@alicloud/console-os-browser-vm 1.4.33 → 1.4.34

package/es/Context.js

@@ -0,0 +1,147 @@
+import _asyncToGenerator from "@babel/runtime/helpers/esm/asyncToGenerator";
+import _defineProperty from "@babel/runtime/helpers/esm/defineProperty";
+import _classCallCheck from "@babel/runtime/helpers/esm/classCallCheck";
+import _createClass from "@babel/runtime/helpers/esm/createClass";
+import _regeneratorRuntime from "@babel/runtime/regenerator";
+function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); enumerableOnly && (symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? ownKeys(Object(source), !0).forEach(function (key) { _defineProperty(target, key, source[key]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)) : ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } return target; }
+import Window from './Window';
+import Document from './Document';
+import Location from './Location';
+import History from './History';
+import { getFetchCredentials } from './utils/credentials';
+var Context = /*#__PURE__*/function () {
+  function Context(conf, frame) {
+    _classCallCheck(this, Context);
+    this.location = new Location(frame.contentWindow.location);
+    this.history = new History(conf.id, frame.contentWindow);
+    this.window = new Window(conf, this, frame, location);
+    this.allowResources = conf.allowResources || [];
+    var body = conf.body;
+    var disableBody = conf.disableBody;
+    if (disableBody) {
+      body = document.body;
+    } else if (!body) {
+      body = document.createElement('body');
+      document.documentElement.appendChild(body);
+    }
+    this.body = body;
+    this.document = new Document(_objectSpread({
+      enableScriptEscape: true
+    }, conf), this, frame, location);
+    this.baseFrame = frame;
+    this._listenerMap = new Map();
+    this.window.__IS_CONSOLE_OS_CONTEXT__ = true;
+  }
+  _createClass(Context, [{
+    key: "loadScripts",
+    value: function () {
+      var _loadScripts = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee(url) {
+        var resp, code;
+        return _regeneratorRuntime.wrap(function _callee$(_context) {
+          while (1) switch (_context.prev = _context.next) {
+            case 0:
+              _context.next = 2;
+              return fetch(url, {
+                credentials: getFetchCredentials(url)
+              });
+            case 2:
+              resp = _context.sent;
+              _context.next = 5;
+              return resp.text();
+            case 5:
+              code = _context.sent;
+              this.evalScript(code, url);
+            case 7:
+            case "end":
+              return _context.stop();
+          }
+        }, _callee, this);
+      }));
+      function loadScripts(_x) {
+        return _loadScripts.apply(this, arguments);
+      }
+      return loadScripts;
+    }()
+  }, {
+    key: "evalScript",
+    value: function evalScript(code) {
+      var url = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : '';
+      var currentScript = this.document.createElement('script');
+      currentScript.src = url;
+
+      // eslint-disable-next-line no-new-func
+      var resolver = new Function("\n      return function ({window, location, history, document, __os_current_script__}){\n        var document = new Proxy(document, {\n          get: function get(target, prop) {\n            if (prop === \"currentScript\" && __os_current_script__) {\n              return __os_current_script__;\n            }\n            return target[prop];\n          }\n        });\n        var window = new Proxy(window, {\n          get: function get(target, prop) {\n            if (prop === \"document\") return document;\n            return target[prop];\n          }\n        })\n        var globalThis = window;\n        with(window.__CONSOLE_OS_GLOBAL_VARS_) {\n          try {\n            ".concat(code, "\n          } catch(e) {\n            console.log(e)\n          }\n        }\n      }//# sourceMappingURL=").concat(url));
+      resolver().call(this.window, _objectSpread(_objectSpread({}, this), {}, {
+        __os_current_script__: currentScript
+      }));
+    }
+  }, {
+    key: "updateBody",
+    value: function updateBody(dom) {
+      if (!dom && this.body) return;
+      this.body = dom;
+    }
+  }, {
+    key: "remove",
+    value: function remove() {
+      this.document.removeEventListeners();
+      if (this.baseFrame) {
+        if (this.baseFrame.parentNode) {
+          this.baseFrame.parentNode.removeChild(this.baseFrame);
+        } else {
+          this.baseFrame.setAttribute('src', 'about:blank');
+        }
+      }
+    }
+  }], [{
+    key: "create",
+    value: function create(conf) {
+      var _this = this;
+      return new Promise(function (resolve) {
+        var _document$documentEle;
+        var iframe = document.createElement('iframe');
+
+        // TODO: change src to a reasonable value.
+        iframe.setAttribute('src', conf.url ? conf.url : '/api.json');
+        iframe.style.cssText = 'position: absolute; top: -20000px; width: 1px; height: 1px;';
+        if (conf.id) iframe.setAttribute('data-id', conf.id);
+
+        // body will be hijacked in sandbox, so get body from html
+        var topBody = ((_document$documentEle = document.documentElement) === null || _document$documentEle === void 0 ? void 0 : _document$documentEle.getElementsByTagName('body')[0]) || document.body;
+        topBody.appendChild(iframe);
+
+        // the onload will no trigger when src is about:blank
+        if (conf.url === 'about:blank') {
+          return resolve(new _this(conf, iframe));
+        }
+        iframe.onload = function () {
+          resolve(new _this(conf, iframe));
+        };
+      });
+    }
+  }, {
+    key: "remove",
+    value: function () {
+      var _remove = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee2(context) {
+        return _regeneratorRuntime.wrap(function _callee2$(_context2) {
+          while (1) switch (_context2.prev = _context2.next) {
+            case 0:
+              if (context.remove) {
+                context.remove();
+              }
+            case 1:
+            case "end":
+              return _context2.stop();
+          }
+        }, _callee2);
+      }));
+      function remove(_x2) {
+        return _remove.apply(this, arguments);
+      }
+      return remove;
+    }()
+  }]);
+  return Context;
+}();
+export default Context;

