From 30325397d090cfffee1143f21423aff7bd4e6122 Mon Sep 17 00:00:00 2001
From: tza <marios8543@gmail.com>
Date: Tue, 5 Apr 2022 22:40:24 +0300
Subject: added plugin tile view isolation

Tile views will now run each in their own iframe. This makes it more safe as plugins no longer share the same javascript context, and plugin method calls can now be supported from the tile view.
---
 plugin_loader/templates/plugin_view.html | 51 +++++++++++++++++++++++++++-----
 1 file changed, 43 insertions(+), 8 deletions(-)

(limited to 'plugin_loader/templates')

diff --git a/plugin_loader/templates/plugin_view.html b/plugin_loader/templates/plugin_view.html
index d0275a7a..895931c4 100644
--- a/plugin_loader/templates/plugin_view.html
+++ b/plugin_loader/templates/plugin_view.html
@@ -1,13 +1,21 @@
 <link rel="stylesheet" href="/steam_resource/css/2.css">
 <link rel="stylesheet" href="/steam_resource/css/39.css">
 <link rel="stylesheet" href="/steam_resource/css/library.css">
-<script src="/static/library.js"></script>
+<script>
+    const tile_iframes = [];
+    window.addEventListener("message", function (evt) {
+        tile_iframes.forEach(iframe => {
+            iframe.contentWindow.postMessage(evt.data, "http://127.0.0.1:1337");
+        });
+    }, false);
+</script>
 
 {% if not plugins|length %}
-<div class="basicdialog_Field_ugL9c basicdialog_WithChildrenBelow_1RjOd basicdialog_InlineWrapShiftsChildrenBelow_3a6QZ basicdialog_ExtraPaddingOnChildrenBelow_2-owv basicdialog_StandardPadding_1HrfN basicdialog_HighlightOnFocus_1xh2W Panel Focusable" style="--indent-level:0;">
+<div class="basicdialog_Field_ugL9c basicdialog_WithChildrenBelow_1RjOd basicdialog_InlineWrapShiftsChildrenBelow_3a6QZ basicdialog_ExtraPaddingOnChildrenBelow_2-owv basicdialog_StandardPadding_1HrfN basicdialog_HighlightOnFocus_1xh2W Panel Focusable"
+    style="--indent-level:0;">
     <div class="basicdialog_FieldChildren_279n8" style="color: white; font-size: large; padding-top: 10px;">
         No plugins installed :(
-    </div>    
+    </div>
 </div>
 {% endif %}
 
@@ -15,15 +23,42 @@
     <div class="quickaccesscontrols_PanelSectionRow_26R5w">
         {% for plugin in plugins %}
         {% if plugin.tile_view_html|length %}
-        <div onclick="location.href = '/plugins/load/{{ plugin.name }}'" class="basicdialog_Field_ugL9c basicdialog_WithChildrenBelow_1RjOd basicdialog_InlineWrapShiftsChildrenBelow_3a6QZ basicdialog_ExtraPaddingOnChildrenBelow_2-owv basicdialog_StandardPadding_1HrfN basicdialog_HighlightOnFocus_1xh2W Panel Focusable" style="--indent-level:0;">
-            {{ plugin.tile_view_html|safe }}
+        <div onclick="location.href = '/plugins/load/{{ plugin.name }}'"
+            class="basicdialog_Field_ugL9c basicdialog_WithChildrenBelow_1RjOd basicdialog_InlineWrapShiftsChildrenBelow_3a6QZ basicdialog_ExtraPaddingOnChildrenBelow_2-owv basicdialog_StandardPadding_1HrfN basicdialog_HighlightOnFocus_1xh2W Panel Focusable"
+            style="--indent-level:0;">
+            <iframe id="tile_view_iframe_{{ plugin.name }}" style="display:block; padding: 0; border: none;"
+                src="/plugins/load_tile/{{ plugin.name }}"></iframe>
+            <script>
+                (function() {
+                    let iframe = document.getElementById("tile_view_iframe_{{ plugin.name }}");
+                    tile_iframes.push(document.getElementById("tile_view_iframe_{{ plugin.name }}"));
+                    iframe.onload = function() {
+                        let html = iframe.contentWindow.document.children[0];
+                        let last_height = 0;
+                        setInterval(function() {
+                            let height = iframe.contentWindow.document.children[0].scrollHeight;
+                            if (height != last_height) {
+                                iframe.height = height + "px";
+                                last_height = height;
+                            }
+                        }, 100);
+                        iframe.contentWindow.document.body.onclick = function () {
+                            location.href = '/plugins/load_main/{{ plugin.name }}';
+                        };
+                    }
+                })();
+            </script>
         </div>
         {% else %}
         <div class="quickaccesscontrols_PanelSectionRow_26R5w">
-            <div onclick="location.href = '/plugins/load/{{ plugin.name }}'" class="basicdialog_Field_ugL9c basicdialog_WithChildrenBelow_1RjOd basicdialog_InlineWrapShiftsChildrenBelow_3a6QZ basicdialog_ExtraPaddingOnChildrenBelow_2-owv basicdialog_StandardPadding_1HrfN basicdialog_HighlightOnFocus_1xh2W Panel Focusable" style="--indent-level:0;">
+            <div onclick="location.href = '/plugins/load_main/{{ plugin.name }}'"
+                class="basicdialog_Field_ugL9c basicdialog_WithChildrenBelow_1RjOd basicdialog_InlineWrapShiftsChildrenBelow_3a6QZ basicdialog_ExtraPaddingOnChildrenBelow_2-owv basicdialog_StandardPadding_1HrfN basicdialog_HighlightOnFocus_1xh2W Panel Focusable"
+                style="--indent-level:0;">
                 <div class="basicdialog_FieldChildren_279n8">
-                    <button type="button" tabindex="0" class="DialogButton _DialogLayout Secondary basicdialog_Button_1Ievp Focusable">{{ plugin.name }}</button>
-                </div>    
+                    <button type="button" tabindex="0"
+                        class="DialogButton _DialogLayout Secondary basicdialog_Button_1Ievp Focusable">{{ plugin.name
+                        }}</button>
+                </div>
             </div>
         </div>
         {% endif %}
-- 
cgit v1.2.3