sourcecheck

Overview ¶

Package sourcecheck holds the checks a drawn source passes before it is stored: a Graphviz DOT source (#2303) and a Vega-Lite specification (#2296).

The portal draws each in the reader's browser, so the source decides what that browser does. A DOT source that does not parse would store an asset that draws nothing, and a Vega-Lite spec naming a URL would make every reader's browser fetch it. Both are refused here, before anything is written, by every door a source can be stored through: save_asset, manage_asset, the portal's REST writes and a script's platform.export.