dockview-core 6.0.7 → 6.2.1

package/dist/package/main.esm.mjs

@@ -1,6 +1,6 @@
 /**
  * dockview-core
- * @version 6.0.7
+ * @version 6.2.1
  * @link https://github.com/mathuo/dockview
  * @license MIT
  */
@@ -72,6 +72,63 @@ function getPaneData() {
     return paneTransfer.getData(PaneTransfer.prototype)[0];
 }
 
+var Disposable;
+(function (Disposable) {
+    Disposable.NONE = {
+        dispose: () => {
+            // noop
+        },
+    };
+    function from(func) {
+        return {
+            dispose: () => {
+                func();
+            },
+        };
+    }
+    Disposable.from = from;
+})(Disposable || (Disposable = {}));
+class CompositeDisposable {
+    get isDisposed() {
+        return this._isDisposed;
+    }
+    constructor(...args) {
+        this._isDisposed = false;
+        this._disposables = new Set(args);
+    }
+    addDisposables(...args) {
+        args.forEach((arg) => this._disposables.add(arg));
+    }
+    removeDisposable(disposable) {
+        this._disposables.delete(disposable);
+    }
+    dispose() {
+        if (this._isDisposed) {
+            return;
+        }
+        this._isDisposed = true;
+        this._disposables.forEach((arg) => arg.dispose());
+        this._disposables.clear();
+    }
+}
+class MutableDisposable {
+    constructor() {
+        this._disposable = Disposable.NONE;
+    }
+    set value(disposable) {
+        if (this._disposable) {
+            this._disposable.dispose();
+        }
+        this._disposable = disposable;
+    }
+    dispose() {
+        if (this._disposable) {
+            this._disposable.dispose();
+            this._disposable = Disposable.NONE;
+        }
+    }
+}
+
 var Event;
 (function (Event) {
     Event.any = (...children) => {
@@ -159,6 +216,7 @@ class Emitter {
         this.options = options;
         this._listeners = [];
         this._disposed = false;
+        this._pauseTokens = new Set();
     }
     get event() {
         if (!this._event) {
@@ -187,6 +245,11 @@ class Emitter {
     }
     fire(e) {
         var _a;
+        if (this._pauseTokens.size > 0) {
+            // while paused, the event is dropped entirely — `_last` is not
+            // updated, so replay subscribers won't see values fired during a pause
+            return;
+        }
         if ((_a = this.options) === null || _a === void 0 ? void 0 : _a.replay) {
             this._last = e;
         }
@@ -194,6 +257,11 @@ class Emitter {
             listener.callback(e);
         }
     }
+    pause() {
+        const token = {};
+        this._pauseTokens.add(token);
+        return Disposable.from(() => this._pauseTokens.delete(token));
+    }
     dispose() {
         if (!this._disposed) {
             this._disposed = true;
@@ -275,63 +343,6 @@ class AsapEvent {
     }
 }
 
