@lvce-editor/server 0.11.4 → 0.11.5

package/ThirdPartyNotices.txt

@@ -2,7 +2,7 @@ This project incorporates components from the projects listed below, that may ha
 differing from this project:
 
 
-1) License Notice for static/d7cf659/icons (from https://github.com/microsoft/vscode-icons)
+1) License Notice for static/2674fa8/icons (from https://github.com/microsoft/vscode-icons)
 ---------------------------------------
 
 Attribution 4.0 International
@@ -402,7 +402,7 @@ public licenses.
 Creative Commons may be contacted at creativecommons.org.
 
 
-2) License Notice for static/d7cf659/fonts/FiraCode-VariableFont.ttf (from https://github.com/tonsky/FiraCode)
+2) License Notice for static/2674fa8/fonts/FiraCode-VariableFont.ttf (from https://github.com/tonsky/FiraCode)
 ---------------------------------------
 
 Copyright (c) 2014, The Fira Code Project Authors (https://github.com/tonsky/FiraCode)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lvce-editor/server",
-  "version": "0.11.4",
+  "version": "0.11.5",
   "description": "Run LVCE Editor as a server.",
   "main": "index.js",
   "bin": "bin/server.js",
@@ -17,6 +17,6 @@
     "node": ">=16"
   },
   "dependencies": {
-    "@lvce-editor/shared-process": "0.11.4"
+    "@lvce-editor/shared-process": "0.11.5"
   }
 }

package/src/server.js

@@ -49,7 +49,7 @@ const ContentSecurityPolicy = {
     `connect-src 'self'`,
     `font-src 'self'`,
     `frame-src *`,
-    `img-src 'self' https: data:`,
+    `img-src 'self' https: data: blob:`,
     `script-src 'self'`,
     `media-src 'self'`,
     `prefetch-src 'self'`,
@@ -60,6 +60,14 @@ const ContentSecurityPolicy = {
     .join(' '),
 }
 
+const ContentSecurityPolicyTests = {
+  key: ContentSecurityPolicy.key,
+  value: ContentSecurityPolicy.value.replace(
+    `script-src 'self'`,
+    `script-src 'self' 'unsafe-eval'`
+  ),
+}
+
 const CrossOriginOpenerPolicy = {
   key: 'Cross-Origin-Opener-Policy',
   value: 'same-origin',
@@ -91,6 +99,10 @@ const getPath = (url) => {
   return url.split(/[?#]/)[0]
 }
 
+const getContentType = (filePath) => {
+  return textMimeType[extname(filePath)] || 'text/plain'
+}
+
 const serveStatic = (root, skip = '') =>
   async function serveStatic(req, res, next) {
     const parsedUrl = parseUrl(req.url)
@@ -118,16 +130,22 @@ const serveStatic = (root, skip = '') =>
     }
     const cachingHeader =
       immutable && root === STATIC ? 'public, max-age=31536000, immutable' : ''
-    const contentType = textMimeType[extname(filePath)] || 'text/plain'
-    res.writeHead(200, {
+    const contentType = getContentType(filePath)
+    const headers = {
       'Content-Type': contentType,
       Etag: etag,
       'Cache-Control': cachingHeader,
+    }
+    if (contentType === 'text/html') {
+      headers[ContentSecurityPolicy.key] = ContentSecurityPolicy.value
       // enables access for performance.measureUserAgentSpecificMemory, see https://web.dev/monitor-total-page-memory-usage/
-      [CrossOriginEmbedderPolicy.key]: CrossOriginEmbedderPolicy.value,
-      [CrossOriginOpenerPolicy.key]: CrossOriginOpenerPolicy.value,
-      [ContentSecurityPolicy.key]: ContentSecurityPolicy.value,
-    })
+      headers[CrossOriginEmbedderPolicy.key] = CrossOriginEmbedderPolicy.value
+      headers[CrossOriginOpenerPolicy.key] = CrossOriginOpenerPolicy.value
+    }
+    if (filePath.endsWith('WorkerMain.js')) {
+      headers[CrossOriginEmbedderPolicy.key] = CrossOriginEmbedderPolicy.value
+    }
+    res.writeHead(200, headers)
     try {
       await pipeline(createReadStream(filePath), res)
     } catch (error) {
@@ -251,6 +269,12 @@ const serveTests = async (req, res, next) => {
   const parsedUrl = parseUrl(req.url || '')
   const pathName = parsedUrl.pathname || ''
   if (pathName.endsWith('.html')) {
+    res.writeHead(200, {
+      'Content-Type': 'text/html',
+      [CrossOriginEmbedderPolicy.key]: CrossOriginEmbedderPolicy.value,
+      [CrossOriginOpenerPolicy.key]: CrossOriginOpenerPolicy.value,
+      [ContentSecurityPolicyTests.key]: ContentSecurityPolicyTests.value,
+    })
     try {
       await pipeline(createReadStream(join(ROOT, 'static', 'index.html')), res)
     } catch (error) {

package/static/{d7cf659 → 2674fa8}/config/defaultKeyBindings.json

@@ -742,5 +742,9 @@
     "key": "Enter",
     "command": "SimpleBrowser.go",
     "when": "focus.SimpleBrowserInput"
+  },
+  {
+    "key": "ctrl+r",
+    "command": "Window.reload"
   }
 ]

package/static/{d7cf659 → 2674fa8}/css/App.css

@@ -556,7 +556,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -571,7 +571,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -1036,7 +1036,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -1051,7 +1051,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -1516,7 +1516,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -1531,7 +1531,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -1996,7 +1996,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -2011,7 +2011,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -2476,7 +2476,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -2491,7 +2491,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -2956,7 +2956,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -2971,7 +2971,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -3436,7 +3436,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -3451,7 +3451,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -3916,7 +3916,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -3931,7 +3931,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -4396,7 +4396,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -4411,7 +4411,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -4876,7 +4876,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -4891,7 +4891,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -5356,7 +5356,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -5371,7 +5371,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -5836,7 +5836,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -5851,7 +5851,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -6316,7 +6316,7 @@ body {
   width: 0.75rem;
   height: 0.75rem;
   background: orchid;
-  -webkit-mask-image: url(/d7cf659/icons/check.svg);
+  -webkit-mask-image: url(/2674fa8/icons/check.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;
@@ -6331,7 +6331,7 @@ body {
   height: 16px;
   content: '';
   display: block;
-  -webkit-mask-image: url(/d7cf659/icons/chevron-right.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chevron-right.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;

package/static/{d7cf659 → 2674fa8}/css/parts/EditorTabs.css

@@ -89,7 +89,7 @@
   position: absolute;
   inset: 0;
   background: var(--TabActiveForeground);
-  -webkit-mask-image: url(/d7cf659/icons/icon-close.svg);
+  -webkit-mask-image: url(/2674fa8/icons/icon-close.svg);
   -webkit-mask-repeat: no-repeat;
   mask-repeat: no-repeat;
   -webkit-mask-position: center;

package/static/{d7cf659 → 2674fa8}/css/parts/ViewletTitleBarButtons.css

@@ -22,11 +22,11 @@
 }
 
 .MaskIcon.Minimize {
-  -webkit-mask-image: url(/d7cf659/icons/chrome-minimize.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chrome-minimize.svg);
 }
 .MaskIcon.ToggleMaximize {
-  -webkit-mask-image: url(/d7cf659/icons/chrome-maximize.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chrome-maximize.svg);
 }
 .MaskIcon.Close {
-  -webkit-mask-image: url(/d7cf659/icons/chrome-close.svg);
+  -webkit-mask-image: url(/2674fa8/icons/chrome-close.svg);
 }