This project was bootstrapped with

• Create React App
• Create React App TypeScript
• VSCode Extension Webview Sample

The webview API allows extensions to create customizable views within VSCode. Single Page Application frameworks are perfect fit for this use case. However, to make modern JavaScript frameworks/toolchains appeal to VSCode webview API's security best practices requires some knowledge of both the bundling framework you are using and how VSCode secures webview. This project aims to provide an out-of-box starter kit for Create React App and TypeScript in VSCode's webview.

Run following commands in the terminal

yarn install --ignore-engines
yarn run build

And then press F5, in Extension Development Host session, run Start React Webview command from command palette.

Things we did on top of Create React App TypeScript template

• We inline index.html content in ext-src/extension.ts when creating the webview
• We set strict security policy for accessing resources in the webview.
  • Only resources in /build can be accessed
  • Onlu resources whose scheme is vscode-resource can be accessed.
• For all resources we are going to use in the webview, we change their schemes to vscode-resource
• Since we only allow local resources, absolute path for styles/images (e.g., /static/media/logo.svg) will not work. We add a .env file which sets PUBLIC_URL to ./ and after bundling, resource urls will be relative.
• We add baseUrl <base href="${vscode.Uri.file(path.join(this._extensionPath, 'build')).with({ scheme: 'vscode-resource' })}/"> and then all relative paths work.

Right now you can only run production bits (yarn run build) in the webview, how to make dev bits work (webpack dev server) is still unknown yet. Suggestions and PRs welcome !