@uniformdev/canvas-next 19.55.1-alpha.8 → 19.56.1-alpha.10

package/dist/index.esm.js

@@ -53,7 +53,8 @@ import {
   IN_CONTEXT_EDITOR_PLAYGROUND_QUERY_STRING_PARAM,
   IN_CONTEXT_EDITOR_QUERY_STRING_PARAM
 } from "@uniformdev/canvas";
-var BASE_URL_EXAMPLE = "https://exmaple.com";
+import { isAllowedReferrer } from "@uniformdev/canvas";
+var BASE_URL_EXAMPLE = "https://example.com";
 var getQueryParam = (req, paramName) => {
   const value = req.query[paramName];
   if (typeof value === "undefined") {
@@ -102,7 +103,7 @@ var createPreviewHandlerGet = ({ secret, resolveFullPath = resolveFullPathDefaul
   if (isUsingPreviewSecret && req.query.secret !== previewSecret) {
     return res.status(401).json({ message: "Invalid token" });
   }
-  const isUniformContextualEditing = req.query[IN_CONTEXT_EDITOR_QUERY_STRING_PARAM] === "true";
+  const isUniformContextualEditing = req.query[IN_CONTEXT_EDITOR_QUERY_STRING_PARAM] === "true" && isAllowedReferrer(req.headers.referer);
   res.setPreviewData(
     {
       isUniformContextualEditing,
@@ -126,12 +127,14 @@ var createPreviewHandlerGet = ({ secret, resolveFullPath = resolveFullPathDefaul
     cookies == null ? void 0 : cookies.map((cookie) => cookie.replace("SameSite=Lax", "SameSite=None;Secure"))
   );
   const redirectionUrl = new URL(pathToRedirectTo, BASE_URL_EXAMPLE);
-  queryParamsToPreserve.forEach((param) => {
-    const paramValue = req.query[param];
-    if (typeof paramValue === "string") {
-      redirectionUrl.searchParams.append(param, paramValue);
-    }
-  });
+  if (isUniformContextualEditing) {
+    queryParamsToPreserve.forEach((param) => {
+      const paramValue = req.query[param];
+      if (typeof paramValue === "string") {
+        redirectionUrl.searchParams.append(param, paramValue);
+      }
+    });
+  }
   const fullPathToRedirectTo = redirectionUrl.href.replace(BASE_URL_EXAMPLE, "");
   res.redirect(fullPathToRedirectTo);
 };

package/dist/index.js

@@ -96,7 +96,8 @@ var resolveSlugFromParams = ({
 
 // src/preview/previewHandlerGet.ts
 var import_canvas = require("@uniformdev/canvas");
-var BASE_URL_EXAMPLE = "https://exmaple.com";
+var import_canvas2 = require("@uniformdev/canvas");
+var BASE_URL_EXAMPLE = "https://example.com";
 var getQueryParam = (req, paramName) => {
   const value = req.query[paramName];
   if (typeof value === "undefined") {
@@ -145,7 +146,7 @@ var createPreviewHandlerGet = ({ secret, resolveFullPath = resolveFullPathDefaul
   if (isUsingPreviewSecret && req.query.secret !== previewSecret) {
     return res.status(401).json({ message: "Invalid token" });
   }
-  const isUniformContextualEditing = req.query[import_canvas.IN_CONTEXT_EDITOR_QUERY_STRING_PARAM] === "true";
+  const isUniformContextualEditing = req.query[import_canvas.IN_CONTEXT_EDITOR_QUERY_STRING_PARAM] === "true" && (0, import_canvas2.isAllowedReferrer)(req.headers.referer);
   res.setPreviewData(
     {
       isUniformContextualEditing,
@@ -169,12 +170,14 @@ var createPreviewHandlerGet = ({ secret, resolveFullPath = resolveFullPathDefaul
     cookies == null ? void 0 : cookies.map((cookie) => cookie.replace("SameSite=Lax", "SameSite=None;Secure"))
   );
   const redirectionUrl = new URL(pathToRedirectTo, BASE_URL_EXAMPLE);
-  queryParamsToPreserve.forEach((param) => {
-    const paramValue = req.query[param];
-    if (typeof paramValue === "string") {
-      redirectionUrl.searchParams.append(param, paramValue);
-    }
-  });
+  if (isUniformContextualEditing) {
+    queryParamsToPreserve.forEach((param) => {
+      const paramValue = req.query[param];
+      if (typeof paramValue === "string") {
+        redirectionUrl.searchParams.append(param, paramValue);
+      }
+    });
+  }
   const fullPathToRedirectTo = redirectionUrl.href.replace(BASE_URL_EXAMPLE, "");
   res.redirect(fullPathToRedirectTo);
 };
@@ -188,7 +191,7 @@ function validateLocalRedirectUrl(pathToRedirectTo) {
 }
 
