Penpot/penpot-plugins
0
Fork 0
mirror of https://github.com/penpot/penpot-plugins.git synced 2025-01-23 07:08:47 -05:00
Code Issues Activity

fix(runtime): prevent use api credentials

Browse source
This commit is contained in:
Juanfran 2024-06-03 12:02:51 +02:00
parent 0eadac1e75
commit 1699e6dedb
1 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
libs/plugins-runtime/src/lib/load-plugin.ts
View file

@ -35,7 +35,14 @@ export const ɵloadPlugin = async function (manifest: Manifest) {
const c = new Compartment({ const c = new Compartment({
penpot: harden(pluginApi), penpot: harden(pluginApi),
fetch: window.fetch.bind(window), fetch: harden((...args: Parameters<typeof fetch>) => {
const requestArgs: RequestInit = {
...args[1],
credentials: 'omit',
};
return fetch(args[0], requestArgs);
}),
console: harden(window.console), console: harden(window.console),
Math: harden(Math), Math: harden(Math),
setTimeout: harden( setTimeout: harden(