feat(venmo): allow trusted domains

src/child/props.js

@@ -82,11 +82,18 @@ export function normalizeChildProps<P, X>(
   for (const key of Object.keys(props)) {
     const prop = propsDef[key];
 
-    if (
-      prop &&
-      prop.sameDomain &&
-      (origin !== getDomain(window) || !isSameDomain(parentComponentWindow))
-    ) {
+    const trustedChild: boolean =
+      prop && prop.trustedDomains && prop.trustedDomains.length > 0
+        ? prop.trustedDomains.includes(getDomain(window))
+        : origin === getDomain(window) || isSameDomain(parentComponentWindow);
+
+    // let trustedDomains override sameDomain prop
+    if (prop && prop.sameDomain && !trustedChild) {
+      continue;
+    }
+
+    // sameDomain was not set and trusted domains must match
+    if (prop && prop.trustedDomains && !trustedChild) {
       continue;
     }
 

src/component/props.js

@@ -191,6 +191,7 @@ export type PropDefinitionType<T, P, S: $Values<typeof PROP_TYPE>, X> = {|
   validate?: ({| value: T, props: PropsType<P> |}) => void,
   sameDomain?: boolean,
   serialization?: $Values<typeof PROP_SERIALIZATION>,
+  trustedDomains?: $ReadOnlyArray<string>,
 |};
 
 export type BOOLEAN_DEFINITION_TYPE = typeof PROP_TYPE.BOOLEAN;

src/parent/parent.js

@@ -378,11 +378,18 @@ export function parentComponent<P, X, C>({
         continue;
       }
 
-      if (
-        prop &&
-        prop.sameDomain &&
-        !matchDomain(initialChildDomain, getDomain(window))
-      ) {
+      const trustedChild: boolean =
+        prop && prop.trustedDomains && prop.trustedDomains.length > 0
+          ? prop.trustedDomains.includes(initialChildDomain)
+          : matchDomain(initialChildDomain, getDomain(window));
+
+      // let trustedDomains override sameDomain prop
+      if (prop && prop.sameDomain && !trustedChild) {
+        continue;
+      }
+
+      // sameDomain was not set and trusted domains must match
+      if (prop && prop.trustedDomains && !trustedChild) {
         continue;
       }
 

test/tests/domain.js

@@ -68,7 +68,7 @@ describe("parent domain check", () => {
       return component().render(getBody());
     });
 
-    it("allowedParentDomains is specified as a regex and parent domian match", () => {
+    it("allowedParentDomains is specified as a regex and parent domain match", () => {
       window.__component__ = () => {
         return zoid.create({
           tag: "test-parent-domain-regex",
@@ -163,7 +163,7 @@ describe("parent domain check", () => {
       });
     });
 
-    it("xprops.getParentDomain should pass the correct domain", () => {
+    it("xprops.getParent should pass the correct domain", () => {
       return wrapPromise(({ expect }) => {
         window.__component__ = () => {
           return zoid.create({