 // src/preview/previewHandlerPost.ts
-var import_canvas2 = require("@uniformdev/canvas");
+var import_canvas3 = require("@uniformdev/canvas");
 var createPreviewHandlerPost = ({ secret, enhance } = {}) => async (req, res) => {
   const { composition, hash } = req.body;
   if (!composition) {
@@ -198,7 +201,7 @@ var createPreviewHandlerPost = ({ secret, enhance } = {}) => async (req, res) =>
   const hasProvidedHash = Boolean(hash);
   const hasConfiguredHash = Boolean(previewSecret);
   if (hasProvidedHash && hasConfiguredHash) {
-    const calculatedHash = (0, import_canvas2.generateHash)({
+    const calculatedHash = (0, import_canvas3.generateHash)({
       composition,
       secret: previewSecret
     });

package/dist/index.mjs

@@ -53,7 +53,8 @@ import {
   IN_CONTEXT_EDITOR_PLAYGROUND_QUERY_STRING_PARAM,
   IN_CONTEXT_EDITOR_QUERY_STRING_PARAM
 } from "@uniformdev/canvas";
-var BASE_URL_EXAMPLE = "https://exmaple.com";
+import { isAllowedReferrer } from "@uniformdev/canvas";
+var BASE_URL_EXAMPLE = "https://example.com";
 var getQueryParam = (req, paramName) => {
   const value = req.query[paramName];
   if (typeof value === "undefined") {
@@ -102,7 +103,7 @@ var createPreviewHandlerGet = ({ secret, resolveFullPath = resolveFullPathDefaul
   if (isUsingPreviewSecret && req.query.secret !== previewSecret) {
     return res.status(401).json({ message: "Invalid token" });
   }
-  const isUniformContextualEditing = req.query[IN_CONTEXT_EDITOR_QUERY_STRING_PARAM] === "true";
+  const isUniformContextualEditing = req.query[IN_CONTEXT_EDITOR_QUERY_STRING_PARAM] === "true" && isAllowedReferrer(req.headers.referer);
   res.setPreviewData(
     {
       isUniformContextualEditing,
@@ -126,12 +127,14 @@ var createPreviewHandlerGet = ({ secret, resolveFullPath = resolveFullPathDefaul
     cookies == null ? void 0 : cookies.map((cookie) => cookie.replace("SameSite=Lax", "SameSite=None;Secure"))
   );
   const redirectionUrl = new URL(pathToRedirectTo, BASE_URL_EXAMPLE);
-  queryParamsToPreserve.forEach((param) => {
-    const paramValue = req.query[param];
-    if (typeof paramValue === "string") {
-      redirectionUrl.searchParams.append(param, paramValue);
-    }
-  });
+  if (isUniformContextualEditing) {
+    queryParamsToPreserve.forEach((param) => {
+      const paramValue = req.query[param];
+      if (typeof paramValue === "string") {
+        redirectionUrl.searchParams.append(param, paramValue);
+      }
+    });
+  }
   const fullPathToRedirectTo = redirectionUrl.href.replace(BASE_URL_EXAMPLE, "");
   res.redirect(fullPathToRedirectTo);
 };

