8bf64a2af7
Rmv empty comment
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2725 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-03-02 23:09:27 +00:00
3560444cc7
In case the frame changes location to an untrusted source such as via link click, the embedding API is now required to supply a list of any other origins that should be allowed.
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2724 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-03-02 01:25:39 +00:00
314bcb2e76
Critical security fix for embedded editor
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2723 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-03-02 01:11:23 +00:00
1e2e6529d2
Critical privacy/data integrity fix: Move cross-domain capable message listener into own extension (ext-xdomain-messaging.js) and do not include by default (the extension now won't work anyways without an allowedOrigins config first being set (in config.js) for security reasons (and not via URL)); add allowedOrigins config and demo use in config-sample.js; JSLint; update embedapi.html to supply the xdomain extension in case running xdomain (again, allowedOrigins must be supplied in the local copy of config.js for this to work); modify embedapi.js to allow reuse of cross-domain API with same-domain usage, but without the intermediate JSON parsing which could lose some non-JSONable arguments or response.
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2714 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-02-22 04:08:24 +00:00
f22e95f437
Tab fixes
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2651 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-01-31 08:57:22 +00:00
881d82859b
Minor clean-up; remove old comment
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2647 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-01-31 07:13:17 +00:00
5f01a845e6
Clarify, JSLintify examples in comments
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2646 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-01-31 04:54:49 +00:00
75bd787023
JSLint
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2644 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-01-31 02:13:37 +00:00
009a9e67ce
Note on limitations (these limitations existed previously to the eval() dependency removal)
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2596 eee81c28-f429-11dd-99c0-75d572ba1ddd
2013-10-14 03:25:35 +00:00
80c16aa6ef
Move back to string messages for postMessage for sake of IE9 (though not with eval); avoid IE9 error with localStorage and missing select icon
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2590 eee81c28-f429-11dd-99c0-75d572ba1ddd
2013-10-14 01:24:52 +00:00
ffde8814ac
Fix security issue by avoiding use of eval() within postMessage calls between embedAPI and main editor (also namespace the messages and protect the imagelib extension message listener from non-string messages); avoid embedAPI's unneeded randomizing of callback IDs in favor of incrementing; deprecate old embedded_svg_edit API name in favor of JS/JSLint-friendly EmbeddedSVGEdit name (and allow it to be instantiated w/o new keyword); JSLint/HTML5-ize embedAPI files, remove HTML5/browser-optional type="text/javascript", remove unused comments for embedAPI
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2585 eee81c28-f429-11dd-99c0-75d572ba1ddd
2013-10-13 23:59:32 +00:00
9f58a680c3
removed unneeded json_encode / json_decode for 3 reasons:
...
- it's available natively since IE8 and it's provided by Chrome Frame which is a requirement for old IE
- it's only used for postMessage exchange which is a newer API than JSON
- if ever we would need it, it should be added in an external lib, not inside the editor code itself
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2462 eee81c28-f429-11dd-99c0-75d572ba1ddd
2013-02-23 17:37:05 +00:00
3d61d46f6b
cleaned inconsistencies with comma spacing
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2396 eee81c28-f429-11dd-99c0-75d572ba1ddd
2013-02-15 16:51:48 +00:00
650fa70404
added zoomChanged to the embedded api, partial patch from RobertLeePlummerJr #973
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2197 eee81c28-f429-11dd-99c0-75d572ba1ddd
2012-11-28 04:32:59 +00:00
d85a7bc8a2
Add deleteCurrentLayer() to Drawing
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1953 eee81c28-f429-11dd-99c0-75d572ba1ddd
2011-01-30 17:11:56 +00:00
00d05776a2
Move setLayerVisibility() and setLayerOpacity() into Drawing and some tests
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1943 eee81c28-f429-11dd-99c0-75d572ba1ddd
2011-01-28 07:39:30 +00:00
ec56e8b2c3
Move setCurrentLayer() into Drawing. Rename getCurrentLayer() to getCurrentLayerName() and move into Drawing. Tests.
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1937 eee81c28-f429-11dd-99c0-75d572ba1ddd
2011-01-26 03:18:59 +00:00
97071abd0e
Move getLayer() into Drawing with tests
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1928 eee81c28-f429-11dd-99c0-75d572ba1ddd
2011-01-17 05:02:08 +00:00
6f9f943093
Move hasLayer() into svgedit.draw.Drawing
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1926 eee81c28-f429-11dd-99c0-75d572ba1ddd
2011-01-16 23:18:51 +00:00
0db154bff4
Rename document module to draw. Add getNumLayers() to draw module.
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1925 eee81c28-f429-11dd-99c0-75d572ba1ddd
2011-01-16 23:07:35 +00:00
4a133d490d
Move undo/redo functionality into history.js. Started unit test file.
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1864 eee81c28-f429-11dd-99c0-75d572ba1ddd
2010-11-12 19:08:29 +00:00
faa165eb9d
Change encoding from Western to UTF-8
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@1201 eee81c28-f429-11dd-99c0-75d572ba1ddd
2010-01-12 20:39:03 +00:00
e689ca3dcf
Fixed embed API
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@967 eee81c28-f429-11dd-99c0-75d572ba1ddd
2009-11-22 20:33:12 +00:00
db5df84bcc
Embed communication protocol updated, embed api file added
...
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@966 eee81c28-f429-11dd-99c0-75d572ba1ddd
2009-11-22 20:13:06 +00:00
Brett Zamir
Bruno Heridet
Mark MacKay
Jeff Schiller
Kevin Kwok