wehub-resource-sync
70bf21e064
Deploy (to testing) and Test Playground Preview Worker / Deploy Playground Preview Worker (testing) (push) Has been skipped
Deploy Workers Shared Staging / Deploy Workers Shared Staging (push) Failing after 0s
Prerelease / build (push) Has been skipped
Handle Changesets / Handle Changesets (push) Has been cancelled
Semgrep OSS scan / semgrep-oss (push) Has been cancelled
139 lines
7.6 KiB
Markdown
139 lines
7.6 KiB
Markdown
# @cloudflare/quick-edit
|
|
|
|
## 0.4.7
|
|
|
|
### Patch Changes
|
|
|
|
- [#14314](https://github.com/cloudflare/workers-sdk/pull/14314) [`5c3bb11`](https://github.com/cloudflare/workers-sdk/commit/5c3bb118a99da70c5c1efb07df37f685e7044ba6) Thanks [@harryzcy](https://github.com/harryzcy)! - Bump esbuild to 0.28.1
|
|
|
|
This update includes several bug fixes from esbuild versions 0.27.3 through 0.28.1. See the [esbuild changelog](https://github.com/evanw/esbuild/blob/v0.28.1/CHANGELOG.md) for details.
|
|
|
|
## 0.4.6
|
|
|
|
### Patch Changes
|
|
|
|
- [#12823](https://github.com/cloudflare/workers-sdk/pull/12823) [`784c5cb`](https://github.com/cloudflare/workers-sdk/commit/784c5cb1ab7397110362e74f4632151ae8bab8fc) Thanks [@petebacondarwin](https://github.com/petebacondarwin)! - Add frame-ancestors CSP and postMessage origin validation to quick-edit
|
|
|
|
Mitigate `postMessage` origin bypass:
|
|
|
|
- Add Content-Security-Policy frame-ancestors header to quick-edit Worker responses, restricting which origins can embed the editor iframe
|
|
- Add client-side origin validation to the window.onmessage handler in workbench.ts, rejecting PORT messages from untrusted origins
|
|
- Inject allowed parent origins from server into HTML for client-side use
|
|
- Localhost origins are conditionally included when running via wrangler dev
|
|
|
|
## 0.4.5
|
|
|
|
### Patch Changes
|
|
|
|
- [#12154](https://github.com/cloudflare/workers-sdk/pull/12154) [`e36c0c9`](https://github.com/cloudflare/workers-sdk/commit/e36c0c9f70041bea4abc4ee4e4e462e2dc11e9cc) Thanks [@petebacondarwin](https://github.com/petebacondarwin)! - Use `X-Forwarded-Host` header for extension authority when behind a proxy
|
|
|
|
When Quick Edit is accessed through a proxy, the `X-Forwarded-Host` header is now used to determine the authority for loading builtin extensions. This ensures extensions load correctly when the Worker is behind a reverse proxy. The header value is only used if it matches `*.devprod.cloudflare.dev` for security.
|
|
|
|
## 0.4.4
|
|
|
|
### Patch Changes
|
|
|
|
- [#11878](https://github.com/cloudflare/workers-sdk/pull/11878) [`e84e8fa`](https://github.com/cloudflare/workers-sdk/commit/e84e8fab79f17ffcc6a4c29c92c6924ceb351f94) Thanks [@dario-piotrowicz](https://github.com/dario-piotrowicz)! - Fix relative path computation when the root folder name appears multiple times in a path
|
|
|
|
Previously, the logic assumed the root folder appeared exactly once in the path. When the root folder name appeared more than once, file modifications were not correctly detected.
|
|
|
|
For example, if the root folder is `my-worker`, a path like `/my-worker/my-worker/util.js` would incorrectly return `/` instead of `/my-worker/util.js`.
|
|
|
|
## 0.4.3
|
|
|
|
### Patch Changes
|
|
|
|
- [#11448](https://github.com/cloudflare/workers-sdk/pull/11448) [`2b4813b`](https://github.com/cloudflare/workers-sdk/commit/2b4813b18076817bb739491246313c32b403651f) Thanks [@edmundhung](https://github.com/edmundhung)! - Builds package with esbuild `v0.27.0`
|
|
|
|
## 0.4.2
|
|
|
|
### Patch Changes
|
|
|
|
- [#10347](https://github.com/cloudflare/workers-sdk/pull/10347) [`2e5b880`](https://github.com/cloudflare/workers-sdk/commit/2e5b8802b3d9b9b8ff0d44c6b7a5d80e64f92313) Thanks [@petebacondarwin](https://github.com/petebacondarwin)! - bump the quick editor version to trigger a release
|
|
|
|
## 0.4.1
|
|
|
|
### Patch Changes
|
|
|
|
- [#10338](https://github.com/cloudflare/workers-sdk/pull/10338) [`d419fd8`](https://github.com/cloudflare/workers-sdk/commit/d419fd8cbb946b00b1758869b073567f2bb3a740) Thanks [@CarmenPopoviciu](https://github.com/CarmenPopoviciu)! - Dummy changeset
|
|
|
|
## 0.4.0
|
|
|
|
### Minor Changes
|
|
|
|
