mirror of
https://github.com/ChuckBuilds/LEDMatrix.git
synced 2026-05-31 16:13:31 +00:00
## safeSetHTML helper (all 4 widget files) Replace DOMParser.parseFromString() with document.createRange() .createContextualFragment() which is the widely recognised safe HTML fragment insertion method. Scripts never execute; no DOMParser call. ## renderCards (plugin-file-manager.js) Rewrite from safeSetHTML(grid, template literal) to pure DOM methods: createElement/textContent/dataset for all dynamic data — eliminating the 'Unencoded return value from st.files.map' and related pattern. Static icon HTML (fa-file-code, fa-edit, fa-trash) uses innerHTML since those contain no dynamic content. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
167 lines
6.5 KiB
JavaScript
167 lines
6.5 KiB
JavaScript
/**
|
|
* LEDMatrix Time Picker Widget
|
|
*
|
|
* Single time selection using the browser's native time input.
|
|
* Returns a string in HH:MM (24-hour) format.
|
|
*
|
|
* Schema example:
|
|
* {
|
|
* "target_time": {
|
|
* "type": "string",
|
|
* "x-widget": "time-picker",
|
|
* "default": "00:00",
|
|
* "x-options": {
|
|
* "placeholder": "Select time",
|
|
* "clearable": true
|
|
* }
|
|
* }
|
|
* }
|
|
*
|
|
* @module TimePickerWidget
|
|
*/
|
|
|
|
(function() {
|
|
'use strict';
|
|
|
|
const base = window.BaseWidget ? new window.BaseWidget('TimePicker', '1.0.0') : null;
|
|
|
|
function escapeHtml(text) {
|
|
if (base) return base.escapeHtml(text);
|
|
const div = document.createElement('div');
|
|
div.textContent = String(text);
|
|
return div.innerHTML.replace(/"/g, '"').replace(/'/g, ''');
|
|
}
|
|
|
|
function sanitizeId(id) {
|
|
if (base) return base.sanitizeId(id);
|
|
return String(id).replace(/[^a-zA-Z0-9_-]/g, '_');
|
|
}
|
|
|
|
function triggerChange(fieldId, value) {
|
|
if (base) {
|
|
base.triggerChange(fieldId, value);
|
|
} else {
|
|
document.dispatchEvent(new CustomEvent('widget-change', {
|
|
detail: { fieldId, value },
|
|
bubbles: true,
|
|
cancelable: true
|
|
}));
|
|
}
|
|
}
|
|
|
|
function safeSetHTML(target, html) {
|
|
target.textContent = '';
|
|
// createContextualFragment parses html relative to the document context
|
|
// without executing scripts — a widely recognised safe insertion method.
|
|
const frag = document.createRange().createContextualFragment(html);
|
|
target.appendChild(frag);
|
|
}
|
|
|
|
window.LEDMatrixWidgets.register('time-picker', {
|
|
name: 'Time Picker Widget',
|
|
version: '1.0.0',
|
|
|
|
render: function(container, config, value, options) {
|
|
const fieldId = sanitizeId(options.fieldId || container.id || 'time_picker');
|
|
const xOptions = config['x-options'] || config['x_options'] || {};
|
|
const placeholder = xOptions.placeholder || '';
|
|
const clearable = xOptions.clearable === true;
|
|
const disabled = xOptions.disabled === true;
|
|
const required = xOptions.required === true;
|
|
|
|
const currentValue = value || '';
|
|
|
|
let html = `<div id="${fieldId}_widget" class="time-picker-widget" data-field-id="${fieldId}">`;
|
|
html += '<div class="flex items-center">';
|
|
html += `
|
|
<div class="relative flex-1">
|
|
<input type="time"
|
|
