@comet/site-nextjs 7.25.8 → 7.25.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/lib/sitePreview/appRouter/sitePreviewRoute.d.ts.map +1 -1
  2. package/lib/sitePreview/appRouter/sitePreviewRoute.js +3 -0
  3. package/lib/sitePreview/pagesRouter/legacyPagesRouterSitePreviewApiHandler.d.ts.map +1 -1
  4. package/lib/sitePreview/pagesRouter/legacyPagesRouterSitePreviewApiHandler.js +3 -0
  5. package/lib/style.css +1 -1
  6. package/package.json +4 -4
package/lib/sitePreview/appRouter/sitePreviewRoute.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"sitePreviewRoute.d.ts","sourceRoot":"","sources":["../../../src/sitePreview/appRouter/sitePreviewRoute.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAKrB,OAAO,EAAE,KAAK,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,KAAK,iBAAiB,EAAwB,MAAM,qBAAqB,CAAC;AAEnF,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO;;IAyBlF;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE;IAAE,kBAAkB,EAAE,OAAO,CAAA;CAAkC,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAU/I"}
1
+ {"version":3,"file":"sitePreviewRoute.d.ts","sourceRoot":"","sources":["../../../src/sitePreview/appRouter/sitePreviewRoute.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAKrB,OAAO,EAAE,KAAK,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,KAAK,iBAAiB,EAAwB,MAAM,qBAAqB,CAAC;AAEnF,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO;;IA6BlF;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE;IAAE,kBAAkB,EAAE,OAAO,CAAA;CAAkC,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAU/I"}
package/lib/sitePreview/appRouter/sitePreviewRoute.js CHANGED
@@ -21,6 +21,9 @@ async function sitePreviewRoute(request, _graphQLFetch) {
21
21
  }).setProtectedHeader({ alg: "HS256" }).setExpirationTime("1 day").sign(new TextEncoder().encode(process.env.SITE_PREVIEW_SECRET));
22
22
  cookies().set("__comet_preview", cookieJwt, { httpOnly: true, sameSite: "lax" });
23
23
  draftMode().enable();
24
+ if (!data.path.startsWith("/") || data.path.startsWith("//")) {
25
+ return NextResponse.json({ error: `Redirect to ${data.path} disallowed: only relative paths are valid.` }, { status: 400 });
26
+ }
24
27
  return redirect(data.path);
25
28
  }
26
29
  async function previewParams(options = { skipDraftModeCheck: false }) {
package/lib/sitePreview/pagesRouter/legacyPagesRouterSitePreviewApiHandler.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"legacyPagesRouterSitePreviewApiHandler.d.ts","sourceRoot":"","sources":["../../../src/sitePreview/pagesRouter/legacyPagesRouterSitePreviewApiHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,MAAM,CAAC;AAIjE,iBAAe,sCAAsC,CACjD,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,eAAe,EACpB,cAAc,EAAE,OAAO,iBAgB1B;AAED,OAAO,EAAE,sCAAsC,EAAE,CAAC"}
1
+ {"version":3,"file":"legacyPagesRouterSitePreviewApiHandler.d.ts","sourceRoot":"","sources":["../../../src/sitePreview/pagesRouter/legacyPagesRouterSitePreviewApiHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,MAAM,CAAC;AAIjE,iBAAe,sCAAsC,CACjD,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,eAAe,EACpB,cAAc,EAAE,OAAO,iBAoB1B;AAED,OAAO,EAAE,sCAAsC,EAAE,CAAC"}
package/lib/sitePreview/pagesRouter/legacyPagesRouterSitePreviewApiHandler.js CHANGED
