spatial-monorepo / core/src / IFrameMessagingPluginOptions
Interface: IFrameMessagingPluginOptions
Defined in: packages/core/src/plugins/IFrameMessagingPlugin.ts:29
Properties
trustedOrigins?
optionaltrustedOrigins?:string[]
Defined in: packages/core/src/plugins/IFrameMessagingPlugin.ts:46
Origins allowed to send commands to this iframe and to receive emitted state events (floor, selection, camera, route).
Defaults to [] — an inert default (Policy/UX decision, issue #440): with no origins configured, inbound commands are ignored and no outbound events are ever posted. This is safer than a ['*'] default and less likely to silently break existing integrations at import time, since embedders must opt in explicitly by listing trusted origins (or the literal string '*' to explicitly accept the broadcast-to-anyone behavior).
Outbound events are posted individually to each configured origin (never to '*' unless '*' itself is included in this list), so state is not leaked to unrelated embedding pages.