1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
<script>
import {
getSandboxFrameSrc,
BUFFER_IFRAME_HEIGHT,
SANDBOX_ATTRIBUTES,
} from '../markdown/render_sandboxed_mermaid';
export default {
name: 'SandboxedMermaid',
props: {
source: {
type: String,
required: true,
},
},
data() {
return {
iframeHeight: BUFFER_IFRAME_HEIGHT,
sandboxFrameSrc: getSandboxFrameSrc(),
};
},
watch: {
source() {
this.updateDiagram();
},
},
mounted() {
window.addEventListener('message', this.onPostMessage, false);
},
destroyed() {
window.removeEventListener('message', this.onPostMessage);
},
methods: {
getSandboxFrameSrc,
onPostMessage(event) {
const container = this.$refs.diagramContainer;
if (event.source === container?.contentWindow) {
this.iframeHeight = Number(event.data.h) + BUFFER_IFRAME_HEIGHT;
}
},
updateDiagram() {
const container = this.$refs.diagramContainer;
// Potential risk associated with '*' discussed in below thread
// https://gitlab.com/gitlab-org/gitlab/-/merge_requests/74414#note_735183398
container.contentWindow?.postMessage(this.source, '*');
container.addEventListener('load', () => {
container.contentWindow?.postMessage(this.source, '*');
});
},
},
sandboxFrameSrc: getSandboxFrameSrc(),
sandboxAttributes: SANDBOX_ATTRIBUTES,
};
</script>
<template>
<iframe
ref="diagramContainer"
:src="$options.sandboxFrameSrc"
:sandbox="$options.sandboxAttributes"
frameborder="0"
scrolling="no"
width="100%"
:height="iframeHeight"
>
</iframe>
</template>
|
