svgedit/editor/embedapi.html

<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta charset="utf-8" />
    <title>Embed API</title>
    <script src="jquery.js"></script>
    <script src="embedapi.js"></script>
    <script>
    /*globals $, EmbeddedSVGEdit*/
    var initEmbed;
    $(function () {'use strict';
        
        var svgCanvas = null;

        initEmbed = function () {
            var doc, mainButton,
                frame = document.getElementById('svgedit');
            svgCanvas = new EmbeddedSVGEdit(frame);
            // Hide main button, as we will be controlling new, load, save, etc. from the host document
            doc = frame.contentDocument || frame.contentWindow.document;
            mainButton = doc.getElementById('main_button');
            mainButton.style.display = 'none';
        };

        function handleSvgData(data, error) {
            if (error) {
                alert('error ' + error);
            } else {
                alert('Congratulations. Your SVG string is back in the host page, do with it what you will\n\n' + data);
            }
        }

        function loadSvg() {
            var svgexample = '<svg width="640" height="480" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg"><g><title>Layer 1<\/title><rect stroke-width="5" stroke="#000000" fill="#FF0000" id="svg_1" height="35" width="51" y="35" x="32"/><ellipse ry="15" rx="24" stroke-width="5" stroke="#000000" fill="#0000ff" id="svg_2" cy="60" cx="66"/><\/g><\/svg>';
            svgCanvas.setSvgString(svgexample);
        }

        function saveSvg() {
            svgCanvas.getSvgString()(handleSvgData);
        }
        
        function exportSvg() {
            var str = document.getElementById('svgedit').contentWindow.svgEditor.uiStrings.notification.loadingImage;
            var exportWindow = window.open(
                'data:text/html;charset=utf-8,' + encodeURIComponent('<title>' + str + '</title><h1>' + str + '</h1>'),
                'svg-edit-exportWindow'
            );
            svgCanvas.rasterExport('PNG', null, exportWindow.name);
        }
        
        // Add event handlers
        $('#load').click(loadSvg);
        $('#save').click(saveSvg);
        $('#export').click(exportSvg);
        $('body').append(
            $('<iframe src="svg-editor.html?extensions=ext-xdomain-messaging.js' +
                window.location.href.replace(/\?(.*)$/, '&$1') + // Append arguments to this file onto the iframe
                '" width="900px" height="600px" id="svgedit" onload="initEmbed();"></iframe>'
            )
        );
    });
    </script>
</head>
<body>
    <button id="load">Load example</button>
    <button id="save">Save data</button>
    <button id="export">Export data</button>
    <br/>
</body>
</html>
-												Fix security issue by avoiding use of eval() within postMessage calls between embedAPI and main editor (also namespace the messages and protect the imagelib extension message listener from non-string messages); avoid embedAPI's unneeded randomizing of callback IDs in favor of incrementing; deprecate old embedded_svg_edit API name in favor of JS/JSLint-friendly EmbeddedSVGEdit name (and allow it to be instantiated w/o new keyword); JSLint/HTML5-ize embedAPI files, remove HTML5/browser-optional type="text/javascript", remove unused comments for embedAPI

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2585 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2013-10-13 23:59:32 +00:00
+								<!DOCTYPE html>
 								<html xmlns="http://www.w3.org/1999/xhtml">
-												Applied patch by bencurthoys to fix embed api

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1734 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2010-09-20 18:55:10 +00:00
+								<head>
-												Fix security issue by avoiding use of eval() within postMessage calls between embedAPI and main editor (also namespace the messages and protect the imagelib extension message listener from non-string messages); avoid embedAPI's unneeded randomizing of callback IDs in favor of incrementing; deprecate old embedded_svg_edit API name in favor of JS/JSLint-friendly EmbeddedSVGEdit name (and allow it to be instantiated w/o new keyword); JSLint/HTML5-ize embedAPI files, remove HTML5/browser-optional type="text/javascript", remove unused comments for embedAPI

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2585 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2013-10-13 23:59:32 +00:00
+								    <meta charset="utf-8" />
-												Tab fixes

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-01-31 08:57:22 +00:00
+								    <title>Embed API</title>
-												Fix security issue by avoiding use of eval() within postMessage calls between embedAPI and main editor (also namespace the messages and protect the imagelib extension message listener from non-string messages); avoid embedAPI's unneeded randomizing of callback IDs in favor of incrementing; deprecate old embedded_svg_edit API name in favor of JS/JSLint-friendly EmbeddedSVGEdit name (and allow it to be instantiated w/o new keyword); JSLint/HTML5-ize embedAPI files, remove HTML5/browser-optional type="text/javascript", remove unused comments for embedAPI

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2585 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2013-10-13 23:59:32 +00:00
+								    <script src="jquery.js"></script>
-												Tab fixes

