@lynx-js/web-core-canary 0.19.1 → 0.19.2-canary-20251216-e38e21a1

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @lynx-js/web-core
 
+## 0.19.2-canary-20251216115050-e38e21a13bc43472da91f99f6cc60266d7e0de8b
+
+### Patch Changes
+
+- fix csp issue for mts realm ([#1998](https://github.com/lynx-family/lynx-stack/pull/1998))
+
+- Updated dependencies []:
+  - @lynx-js/web-constants@0.19.2-canary-20251216115050-e38e21a13bc43472da91f99f6cc60266d7e0de8b
+  - @lynx-js/web-mainthread-apis@0.19.2-canary-20251216115050-e38e21a13bc43472da91f99f6cc60266d7e0de8b
+  - @lynx-js/web-worker-rpc@0.19.2-canary-20251216115050-e38e21a13bc43472da91f99f6cc60266d7e0de8b
+  - @lynx-js/web-worker-runtime@0.19.2-canary-20251216115050-e38e21a13bc43472da91f99f6cc60266d7e0de8b
+
 ## 0.19.1
 
 ### Patch Changes
@@ -428,25 +440,25 @@
   lynxView.initI18nResources = [
     {
       options: {
-        locale: 'en',
-        channel: '1',
-        fallback_url: '',
+        locale: "en",
+        channel: "1",
+        fallback_url: "",
       },
       resource: {
-        hello: 'hello',
-        lynx: 'lynx web platform1',
+        hello: "hello",
+        lynx: "lynx web platform1",
       },
     },
   ];
-  lynxView.addEventListener('i18nResourceMissed', (e) => {
+  lynxView.addEventListener("i18nResourceMissed", (e) => {
     console.log(e);
   });
 
   // mts
   _I18nResourceTranslation({
-    locale: 'en',
-    channel: '1',
-    fallback_url: '',
+    locale: "en",
+    channel: "1",
+    fallback_url: "",
   });
   ```
 
@@ -854,8 +866,8 @@
       }
     };`,
         ],
-        { type: 'text/javascript' },
-      ),
+        { type: "text/javascript" }
+      )
     ),
   };
   lynxView.nativeModulesMap = nativeModulesMap;
@@ -970,8 +982,8 @@
     };
   };`,
       ],
-      { type: 'text/javascript' },
-    ),
+      { type: "text/javascript" }
+    )
   );
 
   const color_methods = URL.createObjectURL(
@@ -986,8 +998,8 @@
     };
   };`,
       ],
-      { type: 'text/javascript' },
-    ),
+      { type: "text/javascript" }
+    )
   );
 
   lynxView.napiModuleMap = {
@@ -1004,7 +1016,7 @@
 
   ```js
   lynxView.onNapiModulesCall = (name, data, moduleName) => {
-    if (name === 'getColor' && moduleName === 'color_methods') {
+    if (name === "getColor" && moduleName === "color_methods") {
       return data.color;
     }
   };
@@ -1083,8 +1095,8 @@
     }
   };`,
       ],
-      { type: 'text/javascript' },
-    ),
+      { type: "text/javascript" }
+    )
   );
   ```
 
@@ -1096,7 +1108,7 @@
 
   ```js
   lynxView.onNativeModulesCall = (name, data, callback) => {
-    if (name === 'getColor') {
+    if (name === "getColor") {
       callback(data.color);
     }
   };
@@ -1106,7 +1118,7 @@
 
   ```js
   lynxView.onNativeModulesCall = (name, data, moduleName) => {
-    if (name === 'getColor' && moduleName === 'bridge') {
+    if (name === "getColor" && moduleName === "bridge") {
       return data.color;
     }
   };
@@ -1464,7 +1476,7 @@
   This flag changes the behaviour of cascading. It provide a way to do this
 
   ```jsx
-  <view class='class-a class-b' />;
+  <view class="class-a class-b" />
   ```
 
   The class-b will override (cascading) styles of class-a.
@@ -1564,11 +1576,11 @@
   There is also a simple way to use this feature
 
   ```javascript
-  import { LynxCard } from '@lynx-js/web-core';
-  import { loadElement } from '@lynx-js/web-elements/lazy';
-  import '@lynx-js/web-elements/index.css';
-  import '@lynx-js/web-core/index.css';
-  import './index.css';
+  import { LynxCard } from "@lynx-js/web-core";
+  import { loadElement } from "@lynx-js/web-elements/lazy";
+  import "@lynx-js/web-elements/index.css";
+  import "@lynx-js/web-core/index.css";
+  import "./index.css";
 
