solara-ui 1.34.0__tar.gz → 1.35.0__tar.gz

{solara_ui-1.34.0 → solara_ui-1.35.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: solara-ui
-Version: 1.34.0
+Version: 1.35.0
 Dynamic: Summary
 Project-URL: Home, https://www.github.com/widgetti/solara
 Project-URL: Documentation, https://solara.dev

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/__init__.py

@@ -1,6 +1,6 @@
 """Build webapps using IPywidgets"""
 
-__version__ = "1.34.0"
+__version__ = "1.35.0"
 github_url = "https://github.com/widgetti/solara"
 git_branch = "master"
 

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/components/applayout.py

@@ -342,7 +342,7 @@ def AppLayout(
                     ):
                         if not show_app_bar:
                             AppIcon(sidebar_open, on_click=lambda: set_sidebar_open(not sidebar_open))
-                        v.Html(tag="div", children=children_sidebar, style_="padding: 12px;").meta(ref="sidebar-content")
+                        v.Html(tag="div", children=children_sidebar, style_="padding: 12px; height: 100%").meta(ref="sidebar-content")
             if show_app_bar:
                 # if hide_on_scroll is True, and we have a little bit of scrolling, vuetify seems to act strangely
                 # when scrolling (on @mariobuikhuizen/vuetify v2.2.26-rc.0

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/components/echarts.vue

@@ -93,10 +93,7 @@ module.exports = {
         document.head.appendChild(script);
       });
     },
-    getBaseUrl() {
-      if (window.solara && window.solara.rootPath !== undefined) {
-        return solara.rootPath + "/";
-      }
+    getJupyterBaseUrl() {
       // if base url is set, we use ./ for relative paths compared to the base url
       if (document.getElementsByTagName("base").length) {
         return "./";
@@ -113,10 +110,7 @@ module.exports = {
       return base;
     },
     getCdn() {
-      return (
-        (typeof solara_cdn !== "undefined" && solara_cdn) ||
-        `${this.getBaseUrl()}_solara/cdn`
-      );
+      return window.solara ? window.solara.cdn : `${this.getJupyterBaseUrl()}_solara/cdn`
     },
   },
 };

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/components/file_browser.py

@@ -51,12 +51,12 @@ class FileListWidget(vy.VuetifyTemplate):
 @solara.component
 def FileBrowser(
     directory: Union[None, str, Path, solara.Reactive[Path]] = None,
-    on_directory_change: Callable[[Path], None] = None,
-    on_path_select: Callable[[Optional[Path]], None] = None,
-    on_file_open: Callable[[Path], None] = None,
+    on_directory_change: Optional[Callable[[Path], None]] = None,
+    on_path_select: Optional[Callable[[Optional[Path]], None]] = None,
+    on_file_open: Optional[Callable[[Path], None]] = None,
     filter: Callable[[Path], bool] = lambda x: True,
     directory_first: bool = False,
-    on_file_name: Callable[[str], None] = None,
+    on_file_name: Optional[Callable[[str], None]] = None,
     start_directory=None,
     can_select=False,
 ):
@@ -98,11 +98,11 @@ def FileBrowser(
     scroll_pos, set_scroll_pos = solara.use_state(0)
     selected, set_selected = solara.use_state(None)
 
-    def change_dir(new_dir: str):
+    def change_dir(new_dir: Path):
         if os.access(new_dir, os.R_OK):
-            current_dir.value = Path(new_dir)
+            current_dir.value = new_dir
             if on_directory_change:
-                on_directory_change(Path(new_dir))
+                on_directory_change(new_dir)
             set_warning(None)
             return True
         else:
@@ -114,8 +114,7 @@ def FileBrowser(
                 on_path_select(None)
             return
         if item["name"] == "..":
-            current_dir_str = str(current_dir.value)
-            new_dir = current_dir_str[: current_dir_str.rfind(os.path.sep)]
+            new_dir = current_dir.value.parent
             action_change_directory = (can_select and double_click) or (not can_select and not double_click)
             if action_change_directory and change_dir(new_dir):
                 if scroll_pos_stack:
@@ -128,17 +127,17 @@ def FileBrowser(
                     on_path_select(None)
             if can_select and not double_click:
                 if on_path_select:
-                    on_path_select(Path(new_dir))
+                    on_path_select(new_dir)
             return
 
