@askviraj/linter 1.1.4 → 1.1.6

package/node_modules/@rviscomi/capo.js/dist/index.cjs

@@ -35,6 +35,7 @@ __export(index_exports, {
   hasValidationWarning: () => hasValidationWarning,
   isAsyncScript: () => isAsyncScript,
   isDeferScript: () => isDeferScript,
+  isHighPriorityPreload: () => isHighPriorityPreload,
   isImportStyles: () => isImportStyles,
   isMeta: () => isMeta,
   isMetaCSP: () => isMetaCSP,
@@ -98,12 +99,23 @@ function isMeta(element, adapter) {
 function isTitle(element, adapter) {
   return adapter.getTagName(element) === "title";
 }
+function isHighPriorityPreload(element, adapter) {
+  if (adapter.getTagName(element) !== "link") {
+    return false;
+  }
+  const rel = adapter.getAttribute(element, "rel")?.toLowerCase();
+  if (rel !== "preload" && rel !== "modulepreload") {
+    return false;
+  }
+  const priority = adapter.getAttribute(element, "fetchpriority")?.toLowerCase();
+  return priority === "high";
+}
 function isPreconnect(element, adapter) {
   if (adapter.getTagName(element) !== "link") {
     return false;
   }
   const rel = adapter.getAttribute(element, "rel");
-  return rel?.toLowerCase() === "preconnect";
+  return rel?.toLowerCase() === "preconnect" || isHighPriorityPreload(element, adapter);
 }
 function isAsyncScript(element, adapter) {
   return adapter.getTagName(element) === "script" && adapter.hasAttribute(element, "src") && adapter.hasAttribute(element, "async");
@@ -136,8 +148,11 @@ function isSyncScript(element, adapter) {
     return false;
   }
   const type = adapter.getAttribute(element, "type");
-  if (type && type.toLowerCase().includes("json")) {
-    return false;
+  if (type) {
+    const normalizedType = type.toLowerCase().trim();
+    if (normalizedType.includes("json") || normalizedType === "speculationrules") {
+      return false;
+    }
   }
   return true;
 }
@@ -190,7 +205,12 @@ function isDeferScript(element, adapter) {
   return false;
 }
 function isPrefetchPrerender(element, adapter) {
-  if (adapter.getTagName(element) !== "link") {
+  const tagName = adapter.getTagName(element);
+  if (tagName === "script") {
+    const type = adapter.getAttribute(element, "type");
+    return type?.toLowerCase().trim() === "speculationrules";
+  }
+  if (tagName !== "link") {
     return false;
   }
   const rel = adapter.getAttribute(element, "rel");
@@ -251,195 +271,7 @@ function getHeadWeights(head, adapter) {
   });
 }
 
-// src/lib/validation.js
-var VALID_HEAD_ELEMENTS = /* @__PURE__ */ new Set([
-  "base",
-  "link",
-  "meta",
-  "noscript",
-  "script",
-  "style",
-  "template",
-  "title"
-]);
-function isValidElement(element, adapter) {
-  const tagName = adapter.getTagName(element);
-  if (!tagName || tagName === "") {
-    return true;
-  }
-  return VALID_HEAD_ELEMENTS.has(tagName.toLowerCase());
-}
-function hasInvalidChildren(element, adapter) {
-  const children = adapter.getChildren(element);
-  return children.some((child) => !isValidElement(child, adapter));
-}
-function isDuplicateTitle(element, adapter) {
-  if (adapter.getTagName(element) !== "title") {
-    return false;
-  }
-  const parent = adapter.getParent(element);
-  if (!parent) {
-    return false;
-  }
-  let foundFirst = false;
-  for (const child of adapter.getChildren(parent)) {
-    if (adapter.getTagName(child) === "title") {
-      if (child === element) {
-        return foundFirst;
-      }
-      foundFirst = true;
-    }
-  }
-  return false;
-}
-function isDuplicateBase(element, adapter) {
-  if (adapter.getTagName(element) !== "base") {
-    return false;
-  }
-  const siblings = adapter.getSiblings(element);
-  return siblings.some((sibling) => adapter.getTagName(sibling) === "base");
-}
-function hasValidationWarning(element, adapter) {
-  if (!isValidElement(element, adapter)) {
-    return true;
-  }
-  if (hasInvalidChildren(element, adapter)) {
-    return true;
-  }
-  if (isDuplicateTitle(element, adapter)) {
-    return true;
-  }
-  if (isDuplicateBase(element, adapter)) {
-    return true;
-  }
-  if (isMetaCSP(element, adapter)) {
-    return true;
-  }
-  if (isInvalidHttpEquiv(element, adapter)) {
-    return true;
-  }
-  if (isInvalidMetaViewport(element, adapter)) {
-    return true;
-  }
-  if (isInvalidDefaultStyle(element, adapter)) {
-    return true;
-  }
-  if (isInvalidContentType(element, adapter)) {
-    return true;
-  }
