@c8y/bootstrap 1024.15.13 → 1024.16.10

package/dist/resolvers/options-resolver.d.ts

@@ -6,6 +6,7 @@ declare global {
             [key: string]: unknown;
         };
         C8Y_OPTIONS_TO_MERGE?: OptionsToMerge;
+        UI_VERSION?: string;
     }
 }
 export interface Options {
@@ -34,7 +35,9 @@ export declare function getAllMFRemotes(options: Array<{
     remotes?: object;
 }>): ApplicationRemotePlugins;
 export declare const APPLICATION_OPTIONS_TO_IGNORE_FROM_URL: string[];
+export declare const APPLICATION_OPTIONS_ALLOWED_FROM_URL: string[];
 export declare const APPLICATION_OPTIONS_TO_IGNORE_FROM_URL_LOWERCASE: string[];
+export declare const APPLICATION_OPTIONS_ALLOWED_FROM_URL_LOWERCASE: string[];
 export declare function loadUrlOptions(): Options;
 export declare function loadDynamicOptions(staticOptions: Options): Promise<Options>;
 /**
@@ -54,7 +57,7 @@ export declare function updateWindowObject<T extends Record<string, unknown>>(wi
 export declare function applyOptions(options: Record<string, unknown>): Record<string, unknown>;
 export declare function setImportMap(options: Record<string, unknown>): void;
 export declare function applyBrandingOptions(options: Record<string, unknown>): void;
-export declare function setVersion(options: any): void;
+export declare function setVersion(options: Record<string, unknown>): void;
 export declare function updateTitle({ globalTitle }: {
     globalTitle: any;
 }, document: any): void;

package/dist/resolvers/options-resolver.js

@@ -135,6 +135,7 @@ async function loginOptions() {
 }
 export const APPLICATION_OPTIONS_TO_IGNORE_FROM_URL = [
     'brandingCssVars',
+    'c8yAppVarName',
     'extraCssUrls',
     'extraCss',
     'brandingUrl',
@@ -142,10 +143,36 @@ export const APPLICATION_OPTIONS_TO_IGNORE_FROM_URL = [
     'importMap',
     'loginRedirectPath'
 ];
+export const APPLICATION_OPTIONS_ALLOWED_FROM_URL = [
+    'alarmsRefreshType',
+    'brandingPreview',
+    'code',
+    'dynamicOptionsUrl',
+    'email',
+    'error',
+    'error_description',
+    'forceUrlRemotes',
+    'forceSetup',
+    'hideHeader',
+    'hideNavigator',
+    'lang',
+    'noAppSwitcher',
+    'noLogin',
+    'noPlugins',
+    'remotes',
+    'session_state',
+    'skipSSORedirect',
+    'token'
+];
 export const APPLICATION_OPTIONS_TO_IGNORE_FROM_URL_LOWERCASE = APPLICATION_OPTIONS_TO_IGNORE_FROM_URL.map(option => option.toLowerCase());
+export const APPLICATION_OPTIONS_ALLOWED_FROM_URL_LOWERCASE = APPLICATION_OPTIONS_ALLOWED_FROM_URL.map(option => option.toLowerCase());
 export function loadUrlOptions() {
     const searchParams = new URLSearchParams(getWindowLocation().search);
     const options = Array.from(searchParams.entries()).reduce((prev, [key, value]) => {
+        if (__MODE__ === 'production' &&
+            !APPLICATION_OPTIONS_ALLOWED_FROM_URL_LOWERCASE.includes(key.toLowerCase())) {
+            return prev;
+        }
         if (APPLICATION_OPTIONS_TO_IGNORE_FROM_URL_LOWERCASE.includes(key.toLowerCase())) {
             return prev;
         }
@@ -297,8 +324,8 @@ export function applyBrandingOptions(options) {
     updateCss(options, document);
 }
 export function setVersion(options) {
-    const { c8yVersionName = 'UI_VERSION' } = options;
-    window[c8yVersionName] = options.versions.ng1 || options.versions.ngx;
+    const versions = options?.versions;
+    window.UI_VERSION = versions?.ng1 || versions?.ngx;
 }
 export function updateTitle({ globalTitle }, document) {
     if (!globalTitle) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c8y/bootstrap",
-  "version": "1024.15.13",
+  "version": "1024.16.10",
   "license": "Apache-2.0",
   "author": "Cumulocity",
   "description": "Bootstrap layer",