WordPress.org
Get WordPress

Plugin Directory

Changeset 907523


Ignore:
Timestamp:
05/03/2014 08:52:54 PM (12 years ago)
Author:
EdHynan
Message:

2.1.1: Chromium iframe bug: remove sandox in mce plugin

Location:
swfput
Files:
26 edited
1 copied

Legend:

Unmodified
Added
Removed

  • swfput/tags/2.1.1/Makefile

    r906349 r907523  
    22# License: GNU GPLv3 (see http://www.gnu.org/licenses/gpl-3.0.html)
    33
    4 PRJVERS = 2.1.0
     4PRJVERS = 2.1.1
    55PRJSTEM = swfput
    66PRJNAME = $(PRJSTEM)-$(PRJVERS)

  • swfput/tags/2.1.1/README.html

    r906349 r907523  
    11<!-- Creator     : groff version 1.21 -->
    2 <!-- CreationDate: Thu May  1 11:21:32 2014 -->
     2<!-- CreationDate: Sat May  3 16:48:11 2014 -->
    33<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
    44"http://www.w3.org/TR/html4/loose.dtd">

  • swfput/tags/2.1.1/js/editor_plugin.js

    r906349 r907523  
    300300                'width' : w,
    301301                'height' : h,
    302                 'sandbox' : "allow-same-origin allow-pointer-lock allow-scripts",
     302                // Argh!: Chromium 3.4 breaks with the sandbox attr.,
     303                // refusing to run scipts in the iframe. Up to 3.3
     304                // it was OK. Web search shows that chromium devs
     305                // have been dithering about this for some time.
     306                // IAC, source is never cross-origin or in any way
     307                // unknown. Removed.
     308                //'sandbox' : "allow-same-origin allow-pointer-lock allow-scripts",
    303309                //'allowfullscreen' : '',
    304310                //'seamless' : '',

  • swfput/tags/2.1.1/js/editor_plugin.min.js

    r906349 r907523  
    3030var d=ev.clipboardData||dom.doc.dataTransfer;if(!d){return true;}
    3131var tx=tinymce.isIE?'Text':'text/plain';var rep=SWFPut_repl_nl(d.getData(tx));setTimeout(function(){ed.execCommand('mceInsertContent',false,rep);},1);ev.preventDefault();return tinymce.dom.Event.cancel(ev);});ed.SWFPut_Set_code=function(content){return parseShortcode(content);};ed.SWFPut_Get_code=function(content){return getShortcode(content);};var sc_map={};var newkey=function(){var r;do{r=''+parseInt(32768*Math.random()+16384);}while(r in sc_map);sc_map[r]={};return r;};var from_pseudo=function(node){if(!node)return node;var w,h,s,id,cl,rep=false;w=node.attr('width');h=node.attr('height');s=node.attr('src');cl=node.attr('class')||'';id=node.attr('id')||'';var k=(id!=='')?(id.split('-'))[1]:false;if(k){if(k in sc_map&&sc_map[k].node){rep=sc_map[k].node;}}
    32 if(!rep){rep=new Node('iframe',1);rep.attr({'id':id,'class':cl.indexOf('evh-pseudo')>=0?cl:(cl+' evh-pseudo'),'width':w,'height':h,'sandbox':"allow-same-origin allow-pointer-lock allow-scripts",'src':s});if(k&&k in sc_map){sc_map[k].node=rep;}}
     32if(!rep){rep=new Node('iframe',1);rep.attr({'id':id,'class':cl.indexOf('evh-pseudo')>=0?cl:(cl+' evh-pseudo'),'width':w,'height':h,'src':s});if(k&&k in sc_map){sc_map[k].node=rep;}}
    3333node.replace(rep);return node;};var to_pseudo=function(node,name){if(!node)return node;var w,h,s,id,cl,rep=false;id=node.attr('id')||'';cl=node.attr('class')||'';if(cl.indexOf('evh-pseudo')<0){return;}
    3434w=node.attr('width');h=node.attr('height');s=node.attr('src');var k=(id!=='')?(id.split('-'))[1]:false;if(k){if(k in sc_map&&sc_map[k].pnode){rep=sc_map[k].pnode;}}