package/es/Document.js

@@ -0,0 +1,79 @@
+import _toConsumableArray from "@babel/runtime/helpers/esm/toConsumableArray";
+import _createClass from "@babel/runtime/helpers/esm/createClass";
+import _classCallCheck from "@babel/runtime/helpers/esm/classCallCheck";
+/**
+ * Document.js
+ * @lastModified 2019085
+ * @forwardCompatibleTo 2019085
+ * @createAt 2019085
+ */
+
+import { injectHTMLScriptElement } from './utils/HTMLScriptElement';
+var Document = /*#__PURE__*/_createClass(function Document() {
+  var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+  var context = arguments.length > 1 ? arguments[1] : undefined;
+  var frame = arguments.length > 2 ? arguments[2] : undefined;
+  _classCallCheck(this, Document);
+  var eventListeners = [];
+  return new Proxy(document, {
+    set: function set(target, name, value) {
+      switch (name) {
+        case 'cookie':
+          document.cookie = value;
+          break;
+        default:
+          target[name] = value;
+      }
+      return true;
+    },
+    get: function get(target, name) {
+      switch (name) {
+        case 'body':
+          return context.body;
+        case 'location':
+          return context.location;
+        case 'defaultView':
+          return context.window;
+        case 'write':
+        case 'writeln':
+          return function () {};
+        case 'createElement':
+          return function () {
+            var _document;
+            var el = (_document = document).createElement.apply(_document, arguments);
+            el.ownerContext = context;
+            el.appId = options.id;
+            // 对于 script 标签如果开启防逃逸，就直接 hack script 标签
+            if (el.tagName === 'SCRIPT' && !options.enableScriptEscape) {
+              injectHTMLScriptElement(el);
+            }
+            return el;
+          };
+        case 'addEventListener':
+          return function () {
+            for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) {
+              args[_key] = arguments[_key];
+            }
+            eventListeners.push(args);
+            return target.addEventListener.apply(target, args);
+          };
+        case 'removeEventListeners':
+          return function () {
+            for (var _i = 0, _eventListeners = eventListeners; _i < _eventListeners.length; _i++) {
+              var args = _eventListeners[_i];
+              target.removeEventListener.apply(target, _toConsumableArray(args));
+            }
+          };
+        default:
+      }
+
+      // TODO: hijack document.getElementsByTagName('body')
+      if (typeof target[name] === 'function') {
+        return target[name].bind && target[name].bind(target);
+      } else {
+        return target[name];
+      }
+    }
+  });
+});
+export default Document;

