a22895c53a
- Security fix (Imagelib): Avoid XSS ( fixes #288 )
...
- Fix (Imagelib): `dropXMLInternalSubset` misspelled
2018-09-25 02:06:51 +08:00
11baad0402
- Security fix/Breaking change (Imagelib): Require `allowedImageLibOrigins`
...
config array be set with safe origins or otherwise reject `postMessage`
messages in case from untrusted sources
- Security fix/Breaking change (xdomain): Namespace xdomain file to avoid
it being used to modify non-xdomain storage
- Security fix (Imagelib): Expose `dropXMLInternalSubset` to extensions
for preventing billion laughs attack (and use in Imagelib)
2018-09-24 20:59:47 +08:00
25ed8ad465
- Linting (LGTM): Mark remote property injection in embedapi as safe
2018-09-24 20:08:49 +08:00
23e982e403
- Docs: CHANGES
2018-09-22 12:05:05 +08:00
7db8cc9c36
- Fix: Ensure poly shape has a `points` attribute
...
- Refactoring: Avoid building nested function upon each function call
- Linting (ESLint): Coding standards
2018-09-22 11:59:34 +08:00
f485a05c56
Export polygon and polyline to PDF. fix #280
2018-09-22 11:21:22 +08:00
f3b29b94db
- Docs: Add badges (npm, license, lgtm)
...
- npm: Update devDeps
2018-09-22 11:14:53 +08:00
72b0cee994
- Docs (CHANGES)
...
- Docs: Add "known regression" as possible commit prefix
2018-09-22 10:12:11 +08:00
fbffc86503
- Security fix (minor): For embedded API, avoid chance for arbitrary property
...
setting (though this was only for trusted origins anyways)
- Security fix (minor): For embedded API example, copy params to iframe
source without XSS risk (though params should already be XML-safe
given `encodeURIComponent` and lack of a single quote attribute context)
- Linting (LGTM): Flag origin-checked item as safe
- Refactoring: Destructuring, ellipsis
- Docs (JSDoc): Missing return value
2018-09-22 10:06:25 +08:00
dab1ff81af
- Fix (jPicker): Avoid setting `Math.precision` pseudo-global
...
- Refactoring (jPicker): Use ES6 templates; avoid unnecessary check
- Refactoring: Avoid useless assignment (courtesty lgtm)
- Build: Update files
2018-09-22 09:01:13 +08:00
be17cd249c
LGTM.com-inspired changes:
...
- Fix: Ensure all apostrophes are escaped for `toXml` utility
- Fix: Avoid error if `URL` is not defined
- Fix (jPicker): Precision argument had not been passed in previously
- Fix (Star extension): Minor: Avoid erring if `inradius` is `NaN`
- Refactoring: Avoid passing unused arguments, setting unused variables,
and making unnecessary checks; avoid useless call to `createSVGMatrix`
- Linting (LGTM): Add `lgtm.yml` file (still some remaining items flagged
but hoping for in-code flagging)
- Docs: Contributing file
2018-09-21 10:56:07 +08:00
f1d0b41774
Merge pull request #2 from SVG-Edit/master
...
update from origin
2018-09-17 04:58:51 -05:00
cba5909472
- Fix (regression): i18n of markers extension
2018-09-14 07:36:06 +08:00
b51db3a3c1
- Fix (Context menus): Avoid showing double shortcuts ( #285 ); add some
...
missing ones
2018-09-14 07:18:26 +08:00
f0a48cdb13
- Docs: Update FAQ, including reference to ad blockers and export
2018-09-14 06:28:23 +08:00
ed6aa3fcb8
- Build: Update `dist` files
2018-09-13 22:57:01 +08:00
c0ea00d36b
- Fix (image export) Export in Chrome; fixes #282
2018-09-13 18:23:53 +08:00
0688b9af60
- Fix (image import): Put src after onload to avoid missing event;
...
check other width/height properties in case offset is 0; fixes #278
2018-09-13 17:54:40 +08:00
837678bfa7
- Docs: Call out known remaining regression for 3.0.0
2018-09-13 11:10:09 +08:00
8ec3912e5a
Add issue templates
2018-09-13 09:25:05 +08:00
d315a81d0d
- Docs: CHANGES
2018-09-13 09:22:04 +08:00
b0bad24645
- Linting (ESLint): Apply coding standards
...
- Breaking change (minor): Change export filename to check `exportWindowName` and change default from `download.pdf` to `svg.pdf` to distinguish from other downloads
- Enhancement: Restore old dataURI functionality for non-Chrome browsers
2018-09-13 09:13:05 +08:00
1e9b72ef53
Merge branch 'fix-pdf-export-issue' of https://github.com/cuixiping/svgedit into fix-pdf-export-issue
2018-09-13 07:55:25 +08:00
fc1f36714e
fix pdf export issue. #124 and #254
2018-09-13 07:47:19 +08:00
4b22c248e4
- npm: Update devDeps
...
- Build: Switch to `terser` plugin with `uglify` plugin not
supporting ES6+-capable minifier
- Linting (ESLint): Consistent curly spacing; follow new "standard"
2018-09-07 08:19:45 +08:00
cad412fe6e
- Optimization: Image compression
2018-09-07 05:41:46 +08:00
4e7cec4e8e
- npm: Point to official sinon-test package now that ES6 Modules
...
support landed
2018-09-07 04:54:56 +08:00
4857561b71
fix pdf export issue. #124 and #254
2018-08-16 21:29:19 +08:00
a262a6c50a
Merge pull request #1 from SVG-Edit/master
...
update from origin
2018-08-16 11:47:39 +08:00
b370f4a207
- Docs: Release building (alternative for `build.js`)
2018-07-31 15:22:49 -07:00
97d093d6ef
- Linting (ESLint): Add xdomain file to ignore file
...
