dhango Embed Test Harness

Sign-up features

Signup flow URL

Session ID (pre-fill / read-only source)

Mode Inline (in page slot) Modal (overlay)

Cosmetic toggles Hide language dropdown Hide step UI (stepper + progress) Hide Next/Back buttons Language

Skip steps (step 5 never skippable; 1 needs a session) 1 · Contact 2 · Organization 3 · Controllers & Officers 4 · Financial

Theme (blends the flow into the host site)

Font Font size (px) Radius (px)

Read-only fields

UX-grade until server-side enforcement; the session's copy is authoritative.

Transport & security Apply config via cmd:init (instead of query string) Tamper embedOrigin (origin check demo)

embedOrigin is now https://evil.example — the flow targets its events there, the browser drops them, and our commands are ignored. Expect silence + command timeouts.

Any change relaunches automatically (debounced).

step —/—

// command acks & state snapshots appear here

postMessage traffic

Embed code (iframe + SDK call)

Host-side handler code (JS/TS)

Sign-up features

postMessage traffic clear

postMessage traffic