@ohif/app 3.13.0-beta.113 → 3.13.0-beta.115

package/dist/{8007.bundle.bc2856ea25d6acdd.js → 8007.bundle.3c124044acfcbb0c.js}

@@ -6,7 +6,7 @@ __webpack_require__.d(__webpack_exports__, {
 });
 /* import */ var react__rspack_import_0 = __webpack_require__(86326);
 /* import */ var _ohif_ui_next__rspack_import_1 = __webpack_require__(39987);
-/* import */ var _ohif_core__rspack_import_2 = __webpack_require__(62901);
+/* import */ var _ohif_core__rspack_import_2 = __webpack_require__(50679);
 function _extends() { return _extends = Object.assign ? Object.assign.bind() : function (n) { for (var e = 1; e < arguments.length; e++) { var t = arguments[e]; for (var r in t) ({}).hasOwnProperty.call(t, r) && (n[r] = t[r]); } return n; }, _extends.apply(null, arguments); }
 
 
@@ -119,8 +119,8 @@ __webpack_require__.d(__webpack_exports__, {
 var react = __webpack_require__(86326);
 // EXTERNAL MODULE: ../../ui-next/src/index.ts + 3682 modules
 var src = __webpack_require__(39987);
-// EXTERNAL MODULE: ../../core/src/index.ts + 69 modules
-var core_src = __webpack_require__(62901);
+// EXTERNAL MODULE: ../../core/src/index.ts + 75 modules
+var core_src = __webpack_require__(50679);
 // EXTERNAL MODULE: ../../../node_modules/react-router-dom/dist/index.js
 var dist = __webpack_require__(4194);
 // EXTERNAL MODULE: ../../../extensions/default/src/Panels/StudyBrowser/PanelStudyBrowserHeader.tsx
@@ -660,7 +660,7 @@ __webpack_require__.d(__webpack_exports__, {
   M: () => (Toolbar)
 });
 /* import */ var react__rspack_import_0 = __webpack_require__(86326);
-/* import */ var _ohif_core__rspack_import_1 = __webpack_require__(62901);
+/* import */ var _ohif_core__rspack_import_1 = __webpack_require__(50679);
 function _extends() { return _extends = Object.assign ? Object.assign.bind() : function (n) { for (var e = 1; e < arguments.length; e++) { var t = arguments[e]; for (var r in t) ({}).hasOwnProperty.call(t, r) && (n[r] = t[r]); } return n; }, _extends.apply(null, arguments); }
 
 
@@ -768,8 +768,8 @@ __webpack_require__.d(utils_namespaceObject, {
 
 // EXTERNAL MODULE: ../../../node_modules/dicomweb-client/build/dicomweb-client.es.js
 var dicomweb_client_es = __webpack_require__(83562);
-// EXTERNAL MODULE: ../../core/src/index.ts + 69 modules
-var src = __webpack_require__(62901);
+// EXTERNAL MODULE: ../../core/src/index.ts + 75 modules
+var src = __webpack_require__(50679);
 // EXTERNAL MODULE: ../../core/src/utils/sortStudy.ts
 var sortStudy = __webpack_require__(28395);
 ;// CONCATENATED MODULE: ../../../extensions/default/src/DicomWebDataSource/qido.js
@@ -831,6 +831,8 @@ function processResults(qidoStudies) {
     mrn: getString(qidoStudy['00100020']) || '',
     // medicalRecordNumber
     patientName: src/* .utils.formatPN */.Wp.formatPN(getName(qidoStudy['00100010'])) || '',
+    patientBirthDate: getString(qidoStudy['00100030']) || '',
+    // YYYYMMDD
     instances: Number(getString(qidoStudy['00201208'])) || 0,
     // number
     description: getString(qidoStudy['00081030']) || '',
@@ -925,7 +927,9 @@ function mapParams(params, options = {}) {
   // Study Description
   '00080060',
   // Modality
-  '00080090' // Referring Physician's Name
+  '00080090',
+  // Referring Physician's Name
+  '00100030' // Patient's Birth Date
   // Add more fields here if you want them in the result
   ].join(',');
   const useWildcard = params?.disableWildcard !== undefined ? !params.disableWildcard : options.supportsWildcard;
@@ -4256,7 +4260,7 @@ function ViewerHeader({
     if (dataSourceIdx !== -1 && existingDataSource) {
       searchQuery.append('datasources', pathname.substring(dataSourceIdx + 1));
     }
-    (0,index_0/* .preserveQueryParameters */.Nn)(searchQuery);
+    (0,index_0/* .preserveQueryParameters */.Nn)(searchQuery, customizationService);
     navigate({
       pathname: '/',
       search: decodeURIComponent(searchQuery.toString())
@@ -10269,6 +10273,7 @@ const {
 });
 ;// CONCATENATED MODULE: ../../../extensions/default/src/customizations/overlayItemCustomization.tsx
 
