check against earlier registered origin instead of valid origins

packages/altair-iframe-sandbox/src/evaluator.frame.ts

@@ -2,26 +2,25 @@ import {
   ScriptEvaluatorWorker,
   ScriptWorkerMessageData,
 } from 'altair-graphql-core/build/script/types';
-import { validOrigins } from 'altair-graphql-core/build/origins';
 
 export class EvaluatorFrameWorker extends ScriptEvaluatorWorker {
-  origin = '';
+  private origin: string;
 
   constructor() {
     super();
     const params = new URLSearchParams(window.location.search);
     // Get the source origin that embeds the iframe from the URL query parameter
     const source = params.get('sc');
 
-    if (!source || !validOrigins.includes(source)) {
+    if (!source) {
       throw new Error('Invalid source provided!');
     }
     this.origin = source;
   }
 
   onMessage(handler: (e: ScriptWorkerMessageData) => void): void {
     window.addEventListener('message', (e) => {
-      if (e.origin && !validOrigins.includes(e.origin)) {
+      if (e.origin !== this.origin) {
         return;
       }
       handler(e.data);