@bobfrankston/rmfmail 1.0.674 → 1.0.675

package/client/app.bundle.js

@@ -1442,9 +1442,20 @@ async function showMessage(accountId, uid, folderId, specialUse, isRetry = false
       iframe.sandbox.add("allow-top-navigation-by-user-activation");
       iframe.sandbox.add("allow-scripts");
       iframe.srcdoc = wrapHtmlBody(msg.bodyHtml, msg.remoteAllowed);
-      iframe.addEventListener("load", () => _ptick("iframe load (rendered)"), { once: true });
+      iframe.addEventListener("load", () => _ptick("iframe load (all resources)"), { once: true });
+      const onReady = () => {
+        const doc = iframe.contentDocument;
+        if (!doc)
+          return;
+        const fire = () => _ptick("iframe DOMContentLoaded (text painted)");
+        if (doc.readyState === "interactive" || doc.readyState === "complete")
+          fire();
+        else
+          doc.addEventListener("DOMContentLoaded", fire, { once: true });
+      };
       bodyEl.appendChild(iframe);
-      _ptick("iframe srcdoc set (waiting for load)");
+      queueMicrotask(onReady);
+      _ptick("iframe srcdoc set");
       installPreviewControls(iframe);
     } else if (msg.bodyText) {
       const pre = document.createElement("pre");
@@ -1783,14 +1794,12 @@ ${csp}
     document.addEventListener("mouseleave", function () {
         if (lastHoveredHref) postLinkHover("", null);
     }, true);
-    // Double-click on body \u2192 toggle preview fullscreen via parent.
-    document.addEventListener("dblclick", function (e) {
-        var t = e.target;
-        // Don't hijack on links (the user might be opening) or interactive controls.
-        if (t && t.closest && t.closest("a, button, input, select, textarea")) return;
-        e.preventDefault();
-        window.parent.postMessage({ type: "previewToggleFullscreen" }, "*");
-    });
+    // Note: iframe-level dblclick fullscreen toggle REMOVED \u2014 it hijacked
+    // word-selection (Bob 2026-05-11). Double-clicking text inside the
+    // preview now selects the word like any other browser surface; the
+    // fullscreen toggle lives on the viewer chrome (mv-header) handler
+    // in app.ts, which explicitly excludes interactive controls but
+    // operates on chrome, not iframe content.
 
     // Receive commands from the parent (Copy / Select all menu actions).
     // Browsers restrict execCommand("copy") to the document where focus
@@ -5664,6 +5673,33 @@ function propagateAppName() {
 }
 propagateAppName();
 window.__btick && window.__btick("app.ts module body executing");
+(function blockBrowserKeysAndMenu() {
+  const isBlockedKey = (e) => {
+    if (e.key === "F12") return false;
+    if (e.key === "F5" || e.key === "F3") return true;
+    if ((e.ctrlKey || e.metaKey) && (e.key === "r" || e.key === "R")) return true;
+    if (e.ctrlKey || e.metaKey) {
+      const k = e.key.toLowerCase();
+      if (["p", "s", "u", "j", "l", "g", "o"].includes(k)) return true;
+    }
+    if (e.altKey && (e.key === "ArrowLeft" || e.key === "ArrowRight")) return true;
+    if (e.key === "Backspace") {
+      const t = e.target;
+      const editable = t && (t.tagName === "INPUT" || t.tagName === "TEXTAREA" || t.isContentEditable);
+      if (!editable) return true;
+    }
+    return false;
+  };
+  document.addEventListener("keydown", (e) => {
+    if (isBlockedKey(e)) {
+      e.preventDefault();
+      e.stopPropagation();
+    }
+  }, true);
+  document.addEventListener("contextmenu", (e) => {
+    if (!e.defaultPrevented) e.preventDefault();
+  });
+})();
 var baseTitle = APP_NAME;
 var lastSeenCount = 0;
 var badgeCount = 0;