@devaccel-labs/comment-service 0.5.1 → 0.5.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/react.js +4 -1
- package/dist/server.js +14 -0
- package/package.json +4 -4
package/dist/react.js
CHANGED
|
@@ -2702,7 +2702,10 @@ function submitOnCmdEnter(event) {
|
|
|
2702
2702
|
}
|
|
2703
2703
|
}
|
|
2704
2704
|
async function loadSession(sessionPath) {
|
|
2705
|
-
const response = await fetch(sessionPath, {
|
|
2705
|
+
const response = await fetch(sessionPath, {
|
|
2706
|
+
headers: { accept: "application/json", "x-comment-service-origin": window.location.origin },
|
|
2707
|
+
cache: "no-store"
|
|
2708
|
+
});
|
|
2706
2709
|
const payload = await response.json();
|
|
2707
2710
|
if (!payload.enabled || !payload.apiUrl || !payload.project || !payload.environment || !payload.hostToken)
|
|
2708
2711
|
return null;
|
package/dist/server.js
CHANGED
|
@@ -8,7 +8,21 @@ function readCommentServiceConfig(env = process.env) {
|
|
|
8
8
|
return null;
|
|
9
9
|
return { url, project, environment, secret };
|
|
10
10
|
}
|
|
11
|
+
function declaredOrigin(request) {
|
|
12
|
+
const value = request.headers.get("origin") ?? request.headers.get("x-comment-service-origin");
|
|
13
|
+
if (!value)
|
|
14
|
+
return null;
|
|
15
|
+
try {
|
|
16
|
+
const origin = new URL(value).origin;
|
|
17
|
+
return origin === "null" ? null : origin;
|
|
18
|
+
} catch {
|
|
19
|
+
return null;
|
|
20
|
+
}
|
|
21
|
+
}
|
|
11
22
|
function requestOrigin(request) {
|
|
23
|
+
const declared = declaredOrigin(request);
|
|
24
|
+
if (declared)
|
|
25
|
+
return declared;
|
|
12
26
|
const url = new URL(request.url);
|
|
13
27
|
const host = request.headers.get("x-forwarded-host") ?? request.headers.get("host");
|
|
14
28
|
if (!host || host.includes("/"))
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@devaccel-labs/comment-service",
|
|
3
|
-
"version": "0.5.
|
|
3
|
+
"version": "0.5.3",
|
|
4
4
|
"description": "In-UI component comments for TanStack Start on Cloudflare. Anchors survive redeploys.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "UNLICENSED",
|
|
@@ -43,11 +43,11 @@
|
|
|
43
43
|
},
|
|
44
44
|
"devDependencies": {
|
|
45
45
|
"esbuild": "^0.28.1",
|
|
46
|
+
"@devaccel/comment-core": "0.1.0",
|
|
46
47
|
"@devaccel/comment-compiler": "0.1.0",
|
|
48
|
+
"@devaccel/comment-start": "0.1.0",
|
|
47
49
|
"@devaccel/comment-react": "0.1.0",
|
|
48
|
-
"@devaccel/comment-server": "0.1.0"
|
|
49
|
-
"@devaccel/comment-core": "0.1.0",
|
|
50
|
-
"@devaccel/comment-start": "0.1.0"
|
|
50
|
+
"@devaccel/comment-server": "0.1.0"
|
|
51
51
|
},
|
|
52
52
|
"publishConfig": {
|
|
53
53
|
"registry": "https://registry.npmjs.org/",
|