-        path = os.path.join(current_dir.value, item["name"])
+        path = current_dir.value / item["name"]
         is_file = item["is_file"]
         if (can_select and double_click) or (not can_select and not double_click):
             if is_file:
                 if on_file_open:
-                    on_file_open(Path(path))
+                    on_file_open(path)
                 if on_file_name is not None:
-                    on_file_name(path)
+                    on_file_name(str(path))
             else:
                 if change_dir(path):
                     set_scroll_pos_stack(scroll_pos_stack + [scroll_pos])
@@ -149,7 +148,7 @@ def FileBrowser(
                 on_path_select(None)
         elif can_select and not double_click:
             if on_path_select:
-                on_path_select(Path(path))
+                on_path_select(path)
         else:  # not can_select and double_click is ignored
             raise RuntimeError("Combination should not happen")  # pragma: no cover
 

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/components/markdown.py

@@ -119,7 +119,8 @@ module.exports = {
                 href = location.pathname + href.substr(1);
                 a.attributes['href'].href = href;
             }
-            if(href.startsWith("./") || href.startsWith("/")) {
+            let authLink = href.starswith("/_solara/auth/");
+            if( (href.startsWith("./") || href.startsWith("/")) && !authLink) {
                 a.onclick = e => {
                     console.log("clicked", href)
                     if(href.startsWith("./")) {
@@ -184,10 +185,7 @@ module.exports = {
                 document.head.appendChild(script);
             });
         },
-        getBaseUrl() {
-            if (window.solara && window.solara.rootPath !== undefined) {
-                return solara.rootPath + "/";
-            }
+        getJupyterBaseUrl() {
             // if base url is set, we use ./ for relative paths compared to the base url
             if (document.getElementsByTagName("base").length) {
                 return "./";
@@ -204,7 +202,7 @@ module.exports = {
             return base
         },
         getCdn() {
-            return this.cdn || (typeof solara_cdn !== "undefined" && solara_cdn) || `${this.getBaseUrl()}_solara/cdn`;
+            return this.cdn || (window.solara ? window.solara.cdn : `${this.getJupyterBaseUrl()}_solara/cdn`);
         }
     },
     updated() {

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/components/markdown_editor.vue

@@ -247,10 +247,7 @@ module.exports = {
         document.head.appendChild(script);
       });
     },
-    getBaseUrl() {
-      if (window.solara && window.solara.rootPath !== undefined) {
-        return solara.rootPath + "/";
-      }
+    getJupyterBaseUrl() {
       // if base url is set, we use ./ for relative paths compared to the base url
       if (document.getElementsByTagName("base").length) {
         return "./";
@@ -267,7 +264,7 @@ module.exports = {
       return base
     },
     getCdn() {
-      return (typeof solara_cdn !== "undefined" && solara_cdn) || `${this.getBaseUrl()}_solara/cdn`;
+      return window.solara ? window.solara.cdn : `${this.getJupyterBaseUrl()}_solara/cdn`;
     },
   },
 };

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/components/sql_code.vue

@@ -83,10 +83,7 @@
           document.head.appendChild(script);
         });
       },
-      getBaseUrl() {
-        if (window.solara && window.solara.rootPath !== undefined) {
-          return solara.rootPath + "/";
-        }
+      getJupyterBaseUrl() {
         // if base url is set, we use ./ for relative paths compared to the base url
         if (document.getElementsByTagName("base").length) {
           return document.baseURI;
@@ -103,7 +100,7 @@
         return base
       },
       getCdn() {
-        return (typeof solara_cdn !== "undefined" && solara_cdn) || `${this.getBaseUrl()}_solara/cdn`;
+        return window.solara ? window.solara.cdn : `${this.getJupyterBaseUrl()}_solara/cdn`;
       },
     }
   }

