@actuate-media/cms-core 0.51.2 → 0.52.0

package/dist/page-builder/schema.d.ts

@@ -26,6 +26,7 @@ export declare const blockNodeSchema: z.ZodObject<{
     data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 }, "strip", z.ZodTypeAny, {
     type: "block";
+    data: Record<string, unknown>;
     id: string;
     settings: {
         blockType: string;
@@ -33,13 +34,13 @@ export declare const blockNodeSchema: z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
-    data: Record<string, unknown>;
     responsive?: {
         mobile?: Record<string, unknown> | undefined;
         tablet?: Record<string, unknown> | undefined;
     } | undefined;
 }, {
     type: "block";
+    data: Record<string, unknown>;
     id: string;
     settings: {
         blockType: string;
@@ -47,7 +48,6 @@ export declare const blockNodeSchema: z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
-    data: Record<string, unknown>;
     responsive?: {
         mobile?: Record<string, unknown> | undefined;
         tablet?: Record<string, unknown> | undefined;

package/dist/security/sanitize-document.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Sanitize a page-builder layout node tree in place-immutably, cleaning the
+ * rich-text block bodies. Containers/rows/columns recurse through `children`.
+ */
+export declare function sanitizeLayoutTree(layout: unknown): unknown;
+/**
+ * Sanitize every author-HTML sink reachable in a document's `data` payload for
+ * the given collection: top-level + nested rich-text fields and the canonical
+ * `sections[]` rich-text slots. The page-builder `_layout` tree is sanitized
+ * separately via {@link sanitizeLayoutTree} because it is split into an envelope
+ * before this runs.
+ */
+export declare function sanitizeDocumentHtml(data: Record<string, unknown>, collection: string): Record<string, unknown>;
+//# sourceMappingURL=sanitize-document.d.ts.map

package/dist/security/sanitize-document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-document.d.ts","sourceRoot":"","sources":["../../src/security/sanitize-document.ts"],"names":[],"mappings":"AAwGA;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAE3D;AAkBD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAU,EAAE,MAAM,GACjB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWzB"}

package/dist/security/sanitize-document.js

@@ -0,0 +1,117 @@
+import { getActuateConfig } from '../config/runtime.js';
+import { getSectionType } from '../sections/registry.js';
+import { sanitizeHtml } from './sanitize.js';
+/** Bound recursion against pathological / adversarial nesting depth. */
+const MAX_DEPTH = 10;
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** Block-data keys that conventionally carry author HTML in the page-builder tree. */
+const HTML_BLOCK_KEYS = ['content', 'html'];
+/** Resolve a `blocks` field item to its block definition via the conventional discriminator. */
+function pickBlockSlug(item) {
+    for (const key of ['blockType', 'blockName', 'blockSlug', '_type']) {
+        const v = item[key];
+        if (typeof v === 'string')
+            return v;
+    }
+    return undefined;
+}
+function sanitizeObjectByFields(obj, fields, depth) {
+    const out = { ...obj };
+    for (const [key, def] of Object.entries(fields)) {
+        if (key in out)
+            out[key] = sanitizeByFieldDef(out[key], def, depth);
+    }
+    return out;
+}
+function sanitizeByFieldDef(value, def, depth) {
+    if (depth > MAX_DEPTH)
+        return value;
+    switch (def.type) {
+        case 'richText':
+            return typeof value === 'string' ? sanitizeHtml(value) : value;
+        case 'array': {
+            if (!Array.isArray(value))
+                return value;
+            const arrayDef = def;
+            return value.map((item) => isPlainObject(item) ? sanitizeObjectByFields(item, arrayDef.fields, depth + 1) : item);
+        }
+        case 'blocks': {
+            if (!Array.isArray(value))
+                return value;
+            const blocksDef = def;
+            return value.map((item) => {
+                if (!isPlainObject(item))
+                    return item;
+                const slug = pickBlockSlug(item);
+                const blockDef = slug ? blocksDef.blocks.find((b) => b.slug === slug) : undefined;
+                if (!blockDef)
+                    return item;
+                return sanitizeObjectByFields(item, blockDef.fields, depth + 1);
+            });
+        }
+        default:
+            return value;
+    }
+}
+/** Sanitize the rich-text slots of a single canonical `PageSection`. */
+function sanitizeSection(section) {
+    if (!isPlainObject(section))
+        return section;
+    const typeId = typeof section.sectionType === 'string' ? section.sectionType : undefined;
+    const def = typeId ? getSectionType(typeId) : undefined;
+    if (!def || !isPlainObject(section.content))
+        return section;
+    let mutated = false;
+    const content = { ...section.content };
+    for (const field of def.fields) {
+        if (field.type === 'richText' && typeof content[field.key] === 'string') {
+            content[field.key] = sanitizeHtml(content[field.key]);
+            mutated = true;
+        }
+    }
+    return mutated ? { ...section, content } : section;
+}
+/**
+ * Sanitize a page-builder layout node tree in place-immutably, cleaning the
+ * rich-text block bodies. Containers/rows/columns recurse through `children`.
+ */
+export function sanitizeLayoutTree(layout) {
+    return sanitizeNode(layout, 0);
+}
+function sanitizeNode(node, depth) {
+    if (depth > MAX_DEPTH || !isPlainObject(node))
+        return node;
+    const out = { ...node };
+    if (out.type === 'block' && isPlainObject(out.data)) {
+        const data = { ...out.data };
+        for (const key of HTML_BLOCK_KEYS) {
+            if (typeof data[key] === 'string')
+                data[key] = sanitizeHtml(data[key]);
+        }
+        out.data = data;
+    }
+    if (Array.isArray(out.children)) {
+        out.children = out.children.map((child) => sanitizeNode(child, depth + 1));
+    }
+    return out;
+}
+/**
+ * Sanitize every author-HTML sink reachable in a document's `data` payload for
+ * the given collection: top-level + nested rich-text fields and the canonical
+ * `sections[]` rich-text slots. The page-builder `_layout` tree is sanitized
+ * separately via {@link sanitizeLayoutTree} because it is split into an envelope
+ * before this runs.
+ */
+export function sanitizeDocumentHtml(data, collection) {
+    const fields = getActuateConfig()?.collections?.[collection]?.fields ?? {};
+    let result = sanitizeObjectByFields(data, fields, 0);
+    // `sections` is the canonical page-content array; it is NOT part of the
+    // collection field config, so resolve its HTML slots from the registry.
+    if (Array.isArray(result.sections)) {
+        result = { ...result, sections: result.sections.map(sanitizeSection) };
+    }
+    return result;
+}
+//# sourceMappingURL=sanitize-document.js.map

