2382 Commits

Author SHA1 Message Date
Mark Gibson
94623d1129
Fix hx-on/hx-on:* to suppress evaluation if allowEval is false (#1682)
* Added more tests for allowEval=false

* Wrap hx-on event handlers in maybeEval

* Create and cache hx-on function on first event trigger.
2023-08-24 12:11:00 -06:00
Denis Palashevskii
212c9fbd3a
[websocket] pass hx-target id in the HEADERS (#1674)
Previously, ws.js used `ws-connect` element as target when collecting request headers.
Now it correctly takes `hx-target` attribute into account
2023-08-24 12:09:22 -06:00
Alexander Petros
93bd81b6d0
Track DOM content loaded for ready() function (#1688)
Track whether DOMContentLoaded has been fired
2023-08-16 16:42:09 -06:00
Alexander Petros
bfd7965dec
Disable logAll in headless mode (#1673)
Enabling logAll in just one test has the capacity to overwhelm the CI
with log output, so we disable it if the webdriver is automated.
2023-08-06 18:06:17 -06:00
Alexander Petros
c126d90588
Move load tests to the bottom of the core file (#1677)
This "resolves" a timing bug that was ocurring in the CI, where these
tests would run before htmx was loaded (only in the GitHub actions
servers). Not proud of this as a fix but I would like the CI to work
again ASAP.
2023-08-05 16:15:49 -06:00
Alexander Petros
347ce7a19f
Add interactive check to ready event handler (#1672)
If HTMX is imported in a module the readyState is "interactive"
so the extension processing happens too late. This would fix it.

Co-authored-by: Dave Syer <david_syer@hotmail.com>
2023-08-04 17:10:26 -06:00
Carson Gross
295d9f83eb remove a logAll() 2023-08-04 17:05:42 -06:00
Carson Gross
14e2a8c611 Merge remote-tracking branch 'origin/dev' into dev 2023-08-04 14:59:19 -06:00
Carson Gross
1acbbe5057 add test to ensure I don't screw up the sameHost value 2023-08-04 14:59:10 -06:00
Alexander Petros
fc4723c95f
Remove logAll from tests (#1657) 2023-08-01 18:04:44 -05:00
Dominik Kozaczko
193cb67393
Cleaner Bootstrap 5 modals example. (#1111)
* Cleaner Bootstrap 5 example.

* Update window id

* Update close button

* Got it working
2023-08-01 14:41:17 -05:00
Vincent
efb42e09cf
[Performance] Fast path to resolve body selector (#1545)
Fast path to resolve body selector
2023-08-01 14:35:25 -05:00
Adam McKay
67b8e1edfa
Update same site security to use origin (#1656)
Update same site security check to compare origin

thank you!
2023-08-01 14:30:36 -05:00
Carson Gross
36e6a426f9 security improvement
- add the `htmx.config.allowScriptTags` option
2023-07-31 12:12:44 -06:00
Carson Gross
19cb15caef security improvements
- add the `htmx.config.selfRequestsOnly` option
- add the `htmx:validateUrl` event
- better security documentation (incomplete, need to finish CORS)
2023-07-31 11:31:42 -06:00
Carson Gross
61945431aa changelog for release v1.9.4 2023-07-25 14:03:41 -06:00
Carson Gross
f3a6975b8e prep 1.9.4 release 2023-07-25 13:39:48 -06:00
Carson Gross
4cb85e9856 Merge remote-tracking branch 'origin/dev' into dev 2023-07-25 12:56:19 -06:00
Vincent
88a57cbc39
[Bugfix] Fix submit buttons/inputs handling (#1559)
* Fix submit buttons/inputs handling

* Removed useless concatenation

* Don't initNode links and forms that shouldn't be initialized

* Removed selectors filtering to alleviate PR

* Add @1cg 's addValueToValues function to factor code

* Use formValues variable for clicked button's value including
2023-07-25 12:55:22 -06:00
Vincent
6d1adc853f
[Bugfix] Fix hx-trigger changed modifier along from clause (#1571)
Fix hx-trigger changed modifier along from clause #1565
2023-07-22 08:39:28 -06:00
Vincent
a29403f4b7
[Bugfix] Fix references to element.id (#1563)
Fix references to element.id
2023-07-22 08:37:42 -06:00
Oliver Djursing
c59fe799e8
Update hx-trigger throttle documentation (#1609) 2023-07-20 14:29:13 -04:00
Alexander Petros
131c025143
Update contribution guidelines (#1614) 2023-07-20 10:32:05 -04:00
Oliver Djursing
4645ab0920
Add background-color to body element (#1607) 2023-07-19 10:42:20 -04:00
Elnu
65bd1e15b2
Fix hx-on:* examples to use kebab-case event names, add clarification (#1611) 2023-07-18 18:41:52 -04:00
Vincent
91d06309dc
[New feature] Comma separated list syntax for HX-Trigger response header (#1479)
* Comma separated list syntax for HX-Trigger response header

