From 01b7bd0494bb49b6725ea7d2defdb46ea8b457e2 Mon Sep 17 00:00:00 2001
From: Jen-Tse Huang <jen-tse.huang@arm.com>
Date: Thu, 25 Jun 2026 10:43:06 +0200
Subject: [PATCH] Add origin check for message events in TreeTable component

---
 src/webviews/tree-table/src/tree-table.tsx | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/webviews/tree-table/src/tree-table.tsx b/src/webviews/tree-table/src/tree-table.tsx
index 40500a39..023a8f00 100644
--- a/src/webviews/tree-table/src/tree-table.tsx
+++ b/src/webviews/tree-table/src/tree-table.tsx
@@ -140,6 +140,10 @@ export function TreeTable({ vscodeApi }: TreeTableProps): React.ReactElement {
     // Listen for messages from the extension host
     useEffect(() => {
         function handleMessage(event: MessageEvent<HostToWebviewMessage>) {
+            if (event.origin !== window.location.origin) {
+                return;
+            }
+
             const msg = event.data;
             if (msg.type === 'update') {
                 setRows(msg.rows);