chore(playground): expose all public composables in repl (f400bc6)#290
Merged
Conversation
Syncs upstream nuxt/ui commit f400bc6. In the REPL playground, replace the
hardcoded composable list with one derived from publicComposables (the
auto-import source of truth) and generate the window assignments dynamically,
so REPL code can call every auto-imported composable without a hand list.
- playgrounds/repl/src/App.vue: import publicComposables from ../../../src/imports,
const composables = Object.values(publicComposables).flat(), and rewrite
importCode to `import b24Ui, { ${composables.join(', ')} } from
'@bitrix24/b24ui-builtin'` + dynamic `window.X = X` assignments.
The new list matches b24ui's real auto-import surface (drops the previously
hardcoded useColorMode, which isn't in publicComposables; adds the many that
were missing). Playground/repl only, not in the ci gate — verified via
pnpm repl:build. Suite: 5557 passed / 6 skipped.
Ledger: cursor -> f400bc6; previous entry f8c0850 reconciled to PR #289.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JS8ypVfQSFzYVZzkTHhURb
IgorShevchik
added a commit
that referenced
this pull request
Jul 20, 2026
…a172ef) (#291) Syncs upstream nuxt/ui commit 2a172ef (#6741) — security fix. The search-highlight helper detected already-escaped HTML entities and skipped re-escaping, letting an attacker bypass escaping by injecting a stray entity — an XSS in CommandPalette result highlighting. - src/runtime/utils/search.ts: remove isAlreadyEscaped()/sanitize() and replace the three sanitize() calls in highlight()'s generateHighlightedText with escapeHTML(). sanitizeSnippet() already used escapeHTML directly (untouched). - test/utils/search.spec.ts: import highlight and add the four upstream XSS regression tests (injected tag in unmatched tail, entity-bypass regression, special chars around a highlight, no-match undefined case). highlight output for normal input is unchanged -> no snapshot churn. Suite: 5565 passed / 6 skipped. Ledger: cursor -> 2a172ef; previous entry f400bc6 reconciled to PR #290. Claude-Session: https://claude.ai/code/session_01JS8ypVfQSFzYVZzkTHhURb Co-authored-by: Shevchik Igor <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Syncs upstream nuxt/ui commit
f400bc6— chore(playground): expose all public composables in repl.What
In the REPL playground, replace the hand-maintained composable list with one derived from
publicComposables(the auto-import source of truth), generating both the import and thewindow.<name> = <name>assignments dynamically — so REPL code can call every auto-imported composable without an explicit import.b24ui port
playgrounds/repl/src/App.vue— importpublicComposablesfrom../../../src/imports(b24ui's own auto-import registry),const composables = Object.values(publicComposables).flat(), and rewriteimportCodetoimport b24Ui, { ${composables.join(', ')} } from '@bitrix24/b24ui-builtin'plus dynamicwindow.X = Xassignments (kept b24ui'sb24Uidefault import +@bitrix24/b24ui-builtinsource).useColorModeis dropped (it isn't inpublicComposables— a commented@todo), and the many composables missing from the old hand list (defineLocale, useContentSearch, useFileUpload, useFormField, useKbd, useResizable, useScrollShadow, useScrollspy, useTour, useLocale, …) are now exposed.Tests
Playground/repl only — not part of the
cigate. Verified withpnpm repl:build(builds clean). Normal suite unchanged: 5557 passed / 6 skipped.Verify (
CI=true)dev:prepare·lint·typecheck·test·build(+repl:build) — all green.Ledger: cursor advanced to
f400bc6; previous entryf8c0850reconciled to PR #289.🤖 Generated with Claude Code
Generated by Claude Code