You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hugegraph.apache.org by "imbajin (via GitHub)" <gi...@apache.org> on 2026/10/19 08:54:39 UTC
[PR] fix(hubble): prevent blank pages over HTTP [hugegraph-toolchain]
imbajin opened a new pull request, #827:
URL: https://github.com/apache/hugegraph-toolchain/pull/827
## Purpose of the PR
Opening Hubble through an ordinary HTTP hostname or node IP can show a blank page before login. The 3D graph dependency loads Three.js WebGPU modules during startup, and the locked version reads an unavailable `GPUShaderStage.VERTEX` in an insecure context. HTTP localhost works because browsers treat loopback origins as trustworthy, which also hid the failure in existing browser smoke tests.
## Main Changes
- Declare Three.js directly and lock both direct and graph-renderer dependencies to `0.183.2`, which includes the upstream missing-WebGPU-constant guard.
- Add a real insecure-HTTP browser startup check to the existing UI acceptance flow. Loopback services are accessed through a temporary browser-resolved hostname; the check requires an insecure context, a mounted React root, and no uncaught browser errors.
- Keep HTTPS-only targets explicitly marked as skipped for this check, including in the acceptance summary. Document the workaround and retain a real HTTP startup screenshot.
## Verifying these changes
- [x] Need tests and can be verified as follows:
- The new browser check fails against the original production bundle with the reported `VERTEX` exception and passes with rebuilt production assets served by the same Hubble backend.
- Production frontend build, lint, i18n checks, focused route/3D utility tests, and browser-smoke helper tests pass.
- The real Canvas3D component renders nodes and edges through WebGL2 over insecure HTTP; resize and zoom also work. This is component compatibility validation, separate from backend graph queries.
Rebuilt production assets over ordinary HTTP:
## Does this PR potentially affect the following parts?
- [x] Dependencies (Three.js remains MIT; its notice is retained in the generated bundle.)
- [ ] Modify configurations
- [ ] The public API
- [ ] Other affects
## Documentation Status
- [x] `Doc - Done`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@hugegraph.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@hugegraph.apache.org
For additional commands, e-mail: issues-help@hugegraph.apache.org
Re: [PR] fix(hubble): prevent blank pages over HTTP [hugegraph-toolchain]
Posted by "imbajin (via GitHub)" <gi...@apache.org>.
imbajin merged PR #827:
URL: https://github.com/apache/hugegraph-toolchain/pull/827
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@hugegraph.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@hugegraph.apache.org
For additional commands, e-mail: issues-help@hugegraph.apache.org