This project was bootstrapped with
The webview API allows extensions to create customizable views within VSCode. Single Page Application frameworks are perfect fit for this use case. However, to make modern JavaScript frameworks/toolchains appeal to VSCode webview API's security best practices requires some knowledge of both the bundling framework you are using and how VSCode secures webview. This project aims to provide an out-of-box starter kit for Create React App and TypeScript in VSCode's webview.
Run following commands in the terminal
yarn install
yarn run build
And then press F5, in Extension Development Host session, run Start React Webview
command from command palette.
Things we did on top of Create React App TypeScript template
- We inline
index.html
content inext-src/extension.ts
when creating the webview - We set strict security policy for accessing resources in the webview.
- Only resources in
/build
can be accessed - Onlu resources whose scheme is
vscode-resource
can be accessed.
- Only resources in
- For all resources we are going to use in the webview, we change their schemes to
vscode-resource
- Since we only allow local resources, absolute path for styles/images (e.g.,
/static/media/logo.svg
) will not work. We add a.env
file which setsPUBLIC_URL
to./
and after bundling, resource urls will be relative. - We add baseUrl
<base href="${vscode.Uri.file(path.join(this._extensionPath, 'build')).with({ scheme: 'vscode-resource' })}/">
and then all relative paths work.
Right now you can only run production bits (yarn run build
) in the webview, how to make dev bits work (webpack dev server) is still unknown yet. Suggestions and PRs welcome !