HelloZeroNet/ZeroNet

Allow zite loading outside iframe (for zite owners)

Open

#1262 opened on Jan 27, 2018

View on GitHub
 (29 comments) (1 reaction) (1 assignee)JavaScript (18,200 stars) (2,245 forks)batch import
enhancementhelp wanted

Description

Would it be possible to add a flag that would allow a zite to be loaded directly instead of loading it inside an iframe? The problem is that for tools like vuejs-devtools to work the vue.js script must be present in the page itself. If the script is inside the iframe the tool won't detect the script. I could use that tool by loading the file directly on file:// but then the zeronet api will not work. Maybe the flag can be set only if the person is the site owner.

Thanks

Contributor guide

Tech stack
javascripthtml
Domain
frontend
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
4
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
ZeroNet architectureiframe securitysite ownership concept
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
30
Research direction
Examine the zite loading mechanism in the client side code (likely in 'js/ZeroFrame.js' or similar). Understand how iframes are used to display zites and how site ownership is verified. Review the comments in this issue for proposed approaches and security considerations. Consider implementing a configuration flag or a per site setting that allows the owner to bypass the iframe.