Prod custom-scheme origin for a Tauri-registered scheme. PLATFORM-DEPENDENT
(plan finding 11, verified against tauri 2.11.2 plugin.rs): macOS/iOS/Linux
resolve a registered scheme to <scheme>://localhost, while Windows
(WebView2) maps it to http://<scheme>.localhost. EDITOR_ORIGIN is used BOTH
as the postMessage targetOrigin AND as EditorBridgeClient's strict
event.origin pin — the wrong form silently rejects every guest message and
the handshake never completes, so this MUST match the iframe's real origin on
the running platform. UA sniffing is dependable inside the Tauri webview
(WebView2 always reports a Windows UA).
Prod custom-scheme origin for a Tauri-registered scheme. PLATFORM-DEPENDENT (plan finding 11, verified against tauri 2.11.2
plugin.rs): macOS/iOS/Linux resolve a registered scheme to<scheme>://localhost, while Windows (WebView2) maps it tohttp://<scheme>.localhost. EDITOR_ORIGIN is used BOTH as the postMessage targetOrigin AND as EditorBridgeClient's strictevent.originpin — the wrong form silently rejects every guest message and the handshake never completes, so this MUST match the iframe's real origin on the running platform. UA sniffing is dependable inside the Tauri webview (WebView2 always reports a Windows UA).