Document Previews
Last updated
Was this helpful?
Last updated
Was this helpful?
The Quilt catalog renders previews of the following file types. Whenever possible, Quilt streams the smallest possible subset of the data needed to generate the preview.
Previews are supported for uncompressed files as well as for gzip archives (.gz).
Quilt can display any plaintext file format, including the following.
Most programming languages, with syntax highlighting (.cpp, .json, .js, .py, .sh, .sql, etc.)
Biological file formats (.bed, .cef, .gff, .fasta, .fastq, .sam, .pdbqt, .vcf, etc.)
Text files (.csv, .md, .readme, .tsv, .txt, etc.)
The Quilt catalog uses the to render structures. By default, v3000 Molfiles are converted to v2000 by the JavaScript client for rendering.
The following file formats are supported:
Mol files (.mol, .mol2, .sdf)
.cif
.ent
.pdb
Automated previews of 8-bit depth and higher image files are not currently supported.
FCS Flow Cytometry files (.fcs)
Media (.mp4, .webm, .flac, .m2t, .mp3, .mp4, .ogg, .ts, .tsa, .tsv, .wav)
Jupyter notebooks (.ipynb)
.parquet
PDF (.pdf)
PowerPoint (.pptx)
Excel (.xls, .xlsx)
The Quilt Catalog supports HTML and JavaScript in preview via iframes. By default, preview iframes do not have IAM permissions and are therefore unable to access private files in S3.
You should only enable this feature for buckets where you implicitly trust the contents of the HTML files.
Depending on the context where the HTML file is rendered (package vs bucket view), the iframe gets the following origin:
Inside a package view with permissive rendering enabled: the origin is the Quilt Package File Server.
Inside a bucket view with permissive rendering enabled: the origin is the AWS S3 bucket endpoint.
An important implication of same-origin policy is that the scripts executed under the same origin share LocalStorage data and cookies.
New in Quilt Platform version 1.59.0 or higher
Enabling Permissive HTML now allows forms and popups to work from iframes.
report.html is a file in a package that includes a publicly available JS
library and a custom embedded script.
Opening report.html in a package view generates a new session temporary-session-id.
The file is served by the Quilt Package File Server under the/temporary-session-id/report.html path.
All relative media and scripts are rendered in the same iframe relative-path format:
./img.jpg is resolved to /temporary-session-id/img.jpg
script.js is resolved to /temporary-session-id/script.js
The allow-same-origin iframe sandbox token is enabled,
the origin is the Quilt Package File Server,
the LocalStorage API is available.
report.html is a file in a bucket example-bucket that includes a publicly
available JS library and custom embedded script.
When opening report.html in bucket view, it is served directly by S3
via a signed HTTPS URL, e.g.https://example-bucket.s3.region.amazonaws.com/report.html?versionId=...&X-Amz-....
All relative media and scripts are rendered in the same iframe relative-path format:
./img.jpg is resolved to /img.jpg
script.js is resolved to /script.js
The allow-same-origin iframe sandbox token is enabled,
the origin is the S3 bucket endpoint
(e.g. https://example-bucket.s3.region.amazonaws.com),
the LocalStorage API is available.
report.html is a file in a bucket example-bucket that includes a publicly
available JS library and custom embedded script.
When opening report.html in any view it is served directly by S3 via a
signed HTTPS URL, e.g.https://example-bucket.s3.region.amazonaws.com/report.html?versionId=...&X-Amz-....
All relative media and scripts are rendered in the same iframe relative-path format:
./img.jpg is resolved to /img.jpg
script.js is resolved to /script.js
The allow-same-origin iframe sandbox token is disabled,
a virtual unique origin is used (always failing the same-origin policy),
the LocalStorage API is unavailable.
The Quilt Catalog uses a
to automatically generate thumbnail previews of common image formats
and select microscopy image formats such as .bmp, .gif, .jpg, .jpeg,
.png, .webp, .tif, .tiff (including OME-TIFF), and .czi.
If you wish for your HTML to access data within the enclosing package or bucket
(at the viewer's level of permissions) and/or use origin-aware Web APIs such as
data storage/cookies, you must opt in to Enable permissive HTML rendering in. This explicitly allows cross-origin resource
sharing (CORS).
With permissive rendering disabled (irrespective of package or bucket view): the resource is treated as being from a special origin that always fails the same-origin policy ( is not set).