package/dist/route/index.js

@@ -502,9 +502,9 @@ var withUniformGetServerSideProps2 = (options) => {
     defaultHandleNotFound,
     defaultHandleRedirect,
     parseContext(context) {
-      var _a;
+      var _a, _b;
       return {
-        contextualEditingCompositionId: (_a = context.previewData) == null ? void 0 : _a.compositionId,
+        contextualEditingCompositionId: ((_a = context.previewData) == null ? void 0 : _a.isUniformContextualEditing) ? (_b = context.previewData) == null ? void 0 : _b.compositionId : void 0,
         resolvedUrl: context.resolvedUrl,
         // auto engage draft content when in next preview mode
         // (can override with explicit setting of request options)'
@@ -543,12 +543,12 @@ var withUniformGetStaticProps2 = (options) => {
     defaultHandleNotFound,
     defaultHandleRedirect,
     parseContext(context) {
-      var _a, _b;
+      var _a, _b, _c;
       return {
-        contextualEditingCompositionId: (_a = context.previewData) == null ? void 0 : _a.compositionId,
+        contextualEditingCompositionId: ((_a = context.previewData) == null ? void 0 : _a.isUniformContextualEditing) ? (_b = context.previewData) == null ? void 0 : _b.compositionId : void 0,
         resolvedUrl: resolveSlugFromParams({
           params: context.params,
-          param: (_b = options == null ? void 0 : options.param) != null ? _b : "route"
+          param: (_c = options == null ? void 0 : options.param) != null ? _c : "route"
         }),
         // auto engage draft content when in next preview mode
         // (can override with explicit setting of request options)

package/dist/route/index.mjs

@@ -229,9 +229,9 @@ var withUniformGetServerSideProps = (options) => {
     defaultHandleNotFound,
     defaultHandleRedirect,
     parseContext(context) {
-      var _a;
+      var _a, _b;
       return {
-        contextualEditingCompositionId: (_a = context.previewData) == null ? void 0 : _a.compositionId,
+        contextualEditingCompositionId: ((_a = context.previewData) == null ? void 0 : _a.isUniformContextualEditing) ? (_b = context.previewData) == null ? void 0 : _b.compositionId : void 0,
         resolvedUrl: context.resolvedUrl,
         // auto engage draft content when in next preview mode
         // (can override with explicit setting of request options)'
@@ -270,12 +270,12 @@ var withUniformGetStaticProps = (options) => {
     defaultHandleNotFound,
     defaultHandleRedirect,
     parseContext(context) {
-      var _a, _b;
+      var _a, _b, _c;
       return {
-        contextualEditingCompositionId: (_a = context.previewData) == null ? void 0 : _a.compositionId,
+        contextualEditingCompositionId: ((_a = context.previewData) == null ? void 0 : _a.isUniformContextualEditing) ? (_b = context.previewData) == null ? void 0 : _b.compositionId : void 0,
         resolvedUrl: resolveSlugFromParams({
           params: context.params,
-          param: (_b = options == null ? void 0 : options.param) != null ? _b : "route"
+          param: (_c = options == null ? void 0 : options.param) != null ? _c : "route"
         }),
         // auto engage draft content when in next preview mode
         // (can override with explicit setting of request options)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniformdev/canvas-next",
-  "version": "19.55.1-alpha.8+02b3f0ddb",
+  "version": "19.56.1-alpha.10+4656b6da5",
   "description": "Next.js SDK for Uniform Canvas",
   "license": "SEE LICENSE IN LICENSE.txt",
   "main": "./dist/index.js",
@@ -67,11 +67,11 @@
     "document": "api-extractor run --local"
   },
   "dependencies": {
-    "@uniformdev/canvas": "19.55.1-alpha.8+02b3f0ddb",
-    "@uniformdev/canvas-react": "19.55.1-alpha.8+02b3f0ddb",
-    "@uniformdev/project-map": "19.55.1-alpha.8+02b3f0ddb",
-    "@uniformdev/redirect": "19.55.1-alpha.8+02b3f0ddb",
-    "@uniformdev/richtext": "19.55.1-alpha.8+02b3f0ddb",
+    "@uniformdev/canvas": "19.56.1-alpha.10+4656b6da5",
+    "@uniformdev/canvas-react": "19.56.1-alpha.10+4656b6da5",
+    "@uniformdev/project-map": "19.56.1-alpha.10+4656b6da5",
+    "@uniformdev/redirect": "19.56.1-alpha.10+4656b6da5",
+    "@uniformdev/richtext": "19.56.1-alpha.10+4656b6da5",
     "colorette": "2.0.20"
   },
   "peerDependencies": {
@@ -91,5 +91,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "02b3f0ddb80a99d95d2f69cab42013682d763ca8"
+  "gitHead": "4656b6da55c78e7e793f785739cd26cd252f77d4"
 }