+
 /* export default */ const overlayItemCustomization = ({
   'ohif.overlayItem': function (props) {
     if (this.condition && !this.condition(props)) {
@@ -10278,7 +10283,8 @@ const {
       instance
     } = props;
     const value = instance && this.attribute ? instance[this.attribute] : this.contentF && typeof this.contentF === 'function' ? this.contentF(props) : null;
-    if (!value) {
+    const displayValue = src/* .utils.formatValue */.Wp.formatValue(value);
+    if (!displayValue) {
       return null;
     }
     return /*#__PURE__*/react.createElement("span", {
@@ -10291,7 +10297,7 @@ const {
       className: "mr-1 shrink-0"
     }, this.label), /*#__PURE__*/react.createElement("span", {
       className: "font-light"
-    }, value));
+    }, displayValue));
   }
 });
 ;// CONCATENATED MODULE: ../../../extensions/default/src/customizations/contextMenuCustomization.ts
@@ -10935,8 +10941,8 @@ function AboutModalDefault() {
     name
   } = (0,browser_detect_es5/* ["default"] */.A)();
   const browser = `${name[0].toUpperCase()}${name.substr(1)} ${version}`;
-  const versionNumber = "3.13.0-beta.113";
-  const commitHash = "333d73e334f1fcf466947cf6a0f6b1821d6c038e";
+  const versionNumber = "3.13.0-beta.115";
+  const commitHash = "1b6fa2194e390576f1411d5e6475cb0c8edb241a";
   const [main, beta] = versionNumber.split('-');
   return /*#__PURE__*/react.createElement(ui_next_src/* .AboutModal */.VTU, {
     className: "w-[400px]"

package/dist/{8423.bundle.075e8b5b25da4d47.js → 8423.bundle.ea4957f1ce64487a.js}

@@ -484,8 +484,8 @@ function getCustomizationModule() {
 /* export default */ const maxNumImageFrames = ((study, extraData) => Math.max(...(extraData?.displaySets?.map?.(ds => ds.numImageFrames ?? 0) || [0])));
 // EXTERNAL MODULE: ../../../node_modules/react/index.js
 var react = __webpack_require__(86326);
-// EXTERNAL MODULE: ../../../extensions/cornerstone/src/index.tsx + 197 modules
-var src = __webpack_require__(84461);
+// EXTERNAL MODULE: ../../../extensions/cornerstone/src/index.tsx + 198 modules
+var src = __webpack_require__(28772);
 ;// CONCATENATED MODULE: ../../../extensions/test-extension/src/getPanelModule.tsx
 
 

package/dist/{8832.bundle.1527b17becc2b22b.js → 8832.bundle.7c9292f59d3eb033.js}

@@ -19,8 +19,8 @@ var react = __webpack_require__(86326);
 var src = __webpack_require__(39987);
 // EXTERNAL MODULE: ../../../extensions/default/src/index.ts + 144 modules
 var default_src = __webpack_require__(61610);
-// EXTERNAL MODULE: ../../core/src/index.ts + 69 modules
-var core_src = __webpack_require__(62901);
+// EXTERNAL MODULE: ../../core/src/index.ts + 75 modules
+var core_src = __webpack_require__(50679);
 // EXTERNAL MODULE: ../../../node_modules/react-i18next/dist/es/index.js + 29 modules
 var es = __webpack_require__(75258);
 // EXTERNAL MODULE: ../../../extensions/dicom-microscopy/node_modules/mathjs/lib/esm/index.js + 1009 modules
@@ -2765,7 +2765,7 @@ const extension = {
 __webpack_require__.d(__webpack_exports__, {
   A: () => (getDicomWebClient)
 });
-/* import */ var _ohif_core__rspack_import_0 = __webpack_require__(62901);
+/* import */ var _ohif_core__rspack_import_0 = __webpack_require__(50679);
 /* import */ var _ohif_extension_default__rspack_import_1 = __webpack_require__(61610);
 
