openvibers/openvibe.network Commits
Bootstrap Compare's exact first-party origin (#808)
Changes
@@@ -24,6 +24,8 @@ function manifestOrigins() {}// Bootstrap Computer's exact origin until its service manifest is included in this service's Contracts pin.out.add('https://openvibe.computer');++ // Compare launches before its separately held Contracts release. Keep this exact origin.++ out.add('https://openvibe.compare');cached = out;return out;}@@@ -6,6 +6,9 @@ const assert = require('assert');const { manifestOrigins } = require('../server/first-party-origins');const o = manifestOrigins();++assert(o.has('https://openvibe.compare'), 'Compare frame reads work while its Contracts release is held');++assert(!o.has('https://tenant.openvibe.compare'));++assert(!o.has('https://openvibe.compare.evil.example'));assert(o.has('https://openvibe.computer'), 'Computer is allowed for Network signed-in navbar calls before the Contracts pin lands');for (const want of ['https://openvibe.blog', 'https://openvibe.wiki', 'https://openvibe.codes', 'https://search.openvibe.network', 'https://openvibe.live', 'https://my.openvibe.network', 'https://openvibe.party']) {assert.ok(o.has(want), `${want} is a first-party origin`);
@@ -24,6 +24,8 @@ function manifestOrigins() {
@@ -24,6 +24,8 @@ function manifestOrigins() {
}
}
// Bootstrap Computer's exact origin until its service manifest is included in this service's Contracts pin.
// Bootstrap Computer's exact origin until its service manifest is included in this service's Contracts pin.
out.add('https://openvibe.computer');
out.add('https://openvibe.computer');
+ // Compare launches before its separately held Contracts release. Keep this exact origin.
+ out.add('https://openvibe.compare');
cached = out;
cached = out;
return out;
return out;
}
}
@@ -6,6 +6,9 @@ const assert = require('assert');
@@ -6,6 +6,9 @@ const assert = require('assert');
const { manifestOrigins } = require('../server/first-party-origins');
const { manifestOrigins } = require('../server/first-party-origins');
const o = manifestOrigins();
const o = manifestOrigins();
+assert(o.has('https://openvibe.compare'), 'Compare frame reads work while its Contracts release is held');
+assert(!o.has('https://tenant.openvibe.compare'));
+assert(!o.has('https://openvibe.compare.evil.example'));
assert(o.has('https://openvibe.computer'), 'Computer is allowed for Network signed-in navbar calls before the Contracts pin lands');
assert(o.has('https://openvibe.computer'), 'Computer is allowed for Network signed-in navbar calls before the Contracts pin lands');
for (const want of ['https://openvibe.blog', 'https://openvibe.wiki', 'https://openvibe.codes', 'https://search.openvibe.network', 'https://openvibe.live', 'https://my.openvibe.network', 'https://openvibe.party']) {
for (const want of ['https://openvibe.blog', 'https://openvibe.wiki', 'https://openvibe.codes', 'https://search.openvibe.network', 'https://openvibe.live', 'https://my.openvibe.network', 'https://openvibe.party']) {
assert.ok(o.has(want), `${want} is a first-party origin`);
assert.ok(o.has(want), `${want} is a first-party origin`);