-  if (isInvalidOriginTrial(element, adapter)) {
-    return true;
-  }
-  if (isUnnecessaryPreload(element, adapter)) {
-    return true;
-  }
-  if (isInvalidFontPreload(element, adapter)) {
-    return true;
-  }
-  return false;
-}
-function getValidationWarnings(head, adapter) {
-  const validationWarnings = [];
-  const children = adapter.getChildren(head);
-  const titleElements = children.filter((child) => adapter.getTagName(child) === "title");
-  const titleElementCount = titleElements.length;
-  if (titleElementCount != 1) {
-    validationWarnings.push({
-      ruleId: titleElementCount === 0 ? "require-title" : "no-duplicate-title",
-      warning: `Expected exactly 1 <title> element, found ${titleElementCount}`,
-      elements: titleElements
-    });
-  }
-  const metaViewport = children.filter((child) => {
-    if (adapter.getTagName(child) !== "meta") return false;
-    const name = adapter.getAttribute(child, "name");
-    return name && name.toLowerCase() === "viewport";
-  });
-  if (metaViewport.length != 1) {
-    validationWarnings.push({
-      ruleId: metaViewport.length === 0 ? "require-meta-viewport" : "valid-meta-viewport",
-      warning: `Expected exactly 1 <meta name=viewport> element, found ${metaViewport.length}`,
-      elements: metaViewport
-    });
-  }
-  const baseElements = children.filter((child) => adapter.getTagName(child) === "base");
-  const baseElementCount = baseElements.length;
-  if (baseElementCount > 1) {
-    validationWarnings.push({
-      ruleId: "no-duplicate-base",
-      warning: `Expected at most 1 <base> element, found ${baseElementCount}`,
-      elements: baseElements
-    });
-  }
-  children.forEach((element) => {
-    if (isValidElement(element, adapter)) {
-      const elementChildren = adapter.getChildren(element);
-      elementChildren.forEach((child) => {
-        if (!isValidElement(child, adapter)) {
-          validationWarnings.push({
-            ruleId: "no-invalid-head-elements",
-            warning: `${adapter.getTagName(child).toUpperCase()} elements are not allowed in the <head>`,
-            element
-          });
-        }
-      });
-      return;
-    }
-    validationWarnings.push({
-      ruleId: "no-invalid-head-elements",
-      warning: `${adapter.getTagName(element)} elements are not allowed in the <head>`,
-      element
-    });
-  });
-  return validationWarnings;
-}
-function getCustomValidations(element, adapter, parentElement = null) {
-  const results = [];
-  if (isOriginTrial(element, adapter)) {
-    results.push(validateOriginTrial(element, adapter));
-  }
-  if (isMetaCSP(element, adapter)) {
-    results.push(validateCSP(element, adapter));
-  }
-  if (isDefaultStyle(element, adapter)) {
-    results.push(validateDefaultStyle(element, adapter));
-  }
-  if (isMetaViewport(element, adapter)) {
-    results.push(validateMetaViewport(element, adapter));
-  }
-  if (isContentType(element, adapter)) {
-    results.push(validateContentType(element, adapter));
-  }
-  if (isHttpEquiv(element, adapter)) {
-    results.push(validateHttpEquiv(element, adapter));
-  }
-  if (isUnnecessaryPreload(element, adapter, parentElement)) {
-    results.push(validateUnnecessaryPreload(element, adapter, parentElement));
-  }
-  if (isInvalidFontPreload(element, adapter)) {
-    results.push(validateInvalidFontPreload(element, adapter));
-  }
-  if (results.length === 0) {
-    return {};
-  }
-  if (results.length === 1) {
-    return results[0];
-  }
-  const combined = {
-    warnings: [],
-    payload: {},
-    ruleId: results[0].ruleId
-  };
-  results.forEach((result) => {
-    if (result.warnings) {
-      combined.warnings?.push(...result.warnings);
-    }
-    if (result.payload) {
-      Object.assign(combined.payload, result.payload);
-    }
-  });
-  return combined;
-}
+// src/lib/validations/csp.js
 function validateCSP(element, adapter) {
   const warnings = [];
   let payload = null;
@@ -459,7 +291,7 @@ function validateCSP(element, adapter) {
   const content = adapter.getAttribute(element, "content");
   if (!content) {
     warnings.push("Invalid CSP. The content attribute must be set.");
-    return { warnings, payload };
+    return { ruleId: "no-meta-csp", warnings, payload };
   }
   const directives = Object.fromEntries(
     content.split(/\s*;\s*/).map((directive) => {
@@ -488,14 +320,26 @@ function validateCSP(element, adapter) {