package/dist/security/sanitize-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-document.js","sourceRoot":"","sources":["../../src/security/sanitize-document.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C,wEAAwE;AACxE,MAAM,SAAS,GAAG,EAAE,CAAA;AAEpB,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,sFAAsF;AACtF,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,MAAM,CAAU,CAAA;AAEpD,gGAAgG;AAChG,SAAS,aAAa,CAAC,IAA6B;IAClD,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,CAAU,EAAE,CAAC;QAC5E,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;QACnB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAA;IACrC,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,sBAAsB,CAC7B,GAA4B,EAC5B,MAAuC,EACvC,KAAa;IAEb,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAA;IACtB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,GAAoB,EAAE,KAAa;IAC7E,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,KAAK,CAAA;IACnC,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QAChE,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAA;YACvC,MAAM,QAAQ,GAAG,GAAiB,CAAA;YAClC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACxB,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACtF,CAAA;QACH,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAA;YACvC,MAAM,SAAS,GAAG,GAAkB,CAAA;YACpC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACxB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAA;gBACrC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBACjF,IAAI,CAAC,QAAQ;oBAAE,OAAO,IAAI,CAAA;gBAC1B,OAAO,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;YACjE,CAAC,CAAC,CAAA;QACJ,CAAC;QACD;YACE,OAAO,KAAK,CAAA;IAChB,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAA;IAC3C,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IACxF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACvD,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAA;IAC3D,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAA;IACtC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAW,CAAC,CAAA;YAC/D,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;AACpD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe;IAChD,OAAO,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;AAChC,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,KAAa;IAChD,IAAI,KAAK,GAAG,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,GAAG,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAA;IAChD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,EAAE,GAAI,GAAG,CAAC,IAAgC,EAAE,CAAA;QACzD,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAW,CAAC,CAAA;QAClF,CAAC;QACD,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAA6B,EAC7B,UAAkB;IAElB,MAAM,MAAM,GAAG,gBAAgB,EAAE,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,IAAI,EAAE,CAAA;IAC1E,IAAI,MAAM,GAAG,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;IAEpD,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAA;IACxE,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actuate-media/cms-core",
-  "version": "0.51.2",
+  "version": "0.52.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/actuate-media/actuatecms.git",