package/es/Elements.js

@@ -0,0 +1,61 @@
+import _toConsumableArray from "@babel/runtime/helpers/esm/toConsumableArray";
+import injectScriptCallBack, { getJsonCallback } from './utils/injectScriptCallBack';
+import { isSSR } from './utils/isSSR';
+var makeElInjector = function makeElInjector(originMethod, methodName) {
+  return function (el) {
+    var notAllowed = el && el.ownerContext && el.ownerContext.allowResources.indexOf(el.src) === -1 && el.ownerContext.allowResources !== '*';
+
+    // 如果不在 BrowserVM 的白名单内，尝试通过 context 的 load script 通过 xhr 获取脚本内容，并在沙箱中执行
+    if (el && el._evalScriptInSandbox && el.ownerContext && el.nodeName === 'SCRIPT' && el.src && notAllowed && !getJsonCallback(el.src)) {
+      return el.ownerContext.loadScripts(el.src).then(function () {
+        var fns = el._listenerMap.get('load');
+        if (fns) {
+          fns.forEach(function (fn) {
+            fn();
+          });
+        }
+        var e = new Event('load');
+        el.onload && el.onload(e);
+      }).catch(function (e) {
+        console.error(e, el.src);
+        var fns = el._listenerMap.get('error');
+        if (fns) {
+          fns.forEach(function (fn) {
+            fn(e);
+          });
+        }
+        el.onerror && el.onerror(e);
+      });
+    }
+    if (el && el.nodeName === 'SCRIPT' && el.ownerContext) {
+      injectScriptCallBack(el);
+    }
+
+    // 如果有 scriptText, 证明在 append 之前被设置了 text
+    // 所以直接执行这个 script
+    if (el && el.scriptText) {
+      el.ownerContext.evalScript(el.scriptText);
+    }
+
+    // fix: babel 会把 fn.call 转义成 fn.call.apply 造成 chrome 50 的几个版本报错
+    // 这里 尝试 try catch 如果报错 直接调用 fn.apply
+    for (var _len = arguments.length, args = new Array(_len > 1 ? _len - 1 : 0), _key = 1; _key < _len; _key++) {
+      args[_key - 1] = arguments[_key];
+    }
+    var methodArgs = methodName === 'append' && el === undefined // 修复 append 的过程中 append() 为一个没参数的状态。应为 append 的函数签名为 append(param1, param2, /* ... ,*/ paramN)
+    ? [].concat(args) : [el].concat(args);
+    try {
+      return originMethod.call.apply(originMethod, [this].concat(_toConsumableArray(methodArgs)));
+    } catch (_unused) {
+      return originMethod.apply(this, methodArgs);
+    }
+  };
+};
+if (!isSSR() && typeof window.Element === 'function') {
+  var mountElementMethods = ['appendChild', 'insertBefore', 'append'];
+  for (var _i = 0, _mountElementMethods = mountElementMethods; _i < _mountElementMethods.length; _i++) {
+    var method = _mountElementMethods[_i];
+    var originMethod = window.Element.prototype[method];
+    window.Element.prototype[method] = makeElInjector(originMethod, method);
+  }
+}

package/es/History.js

@@ -0,0 +1,40 @@
+import _createClass from "@babel/runtime/helpers/esm/createClass";
+import _classCallCheck from "@babel/runtime/helpers/esm/classCallCheck";
+var History = /*#__PURE__*/_createClass(function History(id, frame) {
+  _classCallCheck(this, History);
+  if (!id) {
+    return frame.history;
+  }
+  var postMessage = function postMessage() {
+    frame.postMessage({
+      type: "".concat(id, ":history-change"),
+      data: JSON.parse(JSON.stringify(frame.location))
+    }, '*');
+  };
+
+  // throw error when iframe src is about:blank
+  try {
+    var originalPushStatus = frame.history.pushState;
+    var originalReplaceStatus = frame.history.replaceState;
+    frame.history.pushState = function () {
+      for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) {
+        args[_key] = arguments[_key];
+      }
+      var returnValue = originalPushStatus.apply(frame.history, [].concat(args));
+      postMessage();
+      return returnValue;
+    };
+    frame.history.replaceState = function () {
+      for (var _len2 = arguments.length, args = new Array(_len2), _key2 = 0; _key2 < _len2; _key2++) {
+        args[_key2] = arguments[_key2];
+      }
+      var returnValue = originalReplaceStatus.apply(frame.history, [].concat(args));
+      postMessage();
+      return returnValue;
+    };
+    return frame.history;
+  } catch (e) {
+    return undefined;
+  }
+});
+export default History;

