@devvit/ui-renderer 0.10.4-next-2023-08-17-9b84b2677.0 → 0.10.4-next-2023-08-17-d35139fd0.0

package/blocks/templates/constants.d.ts

@@ -0,0 +1,7 @@
+export declare const REDD_IT = "redd.it";
+export declare const REDDIT_STATIC = "redditstatic.com";
+export declare const REDDIT_MEDIA = "redditmedia.com";
+export declare const SNOO_DEV = "snoo.dev";
+export declare const VerifiedPublicImageHosts: string[];
+export declare const VerifiedImageHosts: string[];
+//# sourceMappingURL=constants.d.ts.map

package/blocks/templates/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../library/src/blocks/templates/constants.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,OAAO,YAAY,CAAC;AACjC,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAChD,eAAO,MAAM,YAAY,oBAAoB,CAAC;AAC9C,eAAO,MAAM,QAAQ,aAAa,CAAC;AAEnC,eAAO,MAAM,wBAAwB,UAAyC,CAAC;AAC/E,eAAO,MAAM,kBAAkB,UAAmD,CAAC"}

package/blocks/templates/constants.js

@@ -0,0 +1,7 @@
+// Only the following domains are approved: redd.it, redditstatic.com, redditmedia.com, or snoo.dev
+export const REDD_IT = 'redd.it';
+export const REDDIT_STATIC = 'redditstatic.com';
+export const REDDIT_MEDIA = 'redditmedia.com';
+export const SNOO_DEV = 'snoo.dev';
+export const VerifiedPublicImageHosts = [REDD_IT, REDDIT_STATIC, REDDIT_MEDIA];
+export const VerifiedImageHosts = [SNOO_DEV, REDD_IT, REDDIT_STATIC, REDDIT_MEDIA];

package/blocks/templates/renderImageBlock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"renderImageBlock.d.ts","sourceRoot":"","sources":["../../../library/src/blocks/templates/renderImageBlock.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAWvC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAY,YAAY,EAAE,MAAM,WAAW,CAAC;AAEnD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,GAAG,YAAY,CAmC/E"}
+{"version":3,"file":"renderImageBlock.d.ts","sourceRoot":"","sources":["../../../library/src/blocks/templates/renderImageBlock.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAWvC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAA6B,YAAY,EAAE,MAAM,WAAW,CAAC;AAKpE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,GAAG,YAAY,CA4C/E"}

package/blocks/templates/renderImageBlock.js

@@ -1,7 +1,9 @@
 import { nothing } from 'lit';
 import { getTemplateRenderingStrategy } from '@reddit/faceplate-ui/faceplateUIConfig.js';
 import { cursorClass, defaultClasses, onClickAction, resizeModeClass, sizingClass, sizingStyle, stackChildClass, } from '../attributes.js';
-import { classMap } from './util.js';
+import { classMap, isValidImageURL } from './util.js';
+import { VerifiedPublicImageHosts } from './constants.js';
+const FALLBACK_IMG_URL = 'https://i.redd.it/p1vmc5ulmpib1.png';
 export function renderImageBlock(block, ctx) {
     const { html, styleMap, ifDefined } = getTemplateRenderingStrategy();
     if (!block.config?.imageConfig) {
@@ -9,6 +11,12 @@ export function renderImageBlock(block, ctx) {
         return nothing;
     }
     const { width, height, url, description, resizeMode } = block.config.imageConfig;
+    let imageUrl = url;
+    if (!isValidImageURL(imageUrl)) {
+        console.error(`Invalid image URL: Image URL domain must be one of ${VerifiedPublicImageHosts.join(', ')}.`);
+        // Replace url with a fallback snoo
+        imageUrl = FALLBACK_IMG_URL;
+    }
     const classes = {
         ...defaultClasses(block.type),
         ...stackChildClass(ctx.stackDirection),
@@ -22,7 +30,7 @@ export function renderImageBlock(block, ctx) {
     const onClick = onClickAction(block, ctx);
     return html `
     <img
-      src="${url}"
+      src="${imageUrl}"
       width="${width}"
       height="${height}"
       alt="${description}"

package/blocks/templates/util.d.ts

@@ -11,4 +11,5 @@ export declare function ref(ref: RefOrCallback): ReturnType<typeof clientRef> |
 export declare function isHTMLElement(el: HTMLElement | Element | undefined): el is HTMLElement;
 export declare function resolveIcon(name: string): TemplateResult;
 export declare function sanitizeStyleInfo(styleInfo: StyleInfo): StyleInfo;
+export declare function isValidImageURL(imageUrl: string): boolean;
 //# sourceMappingURL=util.d.ts.map

