2 Commits (4fd4054f03bdc004c202ecfa0d1de10613358a82)

Author	SHA1	Message	Date
Brett Zamir	340915be4e	- Linting (ESLint): Finish extensions and most files in editor/; unfinished: `editor/svg-editor.js`, `editor/svgcanvas.js` ... - Linting (ESLint): Fix ignore file paths - History `elem` fix	2018-05-16 12:08:41 +08:00
Brett Zamir	1e2e6529d2	Critical privacy/data integrity fix: Move cross-domain capable message listener into own extension (ext-xdomain-messaging.js) and do not include by default (the extension now won't work anyways without an allowedOrigins config first being set (in config.js) for security reasons (and not via URL)); add allowedOrigins config and demo use in config-sample.js; JSLint; update embedapi.html to supply the xdomain extension in case running xdomain (again, allowedOrigins must be supplied in the local copy of config.js for this to work); modify embedapi.js to allow reuse of cross-domain API with same-domain usage, but without the intermediate JSON parsing which could lose some non-JSONable arguments or response. ... git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2714 eee81c28-f429-11dd-99c0-75d572ba1ddd	2014-02-22 04:08:24 +00:00