
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@martini-kit/transport-iframe-bridge
Advanced tools
Iframe-based transport for sandboxed multiplayer testing
Iframe-based transport for sandboxed multiplayer testing. Enables local two-player testing in sandboxed iframes, perfect for IDE dual-view mode.
┌─────────────────────────────────────┐
│ Parent Window (IDE Component) │
│ │
│ ┌─────────────────────────────┐ │
│ │ IframeBridgeRelay │ │
│ │ (message hub) │ │
│ └──────────┬──────────────┬───┘ │
│ │ │ │
│ postMessage postMessage │
│ │ │ │
│ ┌──────────▼──────┐ ┌─────▼──────┐│
│ │ Host Iframe │ │Client Iframe││
│ │ IframeBridge │ │IframeBridge ││
│ │ Transport │ │Transport ││
│ └─────────────────┘ └────────────┘│
└─────────────────────────────────────┘
import { IframeBridgeRelay } from '@martini-kit/transport-iframe-bridge';
// Create relay (message hub)
const relay = new IframeBridgeRelay();
// Iframes will auto-register when they create transport instances
import { IframeBridgeTransport } from '@martini-kit/transport-iframe-bridge';
import { GameRuntime } from '@martini-kit/core';
import { myGame } from './game';
// Create transport (auto-registers with parent relay)
const transport = new IframeBridgeTransport({
roomId: 'my-room',
isHost: true
});
// Create runtime
const runtime = new GameRuntime(myGame, transport, { isHost: true });
| Feature | LocalTransport | IframeBridgeTransport |
|---|---|---|
| Use Case | Same JS context | Sandboxed iframes |
| Speed | Instant (direct calls) | Near-instant (postMessage) |
| Isolation | No sandbox | Full sandbox isolation |
| Testing | Unit tests, DualViewDemo | IDE dual-view, sandboxed tests |
TrysteroTransport for P2PLocalTransport (faster, simpler)LocalTransportclass IframeBridgeTransport implements Transport {
constructor(config: IframeBridgeConfig);
send(message: WireMessage, targetId?: string): void;
onMessage(handler: (msg: WireMessage, senderId: string) => void): () => void;
onPeerJoin(handler: (peerId: string) => void): () => void;
onPeerLeave(handler: (peerId: string) => void): () => void;
onHostDisconnect(handler: () => void): () => void;
getPlayerId(): string;
getPeerIds(): string[];
isHost(): boolean;
disconnect(): void;
}
class IframeBridgeRelay {
constructor();
// Auto-registers iframes via postMessage
// No manual registration needed in most cases
getPeers(): PeerInfo[];
getPeersInRoomById(roomId: string): PeerInfo[];
destroy(): void;
}
MIT
FAQs
Iframe-based transport for sandboxed multiplayer testing
We found that @martini-kit/transport-iframe-bridge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.