   const lynxcard = new LynxCard({
     ...beforeConfigs,

package/dist/uiThread/createRenderAllOnUI.js

@@ -6,7 +6,8 @@ import { Rpc } from '@lynx-js/web-worker-rpc';
 import { dispatchLynxViewEvent } from '../utils/dispatchLynxViewEvent.js';
 import { createExposureMonitor } from './crossThreadHandlers/createExposureMonitor.js';
 const existingScript = document.querySelector('script[nonce]');
-const nonce = existingScript?.nonce || existingScript?.getAttribute('nonce');
+const nonce = existingScript?.nonce || existingScript?.getAttribute('nonce')
+    || '';
 const { prepareMainThreadAPIs, } = await import(
 /* webpackChunkName: "web-core-main-thread-apis" */
 /* webpackMode: "lazy-once" */
@@ -31,7 +32,7 @@ async function createIFrameRealm(parent) {
     });
     iframe.style.display = 'none';
     iframe.srcdoc =
-        '<!DOCTYPE html><html><head><script>parent.postMessage("lynx:mtsready","*")</script></head><body style="display:none"></body></html>';
+        `<!DOCTYPE html><html><head><script nonce="${nonce}">parent.postMessage("lynx:mtsready","*")</script></head><body style="display:none"></body></html>`;
     iframe.sandbox = 'allow-same-origin allow-scripts'; // Restrict capabilities for security
     iframe.loading = 'eager';
     parent.appendChild(iframe);
@@ -42,7 +43,7 @@ async function createIFrameRealm(parent) {
         script.fetchPriority = 'high';
         script.defer = true;
         script.async = false;
-        script.nonce = nonce || '';
+        script.nonce = nonce;
         iframe.contentDocument.head.appendChild(script);
         return new Promise(async (resolve, reject) => {
             script.onload = () => {
@@ -63,6 +64,7 @@ async function createIFrameRealm(parent) {
         xhr.send(null);
         if (xhr.status === 200) {
             const script = iframe.contentDocument.createElement('script');
+            script.nonce = nonce;
             script.textContent = xhr.responseText;
             // @ts-expect-error
             iframeWindow.module = { exports: undefined };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lynx-js/web-core-canary",
-  "version": "0.19.1",
+  "version": "0.19.2-canary-20251216-e38e21a1",
   "private": false,
   "description": "",
   "keywords": [],
@@ -25,10 +25,10 @@
   ],
   "dependencies": {
     "@lynx-js/offscreen-document": "npm:@lynx-js/offscreen-document-canary@0.1.4",
-    "@lynx-js/web-constants": "npm:@lynx-js/web-constants-canary@0.19.1",
-    "@lynx-js/web-mainthread-apis": "npm:@lynx-js/web-mainthread-apis-canary@0.19.1",
-    "@lynx-js/web-worker-rpc": "npm:@lynx-js/web-worker-rpc-canary@0.19.1",
-    "@lynx-js/web-worker-runtime": "npm:@lynx-js/web-worker-runtime-canary@0.19.1"
+    "@lynx-js/web-constants": "npm:@lynx-js/web-constants-canary@0.19.2-canary-20251216-e38e21a1",
+    "@lynx-js/web-mainthread-apis": "npm:@lynx-js/web-mainthread-apis-canary@0.19.2-canary-20251216-e38e21a1",
+    "@lynx-js/web-worker-rpc": "npm:@lynx-js/web-worker-rpc-canary@0.19.2-canary-20251216-e38e21a1",
+    "@lynx-js/web-worker-runtime": "npm:@lynx-js/web-worker-runtime-canary@0.19.2-canary-20251216-e38e21a1"
   },
   "devDependencies": {
     "@lynx-js/lynx-core": "0.1.3",