@dcl-regenesislabs/bevy-explorer-web 0.1.0-27537509073.commit-d7d8b7f → 0.1.0-27537528711.commit-dd3af59
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.env +1 -1
- package/index.html +1 -1
- package/package.json +3 -3
- package/pkg/webgpu_build_bg.wasm +0 -0
- package/sandbox_worker.js +6 -2
package/.env
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
PUBLIC_URL="https://cdn.decentraland.org/@dcl-regenesislabs/bevy-explorer-web/0.1.0-
|
|
1
|
+
PUBLIC_URL="https://cdn.decentraland.org/@dcl-regenesislabs/bevy-explorer-web/0.1.0-27537528711.commit-dd3af59"
|
package/index.html
CHANGED
|
@@ -419,7 +419,7 @@
|
|
|
419
419
|
}
|
|
420
420
|
</style>
|
|
421
421
|
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap" rel="stylesheet">
|
|
422
|
-
<script>window.PUBLIC_URL = "https://cdn.decentraland.org/@dcl-regenesislabs/bevy-explorer-web/0.1.0-
|
|
422
|
+
<script>window.PUBLIC_URL = "https://cdn.decentraland.org/@dcl-regenesislabs/bevy-explorer-web/0.1.0-27537528711.commit-dd3af59";</script>
|
|
423
423
|
</head>
|
|
424
424
|
<body>
|
|
425
425
|
<div id="header" class="container">
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@dcl-regenesislabs/bevy-explorer-web",
|
|
3
|
-
"version": "0.1.0-
|
|
3
|
+
"version": "0.1.0-27537528711.commit-dd3af59",
|
|
4
4
|
"scripts": {
|
|
5
5
|
"postinstall": "node ./scripts/prebuild.js"
|
|
6
6
|
},
|
|
@@ -8,6 +8,6 @@
|
|
|
8
8
|
"type": "git",
|
|
9
9
|
"url": "git+https://github.com/decentraland/bevy-explorer.git"
|
|
10
10
|
},
|
|
11
|
-
"homepage": "https://cdn.decentraland.org/@dcl-regenesislabs/bevy-explorer-web/0.1.0-
|
|
12
|
-
"commit": "
|
|
11
|
+
"homepage": "https://cdn.decentraland.org/@dcl-regenesislabs/bevy-explorer-web/0.1.0-27537528711.commit-dd3af59",
|
|
12
|
+
"commit": "dd3af59884e4180ea02da130401905e67d364e91"
|
|
13
13
|
}
|
package/pkg/webgpu_build_bg.wasm
CHANGED
|
Binary file
|
package/sandbox_worker.js
CHANGED
|
@@ -71,6 +71,10 @@ var jsProxy = undefined;
|
|
|
71
71
|
var jsPreamble = undefined;
|
|
72
72
|
function createJsContext(wasmApi, context) {
|
|
73
73
|
const isSuper = wasmApi.is_super(context);
|
|
74
|
+
// BroadcastChannel is a same-origin, serverless side channel — exposed ONLY to the trusted
|
|
75
|
+
// super-user (--ui) scene, so an embedded host page can drive it; ordinary scenes never see it
|
|
76
|
+
// (it would otherwise let an untrusted scene coordinate with the page / other scenes off-network).
|
|
77
|
+
const allowList = isSuper ? [...allowListES2020, "BroadcastChannel"] : allowListES2020;
|
|
74
78
|
const sceneLabel = context.get_scene_title();
|
|
75
79
|
const sceneStartTime = performance.now();
|
|
76
80
|
function scenePrefix() {
|
|
@@ -175,7 +179,7 @@ function createJsContext(wasmApi, context) {
|
|
|
175
179
|
if (propKey === "global") return jsProxy;
|
|
176
180
|
if (propKey === "undefined") return undefined;
|
|
177
181
|
if (jsContext[propKey] !== undefined) return jsContext[propKey];
|
|
178
|
-
if (
|
|
182
|
+
if (allowList.includes(propKey)) {
|
|
179
183
|
return globalThis[propKey];
|
|
180
184
|
}
|
|
181
185
|
return undefined;
|
|
@@ -183,7 +187,7 @@ function createJsContext(wasmApi, context) {
|
|
|
183
187
|
});
|
|
184
188
|
|
|
185
189
|
const contextKeys = Object.getOwnPropertyNames(jsContext);
|
|
186
|
-
const allGlobals = [...new Set([...
|
|
190
|
+
const allGlobals = [...new Set([...allowList, ...contextKeys])];
|
|
187
191
|
jsPreamble = allGlobals
|
|
188
192
|
.map((key) => `const ${key} = globalThis.${key};`)
|
|
189
193
|
.join("\n");
|