Summary
connector.ts makes assumptions about caller origin that have not been reviewed recently and may be broader than necessary for browser consumers.
Requirements
- Audit current origin-related assumptions against real consumer usage
- Restrict or document the expected origin handling explicitly
- Add a test verifying unexpected origin scenarios are handled safely
- Document the origin policy in the README security section
Summary
connector.ts makes assumptions about caller origin that have not been reviewed recently and may be broader than necessary for browser consumers.
Requirements