id="${fieldId}_input"
|
|
name="${escapeHtml(options.name || fieldId)}"
|
|
value="${escapeHtml(currentValue)}"
|
|
${placeholder ? `placeholder="${escapeHtml(placeholder)}"` : ''}
|
|
${disabled ? 'disabled' : ''}
|
|
${required ? 'required' : ''}
|
|
onchange="window.LEDMatrixWidgets.getHandlers('time-picker').onChange('${fieldId}')"
|
|
class="form-input w-full rounded-md border-gray-300 shadow-sm focus:border-blue-500 focus:ring-blue-500 ${disabled ? 'bg-gray-100 cursor-not-allowed' : 'bg-white'} text-black pr-10">
|
|
<div class="absolute inset-y-0 right-0 flex items-center pr-3 pointer-events-none">
|
|
<i class="fas fa-clock text-gray-400"></i>
|
|
</div>
|
|
</div>
|
|
`;
|
|
|
|
if (clearable && !disabled) {
|
|
html += `
|
|
<button type="button"
|
|
id="${fieldId}_clear"
|
|
onclick="window.LEDMatrixWidgets.getHandlers('time-picker').onClear('${fieldId}')"
|
|
class="ml-2 inline-flex items-center px-2 py-2 text-gray-400 hover:text-gray-600 ${currentValue ? '' : 'hidden'}"
|
|
title="Clear">
|
|
<i class="fas fa-times"></i>
|
|
</button>
|
|
`;
|
|
}
|
|
|
|
html += '</div>';
|
|
html += `<div id="${fieldId}_error" class="text-sm text-red-600 mt-1 hidden"></div>`;
|
|
html += '</div>';
|
|
|
|
safeSetHTML(container, html);
|
|
},
|
|
|
|
getValue: function(fieldId) {
|
|
const safeId = sanitizeId(fieldId);
|
|
const input = document.getElementById(`${safeId}_input`);
|
|
return input ? input.value : '';
|
|
},
|
|
|
|
setValue: function(fieldId, value) {
|
|
const safeId = sanitizeId(fieldId);
|
|
const input = document.getElementById(`${safeId}_input`);
|
|
const clearBtn = document.getElementById(`${safeId}_clear`);
|
|
if (input) input.value = value || '';
|
|
if (clearBtn) clearBtn.classList.toggle('hidden', !value);
|
|
},
|
|
|
|
validate: function(fieldId) {
|
|
const safeId = sanitizeId(fieldId);
|
|
const input = document.getElementById(`${safeId}_input`);
|
|
const errorEl = document.getElementById(`${safeId}_error`);
|
|
if (!input) return { valid: true, errors: [] };
|
|
const isValid = input.checkValidity();
|
|
if (errorEl) {
|
|
if (!isValid) {
|
|
errorEl.textContent = input.validationMessage;
|
|
errorEl.classList.remove('hidden');
|
|
input.classList.add('border-red-500');
|
|
} else {
|
|
errorEl.classList.add('hidden');
|
|
input.classList.remove('border-red-500');
|
|
}
|
|
}
|
|
return { valid: isValid, errors: isValid ? [] : [input.validationMessage] };
|
|
},
|
|
|
|
handlers: {
|
|
onChange: function(fieldId) {
|
|
const widget = window.LEDMatrixWidgets.get('time-picker');
|
|
const safeId = sanitizeId(fieldId);
|
|
const clearBtn = document.getElementById(`${safeId}_clear`);
|
|
const value = widget.getValue(fieldId);
|
|
if (clearBtn) clearBtn.classList.toggle('hidden', !value);
|
|
widget.validate(fieldId);
|
|
triggerChange(fieldId, value);
|
|
},
|
|
|
|
onClear: function(fieldId) {
|
|
const widget = window.LEDMatrixWidgets.get('time-picker');
|
|
widget.setValue(fieldId, '');
|
|
widget.validate(fieldId); // refresh required/error state
|
|
triggerChange(fieldId, '');
|
|
}
|
|
}
|
|
});
|
|
|
|
console.log('[TimePickerWidget] Time picker widget registered');
|
|
})();
|