  • swfput/tags/2.1.1/js/editor_plugin3x.js

    r906349 r907523  
    333333                    'width' : w,
    334334                    'height' : h,
    335                     'sandbox' : "allow-same-origin allow-pointer-lock allow-scripts",
     335                // Argh!: Chromium 3.4 breaks with the sandbox attr.,
     336                // refusing to run scipts in the iframe. Up to 3.3
     337                // it was OK. Web search shows that chromium devs
     338                // have been dithering about this for some time.
     339                // IAC, source is never cross-origin or in any way
     340                // unknown. Removed.
     341                    //'sandbox' : "allow-same-origin allow-pointer-lock allow-scripts",
    336342                    //'allowfullscreen' : '',
    337343                    //'seamless' : '',

  • swfput/tags/2.1.1/js/editor_plugin3x.min.js

    r906349 r907523  
    3333var tx=tinymce.isIE?'Text':'text/plain';var rep=SWFPut_repl_nl(d.getData(tx));setTimeout(function(){ed.execCommand('mceInsertContent',false,rep);},1);ev.preventDefault();return tinymce.dom.Event.cancel(ev);});ed.SWFPut_Set_code=function(content){return t._do_shcode(content);};ed.SWFPut_Get_code=function(content){return t._get_shcode(content);};},sc_map:{},newkey:function(){var r;do{r=''+parseInt(32768*Math.random()+16384);}while(r in this.sc_map);this.sc_map[r]={};return r;},from_pseudo:function(node,name){if(!node){return node;}
    3434var t=this;var w,h,s,id,cl,rep=false;w=node.attr('width');h=node.attr('height');s=node.attr('src');cl=node.attr('class')||'';id=node.attr('id')||'';var k=(id!=='')?(id.split('-'))[1]:false;if(k){if(k in t.sc_map&&t.sc_map[k].node){rep=t.sc_map[k].node;}}
    35 if(!rep){rep=new Node('iframe',1);rep.attr({'id':id,'class':cl.indexOf('evh-pseudo')>=0?cl:(cl+' evh-pseudo'),'width':w,'height':h,'sandbox':"allow-same-origin allow-pointer-lock allow-scripts",'src':s});if(k&&k in t.sc_map){t.sc_map[k].node=rep;}}
     35if(!rep){rep=new Node('iframe',1);rep.attr({'id':id,'class':cl.indexOf('evh-pseudo')>=0?cl:(cl+' evh-pseudo'),'width':w,'height':h,'src':s});if(k&&k in t.sc_map){t.sc_map[k].node=rep;}}
    3636node.replace(rep);return node;},to_pseudo:function(node,name){if(!node){return node;}
    3737var t=this;var w,h,s,id,cl,rep=false;id=node.attr('id')||'';cl=node.attr('class')||'';if(cl.indexOf('evh-pseudo')<0){return;}

  • swfput/tags/2.1.1/locale/swfput_l10n-en_US.po

    r906349 r907523  
    1 # swfput 2.1.0 Pot Source
     1# swfput 2.1.1 Pot Source
    22# Copyright (C) 2013 Ed Hynan
    33# This file is distributed under the same license as the swfput package.
    … …  
    77msgid ""
    88msgstr ""
    9 "Project-Id-Version: swfput 2.1.0\n"
     9"Project-Id-Version: swfput 2.1.1\n"
    1010"Report-Msgid-Bugs-To: edhynan@gmail.com\n"
    11 "POT-Creation-Date: 2014-04-30 19:57-0400\n"
    12 "PO-Revision-Date: 2014-04-30 19:57 EDT\n"
     11"POT-Creation-Date: 2014-05-03 16:48-0400\n"
     12"PO-Revision-Date: 2014-05-03 16:48 EDT\n"
    1313"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
    1414"Language-Team: LANGUAGE <LL@li.org>\n"

  • swfput/tags/2.1.1/locale/swfput_l10n.pot

    r906349 r907523  
    1 # swfput 2.1.0 Pot Source
     1# swfput 2.1.1 Pot Source
    22# Copyright (C) 2013 Ed Hynan
    33# This file is distributed under the same license as the swfput package.
    … …  
    77msgid ""
    88msgstr ""
    9 "Project-Id-Version: swfput 2.1.0\n"
     9"Project-Id-Version: swfput 2.1.1\n"
    1010"Report-Msgid-Bugs-To: edhynan@gmail.com\n"
    11 "POT-Creation-Date: 2014-04-30 19:57-0400\n"
     11"POT-Creation-Date: 2014-05-03 16:48-0400\n"
    1212"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
    1313"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"

