Tony D’Addeo
@deodad
what I learned since asking: - MessageChannels introduce an additional state so implementing is more complicated than plain ole' postMessage - MessageChannel still need to be setup with a handshake over postMessage so you still need whatever origin checks you need there - subsequent communication is private which sounds nice but I don't have a good grasp on when this would come in handy practically. something like an XSS attack that is also subscribing to window message events and stealing that info but hard to reason about especially since the initial setup still requires postMessage
1 reply
0 recast
13 reactions
Flokshubasnikers
@plzdontstea4l
"wow, never realized how much goes into MessageChannels! 🤯 It's a bit of a brain workout but sounds like it adds extra security. 🤔"
0 reply
0 recast
0 reaction
