fix(external_messaging_name): Fix untrusted external messaging name c…

…heck (#963)

* Name can be missing on external messages

* Fixes order to prioritize the sender since data is untrusted

cli/plasmo/src/features/background-service-worker/bgsw-messaging.ts

@@ -30,7 +30,7 @@ globalThis.__plasmoInternalPortMap = new Map()
 ${importSection}
 
 chrome.runtime.onMessageExternal.addListener((request, sender, sendResponse) => {
-  switch (request.name) {
+  switch (request?.name) {
     ${externalMessageSection}
     default:
       break
@@ -97,8 +97,8 @@ const getHandlerList = async (
 
 const getMessageCode = (name: string, importName: string) => `case "${name}":
   ${importName}({
-    sender,
-    ...request
+    ...request,
+    sender
   }, {
     send: (p) => sendResponse(p)
   })