  • swfput/tags/2.1.1/readme.txt

    r906349 r907523  
    55Requires at least: 3.0.2
    66Tested up to: 3.9
    7 Stable tag: 2.1
     7Stable tag: 2.1.1
    88Text Domain: swfput_l10n
    99License: GPLv3 or later
    … …  
    198198
    199199== Changelog ==
     200
     201= 2.1.1 =
     202* This release is called "Sigh" and its only change is a
     203    workaround for a chromium 3.4 bug -- not on the front end, but
     204    in the Visual editor plugin. You want details, you say? OK:
     205    this plugin's video in the tinymce visual editor is housed
     206    in an iframe element. The iframe was given, *for principle only*,
     207    a sandbox attribute (with the "allow-scripts" argument), even
     208    thought the content is generated by a plugin script and is a
     209    known quantity. This worked in the major browsers including the
     210    Chromium 22 and 3.[123] tested with, but Chromium 3.4 would
     211    no longer run scripts in the iframe. Persons-of-curiosity may
     212    web search 'chromium iframe scripts' and see at a glance that
     213    Chromium has dithered on this subject. Bottom line: the sandbox
     214    attribute is removed. Apologies for this release so soon after
     215    2.1 a few days ago.
    200216
    201217= 2.1 =
    … …  
    372388== Upgrade Notice ==
    373389
     390= 2.1.1 =
     391* Chromium 3,4 broken iframe handling will not run scripts
     392    with attribute sandbox="allowScripts", so sanbox is removed.
     393    Do web search 'Chromium iframe scripts' to see Chromium dither.
     394
    374395= 2.1 =
    375396* Several small bug fixes and improvements.

  • swfput/tags/2.1.1/swfput.php

    r906349 r907523  
    44Plugin URI: http://agalena.nfshost.com/b1/?page_id=46
    55Description: Add Flash and HTML5 video to WordPress posts, pages, and widgets, from arbitrary URI's or media library ID's or files in your media upload directory tree (including uploads not in the WordPress media library).
    6 Version: 2.1
     6Version: 2.1.1
    77Author: Ed Hynan
    88Author URI: http://agalena.nfshost.com/b1/
    … …  
    117117   
    118118    // this version
    119     const plugin_version = '2.1.0';
     119    const plugin_version = '2.1.1';
    120120   
    121121    // the widget class name

  • swfput/tags/2.1.1/version.sh

    r906349 r907523  
    33VMAJOR=2
    44VMINOR=1
    5 RMAJOR=0
     5RMAJOR=1
    66RMINOR=0
    77

  • swfput/trunk/Makefile

    r906349 r907523  
    22# License: GNU GPLv3 (see http://www.gnu.org/licenses/gpl-3.0.html)
    33
    4 PRJVERS = 2.1.0
     4PRJVERS = 2.1.1
    55PRJSTEM = swfput
    66PRJNAME = $(PRJSTEM)-$(PRJVERS)

  • swfput/trunk/README.html

    r906349 r907523  
    11<!-- Creator     : groff version 1.21 -->
    2 <!-- CreationDate: Thu May  1 11:21:32 2014 -->
     2<!-- CreationDate: Sat May  3 16:48:11 2014 -->
    33<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
    44"http://www.w3.org/TR/html4/loose.dtd">

  • swfput/trunk/js/editor_plugin.js

    r906349 r907523  
    300300                'width' : w,
    301301                'height' : h,
    302                 'sandbox' : "allow-same-origin allow-pointer-lock allow-scripts",
     302                // Argh!: Chromium 3.4 breaks with the sandbox attr.,
     303                // refusing to run scipts in the iframe. Up to 3.3
     304                // it was OK. Web search shows that chromium devs
     305                // have been dithering about this for some time.
     306                // IAC, source is never cross-origin or in any way
     307                // unknown. Removed.
     308                //'sandbox' : "allow-same-origin allow-pointer-lock allow-scripts",
    303309                //'allowfullscreen' : '',
    304310                //'seamless' : '',

