Newer Version Available
Using External JavaScript Libraries
The framework’s content security policy mandates that external JavaScript libraries must be uploaded to Salesforce static resources. For more information on static resources, see “Static Resources” in the Salesforce Help.
You can’t use a <script> tag in a component. This restriction mitigates the risk of cross-site scripting attacks. You can add a <script> tag to an application’s template, which is a special type of component that extends aura:template.
1<ltng:require scripts="{!$Resource.resourceName}"
2 afterScriptsLoaded="{!c.afterScriptsLoaded}" />resourceName is the Name of the static resource. In a managed package, the resource name must include the package namespace prefix, such as $Resource.yourNamespace__resourceName. For a stand-alone static resource, such as an individual graphic or script, you only need the name of the resource. For example, if you uploaded myScript.js and set the Name to myScript, reference it as $Resource.myScript. To reference an item within an archive static resource, add the rest of the path to the item using string concatenation.
The afterScriptsLoaded action in the client-side controller is called after the scripts are loaded and the component is rendered. Don’t use the init event to access scripts loaded by ltng:require. These scripts load asynchronously and are most likely not available when the init event handler is called.
Here are some considerations for loading scripts:
- Loading Sets of Scripts
- Specify a comma-separated list of resources in the scripts attribute to load a set of resources.
- Loading Order
- The scripts are loaded in the order that they are listed.
- One-Time Loading
- Scripts load only once, even if they’re specified in multiple <ltng:require> tags in the same component or across different components.
- Parallel Loading
- Use separate <ltng:require> tags for parallel loading if you have multiple sets of scripts that are not dependent on each other.
- Encapsulation
- To ensure encapsulation and reusability, add the <ltng:require> tag to every .cmp or .app resource that uses the JavaScript library.
ltng:require also has a styles attribute to load a list of CSS resources. You can set the scripts and styles attributes in one <ltng:require> tag.
Using a Client-Side Controller with External JavaScript Libraries
1<ltng:require scripts="{!$Resource.chart}"
2 afterScriptsLoaded="{!c.setup}"/>
3<canvas aura:id="chart" id="myChart" width="400" height="400"/>1setup : function(component, event, helper) {
2 var data = {
3 labels: ["January", "February", "March"],
4 datasets: [{
5 data: [65, 59, 80, 81, 56, 55, 40]
6 }]
7 };
8 var el = component.find("chart").getElement();
9 var ctx = el.getContext("2d");
10 var myNewChart = new Chart(ctx).Line(data);
11}Troubleshooting Errors from ltng:require
Let’s say your component references a custom JavaScript library with ltng:require. When you try to load the component, a modal dialog interrupts and displays information about an error.
For example, the dialog could show a message like the following.
1Custom Script Eval error in 'ltng:require' [SecureDOMEvent: [object Event] {key: {namespace":"c"}}]The dialog could also include a stack trace. If it doesn’t, check the browser’s JavaScript console for more information. If the component didn't load, the console doesn’t show much and the problem is likely in the library you referenced.
Use the Locker Console to evaluate the JavaScript from the library to see if it’s affected by Locker restrictions.
If ltng:require encounters errors in your script, you see an error in the JavaScript console that includes details about the problem. The JavaScript console could show a message such as the following.
1WARNING: Failed to load script at
2/resource/156768268766/MyHeader/static/myLib.js:
3Cannot assign to read only property 'someProp' of object '[object Object]'This also indicates the problem is in the static resource, myLib.js in this case. If the Locker Console gives you the same message when you evaluate the JavaScript from myLib.js, this confirms that the script is attempting to perform an action that is not allowed by Locker.