BitSquare/Codeman
2
0
Fork 0
mirror of https://github.com/Ark0N/Codeman.git synced 2026-10-11 01:39:41 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat(preview): render XLSX spreadsheets in the file-preview overlay

Browse Source 
xlsx files were download-only. Add a read-only, virtualized preview (sheet
tabs, number formats, merges, theme colours) parsed entirely in a browser
Web Worker with exceljs and fflate, loaded only when a spreadsheet is
opened. The workbook is checked against ZIP-bomb, entry and cell limits
before exceljs loads; cell text is written with textContent, formulas are
never evaluated and nothing referenced by the workbook is fetched. On the
server xlsx only joins the existing allowlist and classification, with a
10 MB cap on ?preview=true. xls and ods stay download-only.
This commit is contained in:
Aamer Akhter
2026-09-26 23:13:21 -04:00
parent 45ea2e1d32
commit 0b122e2c76
27 changed files with 3765 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/postinstall.js
+16
View File
@@ -341,6 +341,22 @@ if (isGlobalInstall) {
}
}
// ----------------------------------------------------------------------------
// 4a. Copy the XLSX preview's browser bundles (exceljs, fflate) into
// src/web/public/vendor/ for dev mode. The build does the same into dist/.
// ----------------------------------------------------------------------------
if (!isGlobalInstall) {
try {
execSync(`node "${join(import.meta.dirname, 'prepare-spreadsheet-assets.mjs')}"`, { stdio: 'pipe' });
console.log(colors.green('✓ Spreadsheet preview vendor files prepared'));
} catch (err) {
hasWarnings = true;
console.log(colors.yellow('⚠ Failed to prepare spreadsheet preview vendor files'));
console.log(colors.dim(` ${err.message}`));
}
}
// ----------------------------------------------------------------------------
// 4b. Fetch gesture-overlay runtime assets (MediaPipe wasm + model) for dev mode
// (src/web/public/gesture/). Opt-in feature (CODEMAN_GESTURE=1); non-fatal.