@yuneta/gobj-ui 7.23.165 → 7.23.166

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +1 -1
  2. package/vite-plugin-yuneta-html.js +7 -0
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@yuneta/gobj-ui",
3
- "version": "7.23.165",
3
+ "version": "7.23.166",
4
4
  "type": "module",
5
5
  "main": "dist/gobj-ui.cjs.js",
6
6
  "module": "dist/gobj-ui.es.js",
package/vite-plugin-yuneta-html.js CHANGED
@@ -98,7 +98,14 @@ export function yunetaHtmlPlugin(options = {}) {
98
98
  worker-src 'self' blob:;
99
99
  child-src 'self' blob:;
100
100
  img-src 'self' data: blob:;
101
+ media-src 'self' data: blob:;
101
102
  font-src 'self' data:;">`;
103
+ /* media-src: a treedb `file` column shows video and audio
104
+ * too (yui_asset.js). A picked file is previewed from a
105
+ * blob: url and a stored one arrives as a data: url when
106
+ * no web server signs one. Without the directive both fell
107
+ * back to default-src 'self' and the browser refused them,
108
+ * while the same bytes as an image or a PDF showed. */
102
109
  }
103
110
 
104
111
  /*------------------------------------------*