Add origin check for message events in TreeTable component

[jthuangarm]

Fixes

• https://github.com/Open-CMSIS-Pack/vscode-cmsis-debugger/security/code-scanning/32

Changes

• Add an origin check to the webview message handler so it ignores messages that aren't from the same origin.

Checklist

• 🤖 This change is covered by unit tests (if applicable).
• 🤹 Manual testing has been performed (if necessary).
• 🛡️ Security impacts have been considered (if relevant).
• 📖 Documentation updates are complete (if required).
• 🧠 Third-party dependencies and TPIP updated (if required).

[qltysh]

Coverage Impact

This PR will not change total coverage.

🚦 See full report on Qlty Cloud »

🛟 Help

• Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

• Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

• File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

  • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.

[jreineckearm]

Thanks, can confirm in a debugger that now only messages coming from the current window are processed. Let's see if that fixes the alert.

Side note: something's broken with loading the JS map file for tree-table.tsx. But not important now as one can still debug the transpiled JS output.

[jreineckearm]

Yep, this fixed it: https://github.com/Open-CMSIS-Pack/vscode-cmsis-debugger/security/code-scanning/32 👍