nodebb-plugin-pdf-secure 1.2.14 → 1.2.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodebb-plugin-pdf-secure",
-  "version": "1.2.14",
+  "version": "1.2.16",
   "description": "Secure PDF viewer plugin for NodeBB - prevents downloading, enables canvas-only rendering with Premium group support",
   "main": "library.js",
   "repository": {

package/static/lib/main.js

@@ -22,6 +22,18 @@
 		});
 	})();
 
+	// Fullscreen API support detection
+	// On touch devices (tablets, mobiles), always use CSS simulated fullscreen.
+	// Native fullscreen has an unblockable browser "scroll-to-exit" gesture on touch devices.
+	// Desktop keeps native fullscreen for the proper OS-level experience.
+	var isTouchDevice = ('ontouchstart' in window) || (navigator.maxTouchPoints > 0);
+	var fullscreenApiSupported = !isTouchDevice && !!(
+		document.documentElement.requestFullscreen ||
+		document.documentElement.webkitRequestFullscreen
+	);
+	var simulatedFullscreenIframe = null;
+	var savedBodyOverflow = '';
+
 	// Loading queue - only load one PDF at a time
 	const loadQueue = [];
 	let isLoading = false;
@@ -67,6 +79,47 @@
 			}
 		}
 
+		// Fullscreen toggle request from iframe viewer
+		if (event.data && event.data.type === 'pdf-secure-fullscreen-toggle') {
+			var sourceIframe = document.querySelector('.pdf-secure-iframe');
+			// Find the specific iframe that sent the message
+			document.querySelectorAll('.pdf-secure-iframe').forEach(function (f) {
+				if (f.contentWindow === event.source) sourceIframe = f;
+			});
+			if (!sourceIframe) return;
+
+			if (fullscreenApiSupported) {
+				// Native fullscreen path
+				var fsEl = document.fullscreenElement || document.webkitFullscreenElement;
+				if (fsEl) {
+					if (document.exitFullscreen) document.exitFullscreen();
+					else if (document.webkitExitFullscreen) document.webkitExitFullscreen();
+				} else {
+					if (sourceIframe.requestFullscreen) sourceIframe.requestFullscreen().catch(function () { });
+					else if (sourceIframe.webkitRequestFullscreen) sourceIframe.webkitRequestFullscreen();
+				}
+			} else {
+				// Simulated fullscreen path (iOS Safari / Chrome)
+				if (simulatedFullscreenIframe) {
+					exitSimulatedFullscreen();
+				} else {
+					enterSimulatedFullscreen(sourceIframe);
+				}
+			}
+		}
+
+		// Fullscreen state query from iframe
+		if (event.data && event.data.type === 'pdf-secure-fullscreen-query') {
+			var fsActive = !!(document.fullscreenElement || document.webkitFullscreenElement) ||
+				(simulatedFullscreenIframe !== null);
+			if (event.source) {
+				event.source.postMessage({
+					type: 'pdf-secure-fullscreen-state',
+					isFullscreen: fsActive
+				}, event.origin);
+			}
+		}
+
 		// Viewer asking for cached buffer
 		if (event.data && event.data.type === 'pdf-secure-cache-request') {
 			const { filename } = event.data;
@@ -93,6 +146,108 @@
 		}
 	});
 
