diff options
Diffstat (limited to 'AGENTS.md')
| -rw-r--r-- | AGENTS.md | 21 |
1 files changed, 20 insertions, 1 deletions
@@ -194,7 +194,26 @@ internal/web/ server.go (host router, middleware, render helpers) return every row along with the error; a bad link stays as a row to fix). `POST /b/{sub}/design/reset` stores `DefaultTheme()` and calls `ResetModules`. `GET /b/{sub}/layout` (the old tab) redirects to - `/design#columns`. + `/design#columns`. **Header preview** (`POST /b/{sub}/design/preview`, + `handleDesignPreview`, `blog/preview.html`): the Menu card's frame. The + handler reads the form exactly as a save would (theme, modules, menu — + errors ignored, what was sent is shown), drops the banner, and executes the + `preview` template alone (a whole small page: blog.css, the theme CSS, the + `siteheader` template) — never the layout. Because the dashboard is on the + root host, where `/media` is the root blog's files, the page's images and + fonts are linked through `view.Media` (`/media` from `renderStatus`, + `/b/<sub>/media` here; the theme CSS through `Theme.CSSAt`). The script + POSTs the form (file inputs dropped) 300 ms after any change — `touch()` + schedules it, so module order counts too — into + `<iframe sandbox="allow-same-origin" srcdoc>`: same origin, unlike the + editor's HTML preview, because the session cookie is `SameSite=Lax` and an + opaque origin would not send it for those images; safe only while no header + module kind is owner HTML (all four are template-escaped) and there is no + `allow-scripts`. The frame runs no scripts, so the dashboard's script folds + the menu inside it the way the blog's own script does (`fitFrame`), sizes + the frame to the header, and re-runs on the frame's `change` (the fold + button) and on the Wide/Phone toggle (the frame at 380px, so blog.css's + phone rules apply). - **Theme** (`web/theme.go`): struct stored as jsonb on `settings.theme`. `ParseTheme` merges over `DefaultTheme()` and `normalize()` clamps every value to an allowlist (hex colours, enum strings, uuid image ids, column |