Commit Graph

25 Commits (667de191472588a69be0f8254e39860387880180)

Author SHA1 Message Date
Brett Zamir 8f1c74260b Use proper DOM interface in JSDoc comment
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2726 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-03-02 23:31:41 +00:00
Brett Zamir 8bf64a2af7 Rmv empty comment
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2725 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-03-02 23:09:27 +00:00
Brett Zamir 3560444cc7 In case the frame changes location to an untrusted source such as via link click, the embedding API is now required to supply a list of any other origins that should be allowed.
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2724 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-03-02 01:25:39 +00:00
Brett Zamir 314bcb2e76 Critical security fix for embedded editor
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2723 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-03-02 01:11:23 +00:00
Brett Zamir 1e2e6529d2 Critical privacy/data integrity fix: Move cross-domain capable message listener into own extension (ext-xdomain-messaging.js) and do not include by default (the extension now won't work anyways without an allowedOrigins config first being set (in config.js) for security reasons (and not via URL)); add allowedOrigins config and demo use in config-sample.js; JSLint; update embedapi.html to supply the xdomain extension in case running xdomain (again, allowedOrigins must be supplied in the local copy of config.js for this to work); modify embedapi.js to allow reuse of cross-domain API with same-domain usage, but without the intermediate JSON parsing which could lose some non-JSONable arguments or response.
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2714 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-02-22 04:08:24 +00:00
Brett Zamir f22e95f437 Tab fixes
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-01-31 08:57:22 +00:00
Brett Zamir 881d82859b Minor clean-up; remove old comment
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2647 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-01-31 07:13:17 +00:00
Brett Zamir 5f01a845e6 Clarify, JSLintify examples in comments
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2646 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-01-31 04:54:49 +00:00
Brett Zamir 75bd787023 JSLint
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2644 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-01-31 02:13:37 +00:00
Brett Zamir 009a9e67ce Note on limitations (these limitations existed previously to the eval() dependency removal)
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2596 eee81c28-f429-11dd-99c0-75d572ba1ddd
2013-10-14 03:25:35 +00:00
Brett Zamir 80c16aa6ef Move back to string messages for postMessage for sake of IE9 (though not with eval); avoid IE9 error with localStorage and missing select icon
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2590 eee81c28-f429-11dd-99c0-75d572ba1ddd
2013-10-14 01:24:52 +00:00
Brett Zamir ffde8814ac Fix security issue by avoiding use of eval() within postMessage calls between embedAPI and main editor (also namespace the messages and protect the imagelib extension message listener from non-string messages); avoid embedAPI's unneeded randomizing of callback IDs in favor of incrementing; deprecate old embedded_svg_edit API name in favor of JS/JSLint-friendly EmbeddedSVGEdit name (and allow it to be instantiated w/o new keyword); JSLint/HTML5-ize embedAPI files, remove HTML5/browser-optional type="text/javascript", remove unused comments for embedAPI
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2585 eee81c28-f429-11dd-99c0-75d572ba1ddd
2013-10-13 23:59:32 +00:00
Bruno Heridet 9f58a680c3 removed unneeded json_encode / json_decode for 3 reasons:
- it's available natively since IE8 and it's provided by Chrome Frame which is a requirement for old IE
- it's only used for postMessage exchange which is a newer API than JSON
- if ever we would need it, it should be added in an external lib, not inside the editor code itself

git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2462 eee81c28-f429-11dd-99c0-75d572ba1ddd
2013-02-23 17:37:05 +00:00
Bruno Heridet 3d61d46f6b cleaned inconsistencies with comma spacing
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2396 eee81c28-f429-11dd-99c0-75d572ba1ddd
2013-02-15 16:51:48 +00:00
Mark MacKay 650fa70404 added zoomChanged to the embedded api, partial patch from RobertLeePlummerJr #973
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2197 eee81c28-f429-11dd-99c0-75d572ba1ddd
2012-11-28 04:32:59 +00:00
Jeff Schiller d85a7bc8a2 Add deleteCurrentLayer() to Drawing
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1953 eee81c28-f429-11dd-99c0-75d572ba1ddd
2011-01-30 17:11:56 +00:00
Jeff Schiller 00d05776a2 Move setLayerVisibility() and setLayerOpacity() into Drawing and some tests
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1943 eee81c28-f429-11dd-99c0-75d572ba1ddd
2011-01-28 07:39:30 +00:00
Jeff Schiller ec56e8b2c3 Move setCurrentLayer() into Drawing. Rename getCurrentLayer() to getCurrentLayerName() and move into Drawing. Tests.
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1937 eee81c28-f429-11dd-99c0-75d572ba1ddd
2011-01-26 03:18:59 +00:00
Jeff Schiller 97071abd0e Move getLayer() into Drawing with tests
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1928 eee81c28-f429-11dd-99c0-75d572ba1ddd
2011-01-17 05:02:08 +00:00
Jeff Schiller 6f9f943093 Move hasLayer() into svgedit.draw.Drawing
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1926 eee81c28-f429-11dd-99c0-75d572ba1ddd
2011-01-16 23:18:51 +00:00
Jeff Schiller 0db154bff4 Rename document module to draw. Add getNumLayers() to draw module.
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1925 eee81c28-f429-11dd-99c0-75d572ba1ddd
2011-01-16 23:07:35 +00:00
Jeff Schiller 4a133d490d Move undo/redo functionality into history.js. Started unit test file.
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1864 eee81c28-f429-11dd-99c0-75d572ba1ddd
2010-11-12 19:08:29 +00:00
Jeff Schiller faa165eb9d Change encoding from Western to UTF-8
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1201 eee81c28-f429-11dd-99c0-75d572ba1ddd
2010-01-12 20:39:03 +00:00
Kevin Kwok e689ca3dcf Fixed embed API
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@967 eee81c28-f429-11dd-99c0-75d572ba1ddd
2009-11-22 20:33:12 +00:00
Kevin Kwok db5df84bcc Embed communication protocol updated, embed api file added
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@966 eee81c28-f429-11dd-99c0-75d572ba1ddd
2009-11-22 20:13:06 +00:00