gsxdsm
|
965f15f5ca
|
FN-8368: enforce browser-safe dashboard core imports
Prevent dashboard code from bypassing Vite's browser-safe core boundary.
- Add an allowlist-backed scanner for dashboard core value imports, including dynamic template imports.
- Run the scanner in test and merge-gate prechecks, with regression coverage and import guidance.
- Document reviewed browser-safe core leaves and Vite alias requirements.
Files changed:
docs/dashboard-guide.md | 6 +
package.json | 6 +-
packages/dashboard/vite.config.ts | 5 +
...no-node-only-core-imports-in-dashboard.test.mjs | 80 ++++++++++
...heck-no-node-only-core-imports-in-dashboard.mjs | 167 +++++++++++++++++++++
.../lib/dashboard-browser-safe-core-modules.json | 59 ++++++++
6 files changed, 320 insertions(+), 3 deletions(-)
Fusion-Task-Id: FN-8368
Fusion-Task-Lineage: 13e70672-d1da-430c-a360-0a714ad33d9f
Co-authored-by: Fusion (runfusion.ai) <noreply@runfusion.ai>
|
2026-07-19 14:08:51 -07:00 |
|