Skip to content

docs: incoming message origin validation across platforms - #478

Draft
michaeljsXu wants to merge 2 commits into
07-15-feat_incoming_message_origin_validation_for_react_nativefrom
07-15-docs_incoming_message_origin_validation
Draft

docs: incoming message origin validation across platforms#478
michaeljsXu wants to merge 2 commits into
07-15-feat_incoming_message_origin_validation_for_react_nativefrom
07-15-docs_incoming_message_origin_validation

Conversation

@michaeljsXu

@michaeljsXu michaeljsXu commented Jul 15, 2026 •
edited by tiagocandido
Loading

Copy link
Copy Markdown
Contributor

What changes are you making?

Document incoming message origin validation for Web, Android, Swift, and React Native.

Add cross-platform sample controls and a shared checkout smoke scenario that enables a restrictive allowlist before presentation. Add real-browser Web coverage for a popup that navigates between HTTPS origins, with Chromium and WebKit execution in CI.

How to test

cd platforms/web && pnpm test:e2e
cd platforms/react-native && pnpm test sample/src/e2e --runInBand
cd platforms/android/samples/CheckoutKitAndroidDemo && ./gradlew :app:testDebugUnitTest --tests 'com.shopify.checkout_kit_android_demo.e2e.*'
cd platforms/swift && ./Scripts/lint

@github-actions github-actions Bot added the #gsd:50662 Rebase Checkout Kit on UCP label Jul 15, 2026
This was referenced Jul 15, 2026
Merged
Merged
@michaeljsXu Graphite App

michaeljsXu commented Jul 15, 2026 •
edited by tiagocandido
Loading

Copy link
Copy Markdown
Contributor Author

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

This stack of pull requests is managed by Graphite. Learn more about stacking.

This was referenced Jul 15, 2026
Merged
Draft
tiagocandido
tiagocandido reviewed Jul 17, 2026
View reviewed changes
Comment thread platforms/web/README.md
@tiagocandido
tiagocandido force-pushed the 07-15-feat_incoming_message_origin_validation_for_react_native branch from fe5d567 to a5483f8 Compare July 31, 2026 11:43
@tiagocandido
tiagocandido force-pushed the 07-15-docs_incoming_message_origin_validation branch 2 times, most recently from 69d9e38 to 93af313 Compare July 31, 2026 13:16
@tiagocandido
tiagocandido force-pushed the 07-15-feat_incoming_message_origin_validation_for_react_native branch from a5483f8 to f5614eb Compare July 31, 2026 13:16
@tiagocandido
tiagocandido force-pushed the 07-15-docs_incoming_message_origin_validation branch from 93af313 to 7b8aa97 Compare July 31, 2026 13:41
@tiagocandido
tiagocandido force-pushed the 07-15-feat_incoming_message_origin_validation_for_react_native branch 2 times, most recently from 3be5ff9 to 3c1706a Compare August 3, 2026 11:55
@tiagocandido
tiagocandido force-pushed the 07-15-docs_incoming_message_origin_validation branch from 7b8aa97 to deeae01 Compare August 3, 2026 11:55
@tiagocandido
tiagocandido force-pushed the 07-15-feat_incoming_message_origin_validation_for_react_native branch from 3c1706a to 336928d Compare August 3, 2026 12:12
@tiagocandido
tiagocandido force-pushed the 07-15-docs_incoming_message_origin_validation branch from deeae01 to b966c32 Compare August 3, 2026 12:12
@tiagocandido
tiagocandido force-pushed the 07-15-feat_incoming_message_origin_validation_for_react_native branch from 336928d to 6032726 Compare August 3, 2026 12:16
@tiagocandido
tiagocandido force-pushed the 07-15-docs_incoming_message_origin_validation branch from b966c32 to 4671825 Compare August 3, 2026 12:16
@tiagocandido
tiagocandido force-pushed the 07-15-feat_incoming_message_origin_validation_for_react_native branch from 6032726 to c05fb85 Compare August 3, 2026 14:42
@tiagocandido
tiagocandido force-pushed the 07-15-docs_incoming_message_origin_validation branch from 4671825 to 54185f9 Compare August 3, 2026 14:42
@tiagocandido
tiagocandido force-pushed the 07-15-feat_incoming_message_origin_validation_for_react_native branch from c05fb85 to eb60315 Compare August 3, 2026 15:40
@tiagocandido
tiagocandido force-pushed the 07-15-docs_incoming_message_origin_validation branch 2 times, most recently from 1e0a21d to 1dc5561 Compare August 3, 2026 15:43
@tiagocandido
tiagocandido force-pushed the 07-15-feat_incoming_message_origin_validation_for_react_native branch 2 times, most recently from 1f34aef to 4b6d715 Compare August 4, 2026 11:45
@tiagocandido
tiagocandido force-pushed the 07-15-docs_incoming_message_origin_validation branch from 1dc5561 to 3ce8c9a Compare August 4, 2026 11:45
@tiagocandido
tiagocandido force-pushed the 07-15-feat_incoming_message_origin_validation_for_react_native branch from 4b6d715 to 48ff991 Compare August 5, 2026 10:27
@tiagocandido
tiagocandido force-pushed the 07-15-docs_incoming_message_origin_validation branch from 3ce8c9a to eb079fb Compare August 5, 2026 10:27
@tiagocandido
tiagocandido force-pushed the 07-15-feat_incoming_message_origin_validation_for_react_native branch from 48ff991 to 5af0ce4 Compare August 5, 2026 12:45
@tiagocandido
tiagocandido force-pushed the 07-15-docs_incoming_message_origin_validation branch from eb079fb to 8baa3ba Compare August 5, 2026 12:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tiagocandido tiagocandido tiagocandido left review comments

Assignees

No one assigned

Labels

#gsd:50662 Rebase Checkout Kit on UCP

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@michaeljsXu @tiagocandido