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/server/cdn_helper.py

@@ -1,4 +1,5 @@
 import logging
+import os
 import pathlib
 import shutil
 
@@ -22,7 +23,16 @@ def put_in_cache(base_cache_dir: pathlib.Path, path, data: bytes):
 
 
 def get_from_cache(base_cache_dir: pathlib.Path, path):
-    cache_path = base_cache_dir / path
+    cache_path = pathlib.Path(base_cache_dir / path)
+    # Make sure cache_path is a subdirectory of base_cache_dir
+    # so we don't accidentally read files from the parent directory
+    # which is a security risk.
+    # We use os.path.normpath() because we do not want to follow symlinks
+    # in editable installs, since some packages are symlinked
+    if not os.path.normpath(cache_path).startswith(str(base_cache_dir.resolve())):
+        logger.warning("Trying to read from outside of cache directory: %s is not a subdir of %s", cache_path, base_cache_dir)
+        raise PermissionError("Trying to read from outside of cache directory")
+
     try:
         logger.info("Opening cache file: %s", cache_path)
         return cache_path.read_bytes()

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/server/esm.py

@@ -40,7 +40,7 @@ def get_module_names():
 def create_modules():
     kernel_id = kernel_context.get_current_context().id
     _modules_added = _modules_added_per_kernel[kernel_id]
-    logger.info("define modules %s", _modules)
+    logger.info("create modules %s", _modules)
     widgets = {}
     with lock:
         for name, (module, dependencies) in _modules.items():

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/server/reload.py

@@ -15,6 +15,7 @@ NO_WATCHDOG = False
 try:
     from watchdog.events import FileSystemEventHandler
     from watchdog.observers import Observer
+    import watchdog.events
 except ImportError:
     pass
     NO_WATCHDOG = True
@@ -99,27 +100,35 @@ else:
                 self.observers.append(observer)
                 self.directories.add(directory)
 
+        def on_moved(self, event):
+            logger.debug("Moved event: %s", event)
+            if isinstance(event, watchdog.events.FileMovedEvent):
+                if event.dest_path in self.files:
+                    self._handle_possible_change(event.dest_path)
+
         def on_modified(self, event):
-            super().on_modified(event)
-            logger.debug("Watch event: %s", event)
+            logger.debug("Modified event: %s", event)
             if not event.is_directory:
                 if event.src_path in self.files:
-                    mtime_new = os.path.getmtime(event.src_path)
-                    changed = mtime_new > self.mtimes[event.src_path]
-                    self.mtimes[event.src_path] = mtime_new
-                    if changed:
-                        logger.debug("File modified: %s", event.src_path)
-                        try:
-                            self.on_change(event.src_path)
-                        except:  # noqa
-                            # we are in the watchdog thread here, all we can do is report
-                            # and continue running (otherwise reload stops working)
-                            logger.exception("Error while executing on change handler")
-                    else:
-                        logger.debug("File reported modified, but mtime did not change: %s", event.src_path)
+                    self._handle_possible_change(event.src_path)
                 else:
                     logger.debug("Ignore file modification: %s", event.src_path)
 
+        def _handle_possible_change(self, path: str):
+            mtime_new = os.path.getmtime(path)
+            changed = mtime_new > self.mtimes[path]
+            self.mtimes[path] = mtime_new
+            if changed:
+                logger.debug("File modified: %s", path)
+                try:
+                    self.on_change(path)
+                except:  # noqa
+                    # we are in the watchdog thread here, all we can do is report
+                    # and continue running (otherwise reload stops working)
+                    logger.exception("Error while executing on change handler")
+            else:
+                logger.debug("File reported modified, but mtime did not change: %s", path)
+
     WatcherType = WatcherWatchdog  # type: ignore
 
 

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/server/static/solara_bootstrap.py

@@ -119,7 +119,7 @@ async def main():
     ]
     for dep in requirements:
         await micropip.install(dep, keep_going=True)
-    await micropip.install("/wheels/solara-1.34.0-py2.py3-none-any.whl", keep_going=True)
+    await micropip.install("/wheels/solara-1.35.0-py2.py3-none-any.whl", keep_going=True)
     import solara
 
     el = solara.Warning("lala")

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/server/templates/solara.html.j2