-var Disposable;
-(function (Disposable) {
-    Disposable.NONE = {
-        dispose: () => {
-            // noop
-        },
-    };
-    function from(func) {
-        return {
-            dispose: () => {
-                func();
-            },
-        };
-    }
-    Disposable.from = from;
-})(Disposable || (Disposable = {}));
-class CompositeDisposable {
-    get isDisposed() {
-        return this._isDisposed;
-    }
-    constructor(...args) {
-        this._isDisposed = false;
-        this._disposables = new Set(args);
-    }
-    addDisposables(...args) {
-        args.forEach((arg) => this._disposables.add(arg));
-    }
-    removeDisposable(disposable) {
-        this._disposables.delete(disposable);
-    }
-    dispose() {
-        if (this._isDisposed) {
-            return;
-        }
-        this._isDisposed = true;
-        this._disposables.forEach((arg) => arg.dispose());
-        this._disposables.clear();
-    }
-}
-class MutableDisposable {
-    constructor() {
-        this._disposable = Disposable.NONE;
-    }
-    set value(disposable) {
-        if (this._disposable) {
-            this._disposable.dispose();
-        }
-        this._disposable = disposable;
-    }
-    dispose() {
-        if (this._disposable) {
-            this._disposable.dispose();
-            this._disposable = Disposable.NONE;
-        }
-    }
-}
-
 class OverflowObserver extends CompositeDisposable {
     constructor(el) {
         super();
@@ -2407,34 +2418,45 @@ class Gridview {
              */
             maxmizedViewLocation = getGridLocation(maximizedView.element);
         }
-        if (this.hasMaximizedView()) {
-            /**
-             * the saved layout cannot be in its maxmized state otherwise all of the underlying
-             * view dimensions will be wrong
-             *
-             * To counteract this we temporaily remove the maximized view to compute the serialized output
-             * of the grid before adding back the maxmized view as to not alter the layout from the users
-             * perspective when `.toJSON()` is called
-             */
-            this.exitMaximizedView();
-        }
-        const root = serializeBranchNode(this.getView(), this.orientation);
-        const resullt = {
-            root,
-            width: this.width,
-            height: this.height,
-            orientation: this.orientation,
-        };
-        if (maxmizedViewLocation) {
-            resullt.maximizedNode = {
-                location: maxmizedViewLocation,
+        /**
+         * We pause the onDidMaximizedNodeChange events because this method needs to
+         * call `this.exitMaximizedView()`. We don't want this to invoke any listeners
+         * since we undo it before leaving this method
+         */
+        const pauseToken = this._onDidMaximizedNodeChange.pause();
+        try {
+            if (this.hasMaximizedView()) {
+                /**
+                 * the saved layout cannot be in its maxmized state otherwise all of the underlying
+                 * view dimensions will be wrong
+                 *
+                 * To counteract this we temporaily remove the maximized view to compute the serialized output
+                 * of the grid before adding back the maxmized view as to not alter the layout from the users
+                 * perspective when `.toJSON()` is called
+                 */
+                this.exitMaximizedView();
+            }
+            const root = serializeBranchNode(this.getView(), this.orientation);
+            const result = {
+                root,
+                width: this.width,
+                height: this.height,
+                orientation: this.orientation,
             };
+            if (maxmizedViewLocation) {
+                result.maximizedNode = {
+                    location: maxmizedViewLocation,
+                };
+            }
+            if (maximizedView) {
+                // replace any maximzied view that was removed for serialization purposes
+                this.maximizeView(maximizedView);
+            }
+            return result;
         }
-        if (maximizedView) {
-            // replace any maximzied view that was removed for serialization purposes
-            this.maximizeView(maximizedView);
+        finally {
+            pauseToken.dispose();
         }
-        return resullt;
     }
     dispose() {
         this.disposable.dispose();
@@ -11376,8 +11398,12 @@ class OverlayRenderContainer extends CompositeDisposable {
             if (panel.api.isVisible) {
                 this.positionCache.invalidate();
                 resize();
+                focusContainer.style.pointerEvents = '';
+            }
+            else {
+                focusContainer.style.visibility = 'hidden';
+                focusContainer.style.pointerEvents = 'none';
             }
-            focusContainer.style.display = panel.api.isVisible ? '' : 'none';
         };
         const observerDisposable = new MutableDisposable();
         const correctLayerPosition = () => {
@@ -11413,7 +11439,7 @@ class OverlayRenderContainer extends CompositeDisposable {
          * the dnd events for the expect behaviours to continue to occur in terms of dnd
          *
          * the dnd observer does not need to be conditional on whether the panel is visible since
-         * non-visible panels are 'display: none' and in such case the dnd observer will not fire.
+         * non-visible panels have 'pointer-events: none' and in such case the dnd observer will not fire.
          */
         new DragAndDropObserver(focusContainer, {
             onDragEnd: (e) => {
@@ -11507,6 +11533,25 @@ typeof SuppressedError === "function" ? SuppressedError : function (error, suppr
     return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
 };
 
+/**
+ * Reject popout URLs that aren't same-origin http(s). Blocks `javascript:`,
+ * `data:`, `blob:`, `vbscript:`, and cross-origin URLs that would otherwise
+ * execute in a context the browser still associates with the opener via
+ * `window.opener`.
+ */
+function assertSameOriginPopoutUrl(url) {
+    let resolved;
+    try {
+        resolved = new URL(url, window.location.href);
+    }
+    catch (_a) {
+        throw new Error(`dockview: invalid popout URL: ${url}`);
+    }
+    const protocolOk = resolved.protocol === 'http:' || resolved.protocol === 'https:';
+    if (!protocolOk || resolved.origin !== window.location.origin) {
+        throw new Error(`dockview: popout URL must be same-origin http(s); got: ${url}`);
+    }
+}
 class PopoutWindow extends CompositeDisposable {
     get window() {
         var _a, _b;
@@ -11558,6 +11603,7 @@ class PopoutWindow extends CompositeDisposable {
                 throw new Error('instance of popout window is already open');
             }
             const url = `${this.options.url}`;
+            assertSameOriginPopoutUrl(url);
             const features = Object.entries({
                 top: this.options.top,
                 left: this.options.left,

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "dockview-core",
-    "version": "6.0.7",
+    "version": "6.2.1",
     "description": "Zero dependency layout manager supporting tabs, groups, grids and splitviews for vanilla TypeScript",
     "keywords": [
         "splitview",