package/blocks/templates/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../library/src/blocks/templates/util.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAEpF,OAAO,EAAE,GAAG,IAAI,SAAS,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,KAAK,CAAC;AAG9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAI9D,MAAM,MAAM,YAAY,GAAG,cAAc,GAAG,OAAO,OAAO,CAAC;AAE3D,wBAAgB,QAAQ,CACtB,SAAS,EAAE,SAAS,EACpB,WAAW,CAAC,EAAE,OAAO,GACpB,MAAM,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAW5C;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAAC,cAAc,CAAC,GAAG,YAAY,CAMxF;AAED,wBAAgB,GAAG,CAAC,GAAG,EAAE,aAAa,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,GAAG,MAAM,CAM7E;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,EAAE,IAAI,WAAW,CAEtF;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAYxD;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAOjE"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../library/src/blocks/templates/util.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAEpF,OAAO,EAAE,GAAG,IAAI,SAAS,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,KAAK,CAAC;AAG9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAK9D,MAAM,MAAM,YAAY,GAAG,cAAc,GAAG,OAAO,OAAO,CAAC;AAE3D,wBAAgB,QAAQ,CACtB,SAAS,EAAE,SAAS,EACpB,WAAW,CAAC,EAAE,OAAO,GACpB,MAAM,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAW5C;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAAC,cAAc,CAAC,GAAG,YAAY,CAMxF;AAED,wBAAgB,GAAG,CAAC,GAAG,EAAE,aAAa,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,GAAG,MAAM,CAM7E;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,EAAE,IAAI,WAAW,CAEtF;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAYxD;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAOjE;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAWzD"}

package/blocks/templates/util.js

@@ -4,6 +4,7 @@ import { ref as clientRef } from 'lit/directives/ref.js';
 import { unsafeHTML as serverUnsafeHTML } from '@reddit/baseplate/html.js';
 import { getTemplateRenderingStrategy } from '@reddit/faceplate-ui/faceplateUIConfig.js';
 import faceplateIcons from '@reddit/faceplate-ui/svgs/svg-manifest.js';
+import { VerifiedImageHosts, REDD_IT } from './constants.js';
 export function classMap(classInfo, forceString) {
     const { getType } = getTemplateRenderingStrategy();
     if (getType() === 'client' && forceString !== true) {
@@ -53,3 +54,15 @@ export function sanitizeStyleInfo(styleInfo) {
     }
     return styleInfo;
 }
+export function isValidImageURL(imageUrl) {
+    try {
+        // The second "base" param helps to handle relative paths to local files
+        // https://developer.mozilla.org/en-US/docs/Web/API/URL/URL#parameters
+        const hostName = new URL(imageUrl, `https://i.${REDD_IT}`)?.hostname;
+        const tld = hostName.split('.').slice(-2).join('.');
+        return Boolean(tld) && VerifiedImageHosts.includes(tld);
+    }
+    catch (_) {
+        return false;
+    }
+}

package/blocks/templates/util.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.test.d.ts","sourceRoot":"","sources":["../../../library/src/blocks/templates/util.test.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devvit/ui-renderer",
-  "version": "0.10.4-next-2023-08-17-9b84b2677.0",
+  "version": "0.10.4-next-2023-08-17-d35139fd0.0",
   "license": "BSD-3-Clause",
   "repository": {
     "type": "git",
@@ -47,9 +47,9 @@
   },
   "types": "./index.d.ts",
   "dependencies": {
-    "@devvit/protos": "0.10.4-next-2023-08-17-9b84b2677.0",
-    "@devvit/runtime-lite": "0.10.4-next-2023-08-17-9b84b2677.0",
-    "@devvit/runtimes": "0.10.4-next-2023-08-17-9b84b2677.0",
+    "@devvit/protos": "0.10.4-next-2023-08-17-d35139fd0.0",
+    "@devvit/runtime-lite": "0.10.4-next-2023-08-17-d35139fd0.0",
+    "@devvit/runtimes": "0.10.4-next-2023-08-17-d35139fd0.0",
     "@lottiefiles/lottie-player": "1.7.1",
     "p-queue": "7.3.4",
     "rxjs": "7.5.7"
@@ -76,8 +76,9 @@
   "devDependencies": {
     "@devvit/eslint-config": "0.10.3",
     "@devvit/repo-tools": "0.10.3",
-    "@devvit/tsconfig": "0.10.4-next-2023-08-17-9b84b2677.0",
+    "@devvit/tsconfig": "0.10.4-next-2023-08-17-d35139fd0.0",
     "@lit/localize": "0.11.4",
+    "@open-wc/testing-helpers": "2.3.0",
     "@reddit/baseplate": "0.14.0",
     "@reddit/eslint-plugin-i18n-shreddit": "0.1.0",
     "autoprefixer": "10.4.14",
@@ -100,5 +101,5 @@
     "directory": "dist"
   },
   "source": "./src/index.ts",
-  "gitHead": "785c16a266df5d5e76f39f0948ba0ada54963cf7"
+  "gitHead": "fae26013e749605facd524c6ad005006dcf0af85"
 }