mirror of
https://github.com/lobehub/lobehub.git
synced 2026-09-20 04:56:13 +08:00
Innei
07fb752547
* 🐛 fix(portal): guide outside-workspace HTML publishing * 💄 style(portal): keep external-read consent above footer * ✨ feat(portal): confirm external file access * 💄 style(portal): align external-read consent typography * 🐛 fix(portal): harden outside-workspace publishing * 🐛 fix: secure external workspace HTML publishing * 🐛 fix(portal): bound external publish reads and honour local base hrefs - reject an external publish asset by `stat` size before reading it, on both the device-control and Electron transports, instead of letting the renderer find out after a multi-gigabyte base64 round trip - keep a `<base href>` that escapes the workspace, so its refs are reported as real outside-workspace dependencies instead of resolving back inside - drop a local `<base>` from the relocated copy, whose resource hrefs are already rewritten relative to its own directory Claude-Session: https://claude.ai/code/session_017KB2isGJ1RDpSaHiv88Xto * 🔧 chore(deps): register html-artifact in the standalone app workspaces `apps/cli` and `apps/desktop` enumerate their workspace packages instead of globbing, so `packages/device-control`'s new `@lobechat/html-artifact` dependency could not resolve there. Claude-Session: https://claude.ai/code/session_017KB2isGJ1RDpSaHiv88Xto
24 lines
546 B
JSON
24 lines
546 B
JSON
{
|
|
"name": "@lobechat/html-artifact",
|
|
"version": "1.0.0",
|
|
"private": true,
|
|
"sideEffects": false,
|
|
"exports": {
|
|
".": "./src/index.ts",
|
|
"./limits": "./src/limits.ts"
|
|
},
|
|
"main": "./src/index.ts",
|
|
"types": "./src/index.ts",
|
|
"scripts": {
|
|
"test": "vitest",
|
|
"test:coverage": "vitest --coverage --silent='passed-only'"
|
|
},
|
|
"dependencies": {
|
|
"@lobechat/const": "workspace:*",
|
|
"@lobechat/prompts": "workspace:*",
|
|
"@lobechat/utils": "workspace:*",
|
|
"es-toolkit": "^1.50.0",
|
|
"js-sha256": "^0.11.1"
|
|
}
|
|
}
|