@@ -9,6 +9,9 @@ async function legacyPagesRouterSitePreviewApiHandler(req, res, _graphQLClient)
9
9
  if (!data) {
10
10
  return res.status(400).json({ error: "JWT-validation failed." });
11
11
  }
12
+ if (!data.path.startsWith("/") || data.path.startsWith("//")) {
13
+ return res.status(400).json({ error: `Redirect to ${data.path} disallowed: only relative paths are valid.` });
14
+ }
12
15
  res.setPreviewData(data);
13
16
  res.redirect(data.path);
14
17
  }
package/lib/style.css CHANGED
@@ -1 +1 @@
1
- ._previewElementContainer_nwhl6_1{display:contents}._childrenWrapper_qguhx_1{position:relative;z-index:1}._barSkeleton_zomv4_1{min-height:20px;margin-bottom:5px;margin-right:5px;background-color:var(--background-color);color:var(--color)}._rowsContainer_zomv4_9{width:100%;min-width:300px}._rowSkeleton_zomv4_14{margin-bottom:10px;min-height:20px;width:var(--width);background-color:var(--background-color);color:var(--color)}._imageContainer_zomv4_22{width:100%;aspect-ratio:var(--aspect-ratio);height:var(--height);background-color:var(--background-color);color:var(--color)}._root_v4248_1{position:absolute;z-index:2;top:0;left:0;right:0;min-height:100vh;height:var(--height)}._root_1ya0k_1{position:absolute;cursor:pointer;outline:1px solid transparent;outline-offset:-1px}._root_1ya0k_1:after{content:"";position:absolute;top:0;right:0;bottom:0;left:0;opacity:.25}._root_1ya0k_1:hover{outline-color:#29b6f6;outline-style:solid}._root_1ya0k_1:hover:after{background-color:#29b6f6}._isHoveredInBlockList_1ya0k_24{outline-color:#29b6f6;outline-style:solid}._isHoveredInBlockList_1ya0k_24:after{background-color:#29b6f6}._showBlockOutlines_1ya0k_32:not(:hover){outline-color:#d9d9d9;outline-style:dashed}._blockIsSelected_1ya0k_37{outline-color:#29b6f6}._blockIsSelected_1ya0k_37 ._label_1ya0k_40{display:inline-block}._label_1ya0k_40{position:absolute;padding:2px;background-color:#57b0eb;line-height:16px;color:#fff;top:1px;right:1px;font-size:12px;display:none}._video_17b8y_1{width:100%;object-fit:cover;aspect-ratio:var(--aspect-ratio)}._fill_17b8y_7{height:100%}._imageContainer_ecpdr_1{position:relative;width:100%;aspect-ratio:var(--aspect-ratio)}._videoContainer_bhmhr_1{overflow:hidden;position:relative;aspect-ratio:var(--aspect-ratio)}._fill_bhmhr_7{width:100%;height:100%}._youtubeContainer_bhmhr_12{position:absolute;border:0;top:0;left:0;width:100%;height:100%}._videoContainer_1flq1_1{overflow:hidden;position:relative;aspect-ratio:var(--aspect-ratio)}._fill_1flq1_7{width:100%;height:100%}._vimeoContainer_1flq1_12{position:absolute;border:0;top:0;left:0;width:100%;height:100%}._root_1pfjg_1{position:relative;width:100%}._fill_1pfjg_6{height:100%}._iconWrapper_1pfjg_10{position:absolute;top:0;right:0;left:0;bottom:0;display:flex;align-items:center;justify-content:center;background-color:#000;opacity:.5;-webkit-appearance:none;-moz-appearance:none;appearance:none;border:none;padding:0;cursor:pointer}._playIcon_1pfjg_27{width:64px;height:64px;box-sizing:border-box;border-style:solid;border-width:32px 0 32px 64px;border-color:transparent transparent transparent white}
1
