@lowdefy/blocks-basic 0.0.0-experimental-20260926183344 → 0.0.0-experimental-20260927140906

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -67,3 +67,31 @@ blocks:
67
67
  type: ClickableHtml
68
68
  properties:
69
69
  html: <p>Safe content</p><script>alert('xss')</script>
70
+
71
+ - id: clickable_confirm
72
+ type: ClickableHtml
73
+ properties:
74
+ html: '<button id="confirm_delete" data-event="onDelete" data-row-id="7" data-confirm="Delete row 7?">Delete</button> <button id="proto_event" data-event="__proto__">Proto</button>'
75
+ events:
76
+ onDelete:
77
+ - id: count_delete
78
+ type: SetState
79
+ params:
80
+ delete_count:
81
+ _sum:
82
+ - _state:
83
+ key: delete_count
84
+ default: 0
85
+ - 1
86
+
87
+ - id: clickable_confirm_result
88
+ type: Html
89
+ properties:
90
+ html:
91
+ _string.concat:
92
+ - '<span id="delete_count">'
93
+ - _json.stringify:
94
+ - _state:
95
+ key: delete_count
96
+ default: 0
97
+ - '</span>'
@@ -38,6 +38,10 @@
38
38
  type: 'object',
39
39
  description: 'Static values passed to the endpoint payload as params. Operators are not allowed — read runtime values in the endpoint routine with _payload, _user or _secret.'
40
40
  },
41
+ policy: {
42
+ type: 'string',
43
+ description: 'Id of a policies.dynamicBlocks entry in lowdefy.yaml. The resolved content must pass the policy on every page get. The endpoint returns stored content as config by reading the blocks of a ValidateDynamic step with the same policy. Replaces types: the policy lists are bundled.'
44
+ },
41
45
  required: {
42
46
  type: 'boolean',
43
47
  default: false,
@@ -54,3 +54,14 @@ blocks:
54
54
  params:
55
55
  selected_text:
56
56
  _event: selectedText
57
+
58
+ - id: html_enhanced
59
+ type: Html
60
+ properties:
61
+ html: >-
62
+ <i id="enh_icon" data-icon="edit"></i>
63
+ <span id="enh_tooltip" data-tooltip="&lt;img src=x onerror=&quot;window.tooltipXss=1&quot;&gt;">Hover</span>
64
+ <span id="enh_popover" data-popover="more">More</span>
65
+ <div data-popover-content="more" hidden><b class="enh-popover-body">Popover body</b></div>
66
+ <a id="enh_page_link" data-page-id="clickablehtml" data-url-query="tab=a">Clickable</a>
67
+ <a id="enh_dot_link" href="/.//evil.example/x" data-link>Dot link</a>
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@lowdefy/blocks-basic",
3
- "version": "0.0.0-experimental-20260926183344",
3
+ "version": "0.0.0-experimental-20260927140906",
4
4
  "license": "Apache-2.0",
5
5
  "description": "Basic html Lowdefy blocks.",
6
6
  "homepage": "https://lowdefy.com",
@@ -45,8 +45,8 @@
45
45
  "dist/*"
46
46
  ],
47
47
  "dependencies": {
48
- "@lowdefy/block-utils": "0.0.0-experimental-20260926183344",
49
- "@lowdefy/helpers": "0.0.0-experimental-20260926183344",
48
+ "@lowdefy/block-utils": "0.0.0-experimental-20260927140906",
49
+ "@lowdefy/helpers": "0.0.0-experimental-20260927140906",
50
50
  "dompurify": "3.4.13"
51
51
  },
52
52
  "peerDependencies": {
@@ -54,8 +54,8 @@
54
54
  "react-dom": ">=18"
55
55
  },
56
56
  "devDependencies": {
57
- "@lowdefy/block-dev-e2e": "0.0.0-experimental-20260926183344",
58
- "@lowdefy/e2e-utils": "0.0.0-experimental-20260926183344",
57
+ "@lowdefy/block-dev-e2e": "0.0.0-experimental-20260927140906",
58
+ "@lowdefy/e2e-utils": "0.0.0-experimental-20260927140906",
59
59
  "@playwright/test": "1.59.1",
60
60
  "@swc/cli": "0.8.1",
61
61
  "@swc/core": "1.15.32",