* Fix an XSS in Server Islands.
Discussed with @FredKSchott that this is OK to disclose since Server Islands are still experimental.
It's generally not safe to use `JSON.stringify` to interpolate potentially attacker controlled data into `<script>` tags as JSON doesn't escape `<>"'` and so one can use it to break out of the script tag and e.g. make a new one with controlled content.
See https://pragmaticwebsecurity.com/articles/spasecurity/json-stringify-xss
* Format
* Create smart-snakes-promise.md
* Switch to manual encoding
---------
Co-authored-by: Matt Kane <m@mk.gg>
* fix: prevent client hydration when rendering via Container API
* revert change that is not needed
* skip client directives via option
* reword changeset
* Fix types of react server.d.ts
* add new API
---------
Co-authored-by: Matthew Phillips <matthew@skypack.dev>
* Fix Server Islands in Vercel
* Add a changeset
* Get server islands pattern from the segments
* Move getPattern so it can be used at runtime
* Fix build
* fix: use config root to build default routes
* fix: make root serializable
* fix regression
* Use stringified URLs
* Fix unit tests
---------
Co-authored-by: Matthew Phillips <matthew@skypack.dev>
* Spike
* Server Islands
* Remove extra stuff
* Fix build, a little
* Fix build
* astro metadata can be undefined
* Add server:defer type
* Add support for the build to Server Islands (#11372)
* Add support for the build to Server Islands
* Use command instead
* editor tips
* Add comment about defaultRoutes
* Use renderChunk instead of generateBundle
* Server islands tests (#11405)
* Add support for the build to Server Islands
* Use command instead
* editor tips
* Add comment about defaultRoutes
* Use renderChunk instead of generateBundle
* Adds tests for server islands
* linting
* Pass slots to server islands (#11431)
* Require the experimental flag to use server islands (#11432)
* Require the experimental flag to use server islands
* Add flag to tests/examples
* Protect SSR against SI not being enabled
* Update the docs in the API ref
* Upgrade to compiler 2.9.0
* Update packages/astro/src/@types/astro.ts
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* Update packages/astro/src/@types/astro.ts
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* Update packages/astro/src/@types/astro.ts
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* Update packages/astro/src/@types/astro.ts
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* Update packages/astro/src/@types/astro.ts
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* Update packages/astro/src/@types/astro.ts
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* Update packages/astro/src/@types/astro.ts
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* Fix lockfile
* Add a changeset
* Update .changeset/five-rocks-vanish.md
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* Update .changeset/five-rocks-vanish.md
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* Update .changeset/five-rocks-vanish.md
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* Update .changeset/five-rocks-vanish.md
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* Update lockfile
* Update .changeset/five-rocks-vanish.md
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
---------
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* feat: add first and last to the Page interface
* Update .changeset/twenty-maps-glow.md
* Update .changeset/twenty-maps-glow.md
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
---------
Co-authored-by: Bjorn Lu <bjornlu.dev@gmail.com>
Co-authored-by: Matthew Phillips <matthew@matthewphillips.info>
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* feat: add shiki option for default color
* feat: propagate shiki option for default color to astro config
* feat: add tests for default color
* chore: add change set
* fix: add complete type to shiki default color config
* fix: remove unneeded heavy shiki theme from fixture
* fix: add literals to schema validation
Co-authored-by: Bjorn Lu <bjornlu.dev@gmail.com>
* Update .changeset/cold-crabs-arrive.md
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
* feat: improve changeset
* grammar tweak
---------
Co-authored-by: Bjorn Lu <bjornlu.dev@gmail.com>
Co-authored-by: Sarah Rainsberger <sarah@rainsberger.ca>