     payload
   };
 }
-function isInvalidOriginTrial(element, adapter) {
-  if (!isOriginTrial(element, adapter)) {
-    return false;
-  }
-  const { warnings } = validateOriginTrial(element, adapter);
-  return (warnings?.length ?? 0) > 0;
+
+// src/lib/validations/origin-trial.js
+function isSameOrigin(a, b) {
+  return new URL(a).origin === new URL(b).origin;
+}
+function isSubdomain(tokenOrigin, pageUrl) {
+  const urlA = new URL(tokenOrigin);
+  const urlB = new URL(pageUrl);
+  return urlB.host.endsWith(`.${urlA.host}`);
 }
-function validateOriginTrial(element, adapter) {
+function decodeOriginTrialToken(token) {
+  if (!token) throw new Error("Missing token");
+  const buffer = new Uint8Array([...atob(token)].map((a) => a.charCodeAt(0)));
+  const view = new DataView(buffer.buffer);
+  const length = view.getUint32(65, false);
+  const payload = JSON.parse(new TextDecoder().decode(buffer.slice(69, 69 + length)));
+  payload.expiry = new Date(payload.expiry * 1e3);
+  return payload;
+}
+function validateOriginTrial(element, adapter, pageOrigin = null) {
   const metadata = {
     ruleId: "no-invalid-origin-trial",
     payload: null,
@@ -511,9 +355,10 @@ function validateOriginTrial(element, adapter) {
   if (metadata.payload.expiry < /* @__PURE__ */ new Date()) {
     metadata.warnings?.push("Invalid origin trial token: expired");
   }
-  if (typeof document !== "undefined" && document.location && document.location.href) {
-    if (!isSameOrigin(metadata.payload.origin, document.location.href)) {
-      const subdomain = isSubdomain(metadata.payload.origin, document.location.href);
+  const targetOrigin = pageOrigin || typeof document !== "undefined" && document.location && document.location.href;
+  if (targetOrigin) {
+    if (!isSameOrigin(metadata.payload.origin, targetOrigin)) {
+      const subdomain = isSubdomain(metadata.payload.origin, targetOrigin);
       if (subdomain && !metadata.payload.isSubdomain) {
         metadata.warnings?.push("Invalid origin trial token: invalid subdomain");
       } else if (!subdomain && !metadata.payload.isThirdParty) {
@@ -523,167 +368,53 @@ function validateOriginTrial(element, adapter) {
   }
   return metadata;
 }
-function decodeOriginTrialToken(token) {
-  if (!token) throw new Error("Missing token");
-  const buffer = new Uint8Array([...atob(token)].map((a) => a.charCodeAt(0)));
-  const view = new DataView(buffer.buffer);
-  const length = view.getUint32(65, false);
-  const payload = JSON.parse(new TextDecoder().decode(buffer.slice(69, 69 + length)));
-  payload.expiry = new Date(payload.expiry * 1e3);
-  return payload;
-}
-function isSameOrigin(a, b) {
-  return new URL(a).origin === new URL(b).origin;
-}
-function isSubdomain(a, b) {
-  const urlA = new URL(a);
-  const urlB = new URL(b);
-  return urlB.host.endsWith(`.${urlA.host}`);
-}
+
+// src/lib/validations/default-style.js
 function isDefaultStyle(element, adapter) {
   if (adapter.getTagName(element) !== "meta") return false;
   const httpEquiv = adapter.getAttribute(element, "http-equiv");
   return httpEquiv?.toLowerCase() === "default-style";
 }
-function isContentType(element, adapter) {
-  if (adapter.getTagName(element) !== "meta") return false;
-  if (adapter.hasAttribute(element, "charset")) return true;
-  const httpEquiv = adapter.getAttribute(element, "http-equiv");
-  return httpEquiv?.toLowerCase() === "content-type";
-}
-function isHttpEquiv(element, adapter) {
-  if (adapter.getTagName(element) !== "meta") return false;
-  return adapter.hasAttribute(element, "http-equiv");
-}
-function isMetaViewport(element, adapter) {
-  if (adapter.getTagName(element) !== "meta") return false;
-  const name = adapter.getAttribute(element, "name");
-  return name?.toLowerCase() === "viewport";
-}
-function isInvalidDefaultStyle(element, adapter) {
-  if (!isDefaultStyle(element, adapter)) {
-    return false;
-  }
-  const { warnings } = validateDefaultStyle(element, adapter);
-  return (warnings?.length ?? 0) > 0;
-}
-function isInvalidContentType(element, adapter) {
-  if (!isContentType(element, adapter)) {
-    return false;
-  }
-  const { warnings } = validateContentType(element, adapter);
-  return (warnings?.length ?? 0) > 0;
-}
-function isInvalidHttpEquiv(element, adapter) {
-  if (!isHttpEquiv(element, adapter)) {
-    return false;
-  }