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-01-31 08:57:22 +00:00
+								    <script src="embedapi.js"></script>
 								    <script>
-												Fix security issue by avoiding use of eval() within postMessage calls between embedAPI and main editor (also namespace the messages and protect the imagelib extension message listener from non-string messages); avoid embedAPI's unneeded randomizing of callback IDs in favor of incrementing; deprecate old embedded_svg_edit API name in favor of JS/JSLint-friendly EmbeddedSVGEdit name (and allow it to be instantiated w/o new keyword); JSLint/HTML5-ize embedAPI files, remove HTML5/browser-optional type="text/javascript", remove unused comments for embedAPI

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2585 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2013-10-13 23:59:32 +00:00
+								    /*globals $, EmbeddedSVGEdit*/
-												Minor: Spacing

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2825 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-04-09 22:47:39 +00:00
+								    var initEmbed;
-												Fix security issue by avoiding use of eval() within postMessage calls between embedAPI and main editor (also namespace the messages and protect the imagelib extension message listener from non-string messages); avoid embedAPI's unneeded randomizing of callback IDs in favor of incrementing; deprecate old embedded_svg_edit API name in favor of JS/JSLint-friendly EmbeddedSVGEdit name (and allow it to be instantiated w/o new keyword); JSLint/HTML5-ize embedAPI files, remove HTML5/browser-optional type="text/javascript", remove unused comments for embedAPI

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2585 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2013-10-13 23:59:32 +00:00
+								    $(function () {'use strict';
-												Tab fixes

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-01-31 08:57:22 +00:00
-												Fix security issue by avoiding use of eval() within postMessage calls between embedAPI and main editor (also namespace the messages and protect the imagelib extension message listener from non-string messages); avoid embedAPI's unneeded randomizing of callback IDs in favor of incrementing; deprecate old embedded_svg_edit API name in favor of JS/JSLint-friendly EmbeddedSVGEdit name (and allow it to be instantiated w/o new keyword); JSLint/HTML5-ize embedAPI files, remove HTML5/browser-optional type="text/javascript", remove unused comments for embedAPI

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2585 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2013-10-13 23:59:32 +00:00
+								        var svgCanvas = null;
-												Applied patch by bencurthoys to fix embed api

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1734 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2010-09-20 18:55:10 +00:00
-												Critical privacy/data integrity fix: Move cross-domain capable message listener into own extension (ext-xdomain-messaging.js) and do not include by default (the extension now won't work anyways without an allowedOrigins config first being set (in config.js) for security reasons (and not via URL)); add allowedOrigins config and demo use in config-sample.js; JSLint; update embedapi.html to supply the xdomain extension in case running xdomain (again, allowedOrigins must be supplied in the local copy of config.js for this to work); modify embedapi.js to allow reuse of cross-domain API with same-domain usage, but without the intermediate JSON parsing which could lose some non-JSONable arguments or response.

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2714 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-02-22 04:08:24 +00:00
+								        initEmbed = function () {
-												Tab fixes

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-01-31 08:57:22 +00:00
+								            var doc, mainButton,
-												Fix security issue by avoiding use of eval() within postMessage calls between embedAPI and main editor (also namespace the messages and protect the imagelib extension message listener from non-string messages); avoid embedAPI's unneeded randomizing of callback IDs in favor of incrementing; deprecate old embedded_svg_edit API name in favor of JS/JSLint-friendly EmbeddedSVGEdit name (and allow it to be instantiated w/o new keyword); JSLint/HTML5-ize embedAPI files, remove HTML5/browser-optional type="text/javascript", remove unused comments for embedAPI

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2585 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2013-10-13 23:59:32 +00:00
+								                frame = document.getElementById('svgedit');
-												Tab fixes

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-01-31 08:57:22 +00:00
+								            svgCanvas = new EmbeddedSVGEdit(frame);
 								            // Hide main button, as we will be controlling new, load, save, etc. from the host document
 								            doc = frame.contentDocument || frame.contentWindow.document;
 								            mainButton = doc.getElementById('main_button');
 								            mainButton.style.display = 'none';
-												Critical privacy/data integrity fix: Move cross-domain capable message listener into own extension (ext-xdomain-messaging.js) and do not include by default (the extension now won't work anyways without an allowedOrigins config first being set (in config.js) for security reasons (and not via URL)); add allowedOrigins config and demo use in config-sample.js; JSLint; update embedapi.html to supply the xdomain extension in case running xdomain (again, allowedOrigins must be supplied in the local copy of config.js for this to work); modify embedapi.js to allow reuse of cross-domain API with same-domain usage, but without the intermediate JSON parsing which could lose some non-JSONable arguments or response.