 

package/dist/{899.bundle.6f855ae8df39327e.js → 899.bundle.221329ac8cec3022.js}

@@ -27,8 +27,8 @@ function createSEGToolGroupAndAddTools({
   return toolGroupService.createToolGroupAndAddTools(toolGroupId, updatedTools);
 }
 /* export default */ const initSEGToolGroup = (createSEGToolGroupAndAddTools);
-// EXTERNAL MODULE: ../../../extensions/cornerstone/src/index.tsx + 197 modules
-var cornerstone_src = __webpack_require__(84461);
+// EXTERNAL MODULE: ../../../extensions/cornerstone/src/index.tsx + 198 modules
+var cornerstone_src = __webpack_require__(28772);
 ;// CONCATENATED MODULE: ../../../extensions/cornerstone-dicom-seg/src/utils/promptHydrateSEG.ts
 
 function promptHydrateSEG({

package/dist/{9068.bundle.29adebcfccb4bc8e.js → 9068.bundle.cd36fcb4e15a153e.js}

@@ -14,14 +14,14 @@ var prop_types = __webpack_require__(97598);
 var prop_types_default = /*#__PURE__*/__webpack_require__.n(prop_types);
 // EXTERNAL MODULE: ../../../node_modules/react/index.js
 var react = __webpack_require__(86326);
-// EXTERNAL MODULE: ../../core/src/index.ts + 69 modules
-var src = __webpack_require__(62901);
+// EXTERNAL MODULE: ../../core/src/index.ts + 75 modules
+var src = __webpack_require__(50679);
 // EXTERNAL MODULE: ../../../extensions/cornerstone-dicom-sr/src/tools/modules/dicomSRModule.js
 var dicomSRModule = __webpack_require__(91473);
 // EXTERNAL MODULE: ../../../extensions/cornerstone-dicom-sr/src/utils/createReferencedImageDisplaySet.ts
 var createReferencedImageDisplaySet = __webpack_require__(81444);
-// EXTERNAL MODULE: ../../../extensions/cornerstone/src/index.tsx + 197 modules
-var cornerstone_src = __webpack_require__(84461);
+// EXTERNAL MODULE: ../../../extensions/cornerstone/src/index.tsx + 198 modules
+var cornerstone_src = __webpack_require__(28772);
 // EXTERNAL MODULE: ../../ui-next/src/index.ts + 3682 modules
 var ui_next_src = __webpack_require__(39987);
 // EXTERNAL MODULE: ../../core/src/contextProviders/SystemProvider.tsx

package/dist/{9116.bundle.ee35c08c265f0df3.js → 9116.bundle.164eb4cacb8b0f8f.js}

@@ -16,8 +16,8 @@ var package_namespaceObject = JSON.parse('{"UU":"@ohif/extension-dicom-pdf"}')
 const id = package_namespaceObject.UU;
 const SOPClassHandlerId = `${id}.sopClassHandlerModule.dicom-pdf`;
 
-// EXTERNAL MODULE: ../../core/src/index.ts + 69 modules
-var src = __webpack_require__(62901);
+// EXTERNAL MODULE: ../../core/src/index.ts + 75 modules
+var src = __webpack_require__(50679);
 // EXTERNAL MODULE: ../../i18n/src/index.js + 300 modules
 var i18n_src = __webpack_require__(90119);
 ;// CONCATENATED MODULE: ../../../extensions/dicom-pdf/src/getSopClassHandlerModule.js

package/dist/{9415.bundle.f5c741386f7992f2.js → 9415.bundle.4ac6ceb3a8bc509a.js}

@@ -17,16 +17,16 @@ const SOPClassHandlerId = `${id}.sopClassHandlerModule.${SOPClassHandlerName}`;
 
 // EXTERNAL MODULE: ../../../node_modules/react/index.js
 var react = __webpack_require__(86326);
-// EXTERNAL MODULE: ../../core/src/index.ts + 69 modules
-var src = __webpack_require__(62901);
+// EXTERNAL MODULE: ../../core/src/index.ts + 75 modules
+var src = __webpack_require__(50679);
 // EXTERNAL MODULE: ../../i18n/src/index.js + 300 modules
 var i18n_src = __webpack_require__(90119);
 // EXTERNAL MODULE: ../../../node_modules/@cornerstonejs/core/dist/esm/index.js + 1 modules
 var esm = __webpack_require__(70594);
 // EXTERNAL MODULE: ../../../node_modules/@cornerstonejs/adapters/dist/esm/index.js + 79 modules
 var dist_esm = __webpack_require__(7526);
-// EXTERNAL MODULE: ../../../extensions/cornerstone/src/index.tsx + 197 modules
-var cornerstone_src = __webpack_require__(84461);
+// EXTERNAL MODULE: ../../../extensions/cornerstone/src/index.tsx + 198 modules
+var cornerstone_src = __webpack_require__(28772);
 ;// CONCATENATED MODULE: ../../../extensions/cornerstone-dicom-pmap/src/getSopClassHandlerModule.ts
 
 

package/dist/{9437.bundle.58944991bfee599b.js → 9437.bundle.be34e21e666a7bcc.js}

@@ -9,8 +9,8 @@ __webpack_require__.d(__webpack_exports__, {
 
 // EXTERNAL MODULE: ../../../node_modules/@cornerstonejs/core/dist/esm/index.js + 1 modules
 var esm = __webpack_require__(70594);
-// EXTERNAL MODULE: ../../core/src/index.ts + 69 modules
-var src = __webpack_require__(62901);
+// EXTERNAL MODULE: ../../core/src/index.ts + 75 modules
+var src = __webpack_require__(50679);
 // EXTERNAL MODULE: ../../../node_modules/i18next/dist/esm/i18next.js + 22 modules
 var i18next = __webpack_require__(26104);
 ;// CONCATENATED MODULE: ../../../modes/basic-test-mode/src/toolbarButtons.ts

