fix(android): scope the editor globals and keep site pages out of the editor frame - #730

Merged

dcalhoun merged 20 commits into

trunkfrom

fix/android-scope-config-injection

Sep 30, 2026

Commits on Sep 25, 2026

fix(android): inject the editor globals into the editor document only

dcalhoun
and
claude
committed
76c032e
fix(android): match the REST API by its configured root, not by substring

dcalhoun
and
claude
committed
80a1b4b
fix(android): match a rest_route API root by its query alone

dcalhoun
and
claude
committed
521f100
fix(android): match the API root path by whole path segments

dcalhoun
and
claude
committed
b8e30a9
fix(android): ignore an empty rest_route when matching the REST API

dcalhoun
and
claude
committed
9283d5d
test(android): assert nothing reaches a non-editor page on start

dcalhoun
and
claude
committed
26b903d
fix(android): match editor assets by the scheme the asset loader serves

dcalhoun
and
claude
committed
2a238d4
docs(android): note that only the editor document receives the globals

dcalhoun
and
claude
committed
9b40746
fix(android): match the editor document by its exact asset path

dcalhoun
and
claude
committed
4a3ee13
fix(android): let a rest_route parameter decide over the API root path

dcalhoun
and
claude
committed
baa02f5
fix(android): open REST API navigations in the browser

dcalhoun
and
claude
committed
39894ad
test(android): explain how a site page still reaches the editor frame

dcalhoun
and
claude
committed
deec3aa
test(android): assert a non-editor page leaves the upload server down

dcalhoun
and
claude
committed
27cb91b
refactor(android): set the asset scheme before installing the WebView client

dcalhoun
and
claude
committed
a219102

Commits on Sep 28, 2026

docs(android): correct why isAssetUrl matches one scheme

dcalhoun
and
claude
committed
4c9b0cd

Commits on Sep 30, 2026

Merge remote-tracking branch 'origin/trunk' into fix/android-scope-config-injection

dcalhoun
and
claude
committed
9125440
fix(android): compare origin hosts case-insensitively

dcalhoun
and
claude
committed
9c5d871
refactor(android): recognize the editor document by the URL it loaded

dcalhoun
and
claude
committed
6cff4cc
test(android): cover injection after a reload and on a local http site

dcalhoun
and
claude
committed
a211496
test(android): build one view per navigation test

dcalhoun
and
claude
committed
83346fb