-
${this._esc(r.name)}
+
${this._esc(name)}
${this._esc(desc)}
${this._esc(lineBits.join(" · "))}
@@ -581,6 +579,45 @@ class BahmcloudStorePanel extends HTMLElement {
`;
}
+ _wireStore() {
+ const root = this.shadowRoot;
+ const search = root.getElementById("searchInput");
+ const cat = root.getElementById("categorySelect");
+ const chips = root.getElementById("providerChips");
+
+ if (search) {
+ search.addEventListener("input", (e) => {
+ this._search = e.target.value;
+ this._update();
+ });
+ }
+
+ if (cat) {
+ cat.addEventListener("change", (e) => {
+ this._category = String(e.target.value || "all");
+ this._update();
+ });
+ }
+
+ if (chips) {
+ for (const c of chips.querySelectorAll("[data-prov]")) {
+ c.addEventListener("click", () => {
+ const key = c.getAttribute("data-prov");
+ if (!key) return;
+ this._provider = key;
+ this._update();
+ });
+ }
+ }
+
+ for (const card of root.querySelectorAll("[data-repo]")) {
+ card.addEventListener("click", () => {
+ const id = card.getAttribute("data-repo");
+ if (id) this._openRepoDetail(id);
+ });
+ }
+ }
+
_renderProviderChips(stats) {
const order = ["all", "github", "gitea", "gitlab", "other", "custom"];
const labels = {
@@ -615,9 +652,10 @@ class BahmcloudStorePanel extends HTMLElement {
for (const r of repos) {
s.total += 1;
- if (r.source === "custom") s.custom += 1;
- const p = (r.provider || "other").toLowerCase();
+ if (r?.source === "custom") s.custom += 1;
+
+ const p = this._safeLower(r?.provider) || "other";
if (p === "github") s.github += 1;
else if (p === "gitea") s.gitea += 1;
else if (p === "gitlab") s.gitlab += 1;
@@ -626,63 +664,29 @@ class BahmcloudStorePanel extends HTMLElement {
return s;
}
- _wireStore() {
- const root = this.shadowRoot;
- const search = root.getElementById("searchInput");
- const cat = root.getElementById("categorySelect");
- const chips = root.getElementById("providerChips");
-
- if (search) {
- search.addEventListener("input", (e) => {
- this._search = e.target.value;
- this._update();
- });
- }
-
- if (cat) {
- cat.addEventListener("change", (e) => {
- this._category = String(e.target.value || "all");
- this._update();
- });
- }
-
- if (chips) {
- for (const c of chips.querySelectorAll("[data-prov]")) {
- c.addEventListener("click", () => {
- const key = c.getAttribute("data-prov");
- if (!key) return;
- this._provider = key; // set filter
- this._update();
- });
- }
- }
-
- for (const card of root.querySelectorAll("[data-repo]")) {
- card.addEventListener("click", () => {
- const id = card.getAttribute("data-repo");
- if (id) this._openRepoDetail(id);
- });
- }
- }
-
_renderDetail() {
const r = this._detailRepo;
if (!r) return `
Repository not found.
`;
- const badge =
- r.source === "custom" ? `
Custom` : `
Index`;
+ const name = this._safeText(r?.name) || "Unnamed repository";
+ const desc = this._safeText(r?.description) || "No description available.";
+ const url = this._safeText(r?.url) || "#";
- const desc = r.description || "No description available.";
- const latest = r.latest_version ? `Latest: ${r.latest_version}` : "Latest: unknown";
+ const badge =
+ r?.source === "custom"
+ ? `
Custom`
+ : `
Index`;
+
+ const latest = this._safeText(r?.latest_version) ? `Latest: ${this._safeText(r?.latest_version)}` : "Latest: unknown";
const infoBits = [
- r.owner ? `Creator: ${r.owner}` : "Creator: -",
+ this._safeText(r?.owner) ? `Creator: ${this._safeText(r?.owner)}` : "Creator: -",
latest,
- r.provider ? `Provider: ${r.provider}` : null,
- r.category ? `Category: ${r.category}` : null,
- r.meta_author ? `Author: ${r.meta_author}` : null,
- r.meta_maintainer ? `Maintainer: ${r.meta_maintainer}` : null,
- r.meta_source ? `Meta: ${r.meta_source}` : null,
+ this._safeText(r?.provider) ? `Provider: ${this._safeText(r?.provider)}` : null,
+ this._safeText(r?.category) ? `Category: ${this._safeText(r?.category)}` : null,
+ this._safeText(r?.meta_author) ? `Author: ${this._safeText(r?.meta_author)}` : null,
+ this._safeText(r?.meta_maintainer) ? `Maintainer: ${this._safeText(r?.meta_maintainer)}` : null,
+ this._safeText(r?.meta_source) ? `Meta: ${this._safeText(r?.meta_source)}` : null,
].filter(Boolean);
const readmeBlock = this._readmeLoading
@@ -718,11 +722,11 @@ class BahmcloudStorePanel extends HTMLElement {
-
${this._esc(r.name)}
+
${this._esc(name)}
${this._esc(desc)}
${this._esc(infoBits.join(" · "))}
${badge}
@@ -754,57 +758,19 @@ class BahmcloudStorePanel extends HTMLElement {
if (!mount) return;
if (this._readmeText) {
- const html = this._mdToHtml(this._readmeText);
-
- if (html) {
- mount.innerHTML = html;
- this._postprocessRenderedMarkdown(mount);
- return;
- }
-
+ // Client renderer may be unavailable; prefer server-provided HTML
if (this._readmeHtml) {
mount.innerHTML = this._readmeHtml;
this._postprocessRenderedMarkdown(mount);
return;
}
-
- mount.innerHTML = `
Markdown renderer not available on this client. Use “Show raw Markdown”.