-  const { warnings } = validateHttpEquiv(element, adapter);
-  return (warnings?.length ?? 0) > 0;
-}
-function isInvalidMetaViewport(element, adapter) {
-  if (!isMetaViewport(element, adapter)) {
-    return false;
-  }
-  const { warnings } = validateMetaViewport(element, adapter);
-  return (warnings?.length ?? 0) > 0;
-}
-function isUnnecessaryPreload(element, adapter, parentElement = null) {
-  const tagName = adapter.getTagName(element);
-  if (tagName !== "link") {
-    return false;
-  }
-  const rel = adapter.getAttribute(element, "rel");
-  const relLower = rel?.toLowerCase();
-  if (relLower !== "preload" && relLower !== "modulepreload") {
-    return false;
-  }
-  const href = adapter.getAttribute(element, "href");
-  if (!href) {
-    return false;
-  }
-  const parent = parentElement || adapter.getParent(element);
-  if (!parent) {
-    return false;
-  }
-  const found = findElementWithSource(parent, href, element, adapter);
-  return found != null;
-}
-function isInvalidFontPreload(element, adapter) {
-  const tagName = adapter.getTagName(element);
-  if (tagName !== "link") {
-    return false;
-  }
-  const rel = adapter.getAttribute(element, "rel");
-  if (rel?.toLowerCase() !== "preload") {
-    return false;
-  }
-  const as = adapter.getAttribute(element, "as");
-  if (as?.toLowerCase() !== "font") {
-    return false;
-  }
-  return !adapter.hasAttribute(element, "crossorigin");
-}
-function validateInvalidFontPreload(element, adapter) {
-  const warnings = ["Font preloads must have the crossorigin attribute set, even for same-origin fonts."];
-  return {
-    ruleId: "valid-font-preload",
-    warnings,
-    payload: null
-  };
-}
-function findElementWithSource(parent, sourceUrl, excludeElement, adapter) {
-  const children = adapter.getChildren(parent);
-  for (const child of children) {
-    if (child === excludeElement) {
-      continue;
-    }
-    const tagName = adapter.getTagName(child);
-    if (tagName === "link") {
-      const rel = adapter.getAttribute(child, "rel");
-      if (rel && /\b(preload|modulepreload)\b/i.test(rel)) {
-        continue;
-      }
-      const childHref = adapter.getAttribute(child, "href");
-      if (childHref === sourceUrl) {
-        return child;
-      }
-    }
-    if (tagName === "script") {
-      const src = adapter.getAttribute(child, "src");
-      if (src === sourceUrl) {
-        return child;
-      }
-    }
-  }
-  return null;
-}
 function validateDefaultStyle(element, adapter) {
   const warnings = [];
   let payload = null;
   const title = adapter.getAttribute(element, "content");
-  if (element.parentElement && element.parentElement.querySelector) {
-    const stylesheet = element.parentElement.querySelector(
-      `link[rel~="alternate" i][rel~="stylesheet" i][title="${title}"]`
-    );
-    if (!title) {
-      warnings.push("This has no effect. The content attribute must be set to a valid stylesheet title.");
-    } else if (!stylesheet) {
+  if (!title) {
+    warnings.push("This has no effect. The content attribute must be set to a valid stylesheet title.");
+  } else {
+    const parent = adapter.getParent(element);
+    let stylesheet = null;
+    let alternateStylesheets = [];
+    if (parent) {
+      const children = adapter.getChildren(parent);
+      alternateStylesheets = children.filter((child) => {
+        if (adapter.getTagName(child) !== "link") return false;
+        const rel = adapter.getAttribute(child, "rel") || "";
+        const rels = rel.toLowerCase().split(/\s+/);
+        return rels.includes("alternate") && rels.includes("stylesheet");
+      });
+      stylesheet = alternateStylesheets.find((child) => adapter.getAttribute(child, "title") === title);
+    }
+    if (!stylesheet) {
       payload = {
-        alternateStylesheets: Array.from(
-          element.parentElement.querySelectorAll('link[rel~="alternate" i][rel~="stylesheet" i]')
-        )
+        alternateStylesheets
       };
       warnings.push(`This has no effect. No alternate stylesheet found having title="${title}".`);
     }
-  } else if (!title) {
-    warnings.push("This has no effect. The content attribute must be set to a valid stylesheet title.");
   }
   warnings.push(
     "Even when used correctly, the default-style method of setting a preferred stylesheet results in a flash of unstyled content. Use modern CSS features like @media rules instead."