package/dist/app-config.js

@@ -1,5 +1,21 @@
 /** @type {AppTypes.Config} */
 
+// Secure, minimal default configuration.
+//
+// This is what a plain production build with no APP_CONFIG produces, so it is
+// deliberately locked down:
+//   - The local file data source (`dicomlocal`) and the runtime `?url=` sources
+//     (`dicomjson`, `dicomwebproxy`) are NOT enabled — they widen the attack
+//     surface of a default deployment.
+//   - `?customization=` URL loading is OFF: no `customizationUrlPrefixes` are
+//     configured, so any `?customization=` value is rejected (and aborts boot
+//     rather than silently loading).
+//   - `dangerouslyUseDynamicConfig` (the `configUrl` query parameter) is off.
+//
+// It does not need to "just work" untouched — point the data source below at
+// your own DICOMweb server. For a fully-featured setup with every data source
+// and customization loading enabled, see config/dev.js (local development) and
+// config/netlify.js (the public demo deploy).
 window.config = {
   name: 'config/default.js',
   routerBasename: null,
@@ -7,6 +23,21 @@ window.config = {
   extensions: [],
   modes: [],
   customizationService: {},
+
+  // --- URL-driven customizations (?customization=) ----------------------------
+  // OFF by default. To allow loading customization data files from the URL, set
+  // `customizationUrlPrefixes` to a map of allowed prefixes. The `default` prefix
+  // (no slashes) is used for values with no leading slash; every other prefix
+  // must start AND end with a slash and is matched against the leading
+  // `/segment/` of the value. Files are fetched and parsed as JSONC data — they
+  // are never executed. Example (left disabled here on purpose):
+  //
+  // customizationUrlPrefixes: {
+  //   default: './customizations/',                       // ?customization=ctPresets
+  //   '/remote/': 'https://cdn.example.com/ohif-custom/', // ?customization=/remote/siteA
+  // },
+  // ----------------------------------------------------------------------------
+
   showStudyList: true,
   // some windows systems have issues with more than 3 web workers
   maxNumberOfWebWorkers: 3,
@@ -26,81 +57,13 @@ window.config = {
     prefetch: 25,
   },
   showErrorDetails: 'always', // 'always', 'dev', 'production'
-  // filterQueryParam: false,
-  // Defines multi-monitor layouts
-  multimonitor: [
-    {
-      id: 'split',
-      test: ({ multimonitor }) => multimonitor === 'split',
-      screens: [
-        {
-          id: 'ohif0',
-          screen: null,
-          location: {
-            screen: 0,
-            width: 0.5,
-            height: 1,
-            left: 0,
-            top: 0,
-          },
-          options: 'location=no,menubar=no,scrollbars=no,status=no,titlebar=no',
-        },
-        {
-          id: 'ohif1',
-          screen: null,
-          location: {
-            width: 0.5,
-            height: 1,
-            left: 0.5,
-            top: 0,
-          },
-          options: 'location=no,menubar=no,scrollbars=no,status=no,titlebar=no',
-        },
-      ],
-    },
-
-    {
-      id: '2',
-      test: ({ multimonitor }) => multimonitor === '2',
-      screens: [
-        {
-          id: 'ohif0',
-          screen: 0,
-          location: {
-            width: 1,
-            height: 1,
-            left: 0,
-            top: 0,
-          },
-          options: 'fullscreen=yes,location=no,menubar=no,scrollbars=no,status=no,titlebar=no',
-        },
-        {
-          id: 'ohif1',
-          screen: 1,
-          location: {
-            width: 1,
-            height: 1,
-            left: 0,
-            top: 0,
-          },
-          options: 'fullscreen=yes,location=no,menubar=no,scrollbars=no,status=no,titlebar=no',
-        },
-      ],
-    },
-  ],
+  // `dangerouslyUseDynamicConfig` (load configuration from a `configUrl` query
+  // parameter) is intentionally left OFF in the secure default build. See
+  // config/dev.js for the documented shape.
   defaultDataSourceName: 'ohif',
-  /* Dynamic config allows user to pass "configUrl" query string this allows to load config without recompiling application. The regex will ensure valid configuration source */
-  // dangerouslyUseDynamicConfig: {
-  //   enabled: true,
-  //   // regex will ensure valid configuration source and default is /.*/ which matches any character. To use this, setup your own regex to choose a specific source of configuration only.
-  //   // Example 1, to allow numbers and letters in an absolute or sub-path only.
-  //   // regex: /(0-9A-Za-z.]+)(\/[0-9A-Za-z.]+)*/
-  //   // Example 2, to restricts to either hosptial.com or othersite.com.
-  //   // regex: /(https:\/\/hospital.com(\/[0-9A-Za-z.]+)*)|(https:\/\/othersite.com(\/[0-9A-Za-z.]+)*)/
-  //   regex: /.*/,
-  // },
   dataSources: [
     {
+      // Read-only public demo server. Replace with your own DICOMweb server.
       namespace: '@ohif/extension-default.dataSourcesModule.dicomweb',
       sourceName: 'ohif',
       configuration: {
@@ -118,9 +81,6 @@ window.config = {
         supportsWildcard: true,
         staticWado: true,
         singlepart: 'bulkdata,video',
-        // whether the data source should use retrieveBulkData to grab metadata,
-        // and in case of relative path, what would it be relative to, options
-        // are in the series level or study level (some servers like series some study)
         bulkDataURI: {
           enabled: true,
           relativeResolution: 'studies',
@@ -130,157 +90,13 @@ window.config = {
       },
     },
 
