packages/plugin-ext/README.md
The @theia/plugin-ext extension contributes functionality for the plugin API.
The implementation is inspired from: https://blog.mattbierner.com/vscode-webview-web-learnings/.
THEIA_WEBVIEW_EXTERNAL_ENDPOINT
A string pattern possibly containing {{uuid}} and {{hostname}} which will be replaced. This is the host for which the webviews will be served on.
It is a good practice to host the webview handlers on a sub-domain as it is more secure.
Defaults to {{uuid}}.webview.{{hostname}}.
Potentially Insecure Host Pattern
When you change the host pattern via the THEIA_WEBVIEW_EXTERNAL_ENDPOINT environment variable warning will be emitted both from the frontend and from the backend.
You can disable those warnings by setting warnOnPotentiallyInsecureHostPattern: false in the appropriate application configurations in your application's package.json.
This package has a different folder structure than other Theia packages. Stuff in the "hosted" folder is meant to be scoped to a front end,
whereas "main" is global to a back end instance. Code in "plugin" runs inside the plugin host process. But be aware that this is not always the case,
for example the plugin manifest scanners (e.g. scanner-theia.ts) are in the hosted folder, even though they a global concern.
"Theia" is a trademark of the Eclipse Foundation https://www.eclipse.org/theia