
Security News
New Website “Is It Really FOSS?” Tracks Transparency in Open Source Distribution Models
A new site reviews software projects to reveal if they’re truly FOSS, making complex licensing and distribution models easy to understand.
Turbograft extends Turbolinks, allowing you to perform partial page refreshes.
Graft
- (noun) a shoot or twig inserted into a slit on the trunk or stem of a living plant, from which it receives sap.
In botany, one can take parts of a tree and splice it onto another tree. The DOM is a tree. In this library, we're cutting off sub-trees of the DOM and splicing new ones on.
Turbolinks works by intercepting navigation requests and loading them via Ajax when possible, swapping the body tag of the document with the newly loaded copy. Turbograft builds on this to allow you to perform a partial page refresh on specified DOM nodes by adding a refresh key. This allows you reduce page load time, while the feeling of a native, single-page application.
Turbograft gives you the ability to maintain a single, canonical render path for views. Your ERB views are the single definition of what will be rendered, without the worry of conditionally fetching snippets of HTML from elsewhere. This approach leads to clear, simplified code.
Partial page refreshes mean that CSS and JavaScript are only reloaded when you need them to be. Turbograft improves on the native, single-page application feel for the user while keeping these benefits inherited from Turbolinks.
Head asset tracking means that you can split your large CSS and Javascript bundles into smaller area bundles, decreasing your page weight and further increasing the responsiveness of your app.
Turbograft was built with simplicity in mind. It intends to offer the smallest amount of overhead required on top of a traditional Rails stack to solve the problem of making a Rails app feel native to the browser.
gem "turbolinks"
with gem "turbograft"
in your Gemfile//= require turbolinks
with //= require turbograft
in app/assets/javascripts/application.jsbundle install
Turbograft requires a browser that supports Promise
, or a polyfill (e.g., core-js.)
Much of Turbograft’s functionality relies on attributes HTML elements. These attributes are currently namespaced to data-tg-*
(e.g. data-tg-refresh
).
Versions of Turbograft older than 0.2.0 did not use this namespacing. The old attribute names (e.g. refresh
) are deprecated.
<div id="content" data-tg-refresh="page">
...
</div>
<a href="#" id="partial-refresh-page" data-tg-refresh="page" onclick="event.preventDefault(); Page.refresh({url: '<%= page_path(@next_id) %>',onlyKeys: ['page']});">Refresh the page</a>
This performs a GET
request, but our client state is maintained. Using the data-tg-refresh
attribute, we tell TurboGraft to grab the new page, but only refresh elements where data-tg-refresh="page"
. This is the lowest-level way to use TurboGraft.
data-tg-refresh
attributes on your DOM nodes can be considered somewhat analoguous to how class
will apply styles to any nodes with that class. That is to say, many nodes can be decorated data-tg-refresh="foo"
and all matching nodes will be replaced with onlyKeys: ['foo']
. Each node with data-tg-refresh
must have its own unique ID (this is how nodes are matched during the replacement stage). At the moment, data-tg-refresh
does not support multiple keys (e.g., data-tg-refresh="foo bar"
) like the class
attribute does.
You can specify multiple refresh keys on a page, and you can tell TurboGraft to refresh on one or more refresh keys for a given action.
<button id='refresh-a-and-b' href="<%= page_path(@id) %>" onclick="event.preventDefault(); Page.refresh({url: '<%= page_path(@id) %>', onlyKeys: ['section-a', 'section-b']});">Refresh Section A and B</button>
You can also tell TurboGraft to refresh the page, but exclude certain elements from being refreshed.
<button id='refresh-a-and-b' href="<%= page_path(@id) %>" onclick="event.preventDefault(); Page.refresh({url: '<%= page_path(@id) %>', exceptKeys: ['section-a', 'section-b']});">Refresh everything but Section A and B</button>
The data-tg-refresh-never
attribute will cause a node only appear once in the body
of the document. This can be used to include and initialize a tracking pixel or script just once inside the body.
<div data-tg-refresh-never>
<%= link_to "Never refresh", page_path(@next_id), id: "next-page-refresh-never", "data-tg-refresh" => "page" %>
</div>
Defaults to true
. When set to false it prevents Page.refresh()
from updating the url in the browser.
The data-tg-remote
option allows you to query methods on or submit forms to different endpoints, and gives partial page replacement on specified refresh keys depending on the response status.
It requires your <form>
, <a>
, or <button>
to be marked up with:
data-tg-remote
: (optionally valueless for <form>
, but requires an HTTP method for links) the HTTP method you wish to call on your endpointhref
: (if node is <a>
or <button>
) the URL of the endpoint you wish to hitdata-tg-refresh-on-success
: (optional) The refresh keys to be refreshed, using the body of the response. This is space-delimiteddata-tg-full-refresh-on-success-except
: (optional) Replaces body except for specififed refresh keys, using the body of the XHR which has succeededdata-tg-refresh-on-error
: (optional) The refresh keys to be refreshed, but using body of XHR which has failed. Only works with error 422. If the XHR returns and error and you do not supply a refresh-on-error, nothing is changeddata-tg-full-refresh-on-error-except
: (optional) Replaces body except for specified refresh keys, using the body of the XHR which has failed. Only works with error 422data-tg-remote-once
: (optional) The action will only be performed once. Removes data-tg-remote-method
and data-tg-remote-once
from element after consumptiondata-tg-full-refresh
: Rather than using the content of the XHR response for partial page replacement, a full page refresh is performed. If data-tg-refresh-on-success
or data-tg-refresh-on-error
is defined, the page will be reloaded on those keys. If both data-tg-refresh-on-success
and data-tg-refresh-on-error
are not defined, a full page refresh is performed. Defaults to true if neither refresh-on-success nor refresh-on-error are provideddata-tg-remote-norefresh
: Prevents Page.refresh()
from being called, allowing methods to be executed without updating client stateNote that as data-tg-refresh-on-*
pertains to partial refreshes and data-tg-full-refresh-on-*-except
pertains to full refreshes, they are incompatible with each other and should not be combined.