  • swfput/trunk/js/editor_plugin.min.js

    r906349 r907523  
    3030var d=ev.clipboardData||dom.doc.dataTransfer;if(!d){return true;}
    3131var tx=tinymce.isIE?'Text':'text/plain';var rep=SWFPut_repl_nl(d.getData(tx));setTimeout(function(){ed.execCommand('mceInsertContent',false,rep);},1);ev.preventDefault();return tinymce.dom.Event.cancel(ev);});ed.SWFPut_Set_code=function(content){return parseShortcode(content);};ed.SWFPut_Get_code=function(content){return getShortcode(content);};var sc_map={};var newkey=function(){var r;do{r=''+parseInt(32768*Math.random()+16384);}while(r in sc_map);sc_map[r]={};return r;};var from_pseudo=function(node){if(!node)return node;var w,h,s,id,cl,rep=false;w=node.attr('width');h=node.attr('height');s=node.attr('src');cl=node.attr('class')||'';id=node.attr('id')||'';var k=(id!=='')?(id.split('-'))[1]:false;if(k){if(k in sc_map&&sc_map[k].node){rep=sc_map[k].node;}}
    32 if(!rep){rep=new Node('iframe',1);rep.attr({'id':id,'class':cl.indexOf('evh-pseudo')>=0?cl:(cl+' evh-pseudo'),'width':w,'height':h,'sandbox':"allow-same-origin allow-pointer-lock allow-scripts",'src':s});if(k&&k in sc_map){sc_map[k].node=rep;}}
     32if(!rep){rep=new Node('iframe',1);rep.attr({'id':id,'class':cl.indexOf('evh-pseudo')>=0?cl:(cl+' evh-pseudo'),'width':w,'height':h,'src':s});if(k&&k in sc_map){sc_map[k].node=rep;}}
    3333node.replace(rep);return node;};var to_pseudo=function(node,name){if(!node)return node;var w,h,s,id,cl,rep=false;id=node.attr('id')||'';cl=node.attr('class')||'';if(cl.indexOf('evh-pseudo')<0){return;}
    3434w=node.attr('width');h=node.attr('height');s=node.attr('src');var k=(id!=='')?(id.split('-'))[1]:false;if(k){if(k in sc_map&&sc_map[k].pnode){rep=sc_map[k].pnode;}}

  • swfput/trunk/js/editor_plugin3x.js

    r906349 r907523  
    333333                    'width' : w,
    334334                    'height' : h,
    335                     'sandbox' : "allow-same-origin allow-pointer-lock allow-scripts",
     335                // Argh!: Chromium 3.4 breaks with the sandbox attr.,
     336                // refusing to run scipts in the iframe. Up to 3.3
     337                // it was OK. Web search shows that chromium devs
     338                // have been dithering about this for some time.
     339                // IAC, source is never cross-origin or in any way
     340                // unknown. Removed.
     341                    //'sandbox' : "allow-same-origin allow-pointer-lock allow-scripts",
    336342                    //'allowfullscreen' : '',
    337343                    //'seamless' : '',

  • swfput/trunk/js/editor_plugin3x.min.js

    r906349 r907523  
    3333var tx=tinymce.isIE?'Text':'text/plain';var rep=SWFPut_repl_nl(d.getData(tx));setTimeout(function(){ed.execCommand('mceInsertContent',false,rep);},1);ev.preventDefault();return tinymce.dom.Event.cancel(ev);});ed.SWFPut_Set_code=function(content){return t._do_shcode(content);};ed.SWFPut_Get_code=function(content){return t._get_shcode(content);};},sc_map:{},newkey:function(){var r;do{r=''+parseInt(32768*Math.random()+16384);}while(r in this.sc_map);this.sc_map[r]={};return r;},from_pseudo:function(node,name){if(!node){return node;}
    3434var t=this;var w,h,s,id,cl,rep=false;w=node.attr('width');h=node.attr('height');s=node.attr('src');cl=node.attr('class')||'';id=node.attr('id')||'';var k=(id!=='')?(id.split('-'))[1]:false;if(k){if(k in t.sc_map&&t.sc_map[k].node){rep=t.sc_map[k].node;}}
    35 if(!rep){rep=new Node('iframe',1);rep.attr({'id':id,'class':cl.indexOf('evh-pseudo')>=0?cl:(cl+' evh-pseudo'),'width':w,'height':h,'sandbox':"allow-same-origin allow-pointer-lock allow-scripts",'src':s});if(k&&k in t.sc_map){t.sc_map[k].node=rep;}}
     35if(!rep){rep=new Node('iframe',1);rep.attr({'id':id,'class':cl.indexOf('evh-pseudo')>=0?cl:(cl+' evh-pseudo'),'width':w,'height':h,'src':s});if(k&&k in t.sc_map){t.sc_map[k].node=rep;}}
    3636node.replace(rep);return node;},to_pseudo:function(node,name){if(!node){return node;}
    3737var t=this;var w,h,s,id,cl,rep=false;id=node.attr('id')||'';cl=node.attr('class')||'';if(cl.indexOf('evh-pseudo')<0){return;}