   );
   return { ruleId: "no-default-style", warnings, payload };
 }
+
+// src/lib/validations/content-type.js
+function isContentType(element, adapter) {
+  if (adapter.getTagName(element) !== "meta") return false;
+  if (adapter.hasAttribute(element, "charset")) return true;
+  const httpEquiv = adapter.getAttribute(element, "http-equiv");
+  return httpEquiv?.toLowerCase() === "content-type";
+}
 function validateContentType(element, adapter) {
   const warnings = [];
   let payload = null;
@@ -718,9 +449,9 @@ function validateContentType(element, adapter) {
       }
     }
   }
-  if (element.ownerDocument?.documentElement?.outerHTML && element.outerHTML) {
-    const charPos = element.ownerDocument.documentElement.outerHTML.indexOf(element.outerHTML) + element.outerHTML.length;
-    if (charPos > 1024) {
+  if (typeof adapter.getCharacterPosition === "function") {
+    const charPos = adapter.getCharacterPosition(element);
+    if (charPos !== null && charPos > 1024) {
       payload = payload ?? {};
       payload.characterPosition = charPos;
       warnings.push(
@@ -735,7 +466,7 @@ function validateContentType(element, adapter) {
     const charsetPattern = /text\/html;\s*charset=(.*)/i;
     charset = adapter.getAttribute(element, "content")?.match(charsetPattern)?.[1]?.trim();
   }
-  if (charset?.toLowerCase() != "utf-8") {
+  if (charset?.toLowerCase() !== "utf-8") {
     payload = payload ?? {};
     payload.charset = charset;
     warnings.push(`Documents are required to use UTF-8 encoding. Found "${charset}".`);
@@ -745,6 +476,12 @@ function validateContentType(element, adapter) {
   }
   return { ruleId: "valid-charset", warnings, payload };
 }
+
+// src/lib/validations/http-equiv.js
+function isHttpEquiv(element, adapter) {
+  if (adapter.getTagName(element) !== "meta") return false;
+  return adapter.hasAttribute(element, "http-equiv");
+}
 function validateHttpEquiv(element, adapter) {
   const warnings = [];
   const type = adapter.getAttribute(element, "http-equiv")?.toLowerCase() || "";
@@ -770,9 +507,9 @@ function validateHttpEquiv(element, adapter) {
       }
       break;
     case "x-dns-prefetch-control":
-      if (content == "on") {
+      if (content === "on") {
         warnings.push(`DNS prefetching is enabled by default. Setting it to "${content}" has no effect.`);
-      } else if (content != "off") {
+      } else if (content !== "off") {
         warnings.push(
           `This is a non-standard way of disabling DNS prefetching, which is a performance optimization. Found content="${content}". Use content="off" if you have a legitimate security concern, otherwise remove it.`
         );
@@ -848,6 +585,13 @@ function validateHttpEquiv(element, adapter) {
     warnings
   };
 }
+
+// src/lib/validations/viewport.js
+function isMetaViewport(element, adapter) {
+  if (adapter.getTagName(element) !== "meta") return false;
+  const name = adapter.getAttribute(element, "name");
+  return name?.toLowerCase() === "viewport";
+}
 function validateMetaViewport(element, adapter) {
   const warnings = [];
   let payload = null;
@@ -871,14 +615,14 @@ function validateMetaViewport(element, adapter) {
         warnings.push(
           "Another meta viewport element has already been declared. Having multiple viewport settings can lead to unexpected behavior."
