Commit Graph
272 Commits
Author SHA1 Message Date
Alois Klink 7e9cdfca73 fix: sanitize all secure keys in config
Check and remove all the secure keys in the site Mermaid Config,
not just `securityLevel`. Unfortunately, the logic of Mermaid's
`sanitize` function in `config.ts` is a bit convoluted. For instance,
the `secure` config restricts keys deeply in the object.

See: https://github.com/mermaid-js/mermaid/blob/9745f325cb9e1967640f0e85da193a2f820634f1/packages/mermaid/src/config.ts#L155-L190
2026-04-02 19:00:54 +09:00
Alois Klink 48b9560e8e fix: sanitize config loaded from gist/config URL
Currently, the `config` in the codeState in the hash is sanitized for
unsafe values, however the `?config` URL parameter or configs loaded
from a GitHub Gist are not.

Reported-by: Chai Cheng Xun @QiaoNPC
2026-04-02 18:59:09 +09:00
Alois Klink ae7ad1b93e refactor: move config sanitization into function
Moves the code that prompts the user to remove unsafe MermaidConfig
settings into it's own function, so that it can be reused.
2026-03-30 17:06:32 +09:00
Sidharth Vinod c675dc02e9 fix: Avoid double popups 2026-03-25 17:03:04 +09:00
Sidharth Vinod ab760f35fa feat: Retain search query in URL to get insights into traffic flow 2026-03-18 22:05:07 +09:00
Sidharth Vinod b466e8430e feat: Show mermaid.live privacy policy only on mermaid.live
As the OSS project only controls the mermaid.live domain, we're adding an env variable to let anyone who is self hosting live editor to set their own privacy policy, or to hide the button if they want to.
2026-03-16 23:29:13 +09:00
Sidharth Vinod 15cdb7b64a chore: Show editor picker once to existing users as well 2026-03-12 13:35:42 +09:00
Sidharth Vinod 340911f271 chore: Remove panZoom event 2026-03-05 23:28:34 +05:30
Claude c36e51fb9f Hide editor picker dialog on mobile in shouldShowEditorChooser
Return false when viewport width is below 640px (Tailwind sm breakpoint),
matching the isMobile check used elsewhere in the app.