  • swfput/trunk/locale/swfput_l10n-en_US.po

    r906349 r907523  
    1 # swfput 2.1.0 Pot Source
     1# swfput 2.1.1 Pot Source
    22# Copyright (C) 2013 Ed Hynan
    33# This file is distributed under the same license as the swfput package.
    … …  
    77msgid ""
    88msgstr ""
    9 "Project-Id-Version: swfput 2.1.0\n"
     9"Project-Id-Version: swfput 2.1.1\n"
    1010"Report-Msgid-Bugs-To: edhynan@gmail.com\n"
    11 "POT-Creation-Date: 2014-04-30 19:57-0400\n"
    12 "PO-Revision-Date: 2014-04-30 19:57 EDT\n"
     11"POT-Creation-Date: 2014-05-03 16:48-0400\n"
     12"PO-Revision-Date: 2014-05-03 16:48 EDT\n"
    1313"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
    1414"Language-Team: LANGUAGE <LL@li.org>\n"

  • swfput/trunk/locale/swfput_l10n.pot

    r906349 r907523  
    1 # swfput 2.1.0 Pot Source
     1# swfput 2.1.1 Pot Source
    22# Copyright (C) 2013 Ed Hynan
    33# This file is distributed under the same license as the swfput package.
    … …  
    77msgid ""
    88msgstr ""
    9 "Project-Id-Version: swfput 2.1.0\n"
     9"Project-Id-Version: swfput 2.1.1\n"
    1010"Report-Msgid-Bugs-To: edhynan@gmail.com\n"
    11 "POT-Creation-Date: 2014-04-30 19:57-0400\n"
     11"POT-Creation-Date: 2014-05-03 16:48-0400\n"
    1212"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
    1313"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"

  • swfput/trunk/readme.txt

    r906349 r907523  
    55Requires at least: 3.0.2
    66Tested up to: 3.9
    7 Stable tag: 2.1
     7Stable tag: 2.1.1
    88Text Domain: swfput_l10n
    99License: GPLv3 or later
    … …  
    198198
    199199== Changelog ==
     200
     201= 2.1.1 =
     202* This release is called "Sigh" and its only change is a
     203    workaround for a chromium 3.4 bug -- not on the front end, but
     204    in the Visual editor plugin. You want details, you say? OK:
     205    this plugin's video in the tinymce visual editor is housed
     206    in an iframe element. The iframe was given, *for principle only*,
     207    a sandbox attribute (with the "allow-scripts" argument), even
     208    thought the content is generated by a plugin script and is a
     209    known quantity. This worked in the major browsers including the
     210    Chromium 22 and 3.[123] tested with, but Chromium 3.4 would
     211    no longer run scripts in the iframe. Persons-of-curiosity may
     212    web search 'chromium iframe scripts' and see at a glance that
     213    Chromium has dithered on this subject. Bottom line: the sandbox
     214    attribute is removed. Apologies for this release so soon after
     215    2.1 a few days ago.
    200216
    201217= 2.1 =
    … …  
    372388== Upgrade Notice ==
    373389
     390= 2.1.1 =
     391* Chromium 3,4 broken iframe handling will not run scripts
     392    with attribute sandbox="allowScripts", so sanbox is removed.
     393    Do web search 'Chromium iframe scripts' to see Chromium dither.
     394
    374395= 2.1 =
    375396* Several small bug fixes and improvements.

  • swfput/trunk/swfput.php

    r906349 r907523  
    44Plugin URI: http://agalena.nfshost.com/b1/?page_id=46
    55Description: Add Flash and HTML5 video to WordPress posts, pages, and widgets, from arbitrary URI's or media library ID's or files in your media upload directory tree (including uploads not in the WordPress media library).
    6 Version: 2.1
     6Version: 2.1.1
    77Author: Ed Hynan
    88Author URI: http://agalena.nfshost.com/b1/
    … …  
    117117   
    118118    // this version
    119     const plugin_version = '2.1.0';
     119    const plugin_version = '2.1.1';
    120120   
    121121    // the widget class name

  • swfput/trunk/version.sh

    r906349 r907523  
    33VMAJOR=2
    44VMINOR=1
    5 RMAJOR=0
     5RMAJOR=1
    66RMINOR=0
    77
Note: See TracChangeset for help on using the changeset viewer.