- [#10047](https://github.com/cloudflare/workers-sdk/pull/10047) [`a4c4c5b`](https://github.com/cloudflare/workers-sdk/commit/a4c4c5bd9597d977d2e93f9d75a3260cf028decb) Thanks [@penalosa](https://github.com/penalosa)! - Bump base VSCode version for Quick Edit & Playground to 1.102.1
|
|
|
|
## 0.3.3
|
|
|
|
### Patch Changes
|
|
|
|
- [#9649](https://github.com/cloudflare/workers-sdk/pull/9649) [`ec9b417`](https://github.com/cloudflare/workers-sdk/commit/ec9b417f8ed711e7b5044410e83d781f123a6a62) Thanks [@petebacondarwin](https://github.com/petebacondarwin)! - patch release to trigger a test release
|
|
|
|
## 0.3.2
|
|
|
|
### Patch Changes
|
|
|
|
- [#7040](https://github.com/cloudflare/workers-sdk/pull/7040) [`44c954b`](https://github.com/cloudflare/workers-sdk/commit/44c954b98ac86e9ea98f6e589c419d40c5d7f122) Thanks [@penalosa](https://github.com/penalosa)! - Try and ensure the `d.ts` types are definitely the ones loaded in `quick-edit-extension`
|
|
|
|
## 0.3.1
|
|
|
|
### Patch Changes
|
|
|
|
- [#6998](https://github.com/cloudflare/workers-sdk/pull/6998) [`720a91d`](https://github.com/cloudflare/workers-sdk/commit/720a91d501ca04f677ab75f9da8f4b8b6d24a56f) Thanks [@edmundhung](https://github.com/edmundhung)! - chore: fix build config
|
|
|
|
## 0.3.0
|
|
|
|
### Minor Changes
|
|
|
|
- [#6962](https://github.com/cloudflare/workers-sdk/pull/6962) [`a204747`](https://github.com/cloudflare/workers-sdk/commit/a204747e04afa7592d0cbb5d9fb35d9cd0b2cd49) Thanks [@edmundhung](https://github.com/edmundhung)! - feat: lower autosave delay to 200ms
|
|
|
|
## 0.2.3
|
|
|
|
### Patch Changes
|
|
|
|
- [#6850](https://github.com/cloudflare/workers-sdk/pull/6850) [`ce41da5`](https://github.com/cloudflare/workers-sdk/commit/ce41da555a9520382a1e16cd7269253f0b733d51) Thanks [@penalosa](https://github.com/penalosa)! - fix: Re-release Quick Edit to update included workers-types
|
|
|
|
## 0.2.2
|
|
|
|
### Patch Changes
|
|
|
|
- [#6806](https://github.com/cloudflare/workers-sdk/pull/6806) [`4db75e1`](https://github.com/cloudflare/workers-sdk/commit/4db75e1eaf8eb088d869986efc28d5345789ff50) Thanks [@penalosa](https://github.com/penalosa)! - chore: Revert "fix(quick-edit): disable autosave"
|
|
|
|
## 0.2.1
|
|
|
|
### Patch Changes
|
|
|
|
- [#6738](https://github.com/cloudflare/workers-sdk/pull/6738) [`d818634`](https://github.com/cloudflare/workers-sdk/commit/d8186341980ab2c02917852a9e790a7655f93a78) Thanks [@edmundhung](https://github.com/edmundhung)! - fix: set readOnly property when writing files
|
|
|
|
## 0.2.0
|
|
|
|
### Minor Changes
|
|
|
|
- [#6708](https://github.com/cloudflare/workers-sdk/pull/6708) [`31bfd37`](https://github.com/cloudflare/workers-sdk/commit/31bfd374cf6764c1e8a4491518c58cb112010340) Thanks [@penalosa](https://github.com/penalosa)! - chore: Trigger a re-deploy
|
|
|
|
## 0.1.1
|
|
|
|
### Patch Changes
|
|
|
|
- [#6624](https://github.com/cloudflare/workers-sdk/pull/6624) [`66f5b25`](https://github.com/cloudflare/workers-sdk/commit/66f5b259a760e4a5ebe0dac01a3d82df15aa3040) Thanks [@edmundhung](https://github.com/edmundhung)! - fix: quick editor deploy script setup
|
|
|
|
## 0.1.0
|
|
|
|
### Minor Changes
|
|
|
|
- [#6546](https://github.com/cloudflare/workers-sdk/pull/6546) [`addb210`](https://github.com/cloudflare/workers-sdk/commit/addb21010dc68ff8867903b90aca438a31f0a3fc) Thanks [@edmundhung](https://github.com/edmundhung)! - feat: hide wrangler.toml and package.json with `search.exclude` support added
|
|
|
|
## 0.0.2
|
|
|
|
### Patch Changes
|
|
|
|
- [#6558](https://github.com/cloudflare/workers-sdk/pull/6558) [`2a5b648`](https://github.com/cloudflare/workers-sdk/commit/2a5b64815455a324dd57cdcf98abbcc3f7156c98) Thanks [@edmundhung](https://github.com/edmundhung)! - fix: disable autosave on quick editor to avoid context reset without explicit user action
|
|
|
|
## 0.0.1
|
|
|
|
### Patch Changes
|
|
|
|
- [#6029](https://github.com/cloudflare/workers-sdk/pull/6029) [`f5ad1d3`](https://github.com/cloudflare/workers-sdk/commit/f5ad1d3e562ce63b59f6ab136f1cdd703605bca4) Thanks [@threepointone](https://github.com/threepointone)! - chore: Normalize some dependencies in workers-sdk
|
|
|
|
This is the first of a few expected patches that normalize dependency versions, This normalizes `undici`, `concurrently`, `@types/node`, `react`, `react-dom`, `@types/react`, `@types/react-dom`, `eslint`, `typescript`. There are no functional code changes (but there are a couple of typecheck fixes).
|