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2714 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-02-22 04:08:24 +00:00
+								        };
-												cleaned extra white spaces in embedapi

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2433 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2013-02-19 16:30:56 +00:00
-												Tab fixes

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-01-31 08:57:22 +00:00
+								        function handleSvgData(data, error) {
 								            if (error) {
 								                alert('error ' + error);
 								            } else {
 								                alert('Congratulations. Your SVG string is back in the host page, do with it what you will\n\n' + data);
 								            }
 								        }
-												Applied patch by bencurthoys to fix embed api

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1734 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2010-09-20 18:55:10 +00:00
-												Tab fixes

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-01-31 08:57:22 +00:00
+								        function loadSvg() {
-												Critical privacy/data integrity fix: Move cross-domain capable message listener into own extension (ext-xdomain-messaging.js) and do not include by default (the extension now won't work anyways without an allowedOrigins config first being set (in config.js) for security reasons (and not via URL)); add allowedOrigins config and demo use in config-sample.js; JSLint; update embedapi.html to supply the xdomain extension in case running xdomain (again, allowedOrigins must be supplied in the local copy of config.js for this to work); modify embedapi.js to allow reuse of cross-domain API with same-domain usage, but without the intermediate JSON parsing which could lose some non-JSONable arguments or response.

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2714 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-02-22 04:08:24 +00:00
+								            var svgexample = '<svg width="640" height="480" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg"><g><title>Layer 1<\/title><rect stroke-width="5" stroke="#000000" fill="#FF0000" id="svg_1" height="35" width="51" y="35" x="32"/><ellipse ry="15" rx="24" stroke-width="5" stroke="#000000" fill="#0000ff" id="svg_2" cy="60" cx="66"/><\/g><\/svg>';
-												Tab fixes

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-01-31 08:57:22 +00:00
+								            svgCanvas.setSvgString(svgexample);
 								        }
-												Applied patch by bencurthoys to fix embed api

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1734 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2010-09-20 18:55:10 +00:00
-												Tab fixes

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-01-31 08:57:22 +00:00
+								        function saveSvg() {
 								            svgCanvas.getSvgString()(handleSvgData);
 								        }
-												Minor: Spacing

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2825 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-04-09 22:47:39 +00:00
 								        function exportSvg() {
 								            var str = document.getElementById('svgedit').contentWindow.svgEditor.uiStrings.notification.loadingImage;
 								            var exportWindow = window.open(
 								                'data:text/html;charset=utf-8,' + encodeURIComponent('<title>' + str + '</title><h1>' + str + '</h1>'),
 								                'svg-edit-exportWindow'
 								            );
 								            svgCanvas.rasterExport('PNG', null, exportWindow.name);
 								        }
-												Fix security issue by avoiding use of eval() within postMessage calls between embedAPI and main editor (also namespace the messages and protect the imagelib extension message listener from non-string messages); avoid embedAPI's unneeded randomizing of callback IDs in favor of incrementing; deprecate old embedded_svg_edit API name in favor of JS/JSLint-friendly EmbeddedSVGEdit name (and allow it to be instantiated w/o new keyword); JSLint/HTML5-ize embedAPI files, remove HTML5/browser-optional type="text/javascript", remove unused comments for embedAPI

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2585 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2013-10-13 23:59:32 +00:00
 								        // Add event handlers
 								        $('#load').click(loadSvg);
 								        $('#save').click(saveSvg);
-												Minor: Spacing

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2825 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-04-09 22:47:39 +00:00
+								        $('#export').click(exportSvg);
 								        $('body').append(
 								            $('<iframe src="svg-editor.html?extensions=ext-xdomain-messaging.js' +
 								                window.location.href.replace(/\?(.*)$/, '&$1') + // Append arguments to this file onto the iframe
 								                '" width="900px" height="600px" id="svgedit" onload="initEmbed();"></iframe>'
 								            )
 								        );
 								    });
-												Tab fixes

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-01-31 08:57:22 +00:00
+								    </script>
-												Fix security issue by avoiding use of eval() within postMessage calls between embedAPI and main editor (also namespace the messages and protect the imagelib extension message listener from non-string messages); avoid embedAPI's unneeded randomizing of callback IDs in favor of incrementing; deprecate old embedded_svg_edit API name in favor of JS/JSLint-friendly EmbeddedSVGEdit name (and allow it to be instantiated w/o new keyword); JSLint/HTML5-ize embedAPI files, remove HTML5/browser-optional type="text/javascript", remove unused comments for embedAPI

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2585 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2013-10-13 23:59:32 +00:00
+								</head>
 								<body>
-												Tab fixes

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-01-31 08:57:22 +00:00
+								    <button id="load">Load example</button>
 								    <button id="save">Save data</button>
-												Minor: Spacing

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2825 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-04-09 22:47:39 +00:00
+								    <button id="export">Export data</button>
-												Tab fixes

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2014-01-31 08:57:22 +00:00
+								    <br/>
-												Applied patch by bencurthoys to fix embed api

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1734 eee81c28-f429-11dd-99c0-75d572ba1ddd

											
										
										
											2010-09-20 18:55:10 +00:00
+								</body>
 								</html>