@@ -237,6 +237,11 @@
     {% endif %}
     <script>
         solara.rootPath = {{ root_path | tojson | safe}};
+        solara.cdn = {{ cdn | tojson | safe }};
+        // the vue templates expect it to not have a trailing slash
+        solara.cdn = solara.cdn.replace(/\/$/, '');
+        // keep this for backwards compatibility
+        window.solara_cdn = solara.cdn;
         console.log("rootPath", solara.rootPath);
 
         async function changeThemeCSS(theme) {

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/server/threaded.py

@@ -2,15 +2,24 @@ import logging
 import threading
 import time
 from typing import Optional
+import socket
 
 logger = logging.getLogger("solara.server.threaded")
 
 
+def get_free_port():
+    sock = socket.socket()
+    sock.bind(("", 0))
+    port = sock.getsockname()[1]
+    sock.close()
+    return port
+
+
 class ServerBase(threading.Thread):
     name = "not set"
 
     def __init__(self, port: int, host: str = "localhost", **kwargs):
-        self.port = port
+        self.port = get_free_port() if port == 0 else port
         self.host = host
         self.base_url = f"http://{self.host}:{self.port}"
 

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/test/pytest_plugin.py

@@ -37,6 +37,7 @@ logger = logging.getLogger("solara.pytest_plugin")
 TEST_PORT_START = int(os.environ.get("PORT", "18765")) + 100  # do not interfere with the solara integration tests
 TEST_HOST = solara.server.settings.main.host
 TIMEOUT = float(os.environ.get("SOLARA_PW_TIMEOUT", "18"))
+PYTEST_IPYWIDGETS_SOLARA_APP_WAIT_TIMEOUT = int(os.environ.get("PYTEST_IPYWIDGETS_SOLARA_APP_WAIT_TIMEOUT", "10"))
 
 
 @pytest.fixture(scope="session")
@@ -192,7 +193,7 @@ def _solara_test(solara_server, solara_app, page_session: "playwright.sync_api.P
         run_events[id] = run_event = threading.Event()
         page_session.goto(solara_server.base_url + f"?id={id}")
         try:
-            assert run_event.wait(10)
+            assert run_event.wait(PYTEST_IPYWIDGETS_SOLARA_APP_WAIT_TIMEOUT)
             context = used_contexts[id]
             with context:
                 test_output_warmup = widgets.Output()

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/website/components/algolia_api.vue

@@ -151,10 +151,7 @@ module.exports = {
                 document.head.appendChild(script);
             });
         },
-        getBaseUrl() {
-            if (window.solara && window.solara.rootPath !== undefined) {
-                return solara.rootPath + "/";
-            }
+        getJupyterBaseUrl() {
             // if base url is set, we use ./ for relative paths compared to the base url
             if (document.getElementsByTagName("base").length) {
                 return document.baseURI;
@@ -171,7 +168,7 @@ module.exports = {
             return base
         },
         getCdn() {
-            return (typeof solara_cdn !== "undefined" && solara_cdn) || `${this.getBaseUrl()}_solara/cdn`;
+            return window.solara ? window.solara.cdn : `${this.getJupyterBaseUrl()}_solara/cdn`;
         },
     },
     data(){

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/website/components/sidebar.py

@@ -16,6 +16,7 @@ def Sidebar():
 
