From 3acf0930506b793488f8004b2330230dcafd83e8 Mon Sep 17 00:00:00 2001
From: Zach Hancock <zhancock@edx.org>
Date: Wed, 27 Sep 2023 11:29:51 -0400
Subject: [PATCH] fix: check app domain

---
 src/data/messages/proctorio.js | 2 +-
 src/data/redux.test.jsx        | 7 +++++--
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/src/data/messages/proctorio.js b/src/data/messages/proctorio.js
index ad234ba4..935d53ae 100644
--- a/src/data/messages/proctorio.js
+++ b/src/data/messages/proctorio.js
@@ -8,7 +8,7 @@
 export async function checkAppStatus() {
   return new Promise((resolve, reject) => {
     const handleResponse = event => {
-      if (event.origin === 'https://getproctorio.com') {
+      if (event.origin === window.location.origin) {
         window.removeEventListener('message', handleResponse);
         if (event?.data?.active) {
           resolve();
diff --git a/src/data/redux.test.jsx b/src/data/redux.test.jsx
index 51d49561..b5c0cd96 100644
--- a/src/data/redux.test.jsx
+++ b/src/data/redux.test.jsx
@@ -1090,6 +1090,9 @@ describe('Data layer integration tests', () => {
         top: {
           postMessage: mockPostMessage,
         },
+        location: {
+          origin: 'https://edx.example.com',
+        },
         addEventListener: mockAddEventListener,
         removeEventListener: jest.fn(),
       }));
@@ -1149,7 +1152,7 @@ describe('Data layer integration tests', () => {
       await new Promise(process.nextTick);
       const handleResponseCb = mockAddEventListener.mock.calls[0][1];
       axiosMock.onPut(`${createUpdateAttemptURL}/${proctoredAttempt.attempt_id}`).reply(200, { exam_attempt_id: proctoredAttempt.attempt_id });
-      handleResponseCb({ origin: 'https://getproctorio.com', data: { active: false } });
+      handleResponseCb({ origin: 'https://edx.example.com', data: { active: false } });
 
       await new Promise(process.nextTick);
       const request = axiosMock.history.put[0];
@@ -1168,7 +1171,7 @@ describe('Data layer integration tests', () => {
 
       await new Promise(process.nextTick);
       const handleResponseCb = mockAddEventListener.mock.calls[0][1];
-      handleResponseCb({ origin: 'https://getproctorio.com', data: { active: true } });
+      handleResponseCb({ origin: 'https://edx.example.com', data: { active: true } });
 
       await new Promise(process.nextTick);
       expect(axiosMock.history.put.length).toBe(0);