+ ._previewElementContainer_nwhl6_1{display:contents}._childrenWrapper_qguhx_1{position:relative;z-index:1}._barSkeleton_zomv4_1{min-height:20px;margin-bottom:5px;margin-right:5px;background-color:var(--background-color);color:var(--color)}._rowsContainer_zomv4_9{width:100%;min-width:300px}._rowSkeleton_zomv4_14{margin-bottom:10px;min-height:20px;width:var(--width);background-color:var(--background-color);color:var(--color)}._imageContainer_zomv4_22{width:100%;aspect-ratio:var(--aspect-ratio);height:var(--height);background-color:var(--background-color);color:var(--color)}._root_v4248_1{position:absolute;z-index:2;top:0;left:0;right:0;min-height:100vh;height:var(--height)}._root_1ya0k_1{position:absolute;cursor:pointer;outline:1px solid transparent;outline-offset:-1px}._root_1ya0k_1:after{content:"";position:absolute;top:0;right:0;bottom:0;left:0;opacity:.25}._root_1ya0k_1:hover{outline-color:#29b6f6;outline-style:solid}._root_1ya0k_1:hover:after{background-color:#29b6f6}._isHoveredInBlockList_1ya0k_24{outline-color:#29b6f6;outline-style:solid}._isHoveredInBlockList_1ya0k_24:after{background-color:#29b6f6}._showBlockOutlines_1ya0k_32:not(:hover){outline-color:#d9d9d9;outline-style:dashed}._blockIsSelected_1ya0k_37{outline-color:#29b6f6}._blockIsSelected_1ya0k_37 ._label_1ya0k_40{display:inline-block}._label_1ya0k_40{position:absolute;padding:2px;background-color:#57b0eb;line-height:16px;color:#fff;top:1px;right:1px;font-size:12px;display:none}._video_17b8y_1{width:100%;object-fit:cover;aspect-ratio:var(--aspect-ratio)}._fill_17b8y_7{height:100%}._imageContainer_ecpdr_1{position:relative;width:100%;aspect-ratio:var(--aspect-ratio)}._videoContainer_1flq1_1{overflow:hidden;position:relative;aspect-ratio:var(--aspect-ratio)}._fill_1flq1_7{width:100%;height:100%}._vimeoContainer_1flq1_12{position:absolute;border:0;top:0;left:0;width:100%;height:100%}._videoContainer_bhmhr_1{overflow:hidden;position:relative;aspect-ratio:var(--aspect-ratio)}._fill_bhmhr_7{width:100%;height:100%}._youtubeContainer_bhmhr_12{position:absolute;border:0;top:0;left:0;width:100%;height:100%}._root_1pfjg_1{position:relative;width:100%}._fill_1pfjg_6{height:100%}._iconWrapper_1pfjg_10{position:absolute;top:0;right:0;left:0;bottom:0;display:flex;align-items:center;justify-content:center;background-color:#000;opacity:.5;-webkit-appearance:none;-moz-appearance:none;appearance:none;border:none;padding:0;cursor:pointer}._playIcon_1pfjg_27{width:64px;height:64px;box-sizing:border-box;border-style:solid;border-width:32px 0 32px 64px;border-color:transparent transparent transparent white}
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@comet/site-nextjs",
3
3
  "type": "module",
4
- "version": "7.25.8",
4
+ "version": "7.25.10",
5
5
  "repository": {
6
6
  "type": "git",
7
7
  "url": "https://github.com/vivid-planet/comet",
@@ -28,7 +28,7 @@
28
28
  "scroll-into-view-if-needed": "^2.0.0",
29
29
  "server-only": "^0.0.1",
30
30
  "usehooks-ts": "^3.1.0",
31
- "@comet/site-react": "7.25.8"
31
+ "@comet/site-react": "7.25.10"
32
32
  },
33
33
  "devDependencies": {
34
34
  "@gitbeaker/node": "^34.0.0",
@@ -56,8 +56,8 @@
56
56
  "typescript": "^4.0.0",
57
57
  "vite": "^5.1.6",
58
58
  "vite-plugin-dts": "^4.5.3",
59
- "@comet/cli": "7.25.8",
60
- "@comet/eslint-config": "7.25.8"
59
+ "@comet/cli": "7.25.10",
60
+ "@comet/eslint-config": "7.25.10"
61
61
  },
62
62
  "peerDependencies": {
63
63
  "next": "^14.2.0",