stwaidele/dorfteich
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 22 Wiki Activity

CSP data:-Fonts + Doku: Excalidraw als sechstes Standard-Plugin #143

Merged
fable-5 merged 2 commits from excalidraw-demo-docs into main 2026-07-19 22:41:27 +02:00
Conversation 0 Commits 2 Files Changed 10 +57 -19

2 Commits

Author SHA1 Message Date
Claude Fable 5
2fe9374f16 Doku: Excalidraw als sechstes Standard-Plugin ergänzt
All checks were successful
CI / Import/export fidelity gate (pull_request) Successful in 54s
Details
CI / Lint, typecheck, test (pull_request) Successful in 4m25s
Details
CD / Build and push images (push) Successful in 17s
Details
Release / Build release images and notes (push) Successful in 1m18s
Details
CD / Smoke tests against Test (push) Successful in 1m18s
Details
CI / Build container images (push) Has been skipped
Details
CI / Import/export fidelity gate (push) Successful in 59s
Details
CI / Build container images (pull_request) Successful in 3m49s
Details
CI / Auth e2e pack (pull_request) Successful in 6m47s
Details
CD / Deploy to Test (push) Successful in 11s
Details
CD / Promote to Int (push) Successful in 11s
Details
Release / Release-candidate operations QA (push) Successful in 45s
Details
Prod deploy / Deploy the released images to Prod (push) Successful in 15s
Details
CI / Lint, typecheck, test (push) Successful in 4m36s
Details
CI / Auth e2e pack (push) Successful in 6m54s
Details 
- Tutorial K19: neue Sektion „Excalidraw — Skizzen wie von Hand" mit
  Nadias Bühnenplan-Beispiel (konzerte-live); Intro fünf→sechs Plugins.
- Tutorial K18: fünf→sechs Standard-Plugins.
- Site-Admin-Guide (en+de): Referenzliste + Build-Namensliste +
  Build-Hinweis (~16-MiB-ZIP aus npm).
- plugin-architecture.md: Referenz-Eintrag excalidraw (npm-Library-
  Spielart des Bundled-App-Pfads, {scene, svg}).
- developer/extending (en+de): Excalidraw als zweite Bundled-App-Variante.

Holt die in #136 zugesagten Doku-Ergänzungen nach. Screenshot für K19
folgt nach dem CSP-Deploy (damit die Handschrift korrekt rendert).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0155v2aT8AG1kZDQEZiCLBWC
 2026-07-19 22:27:17 +02:00
Claude Fable 5
75ec7f6006 CSP: data:-Fonts erlauben (eingebettete Fonts in Excalidraw-SVGs) 
Excalidraw bettet beim Speichern die verwendeten Schrift-Subsets als
data:-URIs ins Snapshot-SVG ein. Die Seiten-CSP (nginx) und die
Plugin-Frame-CSP erlaubten aber nur `font-src 'self'` bzw. den
Asset-Pfad — die Handschrift fiel in der öffentlichen Ansicht und im
Snapshot-Render auf Serifen zurück (auf Prod an der ersten Demo-Skizze
sichtbar). Fix: `data:` in beiden font-src-Direktiven. data:-Fonts
lösen keinerlei Netzwerk-Request aus — die Zero-Third-Party-Garantie
(security.md) bleibt unberührt; fonts.ts-Kommentar entsprechend
präzisiert.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0155v2aT8AG1kZDQEZiCLBWC
 2026-07-19 22:27:17 +02:00