v13.49.0

Minor Release v13.49.0

Build

#3228 Track removal of unsafe-inline from CSP and refactor dynamic inline styles

Elyra Canvas can now handle a Content Security Policy (CSP) where style-src does not have to be set to 'unsafe-inline', which is a more secure way to run.

If you intend to configure your application this way please read the associated documentation to understand restrictions and what you need to do to prevent errors occurring, specifically with your icons and providing a nonce.

The Test harness has been modified to run either with no security policy or with a security policy where style-src is not set to 'unsafe-inline'. This can be changed using the CSP toggle switch in the test harness action bar.

You can examine the following files from the test harness

• application.js to see how it generates a nonce and
• App.js to see how it passes the nonce to Common Properties.

Common Canvas

• Bug fixes

Common Properties

• Bug fixes

---

Issues Resolved

• #3224 Get IBM telemetry to work correctly by @michaelcheungkm in #3225
• #3184 Auto-hide twisty panels when all their children are hidden by @amelial9 in #3209
• #3226 Allow Code Mirror styles to be customized independently of Carb… by @tomlyn in #3227
• #3234 Uncaught TypeError: t.closest is not a function by @tomlyn in #3235
• #3232 Prepare for unsafe-inline - toolbar by @tomlyn in #3233
• #3222 fix keyboard Enter on trash icon deleting subsequent ro… by @michaelcheungkm in #3223
• #3196 Fix button-in-button DOM nesting error in custom action by @rbeshay1 in #3192
• #3236 Prepare for unsafe-inline - color-picker by @tomlyn in #3237
• #3238 Prepare for unsafe-inline - floating toolbar & context menu by @tomlyn in #3239
• #3216 Set row_selection to 'none' on Expression Builder Custom Value table by @rbeshay1 in #3215
• #3240 Prepare for unsafe-inline - Layout Panels by @tomlyn in #3241
• #3242 Prepare for unsafe-inline - SVG Canvas by @tomlyn in #3243
• #3244 Prepare for unsafe-inline - common properties by @tomlyn in #3245
• #3250 Prepare for unsafe-inline - test harness by @tomlyn in #3251
• Bump body-parser from 1.20.4 to 1.20.6 in /canvas_modules/harness by @dependabot[bot] in #3253
• Bump postcss from 8.5.10 to 8.5.22 in /canvas_modules/harness by @dependabot[bot] in #3254
• Bump fast-uri from 3.1.2 to 3.1.4 in /canvas_modules/harness by @dependabot[bot] in #3255
• Bump ws from 7.5.10 to 7.5.13 in /canvas_modules/harness by @dependabot[bot] in #3257
• Bump dompurify from 3.4.11 to 3.4.12 in /canvas_modules/harness by @dependabot[bot] in #3252
• #3193 Fix Common Properties action button misalignment by @jsochava in #3206
• #3262 Add opacity to disabled text panels for visual cue by @amelial9 in #3263
• #3260 Prepare for unsafe-inline - Remove SVG inline styles by @tomlyn in #3261
• #3264 Prepare for unsafe-inline - Change drop shadow by @tomlyn in #3265
• #3228 Track removal of unsafe-inline from CSP and refactor dynamic in… by @tomlyn in #3256
• #3270 Fix Many messages displayed when running Jest tests by @jsochava in #3271
• #3273 keyboardConfig functionality seems to be not working as expected by @tomlyn in #3274
• #3275 Errors in Jest output running common-properties-test.js by @tomlyn in #3276
• #3268 Fix Toolbar button from right side not added to overflo… by @jsochava in #3269
• #3277 Add default styles for when palette_disabled by @tomlyn in #3278

New Contributors

• @michaelcheungkm made their first contribution in #3225
• @amelial9 made their first contribution in #3209

Full Changelog: v13.48.0...v13.49.0