* Fix wording
2023-07-18 13:10:43 -06:00
Vincent
e89c9c6402
[Bugfix] Handle dynamically added hx-disable (#1567)
Handle dynamically added hx-disable, clean up element #1176
2023-07-18 10:12:28 -06:00
matiboy
f20791c55c
Add tests for HX Retarget and fix typo (#1600)
Co-authored-by: mat <matt@techspace.asia>
2023-07-18 10:10:39 -06:00
Adam Gent
2534a970b6
Add JStachio to list of template engines supporting fragments (#1606) 2023-07-18 11:55:55 -04:00
JackWithOneEye
8bbcc235a9
Fix: hx-on event listener clean-up (#1586)
fix: hx-on listener clean-up
2023-07-17 15:08:12 -06:00
Alexander Petros
449fc9df04
Remove engine from package.json (#1589)
The engine is intended to signify that node 15 should be used for
development, but it's causing issues for people who have node in
"strict-engine" mode.
2023-07-17 15:05:13 -06:00
Vincent
dff8f3355f
[Bugfix] Fix ie11 incompatible syntax (#1591)
Fix IE11 incompatible syntax
2023-07-17 15:04:04 -06:00
Viktor Szépe
b085d89459
Fix assorted comment typos (#1590) 2023-07-17 11:36:04 -04:00
dependabot[bot]
6336ad6113
Bump golang.org/x/crypto in /www/static/test/1.9.3/test/realtime (#1596)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.0.0-20210817164053-32db794688a5 to 0.1.0.
- [Commits](https://github.com/golang/crypto/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-17 11:08:51 -04:00
dependabot[bot]
ac817463a1
Bump golang.org/x/net in /www/static/test/1.9.3/test/realtime (#1594)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20211015210444-4f30a5c0130f to 0.7.0.
- [Commits](https://github.com/golang/net/commits/v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-17 11:05:54 -04:00
dependabot[bot]
8893b8c522
Bump golang.org/x/sys in /www/static/test/1.9.3/test/realtime (#1593)
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.0.0-20211103235746-7861aae1554b to 0.1.0.
- [Commits](https://github.com/golang/sys/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-17 10:48:21 -04:00
dependabot[bot]
90f72e97e5
Bump github.com/labstack/echo/v4 (#1592)
Bumps [github.com/labstack/echo/v4](https://github.com/labstack/echo) from 4.3.0 to 4.9.0.
- [Release notes](https://github.com/labstack/echo/releases)
- [Changelog](https://github.com/labstack/echo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/labstack/echo/compare/v4.3.0...v4.9.0)

---
updated-dependencies:
- dependency-name: github.com/labstack/echo/v4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-17 10:40:44 -04:00
dependabot[bot]
cb184cf634
Bump golang.org/x/crypto in /www/static/test/1.9.3/test/servers/ws (#1576)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.0.0-20210322153248-0c34fe9e7dc2 to 0.1.0.
- [Commits](https://github.com/golang/crypto/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-17 10:38:16 -04:00
dependabot[bot]
dc7ab96829
Bump golang.org/x/net in /www/static/test/1.9.3/test/servers/ws (#1575)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20210405180319-a5a99cb37ef4 to 0.7.0.
- [Commits](https://github.com/golang/net/commits/v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-17 10:31:34 -04:00
dependabot[bot]
02399cd1e9
Bump golang.org/x/sys in /www/static/test/1.9.3/test/servers/ws (#1574)
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.0.0-20210630005230-0f9fa26af87c to 0.1.0.
- [Commits](https://github.com/golang/sys/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-17 10:30:00 -04:00
Viktor Szépe
0a471dc4fb
Fix typos in www/ (#1579) 2023-07-17 10:26:27 -04:00
Carson Gross
e33b0be909 Merge remote-tracking branch 'origin/master' 2023-07-17 05:17:34 -06:00
Carson Gross
3773828d33 book announcement 2023-07-17 05:17:27 -06:00
Vincent
fd912f807f
Make it clear that from with a selector gets all matching elements (#1582) 2023-07-17 01:07:56 -04:00
Vincent
249a197d57
Fix beforeProcessNode link (#1562) 2023-07-17 00:56:53 -04:00
Yann Salaün
8766ad7db4
Fix markdown format (#1583) 2023-07-16 21:22:06 -04:00
Alexander Petros
7dbc3028a0
Merge pull request #1570 from xSke/patch-1
Add Rust/MiniJinja to template-fragments.md
2023-07-16 16:03:24 -04:00
Alexander Petros
192157f162
Merge pull request #1587 from emmanuel-ferdman/wip
docs: fix link by removing extra parenthesis
2023-07-16 15:58:22 -04:00
Emmanuel Ferdman
cc5a2d3729
docs: fix link by removing extra parenthesis
Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>
2023-07-16 18:58:48 +03:00
Alexander Petros
c99980fbb7
Fix hx-on:* release notes (#1578) 2023-07-14 16:08:12 -06:00