     with solara.v.List(expand=True, nav=True, style_="height: 100%; display: flex; flex-direction: column;") as main:
         with solara.v.ListItemGroup(v_model=router.path):
+            # e.g. getting_started, examples, components, api, advanced, faq
             for route in all_routes:
                 if len(route.children) == 1 or route.path == "/":
                     with solara.Link("/documentation/" + route.path if route.path != "/" else "/documentation"):
@@ -24,6 +25,8 @@ def Sidebar():
                                 solara.v.ListItemIcon(children=[solara.v.Icon(children=["mdi-home"])])
                             solara.v.ListItemTitle(style_="padding: 0 20px;", children=[route.label])
                 else:
+                    path_top_level = "/documentation/" + route.path
+                    top_level_expanded = router.path.startswith(path_top_level)
                     with solara.v.ListGroup(
                         v_slots=[
                             {
@@ -34,57 +37,60 @@ def Sidebar():
                                 ),
                             }
                         ],
-                        value=router.path.startswith("/documentation/" + route.path),
+                        value=top_level_expanded,
+                        eager=True,  # better for SEO
                     ):
                         for item in route.children:
-                            if item.path == "/":
-                                continue
+                            label = item.label
+                            if item.path == "/" and route.path in ["examples", "api", "components"]:
+                                # the 'homepage' of the subpage are named Overview
+                                label = "Overview"
+                            path_sub = "/documentation/" + route.path + "/" + item.path
+                            sub_should_be_expanded = router.path.startswith(path_sub)
                             if item.children != [] and any([c.label is not None and c.path != "/" for c in item.children]):
                                 with solara.v.ListGroup(
                                     v_slots=[
                                         {
                                             "name": "activator",
                                             "children": solara.v.ListItemTitle(
-                                                children=[item.label],
+                                                children=[label],
                                             ),
                                         }
                                     ],
                                     sub_group=True,
                                     no_action=True,
-                                    value=router.path.startswith("/documentation/" + route.path + "/" + item.path),
+                                    eager=True,  # better for SEO
+                                    value=sub_should_be_expanded,
                                 ):
                                     for subitem in item.children:
-                                        # skip pages that are only used to demonstrate Link or Router usage
-                                        if subitem.path == "/" or subitem.label is None:
+                                        # skip the 'homepage' of the examples only
+                                        if subitem.path == "/" and route.path not in ["getting_started", "advanced"]:
                                             continue
                                         path = (
-                                            "/documentation/" + route.path + "/" + item.path + "/" + subitem.path
+                                            "/documentation/" + route.path + "/" + item.path + "/" + (subitem.path if subitem.path != "/" else "")
                                             if item.path != "fullscreen"
                                             else "/apps/" + subitem.path
                                         )
                                         with solara.Link(
                                             path,
                                         ):
-                                            with solara.v.ListItem(dense=True, style_="padding: 0 20px;", value=path):
+                                            with solara.v.ListItem(dense=True, style_="margin-left: 40px; padding: 0 20px;", value=path):
                                                 solara.v.ListItemContent(
                                                     children=[subitem.label],
                                                 )
                             else:
-                                with solara.v.ListItemGroup(value="/documentation/" + route.path + "/" + item.path):
-                                    with solara.Link(
-                                        "/documentation/" + route.path + "/" + item.path,
-                                    ):
-                                        with solara.v.ListItem(dense=True, style_="padding: 0 20px;"):
-                                            solara.v.ListItemContent(
-                                                children=[item.label],
-                                            )
-        with solara.v.ListItemGroup():
+                                path = "/documentation/" + route.path + ("/" + item.path if item.path != "/" else "")
+                                with solara.Link(path):
+                                    with solara.v.ListItem(dense=True, style_="padding: 0 20px;", value=path):
+                                        solara.v.ListItemContent(
+                                            children=[label],
+                                        )
             with solara.Link("/contact"):
-                with solara.v.ListItem():
+                with solara.v.ListItem(value="/contact"):
                     solara.v.ListItemIcon(children=[solara.v.Icon(children=["mdi-email"])])
                     solara.v.ListItemTitle(style_="padding: 0 20px;", children=["Contact"])
             with solara.Link("/changelog"):
-                with solara.v.ListItem():
+                with solara.v.ListItem(value="/changelog"):
                     solara.v.ListItemIcon(children=[solara.v.Icon(children=["mdi-history"])])
                     solara.v.ListItemTitle(style_="padding: 0 20px;", children=["Changelog"])
 

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/website/pages/changelog/changelog.md