package/es/Location.js

@@ -0,0 +1,47 @@
+import _createClass from "@babel/runtime/helpers/esm/createClass";
+import _classCallCheck from "@babel/runtime/helpers/esm/classCallCheck";
+function isAboutBlank(loc) {
+  return loc && loc.href === 'about:blank';
+}
+var Location = /*#__PURE__*/_createClass(function Location(location) {
+  _classCallCheck(this, Location);
+  return new Proxy({}, {
+    set: function set(target, name, value) {
+      switch (name) {
+        case 'href':
+          break;
+        default:
+          location[name] = value;
+      }
+      return true;
+    },
+    get: function get(target, name) {
+      switch (name) {
+        case 'reload':
+          return function () {
+            return window.location.reload();
+          };
+        case 'replace':
+          return function () {};
+        case 'toString':
+          return function () {
+            try {
+              return isAboutBlank(location) ? window.location.toString() : location.toString();
+            } catch (e) {
+              return isAboutBlank(location) ? window.location.href : location.href;
+            }
+          };
+        default:
+          break;
+      }
+      if (typeof location[name] === 'function') {
+        return location[name].bind && location[name].bind(target);
+      } else if (isAboutBlank(location)) {
+        return window.location[name];
+      } else {
+        return location[name];
+      }
+    }
+  });
+});
+export default Location;

package/es/Window.js

@@ -0,0 +1,92 @@
+import _toConsumableArray from "@babel/runtime/helpers/esm/toConsumableArray";
+import _createClass from "@babel/runtime/helpers/esm/createClass";
+import _classCallCheck from "@babel/runtime/helpers/esm/classCallCheck";
+/**
+ * Window.js
+ */
+import { addEventListener, removeEventListener } from './events';
+import { isConstructable, isBoundedFunction } from './utils/common';
+var globalFnName = ['setTimeout', 'setInterval', 'clearInterval', 'clearTimeout'];
+var globalVars = ['location', 'history'];
+var defaultExternals = ['requestAnimationFrame', 'webkitRequestAnimationFrame', 'mozRequestAnimationFrame', 'oRequestAnimationFrame', 'msRequestAnimationFrame', 'cancelAnimationFrame', 'webkitCancelAnimationFrame', 'mozCancelAnimationFrame', 'oCancelAnimationFrame', 'msCancelAnimationFrame', 'matchMedia', 'getSelection', 'open'];
+function getContextWindow(context) {
+  var descriptor = Object.getOwnPropertyDescriptor(context, 'window');
+  if (descriptor) {
+    descriptor.configurable = true;
+    var hasGetter = Object.prototype.hasOwnProperty.call(descriptor, 'get');
+    if (!hasGetter) {
+      descriptor.writable = true;
+    }
+  }
+  return context.window;
+}
+var Window = /*#__PURE__*/_createClass(function Window() {
+  var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+  var context = arguments.length > 1 ? arguments[1] : undefined;
+  var frame = arguments.length > 2 ? arguments[2] : undefined;
+  _classCallCheck(this, Window);
+  var externals = [].concat(defaultExternals, _toConsumableArray(options.externals || []));
+  var __CONSOLE_OS_GLOBAL_VARS_ = {};
+
+  // 拦截全局方法
+  globalFnName.forEach(function (name) {
+    if (externals.includes(name)) {
+      return;
+    }
+    __CONSOLE_OS_GLOBAL_VARS_[name] = frame.contentWindow[name].bind(frame.contentWindow);
+  });
+
+  // 通过拦截外置的全局变量，指向外部变量
+  globalVars.forEach(function (name) {
+    if (externals.includes(name)) {
+      __CONSOLE_OS_GLOBAL_VARS_[name] = window[name];
+    }
+  });
+  return new Proxy(frame.contentWindow, {
+    set: function set(target, name, value) {
+      target[name] = value;
+      __CONSOLE_OS_GLOBAL_VARS_[name] = value;
+      return true;
+    },
+    get: function get(target, name) {
+      if (externals.includes(name)) {
+        var windowValue = window[name];
+        if (typeof windowValue === 'function' && !isBoundedFunction(windowValue) && !isConstructable(windowValue)) {
+          var bindFn = windowValue.bind(window);
+          for (var key in windowValue) {
+            bindFn[key] = windowValue[key];
+          }
+          return bindFn;
+        } else {
+          return windowValue;
+        }
+      }
+      switch (name) {
+        case 'window':
+          return getContextWindow(context);
+        case 'document':
+          return context.document;
+        case 'location':
+          return context.location;
+        case 'history':
+          return context.history;
+        case '__CONSOLE_OS_GLOBAL_VARS_':
+          return __CONSOLE_OS_GLOBAL_VARS_;
+        case 'addEventListener':
+          return addEventListener(context);
+        case 'removeEventListener':
+          return removeEventListener(context);
+      }
+      if (__CONSOLE_OS_GLOBAL_VARS_[name]) {
+        return __CONSOLE_OS_GLOBAL_VARS_[name];
+      }
+      var value = target[name];
+      if (typeof value === 'function' && !isBoundedFunction(value) && !isConstructable(value)) {
+        return value.bind && value.bind(target);
+      } else {
+        return value;
+      }
+    }
+  });
+});
+export default Window;

