="
+        }
       }
     },
     "run-async": {

package.json

@@ -32,7 +32,7 @@
     "@atlaskit/theme": "7.0.2",
     "@atlaskit/toggle": "5.0.14",
     "@atlaskit/tooltip": "12.1.13",
-    "@jitsi/js-utils": "1.0.0",
+    "@jitsi/js-utils": "1.0.1",
     "@microsoft/microsoft-graph-client": "1.1.0",
     "@react-native-community/async-storage": "1.3.4",
     "@react-native-community/google-signin": "3.0.1",