From 5c429d60084900e71812a6cb400e86fc2ec69b61 Mon Sep 17 00:00:00 2001
From: nick sim <nick.simo@gmail.com>
Date: Thu, 17 Sep 2026 19:58:03 +0100
Subject: [PATCH] docs: clarify PostMessageTransport target origin

---
 src/message-transport.ts | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/message-transport.ts b/src/message-transport.ts
index afc85e935..5b896465e 100644
--- a/src/message-transport.ts
+++ b/src/message-transport.ts
@@ -115,8 +115,9 @@ export class PostMessageTransport implements Transport {
   /**
    * Send a JSON-RPC message to the target window.
    *
-   * Messages are sent using `postMessage` with `"*"` origin, meaning they are visible
-   * to all frames. The receiver should validate the message source for security.
+   * Messages are sent to the `eventTarget` window using `postMessage` with
+   * `"*"` as `targetOrigin`, allowing delivery regardless of that window's
+   * origin. The receiver should validate the message source for security.
    *
    * @param message - JSON-RPC message to send
    * @param options - Optional send options (currently unused)