Call a remote method:
<a href="#" data-tg-remote="post" data-tg-refresh-on-success="page section-a section-b">Remote-method</a>
The Rails way:
<%= link_to "Remote method", method_path, 'data-tg-refresh-on-success' => 'page section-a section-b', 'data-tg-full-refresh' => 'true', 'data-tg-remote' => 'post' %>
Post to a remote form:
<div id="results" data-tg-refresh="results">
Use the field below to submit some content, and get a result.
</div>
<form data-tg-remote="" action="/pages/submit" method="post" data-tg-refresh-on-success="results" data-tg-refresh-on-error="results">
<input name="form-input" type="text">
<button type="submit">Submit</button>
</form>
turbograft:remote:init
: Before XHR is sentturbograft:remote:start
: When XHR is sentturbograft:remote:always
: Always fires when XHR is completeturbograft:remote:success
: Always fires when XHR was successfulturbograft:remote:fail
: Always fires when XHR failedturbograft:remote:fail:unhandled
: Fires after turbograft:remote:fail
, but when no partial replacement with refresh-on-error was performed (because no data-tg-refresh-on-error
was supplied or because data-tg-remote-norefresh
was present)Each event also is sent with a copy of the XHR, as well as a reference to the element that initated the data-tg-remote-method
.
With the data-tg-static
attribute decorating a node, we can make sure that this node is not replaced during a fullpage refresh. Contrast this to partial page refreshes, where we normally specify the set of elements that need to change. With data-tg-static
, we can define a set of elements (by annotating them with this attribute) that must never change.
The internal state of any nodes marked with data-tg-static
will remain, even though the entire page has been swapped out. A partial page refresh with onlyKeys
targeting a node inside of the data-tg-static
node is also possible, persisting your static element but swapping the innards.
Though, if you were to refresh the page at a higher level -- e.g., refreshing an ancestor of the data-tg-static
, the static aspect is no longer obeyed and it is replaced!
Examples of where this may be useful include:
<video>
or <audio>
elementFor the lazy developer in all of us, we can use the attribute data-tg-refresh-always
when we want to be sure we've absolutely replaced a certain element, if it exists. An example of such a node you may want to apply this might be an unread notification count -- always being sure to update it if it exists in the response.
When serializing forms for tg-remote calls, turbograft will check to ensure inputs meet the following criteria:
name
attributedisabled
attributeand
data-tg-remote-noserialize
attributedata-tg-remote-noserialize
attributeThe data-tg-remote-noserialize
is useful in scenarios where a whole section of the page should be editable, i.e. not disabled
, but should only conditionally be submitted to the server.
The Turbohead module allows you to track css and javascript assets in the head of the document and change them intelligently. This can be useful in large applications which want to lighten their asset weight by splitting their script and style bundles by area.
When a <script>
or <link>
tag with a unique name in it's data-turbolinks-track
is encountered in a response document Turbograft will insert it into the active DOM and, if it's a script, force it to execute.
If an asset with a different src
/href
but the same data-turbolinks-track
value is found upstream, turbograft will force a full page refresh. This prevents potential multiple executions of a script bundle when a new version of your app is shipped.
As of version 0.4.0
, this functionality has been made backwards compatible. If data-turbolinks-track="true"
head assets are present, turbograft will cause a full page refresh when the set is changed in any way.
There is an example app that you can boot to play with TurboGraft. Open the console and network inspector and see it in action! This same app is also used in the TurboGraft browser testing suite.
./server
When turbograft replaces or removes a node it uses native DOM API to do so. If any objects use jQuery to listen to events on a node then these objects will leak when the node is replaced because jQuery will still have references to it. To clean these up you'll need to tell jQuery that they're removed. This can be done with something like:
document.addEventListener('page:after-node-removed', function(event) {
$(event.data).remove();
});
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)./server
and visit http://localhost:3000/teaspoon to run the JS test suite in the browserbundle exec teaspoon
will run the JS test suite from the command line. Uses Selenium by default, but can be configured using the TEASPOON_DRIVER environment variablebundle exec rake test
to run the browser test suiteFAQs
Unknown package
We found that turbograft demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A new site reviews software projects to reveal if they’re truly FOSS, making complex licensing and distribution models easy to understand.
Security News
Astral unveils pyx, a Python-native package registry in beta, designed to speed installs, enhance security, and integrate deeply with uv.
Security News
The Latio podcast explores how static and runtime reachability help teams prioritize exploitable vulnerabilities and streamline AppSec workflows.