`;
+ mount.innerHTML = `
Rendered HTML not available. Use “Show raw Markdown”.
`;
return;
}
mount.innerHTML = "";
}
- _mdToHtml(markdown) {
- const md = String(markdown || "");
- if (!md.trim()) return "";
-
- const markedObj = window.marked;
- const domPurify = window.DOMPurify;
-
- let html = "";
-
- try {
- if (markedObj && typeof markedObj.parse === "function") {
- html = markedObj.parse(md, { breaks: true, gfm: true });
- } else if (typeof markedObj === "function") {
- html = markedObj(md);
- } else {
- return "";
- }
- } catch (_) {
- return "";
- }
-
- try {
- if (domPurify && typeof domPurify.sanitize === "function") {
- html = domPurify.sanitize(html);
- }
- } catch (_) {}
-
- return html;
- }
-
_postprocessRenderedMarkdown(container) {
if (!container) return;
try {
@@ -836,18 +802,18 @@ class BahmcloudStorePanel extends HTMLElement {
const r = this._detailRepo;
if (!r) return;
+ const url = this._safeText(r?.url);
+
const open = root.getElementById("fabOpen");
const reload = root.getElementById("fabReload");
const info = root.getElementById("fabInfo");
- if (open) open.addEventListener("click", () => window.open(r.url, "_blank", "noreferrer"));
-
+ if (open) open.addEventListener("click", () => url && window.open(url, "_blank", "noreferrer"));
if (reload) {
reload.addEventListener("click", () => {
if (this._detailRepoId) this._loadReadme(this._detailRepoId);
});
}
-
if (info) {
info.addEventListener("click", () => {
this._view = "about";
@@ -858,24 +824,27 @@ class BahmcloudStorePanel extends HTMLElement {
_renderManage() {
const repos = Array.isArray(this._data.repos) ? this._data.repos : [];
- const custom = repos.filter((r) => r.source === "custom");
+ const custom = repos.filter((r) => r?.source === "custom");
const list = custom
- .map(
- (r) => `
-
-
-
-
${this._esc(r.name)}
-
${this._esc(r.url)}
-
-
-
+ .map((r) => {
+ const id = this._safeId(r?.id);
+ const name = this._safeText(r?.name) || "Unnamed repository";
+ const url = this._safeText(r?.url) || "";
+ return `
+
+
+
+
${this._esc(name)}
+
${this._esc(url)}
+
+
+
+
-
- `
- )
+ `;
+ })
.join("");
return `
@@ -924,13 +893,14 @@ class BahmcloudStorePanel extends HTMLElement {
}
_renderAbout() {
+ const v = this._safeText(this._data?.version) || "-";
return `
Settings / About
Language: English (v1). i18n will be added later.
Theme: follows Home Assistant light/dark automatically.
Accent: Bahmcloud Blue.
-
BCS version: ${this._esc(this._data.version || "-")}
+
BCS version: ${this._esc(v)}
`;
}
@@ -938,12 +908,31 @@ class BahmcloudStorePanel extends HTMLElement {
_computeCategories(repos) {
const set = new Set();
for (const r of repos) {
- const c = (r.category || "").trim().toLowerCase();
+ const c = this._safeLower(r?.category);
if (c) set.add(c);
}
return Array.from(set).sort();
}
+ // --- HARDENING HELPERS (fixes [object Object]) ---
+ _safeText(v) {
+ if (v === null || v === undefined) return "";
+ const t = typeof v;
+ if (t === "string") return v;
+ if (t === "number" || t === "boolean") return String(v);
+ return ""; // objects/arrays/functions => empty (prevents [object Object])
+ }
+
+ _safeLower(v) {
+ const s = this._safeText(v);
+ return s ? s.trim().toLowerCase() : "";
+ }
+
+ _safeId(v) {
+ const s = this._safeText(v);
+ return s || "";
+ }
+
_esc(s) {
return String(s ?? "")
.replaceAll("&", "&")
@@ -954,4 +943,4 @@ class BahmcloudStorePanel extends HTMLElement {
}
}
-customElements.define("bahmcloud-store-panel", BahmcloudStorePanel);
\ No newline at end of file
+customElements.define("bahmcloud-store-panel", BahmcloudStorePanel);