package/es/events.js

@@ -0,0 +1,28 @@
+import _toConsumableArray from "@babel/runtime/helpers/esm/toConsumableArray";
+import { isSSR } from './utils/isSSR';
+var rawAddEventListener = !isSSR() ? window.addEventListener : function () {};
+var rawRemoveEventListener = !isSSR() ? window.removeEventListener : function () {};
+;
+export var domEventsListeningTo = ['webkitmouseforcedown', 'webkitmouseforcewillbegin', 'visibilitychange', 'error', 'mousemove', 'mousedown', 'mouseup', 'touchcancel', 'touchend', 'touchstart', 'auxclick', 'dblclick', 'pointercancel', 'pointerdown', 'pointerup', 'dragend', 'dragstart', 'drop', 'compositionend', 'compositionstart', 'keydown', 'keypress', 'keyup', 'input', 'textInput', 'close', 'cancel', 'copy', 'cut', 'paste', 'click', 'change', 'contextmenu', 'reset', 'submit', 'resize', 'scroll', 'foucs', 'blur'];
+export var addEventListener = function addEventListener(context) {
+  return function (type, listener, options) {
+    var listeners = context._listenerMap.get(type) || [];
+    context._listenerMap.set(type, [].concat(_toConsumableArray(listeners), [listener]));
+    if (domEventsListeningTo.indexOf(type) === -1) {
+      return context.baseFrame.addEventListener.apply(context.baseFrame.contentWindow, [type, listener, options]);
+    }
+    return rawAddEventListener.apply(window, [type, listener, options]);
+  };
+};
+export var removeEventListener = function removeEventListener(context) {
+  return function (type, listener, options) {
+    var storedTypeListeners = context._listenerMap.get(type);
+    if (storedTypeListeners && storedTypeListeners.length && storedTypeListeners.indexOf(listener) !== -1) {
+      storedTypeListeners.splice(storedTypeListeners.indexOf(listener), 1);
+    }
+    if (domEventsListeningTo.indexOf(type) === -1) {
+      return context.baseFrame.removeEventListener.apply(context.baseFrame.contentWindow, [type, listener, options]);
+    }
+    return rawRemoveEventListener.apply(window, [type, listener, options]);
+  };
+};

package/es/index.js

@@ -0,0 +1,82 @@
+import _defineProperty from "@babel/runtime/helpers/esm/defineProperty";
+import _asyncToGenerator from "@babel/runtime/helpers/esm/asyncToGenerator";
+function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); enumerableOnly && (symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? ownKeys(Object(source), !0).forEach(function (key) { _defineProperty(target, key, source[key]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)) : ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } return target; }
+import _regeneratorRuntime from "@babel/runtime/regenerator";
+/**
+ * index.js
+ * @lastModified 2019085
+ * @forwardCompatibleTo 2019085
+ * @createAt 2019085
+ */
+
+import './Elements';
+import Context from './Context';
+export var createContext = /*#__PURE__*/function () {
+  var _ref = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee() {
+    var conf,
+      _args = arguments;
+    return _regeneratorRuntime.wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          conf = _args.length > 0 && _args[0] !== undefined ? _args[0] : {};
+          _context.next = 3;
+          return Context.create(conf);
+        case 3:
+          return _context.abrupt("return", _context.sent);
+        case 4:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return function createContext() {
+    return _ref.apply(this, arguments);
+  };
+}();
+export var removeContext = /*#__PURE__*/function () {
+  var _ref2 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee2(context) {
+    return _regeneratorRuntime.wrap(function _callee2$(_context2) {
+      while (1) switch (_context2.prev = _context2.next) {
+        case 0:
+          _context2.next = 2;
+          return Context.remove(context);
+        case 2:
+          return _context2.abrupt("return", _context2.sent);
+        case 3:
+        case "end":
+          return _context2.stop();
+      }
+    }, _callee2);
+  }));
+  return function removeContext(_x) {
+    return _ref2.apply(this, arguments);
+  };
+}();
+export var evalScripts = /*#__PURE__*/function () {
+  var _ref3 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee3(code) {
+    var conf,
+      ctx,
+      resolver,
+      _args3 = arguments;
+    return _regeneratorRuntime.wrap(function _callee3$(_context3) {
+      while (1) switch (_context3.prev = _context3.next) {
+        case 0:
+          conf = _args3.length > 1 && _args3[1] !== undefined ? _args3[1] : {};
+          _context3.next = 3;
+          return Context.create(conf);
+        case 3:
+          ctx = _context3.sent;
+          // eslint-disable-next-line no-new-func
+          resolver = new Function("\n    return function({window, location, history, document}){ \n      with(window.__CONSOLE_OS_GLOBAL_VARS_) { \n        ".concat(code, "\n      }\n    }//@sourceURL=").concat(conf.name));
+          return _context3.abrupt("return", resolver(_objectSpread({}, ctx)));
+        case 6:
+        case "end":
+          return _context3.stop();
+      }
+    }, _callee3);
+  }));
+  return function evalScripts(_x2) {
+    return _ref3.apply(this, arguments);
+  };
+}();

