diff --git a/symfony/stimulus-bundle/2.25/assets/controllers.json b/symfony/stimulus-bundle/2.25/assets/controllers.json new file mode 100644 index 00000000..a1c6e90c --- /dev/null +++ b/symfony/stimulus-bundle/2.25/assets/controllers.json @@ -0,0 +1,4 @@ +{ + "controllers": [], + "entrypoints": [] +} diff --git a/symfony/stimulus-bundle/2.25/assets/controllers/csrf_protection_controller.js b/symfony/stimulus-bundle/2.25/assets/controllers/csrf_protection_controller.js new file mode 100644 index 00000000..511fffa5 --- /dev/null +++ b/symfony/stimulus-bundle/2.25/assets/controllers/csrf_protection_controller.js @@ -0,0 +1,81 @@ +const nameCheck = /^[-_a-zA-Z0-9]{4,22}$/; +const tokenCheck = /^[-_/+a-zA-Z0-9]{24,}$/; + +// Generate and double-submit a CSRF token in a form field and a cookie, as defined by Symfony's SameOriginCsrfTokenManager +// Use `form.requestSubmit()` to ensure that the submit event is triggered. Using `form.submit()` will not trigger the event +// and thus this event-listener will not be executed. +document.addEventListener('submit', function (event) { + generateCsrfToken(event.target); +}, true); + +// When @hotwired/turbo handles form submissions, send the CSRF token in a header in addition to a cookie +// The `framework.csrf_protection.check_header` config option needs to be enabled for the header to be checked +document.addEventListener('turbo:submit-start', function (event) { + const h = generateCsrfHeaders(event.detail.formSubmission.formElement); + Object.keys(h).map(function (k) { + event.detail.formSubmission.fetchRequest.headers[k] = h[k]; + }); +}); + +// When @hotwired/turbo handles form submissions, remove the CSRF cookie once a form has been submitted +document.addEventListener('turbo:submit-end', function (event) { + removeCsrfToken(event.detail.formSubmission.formElement); +}); + +export function generateCsrfToken (formElement) { + const csrfField = formElement.querySelector('input[data-controller="csrf-protection"], input[name="_csrf_token"]'); + + if (!csrfField) { + return; + } + + let csrfCookie = csrfField.getAttribute('data-csrf-protection-cookie-value'); + let csrfToken = csrfField.value; + + if (!csrfCookie && nameCheck.test(csrfToken)) { + csrfField.setAttribute('data-csrf-protection-cookie-value', csrfCookie = csrfToken); + csrfField.defaultValue = csrfToken = btoa(String.fromCharCode.apply(null, (window.crypto || window.msCrypto).getRandomValues(new Uint8Array(18)))); + } + csrfField.dispatchEvent(new Event('change', { bubbles: true })); + + if (csrfCookie && tokenCheck.test(csrfToken)) { + const cookie = csrfCookie + '_' + csrfToken + '=' + csrfCookie + '; path=/; samesite=strict'; + document.cookie = window.location.protocol === 'https:' ? '__Host-' + cookie + '; secure' : cookie; + } +} + +export function generateCsrfHeaders (formElement) { + const headers = {}; + const csrfField = formElement.querySelector('input[data-controller="csrf-protection"], input[name="_csrf_token"]'); + + if (!csrfField) { + return headers; + } + + const csrfCookie = csrfField.getAttribute('data-csrf-protection-cookie-value'); + + if (tokenCheck.test(csrfField.value) && nameCheck.test(csrfCookie)) { + headers[csrfCookie] = csrfField.value; + } + + return headers; +} + +export function removeCsrfToken (formElement) { + const csrfField = formElement.querySelector('input[data-controller="csrf-protection"], input[name="_csrf_token"]'); + + if (!csrfField) { + return; + } + + const csrfCookie = csrfField.getAttribute('data-csrf-protection-cookie-value'); + + if (tokenCheck.test(csrfField.value) && nameCheck.test(csrfCookie)) { + const cookie = csrfCookie + '_' + csrfField.value + '=0; path=/; samesite=strict; max-age=0'; + + document.cookie = window.location.protocol === 'https:' ? '__Host-' + cookie + '; secure' : cookie; + } +} + +/* stimulusFetch: 'lazy' */ +export default 'csrf-protection-controller'; diff --git a/symfony/stimulus-bundle/2.25/assets/controllers/hello_controller.js b/symfony/stimulus-bundle/2.25/assets/controllers/hello_controller.js new file mode 100644 index 00000000..e847027b --- /dev/null +++ b/symfony/stimulus-bundle/2.25/assets/controllers/hello_controller.js @@ -0,0 +1,16 @@ +import { Controller } from '@hotwired/stimulus'; + +/* + * This is an example Stimulus controller! + * + * Any element with a data-controller="hello" attribute will cause + * this controller to be executed. The name "hello" comes from the filename: + * hello_controller.js -> "hello" + * + * Delete this file or adapt it for your use! + */ +export default class extends Controller { + connect() { + this.element.textContent = 'Hello Stimulus! Edit me in assets/controllers/hello_controller.js'; + } +} diff --git a/symfony/stimulus-bundle/2.25/assets/stimulus_bootstrap.js b/symfony/stimulus-bundle/2.25/assets/stimulus_bootstrap.js new file mode 100644 index 00000000..2689398a --- /dev/null +++ b/symfony/stimulus-bundle/2.25/assets/stimulus_bootstrap.js @@ -0,0 +1,2 @@ +// register any custom, 3rd party controllers here +// app.register('some_controller_name', SomeImportedController); diff --git a/symfony/stimulus-bundle/2.25/manifest.json b/symfony/stimulus-bundle/2.25/manifest.json new file mode 100644 index 00000000..ee04d19a --- /dev/null +++ b/symfony/stimulus-bundle/2.25/manifest.json @@ -0,0 +1,59 @@ +{ + "bundles": { + "Symfony\\UX\\StimulusBundle\\StimulusBundle": ["all"] + }, + "copy-from-recipe": { + "assets/": "assets/" + }, + "aliases": ["stimulus", "stimulus-bundle"], + "conflict": { + "symfony/framework-bundle": "<7.2", + "symfony/security-csrf": "<7.2", + "symfony/webpack-encore-bundle": "<2.0", + "symfony/flex": "<1.20.0 || >=2.0.0,<2.3.0" + }, + "add-lines": [ + { + "file": "webpack.config.js", + "content": [ + "", + " // enables the Symfony UX Stimulus bridge (used in assets/stimulus_bootstrap.js)", + " .enableStimulusBridge('./assets/controllers.json')" + ], + "position": "after_target", + "target": ".splitEntryChunks()" + }, + { + "file": "assets/app.js", + "content": [ + "import './stimulus_bootstrap.js';" + ], + "position": "top", + "warn_if_missing": true + }, + { + "file": "assets/stimulus_bootstrap.js", + "content": [ + "import { startStimulusApp } from '@symfony/stimulus-bridge';", + "", + "// Registers Stimulus controllers from controllers.json and in the controllers/ directory", + "export const app = startStimulusApp(import.meta.webpackContext('@symfony/stimulus-bridge/lazy-controller-loader!./controllers', {", + " recursive: true,", + " regExp: /\\.[jt]sx?$/,", + "}));" + ], + "position": "top", + "requires": "symfony/webpack-encore-bundle" + }, + { + "file": "assets/stimulus_bootstrap.js", + "content": [ + "import { startStimulusApp } from '@symfony/stimulus-bundle';", + "", + "const app = startStimulusApp();" + ], + "position": "top", + "requires": "symfony/asset-mapper" + } + ] +} diff --git a/symfony/webpack-encore-bundle/2.2/assets/app.js b/symfony/webpack-encore-bundle/2.2/assets/app.js new file mode 100644 index 00000000..85065048 --- /dev/null +++ b/symfony/webpack-encore-bundle/2.2/assets/app.js @@ -0,0 +1,9 @@ +/* + * Welcome to your app's main JavaScript file! + * + * We recommend including the built version of this JavaScript file + * (and its CSS file) in your base layout (base.html.twig). + */ + +// any CSS you import will output into a single css file (app.css in this case) +import './styles/app.css'; diff --git a/symfony/webpack-encore-bundle/2.2/assets/styles/app.css b/symfony/webpack-encore-bundle/2.2/assets/styles/app.css new file mode 100644 index 00000000..cb33b131 --- /dev/null +++ b/symfony/webpack-encore-bundle/2.2/assets/styles/app.css @@ -0,0 +1,3 @@ +body { + background-color: lightgray; +} diff --git a/symfony/webpack-encore-bundle/2.2/config/packages/webpack_encore.yaml b/symfony/webpack-encore-bundle/2.2/config/packages/webpack_encore.yaml new file mode 100644 index 00000000..4c009ee4 --- /dev/null +++ b/symfony/webpack-encore-bundle/2.2/config/packages/webpack_encore.yaml @@ -0,0 +1,45 @@ +webpack_encore: + # The path where Encore is building the assets - i.e. Encore.setOutputPath() + output_path: '%kernel.project_dir%/public/build' + # If multiple builds are defined (as shown below), you can disable the default build: + # output_path: false + + # Set attributes that will be rendered on all script and link tags + script_attributes: + defer: true + # Uncomment (also under link_attributes) if using Turbo Drive + # https://turbo.hotwired.dev/handbook/drive#reloading-when-assets-change + # 'data-turbo-track': reload + # link_attributes: + # Uncomment if using Turbo Drive + # 'data-turbo-track': reload + + # If using Encore.enableIntegrityHashes() and need the crossorigin attribute (default: false, or use 'anonymous' or 'use-credentials') + # crossorigin: 'anonymous' + + # Preload all rendered script and link tags automatically via the HTTP/2 Link header + # preload: true + + # Throw an exception if the entrypoints.json file is missing or an entry is missing from the data + # strict_mode: false + + # If you have multiple builds: + # builds: + # frontend: '%kernel.project_dir%/public/frontend/build' + + # pass the build name as the 3rd argument to the Twig functions + # {{ encore_entry_script_tags('entry1', null, 'frontend') }} + +framework: + assets: + json_manifest_path: '%kernel.project_dir%/public/build/manifest.json' + +#when@prod: +# webpack_encore: +# # Cache the entrypoints.json (rebuild Symfony's cache when entrypoints.json changes) +# # Available in version 1.2 +# cache: true + +#when@test: +# webpack_encore: +# strict_mode: false diff --git a/symfony/webpack-encore-bundle/2.2/manifest.json b/symfony/webpack-encore-bundle/2.2/manifest.json new file mode 100644 index 00000000..086ced83 --- /dev/null +++ b/symfony/webpack-encore-bundle/2.2/manifest.json @@ -0,0 +1,42 @@ +{ + "bundles": { + "Symfony\\WebpackEncoreBundle\\WebpackEncoreBundle": ["all"] + }, + "copy-from-recipe": { + "assets/": "assets/", + "config/": "%CONFIG_DIR%/", + "package.json": "package.json", + "webpack.config.js": "webpack.config.js" + }, + "aliases": ["encore", "webpack", "webpack-encore"], + "gitignore": [ + "/node_modules/", + "/%PUBLIC_DIR%/build/", + "npm-debug.log", + "yarn-error.log" + ], + "conflict": { + "symfony/framework-bundle": "<5.4", + "symfony/flex": "<1.20.0 || >=2.0.0,<2.3.0" + }, + "add-lines": [ + { + "file": "templates/base.html.twig", + "content": [ + " {{ encore_entry_script_tags('app') }}" + ], + "position": "after_target", + "target": "{% block javascripts %}", + "warn_if_missing": true + }, + { + "file": "templates/base.html.twig", + "content": [ + " {{ encore_entry_link_tags('app') }}" + ], + "position": "after_target", + "target": "{% block stylesheets %}", + "warn_if_missing": true + } + ] +} diff --git a/symfony/webpack-encore-bundle/2.2/package.json b/symfony/webpack-encore-bundle/2.2/package.json new file mode 100644 index 00000000..4b762134 --- /dev/null +++ b/symfony/webpack-encore-bundle/2.2/package.json @@ -0,0 +1,20 @@ +{ + "devDependencies": { + "@babel/core": "^8.0.0", + "@babel/preset-env": "^8.0.0", + "@symfony/webpack-encore": "^7.0.0", + "babel-plugin-polyfill-corejs3": "^1.0.0", + "core-js": "^3.49.0", + "regenerator-runtime": "^0.13.9", + "webpack": "^5.82", + "webpack-cli": "^7.0.0" + }, + "license": "UNLICENSED", + "private": true, + "scripts": { + "dev-server": "encore dev-server", + "dev": "encore dev", + "watch": "encore dev --watch", + "build": "encore production --progress" + } +} diff --git a/symfony/webpack-encore-bundle/2.2/post-install.txt b/symfony/webpack-encore-bundle/2.2/post-install.txt new file mode 100644 index 00000000..d0ca6c4b --- /dev/null +++ b/symfony/webpack-encore-bundle/2.2/post-install.txt @@ -0,0 +1,9 @@ + * Install NPM and run npm install + + * Compile your assets for development: npm run dev + + * Compile your assets for development and watch for any modifications: npm run watch + + * Or start the development server: npm run dev-server + + * Compile your assets for production: npm run build diff --git a/symfony/webpack-encore-bundle/2.2/webpack.config.js b/symfony/webpack-encore-bundle/2.2/webpack.config.js new file mode 100644 index 00000000..cc872fe2 --- /dev/null +++ b/symfony/webpack-encore-bundle/2.2/webpack.config.js @@ -0,0 +1,78 @@ +import Encore from '@symfony/webpack-encore'; + +// Manually configure the runtime environment if not already configured yet by the "encore" command. +// It's useful when you use tools that rely on webpack.config.js file. +if (!Encore.isRuntimeEnvironmentConfigured()) { + Encore.configureRuntimeEnvironment(process.env.NODE_ENV || 'dev'); +} + +Encore + // directory where compiled assets will be stored + .setOutputPath('public/build/') + // public path used by the web server to access the output path + .setPublicPath('/build') + // only needed for CDN's or subdirectory deploy + //.setManifestKeyPrefix('build/') + + /* + * ENTRY CONFIG + * + * Each entry will result in one JavaScript file (e.g. app.js) + * and one CSS file (e.g. app.css) if your JavaScript imports CSS. + */ + .addEntry('app', './assets/app.js') + + // When enabled, Webpack "splits" your files into smaller pieces for greater optimization. + .splitEntryChunks() + + // will require an extra script tag for runtime.js + // but, you probably want this, unless you're building a single-page app + .enableSingleRuntimeChunk() + + /* + * FEATURE CONFIG + * + * Enable & configure other features below. For a full + * list of features, see: + * https://symfony.com/doc/current/frontend.html#adding-more-features + */ + .cleanupOutputBeforeBuild() + + // Displays build status system notifications to the user + // .enableBuildNotifications() + + .enableSourceMaps(!Encore.isProduction()) + // enables hashed filenames (e.g. app.abc123.css) + .enableVersioning(Encore.isProduction()) + + // Configure JS and CSS minimizers + // .configureJsMinimizerPlugin((options, MinimizerPlugin) => { + // options.minify = MinimizerPlugin.esbuildMinify + // }) + // .configureCssMinimizerPlugin((options, MinimizerPlugin) => { + // options.minify = MinimizerPlugin.lightningCssMinify; + // }) + + // configure Babel + .configureBabel((config) => { + config.plugins.push(['polyfill-corejs3', { method: 'usage-global', version: '3.49' }]); + }) + + // enables Sass/SCSS support + //.enableSassLoader() + + // uncomment if you use TypeScript + //.enableTypeScriptLoader() + + // uncomment if you use React + //.enableReactPreset() + + // uncomment to get integrity="..." attributes on your script & link tags + // requires WebpackEncoreBundle 1.4 or higher + //.enableIntegrityHashes(Encore.isProduction()) + + // uncomment if you're having problems with a jQuery plugin + //.autoProvidejQuery() +; + +export default await Encore.getWebpackConfig();