feat(replay): optional origin-isolated embedded replayer over postMessage - #37

Merged

mayberryzane merged 11 commits into

mainfrom

sec-8885-origin-isolation-embedded-host

Aug 5, 2026

Commits on Jul 24, 2026

feat(replay): origin-isolated embedded replayer over postMessage (SEC-8885)

mayberryzane
and
claude
committed
ec01c13
refactor(replay): simplify embedded bridge (review feedback)

mayberryzane
and
claude
committed
a2287ac
style: prettier-format embedded bridge files

mayberryzane
and
claude
committed
d72e43f

Commits on Jul 30, 2026

fix(test): anchor polyfill script injection on the document's first <head>

mayberryzane
and
claude
committed
7705569
fix(replay): correct embedded host lifecycle and document the deployment shape

mayberryzane
and
claude
committed
b995466
fix(replay): send the embedded handshake probe with an open target origin

mayberryzane
and
claude
committed
a850efd
fix(replay): push a settled playback position when the embedded host stops

mayberryzane
and
claude
committed
70c642d
feat(replay): let the parent drive embedded replay layout over the bridge

mayberryzane
and
claude
committed
fc6c0b0

Commits on Aug 3, 2026

fix(replay): queue embedded client commands until the host handshakes

mayberryzane
and
claude
committed
91f5f8c

Commits on Aug 4, 2026

fix(replay): transparent host-document background so the letterbox isn't white

mayberryzane
and
claude
committed
3537c0a

Commits on Aug 5, 2026

fix(test): handshake before asserting embedded commands post
mayberryzane
committed
e40592f