校验移动壳HostBridge消息来源

移动壳 onMessage 按页面 URL 拦截非同源 HostBridge 消息

移动壳导航测试覆盖同源消息入口和异常来源丢弃

移动壳检查脚本要求保留消息来源校验

宿主壳方案和共享决策记录移动消息入口边界
This commit is contained in:
2026-06-18 09:23:53 +08:00
parent 7fabb5ed4c
commit a1afd33004
6 changed files with 49 additions and 0 deletions
@@ -284,6 +284,7 @@ for (const snippet of [
"Linking.addEventListener('url'",
'buildMobileShellUrlFromDeepLink',
'configureMobileHostBridgeNavigation',
'shouldAcceptMobileShellHostBridgeMessage',
'webViewRef.current?.reload()',
'AppState.addEventListener',
'app.lifecycle',