         );
-        return { warnings, payload };
+        return { ruleId: "valid-meta-viewport", warnings, payload };
       }
     }
   }
   const content = adapter.getAttribute(element, "content")?.toLowerCase();
   if (!content) {
     warnings.push("Invalid viewport. The content attribute must be set.");
-    return { warnings, payload };
+    return { ruleId: "valid-meta-viewport", warnings, payload };
   }
   const directives = Object.fromEntries(
     content.split(",").map((directive) => {
@@ -890,7 +634,7 @@ function validateMetaViewport(element, adapter) {
     const width = directives["width"];
     if (Number(width) < 1 || Number(width) > 1e4) {
       warnings.push(`Invalid width "${width}". Numeric values must be between 1 and 10000.`);
-    } else if (width != "device-width") {
+    } else if (width !== "device-width") {
       warnings.push(`Invalid width "${width}".`);
     }
   }
@@ -898,7 +642,7 @@ function validateMetaViewport(element, adapter) {
     const height = directives["height"];
     if (Number(height) < 1 || Number(height) > 1e4) {
       warnings.push(`Invalid height "${height}". Numeric values must be between 1 and 10000.`);
-    } else if (height != "device-height") {
+    } else if (height !== "device-height") {
       warnings.push(`Invalid height "${height}".`);
     }
   }
@@ -936,7 +680,7 @@ function validateMetaViewport(element, adapter) {
   }
   if ("user-scalable" in directives) {
     const userScalable = directives["user-scalable"];
-    if (userScalable == "no" || userScalable == "0") {
+    if (userScalable === "no" || userScalable === "0") {
       warnings.push(
         `Disabling zooming can cause accessibility issues to users with visual impairments. Found "user-scalable=${userScalable}".`
       );
@@ -977,10 +721,10 @@ function validateMetaViewport(element, adapter) {
     if (validDirectives.has(directive)) {
       return false;
     }
-    if (directive == "shrink-to-fit") {
+    if (directive === "shrink-to-fit") {
       return false;
     }
-    if (directive == "viewport-fit") {
+    if (directive === "viewport-fit") {
       return false;
     }
     return true;
@@ -989,6 +733,70 @@ function validateMetaViewport(element, adapter) {
   });
   return { ruleId: "valid-meta-viewport", warnings, payload };
 }
+
+// src/lib/validations/preload.js
+function findElementWithSource(parent, sourceUrl, excludeElement, adapter) {
+  const children = adapter.getChildren(parent);
+  for (const child of children) {
+    if (child === excludeElement) {
+      continue;
+    }
+    const tagName = adapter.getTagName(child);
+    if (tagName === "link") {
+      const rel = adapter.getAttribute(child, "rel");
+      if (rel && /\b(preload|modulepreload)\b/i.test(rel)) {
+        continue;
+      }
+      const childHref = adapter.getAttribute(child, "href");
+      if (childHref === sourceUrl) {
+        return child;
+      }
+    }
+    if (tagName === "script") {
+      const src = adapter.getAttribute(child, "src");
+      if (src === sourceUrl) {
+        return child;
+      }
+    }
+  }
+  return null;
+}
+function isUnnecessaryPreload(element, adapter, parentElement = null) {
+  const tagName = adapter.getTagName(element);
+  if (tagName !== "link") {
+    return false;
+  }
+  const rel = adapter.getAttribute(element, "rel");
+  const relLower = rel?.toLowerCase();
+  if (relLower !== "preload" && relLower !== "modulepreload") {
+    return false;
+  }
+  const href = adapter.getAttribute(element, "href");
+  if (!href) {
+    return false;
+  }
+  const parent = parentElement || adapter.getParent(element);
+  if (!parent) {
+    return false;
+  }
+  const found = findElementWithSource(parent, href, element, adapter);
+  return found !== null && found !== void 0;
+}
+function isInvalidFontPreload(element, adapter) {
+  const tagName = adapter.getTagName(element);
+  if (tagName !== "link") {
+    return false;
+  }
+  const rel = adapter.getAttribute(element, "rel");
+  if (rel?.toLowerCase() !== "preload") {
+    return false;
+  }
+  const as = adapter.getAttribute(element, "as");
+  if (as?.toLowerCase() !== "font") {
+    return false;
+  }
+  return !adapter.hasAttribute(element, "crossorigin");
+}
 function validateUnnecessaryPreload(element, adapter, parentElement = null) {
   const href = adapter.getAttribute(element, "href");
   if (!href) {
@@ -1009,16 +817,193 @@ function validateUnnecessaryPreload(element, adapter, parentElement = null) {
     ]
   };
 }