-    {
-      namespace: '@ohif/extension-default.dataSourcesModule.dicomweb',
-      sourceName: 'ohif2',
-      configuration: {
-        friendlyName: 'AWS S3 Static wado secondary server',
-        name: 'aws',
-        wadoUriRoot: 'https://dd14fa38qiwhyfd.cloudfront.net/dicomweb',
-        qidoRoot: 'https://dd14fa38qiwhyfd.cloudfront.net/dicomweb',
-        wadoRoot: 'https://dd14fa38qiwhyfd.cloudfront.net/dicomweb',
-        qidoSupportsIncludeField: false,
-        supportsReject: false,
-        imageRendering: 'wadors',
-        thumbnailRendering: 'wadors',
-        enableStudyLazyLoad: true,
-        supportsFuzzyMatching: false,
-        supportsWildcard: true,
-        staticWado: true,
-        singlepart: 'bulkdata,video',
-        // whether the data source should use retrieveBulkData to grab metadata,
-        // and in case of relative path, what would it be relative to, options
-        // are in the series level or study level (some servers like series some study)
-        bulkDataURI: {
-          enabled: true,
-          relativeResolution: 'studies',
-        },
-        omitQuotationForMultipartRequest: true,
-      },
-    },
-    {
-      namespace: '@ohif/extension-default.dataSourcesModule.dicomweb',
-      sourceName: 'ohif3',
-      configuration: {
-        friendlyName: 'AWS S3 Static wado secondary server',
-        name: 'aws',
-        wadoUriRoot: 'https://d3t6nz73ql33tx.cloudfront.net/dicomweb',
-        qidoRoot: 'https://d3t6nz73ql33tx.cloudfront.net/dicomweb',
-        wadoRoot: 'https://d3t6nz73ql33tx.cloudfront.net/dicomweb',
-        qidoSupportsIncludeField: false,
-        supportsReject: false,
-        imageRendering: 'wadors',
-        thumbnailRendering: 'wadors',
-        enableStudyLazyLoad: true,
-        supportsFuzzyMatching: false,
-        supportsWildcard: true,
-        staticWado: true,
-        singlepart: 'bulkdata,video',
-        // whether the data source should use retrieveBulkData to grab metadata,
-        // and in case of relative path, what would it be relative to, options
-        // are in the series level or study level (some servers like series some study)
-        bulkDataURI: {
-          enabled: true,
-          relativeResolution: 'studies',
-        },
-        omitQuotationForMultipartRequest: true,
-      },
-    },
-
-    {
-      namespace: '@ohif/extension-default.dataSourcesModule.dicomweb',
-      sourceName: 'local5000',
-      configuration: {
-        friendlyName: 'Static WADO Local Data',
-        name: 'DCM4CHEE',
-        qidoRoot: 'http://localhost:5000/dicomweb',
-        wadoRoot: 'http://localhost:5000/dicomweb',
-        qidoSupportsIncludeField: false,
-        supportsReject: true,
-        supportsStow: true,
-        imageRendering: 'wadors',
-        thumbnailRendering: 'wadors',
-        enableStudyLazyLoad: true,
-        supportsFuzzyMatching: false,
-        supportsWildcard: true,
-        staticWado: true,
-        singlepart: 'video',
-        bulkDataURI: {
-          enabled: true,
-          relativeResolution: 'studies',
-        },
-      },
-    },
-    {
-      namespace: '@ohif/extension-default.dataSourcesModule.dicomweb',
-      sourceName: 'orthanc',
-      configuration: {
-        friendlyName: 'local Orthanc DICOMWeb Server',
-        name: 'DCM4CHEE',
-        wadoUriRoot: 'http://localhost/pacs/dicom-web',
-        qidoRoot: 'http://localhost/pacs/dicom-web',
-        wadoRoot: 'http://localhost/pacs/dicom-web',
-        qidoSupportsIncludeField: true,
-        supportsReject: true,
-        dicomUploadEnabled: true,
-        imageRendering: 'wadors',
-        thumbnailRendering: 'wadors',
-        enableStudyLazyLoad: true,
-        supportsFuzzyMatching: true,
-        supportsWildcard: true,
-        omitQuotationForMultipartRequest: true,
-        bulkDataURI: {
-          enabled: true,
-          // This is an example config that can be used to fix the retrieve URL