- Fix (i18n): Regression in last commit with locales and apostrophe values
- npm: Avoid adding config files to ignore file
- npm: Bump to 3.0.0-rc.2
- Build: Update build
2018-07-31 15:15:25 -07:00
63fab9ff43
- i18n: Move `imagelib` reference from common to ext. locale;
...
remove `toggle_grid` from `az` locale
2018-07-31 14:59:27 -07:00
f1666d11d1
- i18n: Remove eyedropper reference from main locale (in extension locale now)
...
- i18n: Add placeholders for `pick_stroke_paint_opacity`, `pick_fill_paint_opacity`, `popupWindowBlocked`
- i18n: Update `saveFromBrowser`
- i18n: Reapply locale strings
2018-07-31 13:22:00 -07:00
acb57c1609
- Fix: Add images (and references) for fallback ( #135 )
...
- Fix (canvg): blur export fix
- i18n (Chinese): A few fixes (#135 )
- Optimize: Further image optimizing
- Refactoring: Avoid custom JS substitution syntax
- Refactoring: Reorder default extension list
2018-07-31 00:18:39 -07:00
5ad6e6ba48
- Enhancement: Create xdomain file build which works without ES6 Modules
...
- Enhancement: Build xdomain files dynamically
- Fix: Race condition in svgIcons plugin
- Build: Update `dist` files
2018-07-30 12:51:57 -07:00
0a2da503f1
- Fix: Avoid extension `includeWith` button conflicts/redundancies;
...
Incorporates #147
- Fix: Ensure shift-key cycling through flyouts works with extension-added
`includeWith` as well as toolbarbuttons
- Fix: Apply flyout arrows after extensions callback
- Fix: Ensure SVG icon of flyout right-arrow is cloned to can be applied to
more than one extension
- Fix: Ensure line tool shows as selected when "L" key command is used
- Refactoring: Avoid passing on `undefined` var. (#147 )
- Refactoring: lbs; avoid indent in connector, destructuring, use map over push
- Docs: Clarify nature of fixes
- Docs: JSDoc for `setupFlyouts`, `Actions`, `toggleSidePanel`; missing for
ToolbarButton
2018-07-28 19:16:55 -07:00
b4d7b221e0
- Update dist files
2018-07-26 00:06:38 -07:00
e2d378cfe6
- Optimize: Avoid rewriting `points` attribute for free-hand path; incorporates #176 ( fixes #175 )
...
- Docs: Update CHANGES
2018-07-26 00:01:58 -07:00
3008696314
- Allow template to have text node for readability
2018-07-25 17:44:37 -07:00
aa2c3f142e
- Fix (regression in last commit): Avoid empty text node in SVG template
2018-07-25 17:42:06 -07:00
a68696ee34
- Refactoring (minor): Array destructuring
...
- Refactoring (minor): ES6 templates
- i18n: picking stroke/fill paint and opacity
2018-07-25 16:43:29 -07:00
5d0dd85507
- Fix: Regression for `text` and `tspan` elements as far as
...
`captureTextNodes` with canvg (inheriting class had set
`captureTextNodes` too late)
- Fix: Avoid errors for tspan passed to `getGradient`
2018-07-22 23:39:22 -07:00
d71ca48654
- Docs: A couple JSDoc fixes
2018-07-20 20:45:46 -07:00
986f13b55c
- Docs (README): Latest is not necessarily a prerelease
...
- Docs (Release instructions): Version (semver) should be 3 digits; fix github.io paths
2018-07-19 16:15:37 -07:00
8a5894c622
- Docs: Update release instructions
2018-07-19 16:03:40 -07:00
bee5870197
- npm: Bump to 3.0.0-rc.1
...
- Docs: No longer need to update `svg-edit.github.io` as referencing "latest" but add note to add to "Recent news"
2018-07-19 15:08:52 -07:00
0a25236477
- Breaking change: Avoid adding `assignAttributes`, `addSVGElementFromJson`,
...
`call`, `copyElem`, `findDefs`, `getElem`, `getId`, `getIntersectionList`,
`getMouseTarget`, `getNextId`, `getUrlFromAttr`, `hasMatrixTransform`,
`matrixMultiply`, `recalculateAllSelectedDimensions`,
`recalculateDimensions`, `remapElement`, `removeUnusedDefElems`, `round`,
`runExtensions`, `sanitizeSvg`, `setGradient` `transformListToTransform`
(and mistaken `toString` export) to `getPrivateMethods` (passed to
extensions) as available as public ones
- Build: Update ext-xdomain-messaging
- Fix (extension): ForeignObject editor
- Docs: Avoid reporting deliberate "Any" type
- Docs: Further docs (`logMatrix`, `getPrivateMethods`)
- Docs: Suggest `npm pack`
2018-07-19 14:58:30 -07:00
233ca8c6eb
- Docs (README): Minor clarification
2018-07-18 23:01:33 -07:00
e0e536df0a
- Enhancement: Link to rawgit/raw.githack for live master demos ( fixes #43 )
...
- Docs: Update CHANGES
2018-07-18 22:58:22 -07:00
6122d6d2f1
- Fix (Embedded editor): Workaround Chrome blocking issue
2018-07-18 22:37:47 -07:00
Brett Zamir
eric
Igin