package/es/utils/HTMLScriptElement.js

@@ -0,0 +1,43 @@
+import _toConsumableArray from "@babel/runtime/helpers/esm/toConsumableArray";
+export var addEventListener = function addEventListener(el, originEvent) {
+  return function (type, listener, options) {
+    var listeners = el._listenerMap.get(type) || [];
+    el._listenerMap.set(type, [].concat(_toConsumableArray(listeners), [listener]));
+    return originEvent.apply(el, [type, listener, options]);
+  };
+};
+export var removeEventListener = function removeEventListener(el, originEvent) {
+  return function (type, listener, options) {
+    var storedTypeListeners = el._listenerMap.get(type);
+    if (storedTypeListeners && storedTypeListeners.length && storedTypeListeners.indexOf(listener) !== -1) {
+      storedTypeListeners.splice(storedTypeListeners.indexOf(listener), 1);
+    }
+    return originEvent.apply(el, [type, listener, options]);
+  };
+};
+var elProperties = ['innerHTML', 'text', 'innerText'];
+export var injectHTMLScriptElement = function injectHTMLScriptElement(el) {
+  el._listenerMap = new Map();
+  el.addEventListener = addEventListener(el, el.addEventListener);
+  el.removeEventListener = removeEventListener(el, el.removeEventListener);
+
+  // do not redefine property in sandbox
+  if (!el._evalScriptInSandbox) {
+    elProperties.forEach(function (property) {
+      Object.defineProperty(el, property, {
+        get: function get() {
+          return this.scriptText || '';
+        },
+        set: function set(value) {
+          this.scriptText = value;
+          // 如果是已经插入到 dom 树里面，则直接执行
+          if (el.parentNode) {
+            this.ownerContext.evalScript && el.ownerContext.evalScript(value.toString());
+          }
+        },
+        enumerable: false
+      });
+    });
+    el._evalScriptInSandbox = true;
+  }
+};

package/es/utils/common.js

@@ -0,0 +1,9 @@
+export function isConstructable(fn) {
+  var classRegex = /^class\b/;
+  var constructable = fn.prototype && fn.prototype.constructor === fn && Object.getOwnPropertyNames(fn.prototype).length > 1 || classRegex.test(fn.toString());
+  return constructable;
+}
+export function isBoundedFunction(fn) {
+  var bounded = fn.name.indexOf('bound ') === 0 && !fn.hasOwnProperty('prototype');
+  return bounded;
+}

package/es/utils/credentials.js

@@ -0,0 +1,28 @@
+function isSameOriginUrl(str, origin) {
+  try {
+    // str 的格式可以被解析成 url
+    var url = new URL(str);
+    return url.origin === origin;
+  } catch (e) {/**/}
+  try {
+    // str 是相对路径或绝对路径，无法被解析成 url
+    var _url = new URL(str, origin);
+    return _url.origin === origin;
+  } catch (e) {
+    return false;
+  }
+}
+
+// 某些情况下，请求静态资源需要带 cookie
+export var getFetchCredentials = function getFetchCredentials(url) {
+  // 兼容历史逻辑
+  if (url.includes('console.aliyun.com') || url.includes('console.alibabacloud.com')) {
+    return 'include';
+  }
+
+  // 同域请求
+  if (isSameOriginUrl(url, location && location.origin)) {
+    return 'include';
+  }
+  return 'omit';
+};