-          // where it has the wrong prefix (eg a canned prefix).  It is better to
-          // just use the correct prefix out of the box, but that is sometimes hard
-          // when URLs go through several systems.
-          // Example URLS are:
-          // "BulkDataURI" : "http://localhost/dicom-web/studies/1.2.276.0.7230010.3.1.2.2344313775.14992.1458058363.6979/series/1.2.276.0.7230010.3.1.3.1901948703.36080.1484835349.617/instances/1.2.276.0.7230010.3.1.4.1901948703.36080.1484835349.618/bulk/00420011",
-          // when running on http://localhost:3003 with no server running on localhost.  This can be corrected to:
-          // /orthanc/dicom-web/studies/1.2.276.0.7230010.3.1.2.2344313775.14992.1458058363.6979/series/1.2.276.0.7230010.3.1.3.1901948703.36080.1484835349.617/instances/1.2.276.0.7230010.3.1.4.1901948703.36080.1484835349.618/bulk/00420011
-          // which is a valid relative URL, and will result in using the http://localhost:3003/orthanc/.... path
-          // startsWith: 'http://localhost/',
-          // prefixWith: '/orthanc/',
-        },
-      },
-    },
-
-    {
-      namespace: '@ohif/extension-default.dataSourcesModule.dicomwebproxy',
-      sourceName: 'dicomwebproxy',
-      configuration: {
-        friendlyName: 'dicomweb delegating proxy',
-        name: 'dicomwebproxy',
-        // Security controls for runtime ?url=... datasource loading:
-        // In authenticated environments, runtime ?url origins must be allowlisted:
-        // dangerouslyAllowedOriginsForAuthenticatedEnvironments: [
-        //   'https://config.example.com',
-        //   'http://localhost:5000',
-        // ],
-      },
-    },
-    {
-      namespace: '@ohif/extension-default.dataSourcesModule.dicomjson',
-      sourceName: 'dicomjson',
-      configuration: {
-        friendlyName: 'dicom json',
-        name: 'json',
-        // Security controls for runtime ?url=... datasource loading:
-        // In authenticated environments, runtime ?url origins must be allowlisted:
-        // dangerouslyAllowedOriginsForAuthenticatedEnvironments: [
-        //   'https://config.example.com',
-        //   'http://localhost:5000',
-        // ],
-      },
-    },
-    {
-      namespace: '@ohif/extension-default.dataSourcesModule.dicomlocal',
-      sourceName: 'dicomlocal',
-      configuration: {
-        friendlyName: 'dicom local',
-      },
-    },
+    // The following data sources are intentionally NOT enabled in the secure
+    // default because they broaden the attack surface of a default deployment.
+    // Enable them only in a deployment you control (see config/dev.js):
+    //   - dicomlocal:    loads DICOM files from the user's machine.
+    //   - dicomjson:     loads metadata from an arbitrary `?url=` (gate with
+    //                    `dangerouslyAllowedOriginsForAuthenticatedEnvironments`).
+    //   - dicomwebproxy: delegating proxy driven by `?url=`.
   ],
   httpErrorHandler: error => {
     // This is 429 when rejected from the public idc sandbox too often.
@@ -289,29 +105,4 @@ window.config = {
     // Could use services manager here to bring up a dialog/modal if needed.
     console.warn('test, navigate to https://ohif.org/');
   },
-  // segmentation: {
-  //   segmentLabel: {
-  //     enabledByDefault: true,
-  //     labelColor: [255, 255, 0, 1], // must be an array
-  //     hoverTimeout: 1,
-  //     background: 'rgba(100, 100, 100, 0.5)', // can be any valid css color
-  //   },
-  // },
-  // whiteLabeling: {
-  //   createLogoComponentFn: function (React) {
-  //     return React.createElement(
-  //       'a',
-  //       {
-  //         target: '_self',
-  //         rel: 'noopener noreferrer',
-  //         className: 'text-purple-600 line-through',
-  //         href: '_X___IDC__LOGO__LINK___Y_',
-  //       },
-  //       React.createElement('img', {
-  //         src: './Logo.svg',
-  //         className: 'w-14 h-14',
-  //       })
-  //     );
-  //   },
-  // },
 };