+	// Forward fullscreen state changes to all viewer iframes
+	function notifyFullscreenChange() {
+		var fsActive = !!(document.fullscreenElement || document.webkitFullscreenElement);
+		if (fsActive) {
+			document.body.style.overscrollBehavior = 'none';
+			document.body.style.overflow = 'hidden';
+		} else {
+			document.body.style.overscrollBehavior = '';
+			document.body.style.overflow = '';
+		}
+		document.querySelectorAll('.pdf-secure-iframe').forEach(function (f) {
+			if (f.contentWindow) {
+				f.style.overscrollBehavior = 'none';
+				f.contentWindow.postMessage({
+					type: 'pdf-secure-fullscreen-state',
+					isFullscreen: fsActive
+				}, window.location.origin);
+			}
+		});
+	}
+	document.addEventListener('fullscreenchange', notifyFullscreenChange);
+	document.addEventListener('webkitfullscreenchange', notifyFullscreenChange);
+
+	// Touch handler to block parent scroll during simulated fullscreen
+	function parentFullscreenTouchHandler(e) {
+		e.preventDefault();
+	}
+
+	// Enter CSS simulated fullscreen (for iOS Safari/Chrome)
+	function enterSimulatedFullscreen(iframe) {
+		if (simulatedFullscreenIframe) return; // already in simulated fullscreen
+		simulatedFullscreenIframe = iframe;
+
+		// Save original iframe styles
+		iframe._savedStyle = {
+			position: iframe.style.position,
+			top: iframe.style.top,
+			left: iframe.style.left,
+			width: iframe.style.width,
+			height: iframe.style.height,
+			zIndex: iframe.style.zIndex
+		};
+
+		// Apply fullscreen styles
+		iframe.style.position = 'fixed';
+		iframe.style.top = '0';
+		iframe.style.left = '0';
+		iframe.style.width = '100vw';
+		iframe.style.height = '100vh';
+		iframe.style.zIndex = '2147483647';
+
+		// Lock body scroll
+		savedBodyOverflow = document.body.style.overflow;
+		document.body.style.overflow = 'hidden';
+		document.body.style.overscrollBehavior = 'none';
+
+		// Block touch scroll on parent
+		document.addEventListener('touchmove', parentFullscreenTouchHandler, { passive: false });
+
+		// Notify iframe it is now fullscreen
+		if (iframe.contentWindow) {
+			iframe.contentWindow.postMessage({
+				type: 'pdf-secure-fullscreen-state',
+				isFullscreen: true
+			}, window.location.origin);
+		}
+	}
+
+	// Exit CSS simulated fullscreen
+	function exitSimulatedFullscreen() {
+		if (!simulatedFullscreenIframe) return;
+		var iframe = simulatedFullscreenIframe;
+		simulatedFullscreenIframe = null;
+
+		// Restore original iframe styles
+		if (iframe._savedStyle) {
+			iframe.style.position = iframe._savedStyle.position;
+			iframe.style.top = iframe._savedStyle.top;
+			iframe.style.left = iframe._savedStyle.left;
+			iframe.style.width = iframe._savedStyle.width;
+			iframe.style.height = iframe._savedStyle.height;
+			iframe.style.zIndex = iframe._savedStyle.zIndex;
+			delete iframe._savedStyle;
+		}
+
+		// Restore body scroll
+		document.body.style.overflow = savedBodyOverflow;
+		document.body.style.overscrollBehavior = '';
+		savedBodyOverflow = '';
+
+		// Remove parent touch block
+		document.removeEventListener('touchmove', parentFullscreenTouchHandler);
+
+		// Notify iframe it is no longer fullscreen
+		if (iframe.contentWindow) {
+			iframe.contentWindow.postMessage({
+				type: 'pdf-secure-fullscreen-state',
+				isFullscreen: false
+			}, window.location.origin);
+		}
+	}
+
 	async function processQueue() {
 		if (isLoading || loadQueue.length === 0) return;
 
@@ -124,6 +279,8 @@
 			loadQueue.length = 0;
 			isLoading = false;
 			currentResolver = null;
+			// Exit simulated fullscreen on SPA navigation
+			exitSimulatedFullscreen();
 			interceptPdfLinks();
 		});
 	} catch (err) {
@@ -278,6 +435,7 @@
 			iframe.src = config.relative_path + '/plugins/pdf-secure/viewer?file=' + encodeURIComponent(filename);
 			iframe.setAttribute('frameborder', '0');
 			iframe.setAttribute('allowfullscreen', 'true');
+			iframe.setAttribute('allow', 'fullscreen');
 
 			// Store resolver for postMessage callback
 			currentResolver = function () {

package/static/viewer.html

@@ -2753,7 +2753,7 @@
                         const syntheticStart = {
                             currentTarget: svg,
                             touches: [{ clientX: touchStartX, clientY: touchStartYDraw }],
-                            preventDefault: () => {}
+                            preventDefault: () => { }
                         };
                         startDraw(syntheticStart, pageNum);
                         // Then immediately draw to current position for continuity
@@ -2768,7 +2768,7 @@
                         const syntheticStart = {
                             currentTarget: svg,
                             touches: [{ clientX: touchStartX, clientY: touchStartYDraw }],
-                            preventDefault: () => {}
+                            preventDefault: () => { }
                         };
                         startDraw(syntheticStart, pageNum);
                         stopDraw(pageNum);
@@ -4461,25 +4461,34 @@
             // ERGONOMIC FEATURES
             // ==========================================
 
-            // Fullscreen toggle function (with webkit fallback for iOS Safari)
+            // Fullscreen: track state (parent-managed when in iframe)
+            let isFullscreen = false;
+            const inIframe = window.self !== window.top;
+
             function toggleFullscreen() {
-                const fsEl = document.fullscreenElement || document.webkitFullscreenElement;
-                if (fsEl) {
-                    if (document.exitFullscreen) document.exitFullscreen();
-                    else if (document.webkitExitFullscreen) document.webkitExitFullscreen();
+                if (inIframe) {
+                    // In iframe: ask parent to fullscreen the iframe element
+                    // Parent manages fullscreen → more stable on tablets
+                    window.parent.postMessage({ type: 'pdf-secure-fullscreen-toggle' }, '*');
                 } else {
-                    const el = document.documentElement;
-                    if (el.requestFullscreen) el.requestFullscreen().catch(() => { });
-                    else if (el.webkitRequestFullscreen) el.webkitRequestFullscreen();
+                    // Standalone: use local fullscreen
+                    const fsEl = document.fullscreenElement || document.webkitFullscreenElement;
+                    if (fsEl) {
+                        if (document.exitFullscreen) document.exitFullscreen();
+                        else if (document.webkitExitFullscreen) document.webkitExitFullscreen();
+                    } else {
+                        const el = document.documentElement;
+                        if (el.requestFullscreen) el.requestFullscreen().catch(() => { });
+                        else if (el.webkitRequestFullscreen) el.webkitRequestFullscreen();
+                    }
                 }
             }
 
