5.6.5

@comet/[email protected]

Patch Changes

• cbec8f6: Prevent XSS attacks in isLinkTarget() validator

  This fixes a XSS vulnerability in the ExternalLinkBlock.

@comet/[email protected]

Patch Changes

• cbec8f6: Prevent XSS attacks in @IsLinkTarget() validator

  This fixes a XSS vulnerability in the ExternalLinkBlock.

4.8.1

@comet/[email protected]

Patch Changes

• cbec8f6: Prevent XSS attacks in isLinkTarget() validator

  This fixes a XSS vulnerability in the ExternalLinkBlock.

@comet/[email protected]

Patch Changes

• cbec8f6: Prevent XSS attacks in @IsLinkTarget() validator

  This fixes a XSS vulnerability in the ExternalLinkBlock.

6.3.0

@comet/[email protected]

Minor Changes

• 80e6fde: Show DAM import source in grid

  To show the "Source" column in the DAM's data grid, provide importSources in DamConfigProvider:

  <DamConfigProvider
      value={{
          ...
          importSources: {
              unsplash: {
                  label: <FormattedMessage id="dam.importSource.unsplash.label" defaultMessage="Unsplash" />,
              },
          },
      }}
  >
      ...
  </DamConfigProvider>

@comet/[email protected]

Minor Changes

• fc1b16f: Allow overriding the block context in BlocksTransformerService#transformToPlain

Patch Changes

• e2e2114: Fix parsing of contentScopeAnnotation in KubernetesService#getContentScope

5.6.4

@comet/[email protected]

Patch Changes

• 6bc4f1e: Add the x-preview-dam-urls header to our axios client

  Now the axios client always requests preview DAM urls just like the GraphQL client.

@comet/[email protected]

Patch Changes

• 6bc4f1e: Always use preview DAM URLs in the admin application

  This fixes a bug where the PDF preview in the DAM wouldn't work because the file couldn't be included in an iFrame on the admin domain.

  We already intended to use preview URLs everywhere in v5.3.0. However, the x-preview-dam-urls header wasn't passed correctly to the createFileUrl() method everywhere. As a result, preview URLs were only used in blocks but not in the DAM. Now, the DAM uses preview URLs as well.

4.8.0

@comet/[email protected]

Minor Changes

• 2ea794f: Add access logging to log information about the request to standard output. The log contains information about the requester and the request itself. This can be useful for fulfilling legal requirements regarding data integrity or for forensics.

  There are two ways to integrate logging into an application:

  First option: Use the default implementation

  imports: [
      ...
      AccessLogModule,
      ...
  ]

  Second option: Configure logging

  Use the shouldLogRequest to prevent logging for specific requests. For instance, one may filter requests for system users.

  imports: [
      ...
      AccessLogModule.forRoot({
          shouldLogRequest: ({user, req}) => {
              // do something
              return true; //or false
          },
      }),
      ...
  ]

  More information can be found in the documentation under 'Authentication > Access Logging'.

6.2.1

@comet/[email protected]

Patch Changes

• f145730: Ignore user permissions when using system user

  The UserPermissionsGuard didn't allow requests when using a system user (e.g., basic authorization during site build).

6.2.0

@comet/[email protected]

Minor Changes

• 75865ca: Deprecate isHref validator, IsHref decorator and IsHrefConstraint class.

  New versions isLinkTarget, IsLinkTarget and IsLinkTargetConstraint are added as replacement.

Patch Changes

• ad153c9: Add the x-preview-dam-urls header to our axios client

  Now the axios client always requests preview DAM urls just like the GraphQL client.

• 5dfe483: Prevent the document editor from losing its state when (re)gaining focus

  In v6.1.0 a loading indicator was added to the document editor (in PagesPage).
  This had an unwanted side effect: Focusing the edit page automatically causes a GraphQL request to check for a newer version of the document. This request also caused the loading indicator to render, thus unmounting the editor (EditComponent). Consequently, the local state of the editor was lost.

@comet/[email protected]

Minor Changes

• 75865ca: Deprecate isHref validator, IsHref decorator and IsHrefConstraint class.

  New versions isLinkTarget, IsLinkTarget and IsLinkTargetConstraint are added as replacement.

@comet/[email protected]

Minor Changes

• beeea1d: Remove availablePermissions-option in UserPermissionsModule

  Simply remove the Permission interface module augmentation and the availablePermissions-option from the application.

• 151e121: Support multiple @AffectedEntity()-decorators for a single function

Patch Changes

• 04afb3e: Fix attached document deletion when deleting a page tree node

• ad153c9: Always use preview DAM URLs in the admin application

  This fixes a bug where the PDF preview in the DAM wouldn't work because the file couldn't be included in an iFrame on the admin domain.

  We already intended to use preview URLs everywhere in v5.3.0. However, the x-preview-dam-urls header wasn't passed correctly to the createFileUrl() method everywhere. As a result, preview URLs were only used in blocks but not in the DAM. Now, the DAM uses preview URLs as well.

@comet/[email protected]

Minor Changes

• 34bb33f: Add SeoBlock

  Can be used as a drop-in replacement for SeoBlock defined in application code. Add a resolveOpenGraphImageUrlTemplate to resolve the correct image URL template when using a custom Open Graph image block.

  Example Default Use Case:

  <SeoBlock data={exampleData} title={"Some Example Title"} />

  Example Custom Use Case:

  <SeoBlock<SomeCustomImageBlockType>
      data={exampleData}
      title={"Some Example Title"}
      resolveOpenGraphImageUrlTemplate={(block) => block.some.path.to.urlTemplate}
  />

5.6.3

@comet/[email protected]

Patch Changes

• 651afef: Prevent the document editor from losing its state when (re)gaining focus

  In v5.6.1 a loading indicator was added to the document editor (in PagesPage).
  This had an unwanted side effect: Focusing the edit page automatically causes a GraphQL request to check for a newer version of the document. This request also caused the loading indicator to render, thus unmounting the editor (EditComponent). Consequently, the local state of the editor was lost.

5.6.2

@comet/[email protected]

Patch Changes

• 3a55904: Fix attached document deletion when deleting a page tree node

4.7.2

@comet/[email protected]

Patch Changes

• b201d49: Fix attached document deletion when deleting a page tree node