Core: Avoid crash when theme contains non-color strings #29063
+235
−106
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Closes #28781
Also reported at #25092
Related #10170
What I did
This PR adds safe wrapper for four functions exported by
polished
:lighten
darken
transparentize
opacify
5 years ago, #6939 fixed runtime crashes, which happens when a user provides a non-color string (ones
polished
does not support) to theme. Many things changed since then, and nowadays most of the internal components import functions directly frompolished
instead of the guarded-wrappers. So I suspect this will happen in the future again... a guideline or migration to the CSS custom properties based theming would be necessary in order to prevent the future possible re-regression.Checklist for Contributors
Testing
The changes in this PR are covered in the following automated tests:
(I assume Docs Page crashing is not detectable via test runners?)
Manual testing
This section is mandatory for all contributions. If you believe no manual test is necessary, please state so explicitly. Thanks!
yarn task --task dev --template react-vite/default-ts
Documentation
MIGRATION.MD
Checklist for Maintainers
When this PR is ready for testing, make sure to add
ci:normal
,ci:merged
orci:daily
GH label to it to run a specific set of sandboxes. The particular set of sandboxes can be found incode/lib/cli/src/sandbox-templates.ts
Make sure this PR contains one of the labels below:
Available labels
bug
: Internal changes that fixes incorrect behavior.maintenance
: User-facing maintenance tasks.dependencies
: Upgrading (sometimes downgrading) dependencies.build
: Internal-facing build tooling & test updates. Will not show up in release changelog.cleanup
: Minor cleanup style change. Will not show up in release changelog.documentation
: Documentation only changes. Will not show up in release changelog.feature request
: Introducing a new feature.BREAKING CHANGE
: Changes that break compatibility in some way with current major version.other
: Changes that don't fit in the above categories.🦋 Canary release
This PR does not have a canary release associated. You can request a canary release of this pull request by mentioning the
@storybookjs/core
team here.core team members can create a canary release here or locally with
gh workflow run --repo storybookjs/storybook canary-release-pr.yml --field pr=<PR_NUMBER>
Greptile Summary
This PR adds safe wrappers for color manipulation functions from the 'polished' library to prevent crashes when non-color strings or CSS variables are used in themes.
lighten
,darken
,transparentize
, andopacify
incode/core/src/theming/utils.ts
@storybook/core/theming
code/core/src/theming/tests/util.test.js
to ensure proper handling of various input typescode/addons/docs/template/stories/docspage/theming.stories.ts
to demonstrate CSS variable usage in themes