-            // Update fullscreen button icon
+            // Update fullscreen button icon based on state
             function updateFullscreenIcon() {
                 const icon = document.getElementById('fullscreenIcon');
                 const btn = document.getElementById('fullscreenBtn');
-                const fsEl = document.fullscreenElement || document.webkitFullscreenElement;
-                if (fsEl) {
+                if (isFullscreen) {
                     icon.innerHTML = '<path d="M5 16h3v3h2v-5H5v2zm3-8H5v2h5V5H8v3zm6 11h2v-3h3v-2h-5v5zm2-11V5h-2v5h5V8h-3z"/>';
                     btn.classList.add('active');
                 } else {
@@ -4488,8 +4497,37 @@
                 }
             }
 
-            document.addEventListener('fullscreenchange', updateFullscreenIcon);
-            document.addEventListener('webkitfullscreenchange', updateFullscreenIcon);
+            // Apply touch restrictions when entering/exiting fullscreen
+            function applyFullscreenTouchRestrictions() {
+                if (isFullscreen) {
+                    document.documentElement.style.touchAction = 'pan-y pinch-zoom';
+                    document.documentElement.style.overscrollBehavior = 'none';
+                } else {
+                    document.documentElement.style.touchAction = '';
+                    document.documentElement.style.overscrollBehavior = '';
+                }
+            }
+
+            // Listen for fullscreen state from parent (iframe mode)
+            window.addEventListener('message', (event) => {
+                if (event.data && event.data.type === 'pdf-secure-fullscreen-state') {
+                    isFullscreen = event.data.isFullscreen;
+                    updateFullscreenIcon();
+                    applyFullscreenTouchRestrictions();
+                }
+            });
+
+            // Local fullscreen events (standalone mode)
+            document.addEventListener('fullscreenchange', () => {
+                isFullscreen = !!(document.fullscreenElement || document.webkitFullscreenElement);
+                updateFullscreenIcon();
+                applyFullscreenTouchRestrictions();
+            });
+            document.addEventListener('webkitfullscreenchange', () => {
+                isFullscreen = !!(document.fullscreenElement || document.webkitFullscreenElement);
+                updateFullscreenIcon();
+                applyFullscreenTouchRestrictions();
+            });
 
             // Fullscreen button click
             document.getElementById('fullscreenBtn').onclick = () => toggleFullscreen();
@@ -4781,11 +4819,21 @@
                     const touchY = e.touches[0].clientY;
                     const deltaY = touchStartY - touchY; // positive = scrolling down
 
-                    const atTop = container.scrollTop <= 0;
-                    const atBottom = container.scrollTop + container.clientHeight >= container.scrollHeight - 1;
+                    const BUFFER = 5; // px buffer to catch near-boundary gestures
+                    const atTop = container.scrollTop <= BUFFER;
+                    const atBottom = container.scrollTop + container.clientHeight >= container.scrollHeight - 1 - BUFFER;
 
-                    if ((atTop && deltaY < 0) || (atBottom && deltaY > 0)) {
-                        e.preventDefault();
+                    // In fullscreen, use buffer; outside fullscreen, only block at exact boundary
+                    if (isFullscreen) {
+                        if ((atTop && deltaY < 0) || (atBottom && deltaY > 0)) {
+                            e.preventDefault();
+                        }
+                    } else {
+                        const atTopExact = container.scrollTop <= 0;
+                        const atBottomExact = container.scrollTop + container.clientHeight >= container.scrollHeight - 1;
+                        if ((atTopExact && deltaY < 0) || (atBottomExact && deltaY > 0)) {
+                            e.preventDefault();
+                        }
                     }
                     touchStartY = touchY;
                 }, { passive: false });
@@ -4802,17 +4850,20 @@
                 document.addEventListener('touchmove', (e) => {
                     if (e.touches.length !== 1) return;
 
-                    // Only prevent when in fullscreen
-                    const fsEl = document.fullscreenElement || document.webkitFullscreenElement;
-                    if (!fsEl) return;
+                    // Only prevent when in fullscreen (isFullscreen works in both iframe and standalone)
+                    if (!isFullscreen) return;
 
                     const touchY = e.touches[0].clientY;
                     const deltaY = docTouchStartY - touchY;
-                    const atTop = container.scrollTop <= 0;
-                    const atBottom = container.scrollTop + container.clientHeight >= container.scrollHeight - 1;
 
-                    // Block pull-down at top and pull-up at bottom in fullscreen
-                    if ((atTop && deltaY < 0) || (atBottom && deltaY > 0)) {
+                    const BUFFER = 5; // px buffer to catch near-boundary gestures
+                    const atTop = container.scrollTop <= BUFFER;
+                    const atBottom = container.scrollTop + container.clientHeight >= container.scrollHeight - 1 - BUFFER;
+
+                    // If content fits entirely (no scroll needed), block all overscroll
+                    const contentFits = container.scrollHeight <= container.clientHeight + 1;
+
+                    if (contentFits || (atTop && deltaY < 0) || (atBottom && deltaY > 0)) {
                         e.preventDefault();
                     }
                     docTouchStartY = touchY;