@things-factory/shell 7.0.48 → 7.0.49

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/shell",
-  "version": "7.0.48",
+  "version": "7.0.49",
   "description": "Core module for framework",
   "bin": {
     "things-factory": "bin/things-factory",
@@ -133,5 +133,5 @@
     "pg": "^8.7.3",
     "sqlite3": "^5.0.8"
   },
-  "gitHead": "516772ebee08900790bcc43477419d60adcb4dcd"
+  "gitHead": "3fdc2d9c86f8ebf1470fa5d2155b7b3019df6c0d"
 }

package/server/server-dev.ts

@@ -121,37 +121,6 @@ const bootstrap = async () => {
     })
   )
 
-  // // Nonce 생성 미들웨어
-  // app.use(async (ctx, next) => {
-  //   const nonce = crypto.randomBytes(16).toString('base64')
-  //   ctx.state.nonce = nonce
-
-  //   const cspDirectives = {
-  //     defaultSrc: ["'self'", `http://localhost:${PORT}`, 'data:'],
-  //     scriptSrc: [
-  //       "'self'",
-  //       `'nonce-${nonce}'`,
-  //       `http://localhost:${PORT}`,
-  //       'https://trusted.cdn.com',
-  //       'https://ajax.googleapis.com',
-  //       'https://www.googletagmanager.com',
-  //       'https://chancejs.com/chance.min.js'
-  //     ],
-  //     connectSrc: [
-  //       "'self'",
-  //       'ws://localhost:*',
-  //       `http://localhost:${PORT}`,
-  //       'https://www.google-analytics.com',
-  //       'data:'
-  //     ],
-  //     fontSrc: ["'self'", `http://localhost:${PORT}`, 'https://fonts.gstatic.com']
-  //   }
-  //   // 개발 모드에서는 'unsafe-eval'을 허용 (비추천)
-  //   cspDirectives.scriptSrc.push("'unsafe-eval'")
-
-  //   await helmet.contentSecurityPolicy({ directives: cspDirectives })(ctx, next)
-  // })
-
   app.use(async (ctx, next) => {
     ctx.set('X-Content-Type-Options', 'nosniff')
 

package/views/dependencies-view-graphviz.html

@@ -1,8 +1,16 @@
-<script src="//d3js.org/d3.v4.min.js"></script>
+<script src="https://unpkg.com/d3@5.15.0/dist/d3.min.js"></script>
 <script src="https://unpkg.com/viz.js@1.8.0/viz.js" type="javascript/worker"></script>
 <script src="https://unpkg.com/d3-graphviz@1.3.1/build/d3-graphviz.min.js"></script>
 
-<div id="graph" style="text-align: center; width: 100%; height: 100%"></div>
+<style nonce="<%= nonce %>">
+  #graph {
+    text-align: center;
+    width: 100%;
+    height: 100%;
+  }
+</style>
+
+<div id="graph"></div>
 
 <script nonce="<%= nonce %>">
     var model = <%- JSON.stringify(model) %>;

package/views/dependencies-view.html

@@ -1,4 +1,4 @@
-<style>
+<style nonce="<%= nonce %>">
   svg {
     width: 100%;
     height: 100%;

package/views/graphql.html

@@ -1,10 +1,16 @@
-<style>
+<style nonce="<%= nonce %>">
   body {
     margin: 0;
   }
+
+  #embedded-sandbox {
+    width: 100%;
+    height: 100%;
+  }
 </style>
 
-<div style="width: 100%; height: 100%" id="embedded-sandbox"></div>
+<div id="embedded-sandbox"></div>
+
 <script src="https://embeddable-sandbox.cdn.apollographql.com/_latest/embeddable-sandbox.umd.production.min.js"></script>
 <script nonce="<%= nonce %>">
   new window.EmbeddedSandbox({

package/views/public/home.html

@@ -56,23 +56,7 @@
     <link href="/node_modules/@fontsource/roboto/index.css" rel="stylesheet" />
     <link rel="stylesheet" href="/theme.css" />
 
-    <style>
-      body {
-        margin: 0;
-        padding: 0;
-        overflow: auto;
-
-        /* This is a font-stack that tries to use the system-default sans-serifs first */
-        font-family: Helvetica, Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol';
-        line-height: 1.5;
-        -webkit-font-smoothing: antialiased;
-
-        accent-color: var(--md-sys-color-primary);
-        background-color: var(--md-sys-color-background);
-      }
-    </style>
-
-    <script src="/index.js" defer></script>
+    <script src="/static/index.js" defer></script>
 
     <!--- prefetch -->
     <link rel="prefetch" href="/public/home.js" />

package/views/template.html

@@ -4,7 +4,7 @@
     <meta charset="utf-8" />
     <meta name="google" content="notranslate" />
 
-    <style>
+    <style nonce="<%= nonce %>">
       html,
       body {
         margin: 0;