feat: Update isValidMessage() check for Safe Apps (#3907)

* Change the way to check if the message is being sent from an iframe

* Add separate job for executing e2e tests

Author: yagopv

.github/workflows/deploy.yml

@@ -163,3 +163,15 @@ jobs:
           SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
           SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
           SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }}
+  e2e:
+    runs-on: ubuntu-20.04
+    name: E2E on Chrome
+    needs: deploy
+    steps:
+      - uses: actions/checkout@v2
+      - uses: cypress-io/github-action@v2
+        with:
+          spec: cypress/integration/smoke/*.spec.js
+          browser: chrome
+          record: false
+          config: baseUrl=https://pr${{ github.event.number }}--safereact.review-safe.gnosisdev.com/app/

src/routes/safe/components/Apps/communicator.ts

@@ -43,8 +43,7 @@ class AppCommunicator {
       return true
     }
 
-    // @ts-expect-error .parent doesn't exist on some possible types
-    const sentFromIframe = msg.source.parent === window.parent
+    const sentFromIframe = this.iframeRef.current?.contentWindow === msg.source
     const knownMethod = Object.values(Methods).includes(msg.data.method)
 
     return sentFromIframe && knownMethod