+function validateInvalidFontPreload(element, adapter) {
+  const warnings = ["Font preloads must have the crossorigin attribute set, even for same-origin fonts."];
+  return {
+    ruleId: "valid-font-preload",
+    warnings,
+    payload: null
+  };
+}
+
+// src/lib/validation.js
+var VALID_HEAD_ELEMENTS = /* @__PURE__ */ new Set([
+  "base",
+  "link",
+  "meta",
+  "noscript",
+  "script",
+  "style",
+  "template",
+  "title"
+]);
+function isValidElement(element, adapter) {
+  const tagName = adapter.getTagName(element);
+  if (!tagName || tagName === "") {
+    return true;
+  }
+  return VALID_HEAD_ELEMENTS.has(tagName.toLowerCase());
+}
+function hasInvalidChildren(element, adapter) {
+  const children = adapter.getChildren(element);
+  return children.some((child) => !isValidElement(child, adapter));
+}
+function isDuplicateTitle(element, adapter) {
+  if (adapter.getTagName(element) !== "title") {
+    return false;
+  }
+  const parent = adapter.getParent(element);
+  if (!parent) {
+    return false;
+  }
+  let foundFirst = false;
+  for (const child of adapter.getChildren(parent)) {
+    if (adapter.getTagName(child) === "title") {
+      if (child === element) {
+        return foundFirst;
+      }
+      foundFirst = true;
+    }
+  }
+  return false;
+}
+function isDuplicateBase(element, adapter) {
+  if (adapter.getTagName(element) !== "base") {
+    return false;
+  }
+  const siblings = adapter.getSiblings(element);
+  return siblings.some((sibling) => adapter.getTagName(sibling) === "base");
+}
+function hasValidationWarning(element, adapter, pageOrigin = null) {
+  if (!isValidElement(element, adapter)) {
+    return true;
+  }
+  if (hasInvalidChildren(element, adapter)) {
+    return true;
+  }
+  if (isDuplicateTitle(element, adapter)) {
+    return true;
+  }
+  if (isDuplicateBase(element, adapter)) {
+    return true;
+  }
+  if (isOriginTrial(element, adapter) || isMetaCSP(element, adapter) || isDefaultStyle(element, adapter) || isMetaViewport(element, adapter) || isContentType(element, adapter) || isHttpEquiv(element, adapter) || isUnnecessaryPreload(element, adapter) || isInvalidFontPreload(element, adapter)) {
+    const validations = getCustomValidations(element, adapter, null, pageOrigin);
+    if (validations.warnings && validations.warnings.length > 0) {
+      return true;
+    }
+  }
+  return false;
+}
+function getValidationWarnings(head, adapter) {
+  const validationWarnings = [];
+  const children = adapter.getChildren(head);
+  const titleElements = children.filter((child) => adapter.getTagName(child) === "title");
+  const titleElementCount = titleElements.length;
+  if (titleElementCount !== 1) {
+    validationWarnings.push({
+      ruleId: titleElementCount === 0 ? "require-title" : "no-duplicate-title",
+      warning: `Expected exactly 1 <title> element, found ${titleElementCount}`,
+      elements: titleElements
+    });
+  }
+  const metaViewport = children.filter((child) => {
+    if (adapter.getTagName(child) !== "meta") return false;
+    const name = adapter.getAttribute(child, "name");
+    return name && name.toLowerCase() === "viewport";
+  });
+  if (metaViewport.length !== 1) {
+    validationWarnings.push({
+      ruleId: metaViewport.length === 0 ? "require-meta-viewport" : "valid-meta-viewport",
+      warning: `Expected exactly 1 <meta name=viewport> element, found ${metaViewport.length}`,
+      elements: metaViewport
+    });
+  }
+  const baseElements = children.filter((child) => adapter.getTagName(child) === "base");
+  const baseElementCount = baseElements.length;
+  if (baseElementCount > 1) {
+    validationWarnings.push({
+      ruleId: "no-duplicate-base",
+      warning: `Expected at most 1 <base> element, found ${baseElementCount}`,
+      elements: baseElements
+    });
+  }
+  children.forEach((element) => {
+    if (isValidElement(element, adapter)) {
+      const elementChildren = adapter.getChildren(element);
+      elementChildren.forEach((child) => {
+        if (!isValidElement(child, adapter)) {
+          validationWarnings.push({
+            ruleId: "no-invalid-head-elements",
+            warning: `${adapter.getTagName(child).toUpperCase()} elements are not allowed in the <head>`,
+            element
+          });
+        }
+      });
+      return;
+    }
+    validationWarnings.push({
+      ruleId: "no-invalid-head-elements",
+      warning: `${adapter.getTagName(element)} elements are not allowed in the <head>`,
+      element
+    });
+  });
