react

mirror of https://github.com/facebook/react.git synced 2025-11-01 09:12:30 +00:00

Files

T

Ruslan Lesiutin 09285d5a7f refactor[devtools/extension]: refactored messaging logic across different parts of the extension (#27417 )

1.
https://github.com/bvaughn/react/commit/9fc04eaf3fb701cdc14f57d5aed48f3126af6c94#diff-2c5e1f5e80e74154e65b2813cf1c3638f85034530e99dae24809ab4ad70d0143
introduced a vulnerability: we listen to `'fetch-file-with-cache'` event
from `window` to fetch sources of the file, in which we want to parse
hook names. We send this event via `window`, which means any page can
also use this and manipulate the extension to perform some `fetch()`
calls. With these changes, instead of transporting message via `window`,
we have a distinct content script, which is responsible for fetching
sources. It is notified via `chrome.runtime.sendMessage` api, so it
can't be manipulated.
2. Consistent structure of messages `{source: string, payload: object}`
in different parts of the extension
3. Added some wrappers around `chrome.scripting.executeScript` API in
`packages/react-devtools-extensions/src/background/executeScript.js`,
which support custom flow for Firefox, to simulate support of
`ExecutionWorld.MAIN`.

2023-09-25 12:02:13 -04:00

__tests__

fix[devtools/ci]: fixed incorrect condition calculation for @reactVersion annotation (#26997 )

2023-06-23 16:45:53 +01:00

background

refactor[devtools/extension]: refactored messaging logic across different parts of the extension (#27417 )

2023-09-25 12:02:13 -04:00

contentScripts

refactor[devtools/extension]: refactored messaging logic across different parts of the extension (#27417 )

2023-09-25 12:02:13 -04:00

main

refactor[devtools/extension]: refactored messaging logic across different parts of the extension (#27417 )