phoenix_live_view 1.1.30 → 1.1.32

package/priv/static/phoenix_live_view.js

@@ -189,7 +189,7 @@ var LiveView = (() => {
     }
     upload() {
       this.uploadChannel.onError((reason) => this.error(reason));
-      this.uploadChannel.join().receive("ok", (_data) => this.readNextChunk()).receive("error", (reason) => this.error(reason));
+      this.uploadChannel.join().receive("ok", (_data) => this.readNextChunk()).receive("error", ({ reason }) => this.error(reason));
     }
     isDone() {
       return this.offset >= this.entry.file.size;
@@ -232,6 +232,21 @@ var LiveView = (() => {
 
   // js/phoenix_live_view/utils.js
   var logError = (msg, obj) => console.error && console.error(msg, obj);
+  var ensureSameOrigin = (href, kind) => {
+    let url;
+    try {
+      url = new URL(href, window.location.href);
+    } catch (e) {
+      throw new Error(
+        `expected ${kind} destination to be a valid URL, got: ${href}`
+      );
+    }
+    if (url.origin !== window.location.origin) {
+      throw new Error(
+        `cannot ${kind} to "${href}" because its origin does not match the current origin "${window.location.origin}". Use window.location directly for cross-origin navigation.`
+      );
+    }
+  };
   var isCid = (cid) => {
     const type = typeof cid;
     return type === "number" || type === "string" && /^(0|[1-9]\d*)$/.test(cid);
@@ -652,7 +667,9 @@ var LiveView = (() => {
           if (this.once(el, "bind-debounce")) {
             el.addEventListener("blur", () => {
               clearTimeout(this.private(el, THROTTLED));
-              this.triggerCycle(el, DEBOUNCE_TRIGGER);
+              if (asyncFilter()) {
+                this.triggerCycle(el, DEBOUNCE_TRIGGER);
+              }
             });
           }
       }
@@ -2760,7 +2777,7 @@ removing illegal node: "${(childNode.outerHTML || childNode.nodeValue).trim()}"
     transitionPendingRemoves() {
       const { pendingRemoves, liveSocket } = this;
       if (pendingRemoves.length > 0) {
-        liveSocket.transitionRemoves(pendingRemoves, () => {
+        liveSocket.transitionRemoves(pendingRemoves, this.view, () => {
           pendingRemoves.forEach((el) => {
             const child = dom_default.firstPhxChild(el);
             if (child) {
@@ -3901,6 +3918,7 @@ removing illegal node: "${(childNode.outerHTML || childNode.nodeValue).trim()}"
         });
       },
       navigate(href, opts = {}) {
+        ensureSameOrigin(href, "navigate");
         const customEvent = new CustomEvent("phx:exec");
         liveSocket.historyRedirect(
           customEvent,
@@ -3911,6 +3929,7 @@ removing illegal node: "${(childNode.outerHTML || childNode.nodeValue).trim()}"
         );
       },
       patch(href, opts = {}) {
+        ensureSameOrigin(href, "patch");
         const customEvent = new CustomEvent("phx:exec");
         liveSocket.pushHistoryPatch(
           customEvent,
@@ -4449,6 +4468,7 @@ removing illegal node: "${(childNode.outerHTML || childNode.nodeValue).trim()}"
       if (container) {
         const [tag, attrs] = container;
         this.el = dom_default.replaceRootContainer(this.el, tag, attrs);
+        dom_default.putPrivate(this.el, "view", this);
       }
       this.childJoins = 0;
       this.joinPending = true;
@@ -4531,6 +4551,7 @@ removing illegal node: "${(childNode.outerHTML || childNode.nodeValue).trim()}"
     }
     attachTrueDocEl() {
       this.el = dom_default.byId(this.id);
+      dom_default.putPrivate(this.el, "view", this);
       this.el.setAttribute(PHX_ROOT_ID, this.root.id);
     }
     // this is invoked for dead and live views, so we must filter by
@@ -4714,6 +4735,7 @@ removing illegal node: "${(childNode.outerHTML || childNode.nodeValue).trim()}"
       rootEl.setAttribute(PHX_SESSION, this.getSession());
       rootEl.setAttribute(PHX_STATIC, this.getStatic());
       rootEl.setAttribute(PHX_PARENT_ID, this.parent ? this.parent.id : null);
+      dom_default.putPrivate(rootEl, "view", this);
       const formsToRecover = (
         // we go over all forms in the new DOM; because this is only the HTML for the current
         // view, we can be sure that all forms are owned by this view:
@@ -5992,7 +6014,7 @@ removing illegal node: "${(childNode.outerHTML || childNode.nodeValue).trim()}"
     }
     // public
     version() {
-      return "1.1.30";
+      return "1.1.32";
     }
     isProfileEnabled() {
       return this.sessionStorage.getItem(PHX_LV_PROFILE) === "true";
@@ -6272,11 +6294,12 @@ removing illegal node: "${(childNode.outerHTML || childNode.nodeValue).trim()}"
         `[${this.binding("remove")}]`
       ).filter((el) => !dom_default.isChildOfAny(el, stickies));
       const newMainEl = dom_default.cloneNode(this.outgoingMainEl, "");
-      this.main.showLoader(this.loaderTimeout);
-      this.main.destroy();
+      const oldMainView = this.main;
+      oldMainView.showLoader(this.loaderTimeout);
+      oldMainView.destroy();
       this.main = this.newRootView(newMainEl, flash, liveReferer);
       this.main.setRedirect(href);
-      this.transitionRemoves(removeEls);
+      this.transitionRemoves(removeEls, oldMainView);
       this.main.join((joinCount, onDone) => {
         if (joinCount === 1 && this.commitPendingLink(linkRef)) {
           this.requestDOMUpdate(() => {
@@ -6290,7 +6313,7 @@ removing illegal node: "${(childNode.outerHTML || childNode.nodeValue).trim()}"
         }
       });
     }
-    transitionRemoves(elements, callback) {
+    transitionRemoves(elements, view, callback) {
       const removeAttr = this.binding("remove");
       const silenceEvents = (e) => {
         e.preventDefault();
@@ -6300,7 +6323,8 @@ removing illegal node: "${(childNode.outerHTML || childNode.nodeValue).trim()}"
         for (const event of this.boundEventNames) {
           el.addEventListener(event, silenceEvents, true);
         }
-        this.execJS(el, el.getAttribute(removeAttr), "remove");
+        const e = new CustomEvent("phx:exec", { detail: { sourceElement: el } });
+        js_default.exec(e, "remove", el.getAttribute(removeAttr), view, el);
       });
       this.requestDOMUpdate(() => {
         elements.forEach((el) => {
@@ -6323,7 +6347,7 @@ removing illegal node: "${(childNode.outerHTML || childNode.nodeValue).trim()}"
       let view;
       const viewEl = dom_default.closestViewEl(childEl);
       if (viewEl) {
-        view = this.getViewByEl(viewEl);
+        view = dom_default.private(viewEl, "view");
       } else {
         if (!childEl.isConnected) {
           return null;