fix: add origin check in message event listener for improved security

piquark6046 · piquark6046 · commit 53d1efb845c5 · 2026-04-13T11:17:01.000Z
diff --git a/userscript/source/ocr-worker.ts b/userscript/source/ocr-worker.ts
@@ -487,6 +487,8 @@ function CompositeImageDataOnBackground(Source: ImageData, BackgroundCssColor: s
 }
 
 self.addEventListener('message', (Event: MessageEvent<WorkerDetectRequest>) => {
+	if (Event.origin !== '') return
+
 	void (async () => {
 		const Message = Event.data
 		if (!Message || Message.Kind !== 'detect') return

Original file line number	Diff line number	Diff line change
`@@ -487,6 +487,8 @@ function CompositeImageDataOnBackground(Source: ImageData, BackgroundCssColor: s`
`487`	`487`	`}`
`488`	`488`
`489`	`489`	`self.addEventListener('message', (Event: MessageEvent<WorkerDetectRequest>) => {`
	`490`	`+ if (Event.origin !== '') return`
	`491`	`+`
`490`	`492`	`void (async () => {`
`491`	`493`	`const Message = Event.data`
`492`	`494`	`if (!Message \|\| Message.Kind !== 'detect') return`