https://claude.ai/code/session_01KoPM7CZKWdwdZPm4MneGVE
2026-03-03 22:02:10 +00:00
Sidharth Vinod 82f7371fed fix: Do not show editor selector to users coming from docs site, as they have seen one already 2026-03-04 01:50:29 +05:30
Sidharth Vinod e56451e027 chore: Update coupon code 2026-03-04 01:43:34 +05:30
Sidharth Vinod a85bc09092 fix: Track mermaid.ai outflow 2026-03-04 01:10:12 +05:30
Sidharth Vinod dabbf5700a test: Disable popup in tests 2026-03-03 23:45:51 +05:30
Sidharth Vinod 13e5e834a2 fix: Respect MERMAID_IS_ENABLED_MERMAID_CHART_LINKS for popup 2026-03-03 15:56:47 +05:30
Sidharth Vinod bf1a7581e8 chore: Add editor chooser dialog for first time users 2026-03-03 15:54:37 +05:30
Sidharth Vinod d092480cf3 chore: Auto redirect to new domain 2026-03-03 13:22:36 +05:30
Sidharth Vinod 8d7db5501a Merge pull request #1883 from saurabhg772244/saurabh/add-mermaid-inline-ai
add mermaid inline AI
2026-02-16 20:44:51 +05:30
Sidharth Vinod f6f9668044 fix: Update couponID 2026-02-16 16:13:33 +05:30
Sidharth Vinod 2b13fde292 chore: Update promo URL 2026-02-16 15:55:21 +05:30
saurabhg772244 6160617458 Fix AI inline popup issues and remove quick edit functionality 2026-02-13 13:54:39 +05:30
saurabhg772244 aa3479d508 code refactor and fix icon hover issue 2026-02-12 15:52:21 +05:30
saurabhg772244 830df8c44b add mermaid inline AI 2026-02-12 13:13:16 +05:30
Sidharth Vinod 1a529f598f feat: Add new year promo 2026-02-02 15:33:02 +05:30
Sidharth Vinod 7414ac0926 Merge pull request #1878 from mermaid-js/sidv/updateMcDomain
feat: Hide tooltip based on domain
2026-01-28 12:02:01 +05:30
Sidharth Vinod c05fa21dcc Merge pull request #1877 from mermaid-js/sidv/updateDocsURL
chore: Make docs URL configurable during build
2026-01-28 12:01:52 +05:30
Sidharth Vinod 9946dff29d feat: Hide tooltip based on domain 2026-01-28 11:52:30 +05:30
Sidharth Vinod d72e91a7b8 chore: Make docs URL configurable during build 2026-01-28 11:37:12 +05:30
Sidharth Vinod 832cf7d4e7 fix: lint errors 2026-01-28 00:35:02 +05:30
Sidharth Vinod d9e70427af chore: Remove playground toggle 2026-01-28 00:25:17 +05:30
Sidharth Vinod 739ef6dfe2 chore: remove trackOnLocalhost 2025-10-15 15:59:05 +05:30
Sidharth Vinod b1367c2178 fix(#1791): Disable plausible init when analytics url is empty 2025-10-15 15:57:41 +05:30
Sidharth Vinod ef6aa4b09d feat: Add layout-tidy-tree 2025-10-15 15:25:43 +05:30
Sidharth Vinod d991139b0a chore: Update eslint 2025-09-03 01:41:51 +05:30
Sidharth Vinod ee14854139 fix: Remove hardcoded domains 2025-08-05 00:42:01 +05:30
Sidharth Vinod d3e2d137ea Merge branch 'develop' into sidv/examples
* develop:
  fix: #1766 hide external buttons if env var is not set
  chore: Rename layout to ts
  fix(deps): update dependency mermaid to ^11.9.0
2025-08-02 19:19:44 +05:30
Sidharth Vinod 3ace70a439 fix: #1766 hide external buttons if env var is not set 2025-08-02 19:14:32 +05:30
Sidharth Vinod 58aa3c0b67 Merge branch 'develop' into sidv/examples
* develop:
  feat: Add Treemap support (mermaid 11.8.1)
  chore: Update text-size
  Chore: Update banner ad
  Enable MC Links
  fix: Trace path
  fix: Hide AI Repair button in config tab
  fix(deps): update all non-major dependencies
  Update as per PR suggestion
  chore: Cleanup tagline logic
  chore(deps): update dependency lucide-svelte to ^0.507.0
  chore: Update announcement bar
2025-07-16 19:59:34 +05:30
rajat-ht 7475360115 chore: Update text-size 2025-06-19 16:06:29 +05:30
rajat-ht 470c704542 Chore: Update banner ad 2025-06-18 20:01:43 +05:30
Sidharth Vinod 91fc0895b2 Merge pull request #1712 from mermaid-js/update-announcement-bar
chore: Update announcement bar
2025-05-06 10:43:47 +05:30
rajat-ht 39876254ca Update as per PR suggestion 2025-05-05 23:50:20 +05:30
Sidharth Vinod 0b5a038c9d chore: Cleanup tagline logic 2025-05-05 21:40:43 +05:30
rajat-ht c9e61440f4 chore: Update announcement bar 2025-05-02 18:18:52 +05:30
Sidharth Vinod 4d1c6e4702 Merge branch 'develop' into sidv/examples
* develop:
  chore(deps): update all non-major dependencies
  fix(deps): update all non-major dependencies
  fix: #1659 Frozen UI with comment regex
2025-05-02 02:39:16 +05:30
Sidharth Vinod 6a07387688 fix: #1659 Frozen UI with comment regex 2025-05-01 17:57:40 +05:30
Sidharth Vinod d963baf96e Merge branch 'develop' into sidv/examples
* develop: (32 commits)
  feat: Support jsonSchema to validate config
  link: live version
  fix: Fallback page
  chore(deps): update dependency vite to v5.4.18 [security]
  fix: Fallback to sveltekit on 404 in GH pages
  chore(deps): update all non-major dependencies
  fix: New diagram link
  chore(deps): update dependency @sveltejs/kit to v2.20.6 [security]
  feat: Wait for fontawesome to load
  chore(deps): update all non-major dependencies
  feat: Support pan while zooming
  Update src/lib/util/panZoom.ts
  chore: Track PWA install device type
  chore: Track PWA installs
  chore: Add analytics for mobileViewToggle
  fix: Reduce gap in mobile
  fix: SVG size to avoid
  chore: Unify code update logic
  chore: Cleanup deps
  feat: Add syntax highlighting
  ...
2025-04-20 13:42:04 +05:30
Sidharth Vinod bf25d3cc60 fix: New diagram link 2025-04-16 15:39:57 +05:30
Sidharth Vinod 8b13bf48e7 feat: Support pan while zooming 2025-04-13 13:50:30 +05:30
Sidharth VinodandCopilot 285baa4c83 Update src/lib/util/panZoom.ts
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-04-13 01:16:56 -07:00
Sidharth Vinod e11017672f chore: Track PWA installs 2025-04-13 13:40:50 +05:30