grapesjs

Free and Open source Web Builder Framework. Next generation tool for building templates without coding

nocode framework drag-and-drop site-builder site-generator template-builder ui-builder web-builder web-builder-framework website-builder no-code page-builder

History

Gxrvish ec434402eb feat(csp): drop inline style attributes from editor markup The editor builds most of its chrome by assigning HTML strings, so every `style="..."` literal in a template is parsed as an inline style attribute and blocked by a strict `style-src-attr` policy. `setAttribute('style', ...)` has the same problem. CSSOM writes (`el.style.prop = value`) are not covered by CSP, so they are the way to apply values only known at runtime. Static styles move to utility classes, adding `gjs-pointer-events-all` and `gjs-clear-float` next to the existing `gjs-hidden` and `gjs-no-pointer-events`: canvas and frame tools, frame remove icon, modal collector, device add button and the float clearers in the asset manager, file uploader, modal and style manager. Runtime values move to the CSSOM through a new `setStyleText` helper, which applies a declaration string property by property. It splits only on top-level `;`, so data URLs and quoted values survive, and it keeps `!important` and custom properties: asset preview background, navigator indentation, style manager layer preview, select option styles in the style and trait managers, RTE action `style` attributes, the canvas iframe component and the color picker swatches. Elements whose visibility is toggled at runtime by resetting the inline display keep using the CSSOM for their initial state, so the toggles still work. The style manager clear button instead switches to toggling `gjs-hidden`, since its update is debounced and a class avoids a flash on render. Out of scope: the `style` attribute of user components (`ComponentView`), which is the content the editor exists to author, and the SVG image placeholder, which is serialized to a base64 data URL and governed by `img-src`. Both are recorded in the allowlist of the new guard spec.		2 months ago
..
_gjs_assets.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_blocks.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_canvas.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_category_general.scss	feat(csp): drop inline style attributes from editor markup	2 months ago
_gjs_code_manager.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_commands.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_devices.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_file_uploader.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_inputs.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_layers.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_main_mixins.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_modal.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_panels.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_root.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_rte.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_selectors.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_spectrum.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_status.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_style_manager.scss	Fix border radius order (#6740)	6 months ago
_gjs_traits.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
_gjs_vars.scss	Remove deprecated @import commands from SASS files (#6426)	2 years ago
main.scss	Fix scss path error in windows (#6440)	2 years ago
spectrum.scss	feat(csp): drop inline style attributes from editor markup	2 months ago