@lvce-editor/iframe-worker 3.5.0 → 3.6.0

package/dist/iframeWorkerMain.js

@@ -804,6 +804,54 @@ const WebWorkerRpcClient = {
   create: create$2
 };
 
+const Web = 1;
+const Electron = 2;
+const Remote = 3;
+const Test = 4;
+
+/* istanbul ignore file */
+
+// TODO this should always be completely tree shaken out during build, maybe need to be marked as @__Pure for terser to work
+
+// TODO treeshake this function out when targeting electron
+
+/**
+ * @returns {number}
+ */
+const getPlatform = () => {
+  // @ts-ignore
+  if (typeof PLATFORM !== 'undefined') {
+    // @ts-ignore
+    return PLATFORM;
+  }
+  // @ts-ignore
+  if (typeof process !== 'undefined' && process.env.NODE_ENV === 'test') {
+    return Test;
+  }
+  // TODO find a better way to pass runtime environment
+  if (typeof name !== 'undefined' && name.endsWith('(Electron)')) {
+    return Electron;
+  }
+  if (typeof name !== 'undefined' && name.endsWith('(Web)')) {
+    return Web;
+  }
+  return Remote;
+};
+const platform = getPlatform();
+
+const getAssetDir = () => {
+  // @ts-ignore
+  if (typeof ASSET_DIR !== 'undefined') {
+    // @ts-ignore
+    return ASSET_DIR;
+  }
+  if (platform === Electron) {
+    return '';
+  }
+  return '';
+};
+const assetDir = getAssetDir();
+
 const state$1 = {
   rpc: undefined
 };
@@ -826,6 +874,14 @@ const invokeAndTransfer$1 = async (method, ...params) => {
   return invokeAndTransfer$2('WebView.compatExtensionHostWorkerInvokeAndTransfer', method, ...params);
 };
 
+const getCredentialLess = locationHost => {
+  if (locationHost.startsWith('localhost:')) {
+    // disabled to improve performance and make testing easier
+    return false;
+  }
+  return true;
+};
+
 const createUrl = (protocol, host) => {
   return protocol + '//' + host;
 };
@@ -864,41 +920,6 @@ const getWebViewHtml = (baseUrl, locationOrigin, elements, assetDir) => {
   return html;
 };
 
-const Web = 1;
-const Electron = 2;
-const Remote = 3;
-const Test = 4;
-
-/* istanbul ignore file */
-
-// TODO this should always be completely tree shaken out during build, maybe need to be marked as @__Pure for terser to work
-
-// TODO treeshake this function out when targeting electron
-
-/**
- * @returns {number}
- */
-const getPlatform = () => {
-  // @ts-ignore
-  if (typeof PLATFORM !== 'undefined') {
-    // @ts-ignore
-    return PLATFORM;
-  }
-  // @ts-ignore
-  if (typeof process !== 'undefined' && process.env.NODE_ENV === 'test') {
-    return Test;
-  }
-  // TODO find a better way to pass runtime environment
-  if (typeof name !== 'undefined' && name.endsWith('(Electron)')) {
-    return Electron;
-  }
-  if (typeof name !== 'undefined' && name.endsWith('(Web)')) {
-    return Web;
-  }
-  return Remote;
-};
-const platform = getPlatform();
-
 const WebView = 'lvce-oss-webview';
 
 const getWebView$1 = (webViews, webViewId) => {
@@ -1103,6 +1124,11 @@ const getWebViewOrigin = (webViewPort, platform) => {
   return origin;
 };
 
+const getIframePermissionPolicy = webView => {
+  const extensionAllow = webView.allow || [];
+  return extensionAllow;
+};
+
 const getWebViews = async () => {
   return invoke$3('WebView.getWebViews');
 };
@@ -1121,11 +1147,6 @@ const getIframeSandbox = (webView, platform) => {
   return [AllowScripts, AllowSameOrigin, ...extensionSandbox];
 };
 
-const getIframePermissionPolicy = webView => {
-  const extensionAllow = webView.allow || [];
-  return extensionAllow;
-};
-
 const state = {
   id: 0
 };
@@ -1158,19 +1179,6 @@ const invoke = async (method, ...params) => {
   return invoke$3('WebView.compatSharedProcessInvoke', method, ...params);
 };
 
-const getAssetDir = () => {
-  // @ts-ignore
-  if (typeof ASSET_DIR !== 'undefined') {
-    // @ts-ignore
-    return ASSET_DIR;
-  }
-  if (platform === Electron) {
-    return '';
-  }
-  return '';
-};
-const assetDir = getAssetDir();
-
 const registerProtocol = async () => {
   await invoke('WebViewServer.registerProtocol');
 };
@@ -1265,7 +1273,7 @@ const create2 = async ({
   const permissionPolicy = getIframePermissionPolicy(webView);
   const permissionPolicyString = permissionPolicy.join('; ');
   const iframeCsp = platform === Web ? csp : '';
-  const credentialless = true;
+  const credentialless = getCredentialLess(locationHost);
   await invoke$3('ExtensionHostManagement.activateByEvent', `onWebView:${webViewId}`);
   const {
     port1,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lvce-editor/iframe-worker",
-  "version": "3.5.0",
+  "version": "3.6.0",
   "description": "Web Worker to manage creation and lifecycle of iframes in Lvce Editor",
   "main": "dist/iframeWorkerMain.js",
   "type": "module",