From a50a3701533ec0e400334de5c9d18e103d3ac320 Mon Sep 17 00:00:00 2001
From: orbisai0security <mediratta@gmail.com>
Date: Sat, 25 Jul 2026 10:23:49 +0000
Subject: [PATCH] fix: V-002 security vulnerability

Automated security fix generated by OrbisAI Security
---
 flows/openai/content/plus-checkout.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/flows/openai/content/plus-checkout.js b/flows/openai/content/plus-checkout.js
index 315e9cfc..9bcbdf4f 100644
--- a/flows/openai/content/plus-checkout.js
+++ b/flows/openai/content/plus-checkout.js
@@ -796,6 +796,9 @@ function findHostedCheckoutUrl(payload = {}) {
 
 async function createPlusCheckoutSession(options = {}) {
   await waitForDocumentComplete();
+  if (location.origin !== 'https://chatgpt.com') {
+    throw new Error('付款操作只允许在 chatgpt.com 域名下执行。');
+  }
   log('Plus：正在读取 ChatGPT 登录会话...');
 
   const sessionResponse = await fetch('/api/auth/session', {