doxa-maps

History

Doxa Maps 4a12b009aa Every runtime CDN script and stylesheet is an exact version with an integrity hash maplibre-gl@5 and maplibre-gl-geocoder@1 were floating ranges, and no runtime loader set `integrity`, so a CDN could serve any bytes to every partner's visitors unnoticed (CRITIC-5). - library/constants/cdn.js is the one registry: mapbox-gl 3.24.0, maplibre-gl 5.24.0 (the release the @5 range already resolved to), both geocoders (1.9.4 / 5.0.0) and d3 7.9.0, each with its sha384. Every host answers Access-Control-Allow-Origin: *, so integrity + crossorigin work cross-origin. - ensureEngineScript / ensureEngineCSS, the geocoder loaders (library and PPLR) and the generator's static MapLibre tags set integrity + crossorigin from it; the embed snippet's engine preload matches. - check:cdn-pins (gates:post): no floating CDN url in shipped code, and every one is in the registry; --online re-fetches each and compares the hash (all 9 match today). MapLibre stays on 5.x knowingly. GHSA-jrc7-96c5-q579 (DOM.sanitize, reached through a source's attribution string) affects <= 6.4.0, and 6.x is ESM-only (no UMD global), so the upgrade is a loader migration of its own. The attribution strings rendered today come from our configured basemap styles and our own sources; the note in cdn.js says who is exposed until then.		2026-09-26 05:50:24 +00:00
..
FullscreenButton.vue	doxa-maps — portable bundler for embeddable JAMstack maps	2026-09-10 01:53:07 +00:00
GeocoderComponent.vue	Every runtime CDN script and stylesheet is an exact version with an integrity hash	2026-09-26 05:50:24 +00:00
HamburgerButton.vue	doxa-maps — portable bundler for embeddable JAMstack maps	2026-09-10 01:53:07 +00:00
HelpButton.vue	doxa-maps — portable bundler for embeddable JAMstack maps	2026-09-10 01:53:07 +00:00
index.js	doxa-maps — portable bundler for embeddable JAMstack maps	2026-09-10 01:53:07 +00:00
LocationButton.vue	doxa-maps — portable bundler for embeddable JAMstack maps	2026-09-10 01:53:07 +00:00
MapControlButton.vue	Map controls: restore the keyboard focus ring that outline:none removed	2026-09-24 08:14:01 +00:00
MapControlMenu.vue	Share menu opens at natural height in a page header (no scrollbar)	2026-09-23 23:47:28 +00:00
MapToolbar.vue	MapControlMenu: one menu for every map control — inside the map, top and height of the toolbar column, on its inner side, RTL-aware, phone and desktop; the share button is its first consumer	2026-09-16 22:46:21 -05:00
README.md	consolidate docs into documentation/ and deployment shells into deployment/	2026-09-21 23:23:23 +00:00
ShareButton.vue	Share menu shows the whole embed snippet, with no scrollbar	2026-09-23 19:01:14 +00:00
ThemeToggleButton.vue	doxa-maps — portable bundler for embeddable JAMstack maps	2026-09-10 01:53:07 +00:00
ZoomInButton.vue	Session work: strobe fix, grid layout, stacked tree legend, selection camera, chip bounding, asset inheritance, gates	2026-09-20 04:49:25 +00:00
ZoomOutButton.vue	Session work: strobe fix, grid layout, stacked tree legend, selection camera, chip bounding, asset inheritance, gates	2026-09-20 04:49:25 +00:00

README.md

Each file is a single, focused button or input that mounts inside the map's control area. Replaces the older monolithic MapControlsComponent.vue.

  MapToolbar.vue  (container)
   ├─ ZoomInButton · ZoomOutButton · LocationButton
   ├─ FullscreenButton · HamburgerButton · ThemeToggleButton
   ├─ HelpButton · ShareButton
   └─ GeocoderComponent   (all built on MapControlButton.vue)

Every button takes a size prop (sm | md | lg) and follows the MapControlButton shape.
Click handlers go through inject('mapStore') or getMap() — never a captured Mapbox instance.
To add one: copy ZoomInButton.vue and register it in MapToolbar.vue.

Full conventions + catalog: ../../../documentation/architecture/components.md.

README.md

library/components/map-controls/ — toolbar buttons