@comet/cms-admin 7.25.3 → 7.25.5

package/lib/preview/site/SitePreview.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SitePreview.d.ts","sourceRoot":"","sources":["../../../src/preview/site/SitePreview.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAyB,MAAM,OAAO,CAAC;AAEzD,OAAO,EAAE,mBAAmB,EAA2B,MAAM,cAAc,CAAC;AAG5E,OAAO,EAAE,qBAAqB,EAAmB,MAAM,6BAA6B,CAAC;AAarF,UAAU,KAAM,SAAQ,mBAAmB;IACvC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,KAAK,MAAM,CAAC;IACrE,IAAI,CAAC,EAAE,SAAS,CAAC;CACpB;AAqBD,iBAAS,WAAW,CAAC,EAAE,WAAW,EAAE,IAA2C,EAAE,EAAE,KAAK,eA+IvF;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"SitePreview.d.ts","sourceRoot":"","sources":["../../../src/preview/site/SitePreview.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAyB,MAAM,OAAO,CAAC;AAEzD,OAAO,EAAE,mBAAmB,EAA2B,MAAM,cAAc,CAAC;AAG5E,OAAO,EAAE,qBAAqB,EAAmB,MAAM,6BAA6B,CAAC;AAarF,UAAU,KAAM,SAAQ,mBAAmB;IACvC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,KAAK,MAAM,CAAC;IACrE,IAAI,CAAC,EAAE,SAAS,CAAC;CACpB;AAqBD,iBAAS,WAAW,CAAC,EAAE,WAAW,EAAE,IAA2C,EAAE,EAAE,KAAK,eA8IvF;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/lib/preview/site/SitePreview.js

@@ -54,6 +54,9 @@ function SitePreview(_ref) {
     }) : _ref$logo;
   var _useContentScope = (0, _Provider.useContentScope)(),
     scope = _useContentScope.scope;
+  var siteConfig = (0, _useSiteConfig.useSiteConfig)({
+    scope: scope
+  });
 
   //initialPath: path the preview is initialized with; WITHOUT resolvePath called, might be not the path actually used in site
   //doesn't change during navigation within site
@@ -67,11 +70,11 @@ function SitePreview(_ref) {
   //use case for resolvePath: i18n urls, for example `/${scope.language}${path}`;
   //changes during navigation within site (iframe bridge reports new path)
   var _useSearchState3 = useSearchState("sitePath", function (v) {
-      if (v) {
-        return v;
-      } else {
-        return resolvePath ? resolvePath(initialPath, scope) : initialPath;
+      if (!v) {
+        v = resolvePath ? resolvePath(initialPath, scope) : initialPath;
       }
+      var url = new URL(v, siteConfig.url); // prevents phishing attacks
+      return url.pathname;
     }),
     _useSearchState4 = _slicedToArray(_useSearchState3, 2),
     sitePath = _useSearchState4[0],
@@ -104,9 +107,6 @@ function SitePreview(_ref) {
     _useState4 = _slicedToArray(_useState3, 2),
     linkToOpen = _useState4[0],
     setLinkToOpen = _useState4[1];
-  var siteConfig = (0, _useSiteConfig.useSiteConfig)({
-    scope: scope
-  });
   var intl = (0, _reactIntl.useIntl)();
 
   // the site in the iframe notifies us about it's current location

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@comet/cms-admin",
-  "version": "7.25.3",
+  "version": "7.25.5",
   "repository": {
     "type": "git",
     "url": "https://github.com/vivid-planet/comet",
@@ -54,12 +54,12 @@
     "split.js": "^1.6.4",
     "use-debounce": "^6.0.0",
     "uuid": "^9.0.0",
-    "@comet/admin": "7.25.3",
-    "@comet/admin-icons": "7.25.3",
-    "@comet/admin-rte": "7.25.3",
-    "@comet/admin-theme": "7.25.3",
-    "@comet/admin-date-time": "7.25.3",
-    "@comet/blocks-admin": "7.25.3"
+    "@comet/admin": "7.25.5",
+    "@comet/admin-date-time": "7.25.5",
+    "@comet/admin-icons": "7.25.5",
+    "@comet/admin-rte": "7.25.5",
+    "@comet/admin-theme": "7.25.5",
+    "@comet/blocks-admin": "7.25.5"
   },
   "devDependencies": {
     "@apollo/client": "^3.7.0",
@@ -121,9 +121,9 @@
     "ts-jest": "^29.0.5",
     "ts-node": "^10.9.1",
     "typescript": "^4.0.0",
-    "@comet/admin-babel-preset": "7.25.3",
-    "@comet/cli": "7.25.3",
-    "@comet/eslint-config": "7.25.3"
+    "@comet/admin-babel-preset": "7.25.5",
+    "@comet/cli": "7.25.5",
+    "@comet/eslint-config": "7.25.5"
   },
   "peerDependencies": {
     "@apollo/client": "^3.7.0",