Skip to content

Isolate user scripts to main frame only - #1749

Merged
cyanzhong merged 1 commit into
mainfrom
iframe-isolation
Sep 16, 2026
Merged

cyanzhong merged 1 commit into
mainfrom
iframe-isolation

Conversation

@cyanzhong

Copy link
Copy Markdown
Contributor

No description provided.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No unresolved blocking issues were identified.

Pull request overview

This pull request restricts user scripts and native bridge messages to the main frame.

Changes:

  • Limits Quick Look and editor scripts to the main frame.
  • Rejects bridge messages from subframes.
File summaries
File Description
QuickLookMac/QuickLookConfig.swift Restricts Quick Look scripts to the main frame.
MarkEditMac/Sources/Editor/Controllers/EditorViewController.swift Restricts editor scripts to the main frame.
MarkEditKit/Sources/EditorMessageHandler.swift Rejects bridge requests from subframes.
Review details
  • Files reviewed: 3/3 changed files
  • Comments generated: 0
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@cyanzhong
cyanzhong merged commit b06a4c3 into main Sep 16, 2026
2 checks passed
@cyanzhong
cyanzhong deleted the iframe-isolation branch September 16, 2026 02:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants