fix: remove localhost from trusted origins

opengovsg · Oct 12, 2024 · 31c7eb5 · 31c7eb5
1 parent 762b9ba
commit 31c7eb5
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/frontend/src/features/public-form/utils/iframeMessaging.ts b/frontend/src/features/public-form/utils/iframeMessaging.ts
@@ -6,9 +6,7 @@ const TRUSTED_TARGET_ORIGINS = [
   'https://pay.gov.sg',
   'https://exp.pay.gov.sg',
   'https://staging.pay.gov.sg',
-].concat(
-  process.env.NODE_ENV === 'development' ? ['http://localhost:3000'] : [],
-)
+]
 
 export const postIFrameMessage = (message: PublicFormIFrameMessage): void => {
   // De-risk by wrapping in try-catch even though this is synchronous. This should