@@ -1,5 +1,23 @@
 # Solara Changelog
 
+## Version 1.34.1
+
+   * Bug Fix: Using `SOLARA_ASSETS_PROXY=False` (default on [py.cafe](https://py.cafe)) would break grid layout. [#705](https://github.com/widgetti/solara/pull/705)
+   * Bug Fix: Hot reload work in more situations on Linux. [#702](https://github.com/widgetti/solara/pull/702)
+
+
+## Version 1.34.0
+
+   * Feature: Enhancements for Solara `InputDate` and `InputDateRange` components [#672](https://github.com/widgetti/solara/pull/672):
+      * Limiting allowed dates with `min_date` and `max_date` arguments.
+      * Monthly granularity with `date_picker_type="month"`.
+      * `InputDateRange` selection can be sorted in ascending order with `sort` argument.
+   * Bug Fix: Typo in `solara.Tooltip`. [#695](https://github.com/widgetti/solara/pull/695)
+   * Bug Fix: `ipywidgets.Accordion` content was not hidden when closed. [#694](https://github.com/widgetti/solara/pull/694)
+   * Bug Fix: `solara.Tooltip` would break any functionality in it's children that relied on the `blur`, `keydown`, or `focus` events. [#696](https://github.com/widgetti/solara/pull/696)
+   * Bug Fix: Raise an error instead of showing a custom page on 404. Enables custom 404 pages in Solara apps. [#670](https://github.com/widgetti/solara/pull/670)
+   * Bug Fix: Prevent broken installation by restricting Numpy version. [#687](https://github.com/widgetti/solara/pull/687) and [`286e196`](https://github.com/widgetti/solara/commit/286e196ee990af814768d0612b98b5138f5ceb51).
+
 ## Version 1.33.0
 
 ### Details

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/website/pages/documentation/advanced/content/10-howto/30-testing.md

@@ -411,3 +411,7 @@ To configure the ports the socket is bound to when starting the test servers, us
 #### Vuetify warmup
 
 By default, we insert an ipyvuetify widget with an icon into the frontend to force loading all the vuetify assets, such as CSS and fonts. However, if you are using the solara test plugin to test pure ipywidgets or a 3rd ipywidget based party library you might not need this. Disable this vuetify warmup phase by passing the `--no-solara-vuetify-warmup` argument to pytest, or setting the environment variable `SOLARA_TEST_VUETIFY_WARMUP` to a falsey value (e.g. `SOLARA_TEST_VUETIFY_WARMUP=0`).
+
+#### Changing the application wait timeout
+
+By default, we wait for 10 seconds for the browser to connect to the server when the solara server is used for testing. On slower systems, this may be too short. To change this timeout, set the `PYTEST_IPYWIDGETS_SOLARA_APP_WAIT_TIMEOUT` environment variable to the desired value in seconds (e.g. `PYTEST_IPYWIDGETS_SOLARA_APP_WAIT_TIMEOUT=20`).

solara_ui-1.35.0/solara/website/pages/documentation/advanced/content/30-enterprise/00-overview.md

@@ -0,0 +1,7 @@
+# Solara enterprise
+
+Solara enterprise is a not Open Source, but the source code is visible, is free for non-commercial use and installable from pypi.
+
+For commercial use, you require a license. Please [contact](/contact) us for more information.
+
+Solara-enterprise will stay free for non-commercial use and features that are in solara will **not be moved to solara-enterprise**.

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/widgets/vue/gridlayout.vue

@@ -78,10 +78,7 @@ module.exports = {
             document.head.appendChild(script);
           });
         },
-        getBaseUrl() {
-          if (window.solara && window.solara.rootPath !== undefined) {
-                return solara.rootPath + "/";
-          }
+        getJupyterBaseUrl() {
           if (document.getElementsByTagName("base").length) {
             return "./";
           }
@@ -97,7 +94,7 @@ module.exports = {
           return base
         },
         getCdn() {
-          return (typeof solara_cdn !== "undefined" && solara_cdn) || `${this.getBaseUrl()}_solara/cdn`;
+          return window.solara ? window.solara.cdn : `${this.getJupyterBaseUrl()}_solara/cdn`;
         },
     }
 }