+  return validationWarnings;
+}
+function getCustomValidations(element, adapter, parentElement = null, pageOrigin = null) {
+  const results = [];
+  if (isOriginTrial(element, adapter)) {
+    results.push(validateOriginTrial(element, adapter, pageOrigin));
+  }
+  if (isMetaCSP(element, adapter)) {
+    results.push(validateCSP(element, adapter));
+  }
+  if (isDefaultStyle(element, adapter)) {
+    results.push(validateDefaultStyle(element, adapter));
+  }
+  if (isMetaViewport(element, adapter)) {
+    results.push(validateMetaViewport(element, adapter));
+  }
+  if (isContentType(element, adapter)) {
+    results.push(validateContentType(element, adapter));
+  }
+  if (isHttpEquiv(element, adapter)) {
+    results.push(validateHttpEquiv(element, adapter));
+  }
+  if (isUnnecessaryPreload(element, adapter, parentElement)) {
+    results.push(validateUnnecessaryPreload(element, adapter, parentElement));
+  }
+  if (isInvalidFontPreload(element, adapter)) {
+    results.push(validateInvalidFontPreload(element, adapter));
+  }
+  if (results.length === 0) {
+    return {};
+  }
+  if (results.length === 1) {
+    return results[0];
+  }
+  const combined = {
+    warnings: [],
+    payload: {},
+    ruleId: results[0].ruleId
+  };
+  results.forEach((result) => {
+    if (result.warnings) {
+      combined.warnings?.push(...result.warnings);
+    }
+    if (result.payload) {
+      Object.assign(combined.payload, result.payload);
+    }
+  });
+  return combined;
+}
 
 // src/analyzer.js
 function analyzeHead(headNode, adapter, options = {}) {
-  const {
-    includeValidation = true,
-    includeCustomValidations = true
-  } = options;
+  const { includeValidation = true, includeCustomValidations = true, pageOrigin = null } = options;
   const weights = getHeadWeights(headNode, adapter);
   const validationWarnings = includeValidation ? getValidationWarnings(headNode, adapter) : [];
-  const customValidations = includeCustomValidations ? getElementValidations(headNode, adapter) : [];
+  const customValidations = includeCustomValidations ? getElementValidations(headNode, adapter, pageOrigin) : [];
   return {
     weights,
     validationWarnings,
@@ -1026,11 +1011,11 @@ function analyzeHead(headNode, adapter, options = {}) {
     headElement: headNode
   };
 }
-function getElementValidations(headNode, adapter) {
+function getElementValidations(headNode, adapter, pageOrigin = null) {
   const customValidations = [];
   const children = adapter.getChildren(headNode);
   for (const element of children) {
-    const validation = getCustomValidations(element, adapter, headNode);
+    const validation = getCustomValidations(element, adapter, headNode, pageOrigin);
     if (validation && validation.warnings && validation.warnings.length > 0) {
       customValidations.push({
         ruleId: validation.ruleId,
@@ -1177,6 +1162,14 @@ var AdapterInterface = class {
   getLocation(node) {
     return null;
   }
+  /**
+   * Get character position for a node (optional, for validation)
+   * @param {any} node - Element node
+   * @returns {number | null}
+   */
+  getCharacterPosition(node) {
+    return null;
+  }
   /**
    * Stringify element for logging/debugging
    * @param {any} node - Element node
@@ -1330,10 +1323,10 @@ var BrowserAdapter = class extends AdapterInterface {
   }
   /**
    * Get source location for a node (optional, for linting)
-   * 
+   *
    * Browser DOM elements don't have source location information,
    * so this always returns null.
-   * 
+   *
    * @override
    * @param {any} node - Element node
    * @returns {null}
@@ -1341,6 +1334,22 @@ var BrowserAdapter = class extends AdapterInterface {
   getLocation(node) {
     return null;
   }
+  /**
+   * Get character position for a node (optional, for validation)
+   * @override
+   * @param {any} node - Element node
+   * @returns {number | null}
+   */
+  getCharacterPosition(node) {
+    if (!node || !node.ownerDocument || !node.ownerDocument.documentElement) {
+      return null;
+    }
+    const outerHTML = node.ownerDocument.documentElement.outerHTML;
+    if (outerHTML && node.outerHTML) {
+      return outerHTML.indexOf(node.outerHTML) + node.outerHTML.length;
+    }
+    return null;
+  }
   /**
    * Stringify element for logging/debugging
    * @override
@@ -1381,6 +1390,7 @@ var BrowserAdapter = class extends AdapterInterface {
   hasValidationWarning,
   isAsyncScript,
   isDeferScript,
+  isHighPriorityPreload,
   isImportStyles,
   isMeta,
   isMetaCSP,