Cosmiframe previously lacked origin restrictions that meant any parent window could control the app, potentially allowing for MITM attacks.
This updates it to the latest version which requires strict origin filters.
By default this will allow Osmosis and DAO DAO to control Cosmos Kit apps. disableIframe is replaced with allowedIframeParentOrigins in the provider, which can be set to an empty array if someone wants to disable it completely.
Cosmiframe previously lacked origin restrictions that meant any parent window could control the app, potentially allowing for MITM attacks.
This updates it to the latest version which requires strict origin filters.
By default this will allow Osmosis and DAO DAO to control Cosmos Kit apps.
disableIframe
is replaced withallowedIframeParentOrigins
in the provider, which can be set to an empty array if someone wants to disable it completely.