Tim Nguyen :ntim Reporter
	Description • 10 years ago

This would allow plugins like http://emmet.io/ to be injected inside the Firefox DevTools Editor component.

Proposed API :
// Todo : Expose the Editor() component to the addon sdk ?
var Editor = require("sdk/devtools/editor/"); 
var plugin = {
  "Name":"Emmet",
  "scriptURL":self.data.url("script.js");
}
Editor.plugins.inject(plugin);

	Jeff Griffiths (:canuckistani) (:⚡︎)
	Comment 1 • 10 years ago

We should talk about this in PDX, how add-on developers will use the editor infrastructure we have.

	Firefox Bug Husbandry Bot
	Comment 2 • 7 years ago

https://bugzilla.mozilla.org/show_bug.cgi?id=1399562

	Andy McKay
	Comment 3 • 7 years ago

Since you've moved this over from the SDK, do you maybe want to outline how this might look in a WebExtensions world ntim?

	Tim Nguyen :ntim Reporter
	Comment 4 • 7 years ago

It could be a manifest field:

"devtools_editor_plugins": ["<script_url>"]

Where script_url is the URL to the codemirror plugin

	Caitlin Neiman [:caitmuenster]
	Comment 5 • 7 years ago

Hi Tim, this has been added to the agenda for the December 5, 2017 WebExtensions APIs triage. Would you be able to join us? 

Here’s a quick overview of what to expect at the triage: 

* We normally spend 5 minutes per bug
* The more information in the bug, the better
* The goal of the triage is to give a general thumbs up or thumbs down on a proposal; we won't be going deep into implementation details

Relevant Links: 

* Wiki for the meeting: https://wiki.mozilla.org/WebExtensions/Triage#Next_Meeting
* Meeting agenda: https://docs.google.com/document/d/1vH4wqJJZt1jk-cpx5NOq67b1UNekeQog6bz2HFOHe5E/edit#
* Vision doc for WebExtensions: https://wiki.mozilla.org/WebExtensions/Vision

	Tim Nguyen :ntim Reporter
	Comment 6 • 7 years ago

Reading the meeting notes, there were questions about sandboxing. 

The devtools code editor can be loaded in two modes: iframed (like in the style editor), inline (like in the netmonitor). 

The iframe mode is safe to inject in, since the frame URL will be a data URI (unprivileged). As for the inline mode, it's not safe to inject in, as the editor is loaded inline in the chrome URI.