{solara_ui-1.34.0 → solara_ui-1.35.0}/solara/widgets/vue/vegalite.vue

@@ -88,10 +88,7 @@ module.exports = {
                 document.head.appendChild(script);
             });
         },
-        getBaseUrl() {
-            if (window.solara && window.solara.rootPath !== undefined) {
-                return solara.rootPath + "/";
-            }
+        getJupyterBaseUrl() {
             // if base url is set, we use ./ for relative paths compared to the base url
             if (document.getElementsByTagName("base").length) {
                 return "./";
@@ -108,7 +105,7 @@ module.exports = {
             return base
         },
         getCdn() {
-            return this.cdn || (typeof solara_cdn !== "undefined" && solara_cdn) || `${this.getBaseUrl()}_solara/cdn`;
+            return this.cdn || (window.solara ? window.solara.cdn : `${this.getJupyterBaseUrl()}_solara/cdn`);
         }
     },
 }

{solara_ui-1.34.0 → solara_ui-1.35.0}/tests/integration/api_test.py

@@ -21,14 +21,14 @@ from playwright.sync_api import expect
 def test_api_markdown_editor(page_session: playwright.sync_api.Page, solara_server, solara_app):
     with solara_app("solara.website.pages"):
         page_session.goto(solara_server.base_url + "/documentation/components/")
-        page_session.locator("text=Markdown Editor").first.click()
+        page_session.locator(".v-card >> text=Markdown Editor").first.click()
         page_session.locator('h1:has-text("Large heading")').wait_for()
 
 
 def test_api_file_browser(page_session: playwright.sync_api.Page, solara_server, solara_app):
     with solara_app("solara.website.pages"):
         page_session.goto(solara_server.base_url + "/documentation/components/")
-        page_session.locator("text=File Browser").first.click()
+        page_session.locator(".v-card >> text=File Browser").first.click()
         page_session.locator("text=You are in directory").wait_for()
 
 

{solara_ui-1.34.0 → solara_ui-1.35.0}/tests/integration/server_test.py

@@ -28,7 +28,7 @@ def test_docs_basics(page_session: playwright.sync_api.Page, solara_server, sola
 
         page_session.locator("text=Search the Solara Documentation").wait_for()
         page_session.locator(".docs-card", has_text="Examples").first.click()
-        page_session.locator("text=Calculator").first.click()
+        page_session.locator(".v-card >> text=Calculator").first.click()
         page_session.locator("text=+/-").wait_for()
         page_session.screenshot(path="tmp/screenshot_calculator.png")
 
@@ -39,7 +39,7 @@ def test_docs_basics(page_session: playwright.sync_api.Page, solara_server, sola
 
         page_session.locator("text=Visualization").first.click()
         page_session.locator("text=Scatter plot using Plotly").first.click()
-        page_session.locator("text=plotly express").first.wait_for()
+        page_session.locator("text=This example shows how to use Plotly").wait_for()
         page_session.screenshot(path="tmp/screenshot_plotly.png")
 
         page_session.locator("text=Plotly Image Annotator").first.click()

{solara_ui-1.34.0 → solara_ui-1.35.0}/tests/unit/cdn_helper_test.py

@@ -2,6 +2,9 @@ import hashlib
 import os
 from pathlib import Path
 
+from pytest import TempPathFactory
+import pytest
+
 from solara.server.cdn_helper import get_cdn_url, get_data, get_from_cache, put_in_cache, get_path
 
 
@@ -68,6 +71,26 @@ def test_get_data(tmp_path_factory):
     assert data == b"test_cached_2"
 
 
+def test_get_data_secure(tmp_path_factory: TempPathFactory):
+    # we should never be able to get data from the parent directory
+
+    root_dir = tmp_path_factory.mktemp("root")
+    base_cache_dir = root_dir / "cdn"
+    base_cache_dir.mkdir()
+
+    (root_dir / "secret").write_bytes(b"not allowed")
+
+    project_dir = base_cache_dir / "project"
+    project_dir.mkdir()
+
+    (project_dir / "file").write_bytes(b"a")
+
+    data = get_data(base_cache_dir, "project/file")
+    assert data == b"a"
+    with pytest.raises(PermissionError):
+        get_data(base_cache_dir, "project/../../secret")
+
+
 def test_redirect(tmp_path_factory):
     base_cache_dir = tmp_path_factory.mktemp("cdn")