8d29bb10e2
The server load parses and sanitises the shareable pan/zoom params (degrading Infinity/NaN, clamping zoom) into initialView, which seeds the page view. A crafted link can no longer blank the SVG (Nora). US-PANEL-002 AC2 groundwork. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
28 lines
1001 B
TypeScript
28 lines
1001 B
TypeScript
import { error, redirect } from '@sveltejs/kit';
|
|
import { createApiClient, extractErrorCode } from '$lib/shared/api.server';
|
|
import { getErrorMessage } from '$lib/shared/errors';
|
|
import { parsePanZoomParams } from '$lib/person/genealogy/panZoom';
|
|
|
|
export async function load({ fetch, url }) {
|
|
const api = createApiClient(fetch);
|
|
const result = await api.GET('/api/network');
|
|
|
|
if (result.response.status === 401) throw redirect(302, '/login');
|
|
|
|
if (!result.response.ok) {
|
|
throw error(result.response.status, getErrorMessage(extractErrorCode(result.error)));
|
|
}
|
|
|
|
// Sanitise the shareable pan/zoom params server-side so a crafted link
|
|
// (?z=Infinity, ?cx=NaN) degrades to a safe view before reaching layout
|
|
// geometry (Nora #692).
|
|
const initialView = parsePanZoomParams({
|
|
cx: url.searchParams.get('cx'),
|
|
cy: url.searchParams.get('cy'),
|
|
z: url.searchParams.get('z')
|
|
});
|
|
|
|
const network = result.data!;
|
|
return { nodes: network.nodes ?? [], edges: network.edges ?? [], initialView };
|
|
}
|