@bleedingdev/modern-js-runtime-renderer-extensions 0.0.0 → 3.9.0-ultramodern.5

package/tests/runtimePlugin.test.tsx

@@ -0,0 +1,37 @@
+import { fileURLToPath } from 'node:url';
+import { build } from 'esbuild';
+
+const packageDirectory = fileURLToPath(new URL('..', import.meta.url));
+
+// Resolve the public package entry, including its platform conditions.
+test.each([
+  'browser',
+  'node',
+] as const)('public %s entry selects the matching renderer adapter', async platform => {
+  const output = await build({
+    absWorkingDir: packageDirectory,
+    stdin: {
+      contents:
+        "export { default } from '@modern-js/runtime-renderer-extensions'",
+      resolveDir: packageDirectory,
+    },
+    bundle: true,
+    write: false,
+    metafile: true,
+    platform,
+    format: 'esm',
+    conditions: ['modern:source'],
+  });
+  const inputs = Object.keys(output.metafile.inputs);
+  expect(inputs.some(input => input.endsWith('/runtimePlugin.ts'))).toBe(true);
+  expect(
+    inputs.some(input => input.endsWith('/runtime-extensions/src/node.ts')),
+  ).toBe(platform === 'node');
+  expect(
+    inputs.some(
+      input =>
+        input === 'src/node.ts' ||
+        input.endsWith('/renderer-extensions/src/node.ts'),
+    ),
+  ).toBe(platform === 'node');
+});

package/tests/scriptOrder.security.test.ts

@@ -0,0 +1,42 @@
+import { createRouteHydrationScriptTags as createTags } from '@modern-js/runtime-extensions';
+import {
+  applyRouterRuntimeState,
+  getRouterMatchedRouteIds,
+} from '@modern-js/runtime-extensions/router-state';
+
+const createRouteHydrationScriptTags = (
+  context: any,
+  entryName: string,
+  options: any,
+) =>
+  createTags(
+    context.routeManifest,
+    getRouterMatchedRouteIds(context) ?? [],
+    entryName,
+    options,
+  );
+
+describe('route hydration script serialization', () => {
+  it('quotes and escapes asset and nonce attributes', () => {
+    const runtimeContext = {} as any;
+    applyRouterRuntimeState(runtimeContext, {
+      framework: 'react-router',
+      serverSnapshot: { matchedRouteIds: ['route-a'] },
+    });
+    runtimeContext.routeManifest = {
+      routeAssets: {
+        'route-a': {
+          assets: ['/route" onload="alert(1)&x=<tag>.js'],
+        },
+      },
+    };
+
+    expect(
+      createRouteHydrationScriptTags(runtimeContext, 'main', {
+        nonce: 'nonce"&<value>',
+      }),
+    ).toBe(
+      '<script src="/route&quot; onload=&quot;alert(1)&amp;x=&lt;tag&gt;.js" nonce="nonce&quot;&amp;&lt;value&gt;"></script>',
+    );
+  });
+});

package/tsconfig.json

@@ -0,0 +1,10 @@
+{
+  "extends": "@modern-js/tsconfig/base",
+  "compilerOptions": {
+    "declaration": false,
+    "isolatedModules": true,
+    "rootDir": "./src",
+    "types": ["node"]
+  },
+  "include": ["src"]
+}

package/README.md

@@ -1,3 +0,0 @@
-# @bleedingdev/modern-js-runtime-renderer-extensions
-
-This 0.0.0 version only registers the package name so npm trusted publishing can be configured. It contains no runtime implementation. Use the subsequent UltraModern.js release, published from the repository workflow with provenance.