svelte-component-gateway v0.0.5

Svelte Component Gateway

Grabs a compiled Svelte component (ES Module) from the interwebs and mounts it so it to the DOM, so you can check it out, use it, and run your data (props) through it.

Usage

Save a Svelte component to the internet (maybe using something like Web3 Repl Deploy) then paste the URL for the resulting es module / Svelte Component into this gateway.

This gateway will render the component and add the props so you can chekc it out.

TODO

• Pass in props in a variable way
• Pass in props according to Component props schema?
• Fetch improvements (Axios?)

iFrame TODO

• Sandbox the iframe for untrusted code execution
• Prevent fetch
• Prevent XMLHttpRequest
• Prevent WebSocket

• Prevent EventSource

• Prevent adding iframes to the iframe

• Prevent href anchors with searchParams
• Prevent all encodings (base64, unicode) injections
• Prevent re-adding the fetch API (is this even possible?)
• Check for eval?

API

Use the Gateway in your mini-apps:

*using Svelte to generate a CustomEvent

// YourApp.svelte

import { Gateway, CHANGE } from 'svelte-component-gateway'

// emit props on the CONSTANTS. CHANGE  variable
<script>
	import { createEventDispatcher } from 'svelte';

    // props
    export let count = 0

	const dispatch = createEventDispatcher();

    // emits count to consumers of
    // <Gateway on:change={handleCountChange} />
    function handleChange(event){
        dispatch(CHANGE, count)
    }
</script>

<Gateway esModule={ExampleComponent} on:change={handleChange} />

Vanilla JS

// yourscript.js

import { ExampleComponent } from ' some-Component-library'
import { Gateway, CHANGE } from 'svelte-component-gateway'

const gateway = new Gateway({
    target: document.getElementById('app'),
	props: {
		// assuming App.svelte contains something like
		// `export let answer`:
		esModule: ExampleComponent
})

gateway.$on('change',
    event => {
        // save them somewhere?
        console.log("The following properties changed: ", event.detail)
        }
)