Isolate user scripts to main frame only

MarkEditKit/Sources/EditorMessageHandler.swift

@@ -22,6 +22,10 @@ public final class EditorMessageHandler: NSObject, Sendable, WKScriptMessageHand
       return (nil, message)
     }
 
+    guard message.frameInfo.isMainFrame else {
+      return reportError("Native bridge is unavailable to subframes")
+    }
+
     guard message.name == "bridge", let body = message.body as? [String: Any] else {
       return reportError("Invalid message payload: \(message.name), \(message.body)")
     }

MarkEditMac/Sources/Editor/Controllers/EditorViewController.swift

@@ -148,7 +148,7 @@ final class EditorViewController: NSViewController {
       controller.addUserScript(WKUserScript(
         source: $0,
         injectionTime: .atDocumentEnd,
-        forMainFrameOnly: false
+        forMainFrameOnly: true
       ))
     }
 

QuickLookMac/QuickLookConfig.swift

@@ -28,7 +28,7 @@ extension QuickLookViewController {
       WKUserScript(
         source: EditorUserAsset.script(for: url, contents: contents),
         injectionTime: .atDocumentEnd,
-        forMainFrameOnly: false
+        forMainFrameOnly: true
       )
     }
   }