Added support for opening JSON by URL parameter

[BartCardan]

I've modified the file \src\components\form\OpenEvaluation.svelte to add support for opening a JSON file by a URL parameter.

For example:

https://www.w3.org/WAI/eval/report-tool/?jsonUrl=https://domain.com/evaluation.json

This adds possibilities to add an default evaluation template or automate some processes from a back office.

[netlify]

✔️ Deploy Preview for wcag-em-report-tool-2021-redesign ready!

🔨 Explore the source changes: 7f025ce

🔍 Inspect the deploy log: https://app.netlify.com/sites/wcag-em-report-tool-2021-redesign/deploys/61684462d2881c000870bce8

😎 Browse the preview: https://deploy-preview-84--wcag-em-report-tool-2021-redesign.netlify.app

[BartCardan]

Access-Control-Allow-Origin

You need to set Access-Control-Allow-Origin on the remote server which contains the JSON file.
For example with .htaccess:

<FilesMatch "\.(json)$"> <IfModule mod_headers.c> Header set Access-Control-Allow-Origin "*" </IfModule> </FilesMatch>

Example URL for testing: https://deploy-preview-84--wcag-em-report-tool-2021-redesign.netlify.app/?jsonUrl=https://technobility.nl/json.json

What needs to be done

• Check if the external URL is a valid URL (if not it causes js errors)
• Maybe it needs some sanitizing OR is this already been done while opening the json?

[rvantonisse]

With some modification You could also host this application on your own domain for full control. Then you can keep your domain and content secure.

[BartCardan]

@rvantonisse Yes indeed. That's how we are planning to do it in the near future.

[SteveALee]

Are there any security implications?

[BartCardan]

Are there any security implications?

One of the questions on the to-do list. It may need sanitizing. This really depends on how the "Open report" functionalitity in the tool works. If the JSON itself is already sanitizing during opening it's probably OK.

Another layer of security is to only allow data which has a JSON mime-type.
I'll check if I can implement such check on a short notice.

[hidde]

@BartCardan In this PR, could you add a heading to README.MD documenting this functionality?