@instructure/canvas-rce 5.12.1 → 5.12.2

package/lib/common/natcompare.js

@@ -1,47 +0,0 @@
-//
-// Copyright (C) 2014 - present Instructure, Inc.
-//
-// This file is part of Canvas.
-//
-// Canvas is free software: you can redistribute it and/or modify it under
-// the terms of the GNU Affero General Public License as published by the Free
-// Software Foundation, version 3 of the License.
-//
-// Canvas is distributed in the hope that it will be useful, but WITHOUT ANY
-// WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
-// A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
-// details.
-//
-// You should have received a copy of the GNU Affero General Public License along
-// with this program. If not, see <http://www.gnu.org/licenses/>.
-let activeLocale = 'en-US';
-export const setLocale = locale => {
-  const locale_map = {
-    zh_Hant: 'zh-Hant'
-  };
-  activeLocale = locale_map[locale] || locale;
-};
-export default {
-  strings(x, y) {
-    // if you change these settings, also match the settings in best_unicode_collation_key
-    // and Canvas::ICU.collator
-    return x.localeCompare(y, activeLocale, {
-      sensitivity: 'variant',
-      ignorePunctuation: false,
-      numeric: true
-    });
-  },
-
-  by(f) {
-    return (x, y) => this.strings(f(x), f(y));
-  },
-
-  byKey(key) {
-    return this.by(x => x[key]);
-  },
-
-  byGet(key) {
-    return this.by(x => x.get(key));
-  }
-
-};

package/lib/defaultTinymceConfig.js

@@ -1,160 +0,0 @@
-/*
- * Copyright (C) 2021 - present Instructure, Inc.
- *
- * This file is part of Canvas.
- *
- * Canvas is free software: you can redistribute it and/or modify it under
- * the terms of the GNU Affero General Public License as published by the Free
- * Software Foundation, version 3 of the License.
- *
- * Canvas is distributed in the hope that it will be useful, but WITHOUT ANY
- * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
- * A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
- * details.
- *
- * You should have received a copy of the GNU Affero General Public License along
- * with this program. If not, see <http://www.gnu.org/licenses/>.
- */
-const defaultTinymceConfig = {
-  // ============================================================================
-  // Values in this section have acceptable defaults which you may want
-  // to override (though you really should provide content_css)
-  // ============================================================================
-  auto_focus: false,
-  // any values provided (in an array) will be merged into the standard then sorted
-  // you provide the translations
-  block_formats: undefined,
-  // replace to provide your own
-  body_class: 'default-theme',
-  // urls to branding css go here
-  content_css: [],
-  // these are up to you
-  directionality: 'ltr',
-  height: undefined,
-  // '400px' is s the standard height
-  language: 'en',
-  // any menubar entries here will be appended to the standard menubar
-  menubar: undefined,
-  // any menus here will be merged into the standard menubar menus
-  menu: undefined,
-  // any toolbar data here will be merged into the standard toolbars
-  toolbar: undefined,
-  // plugins included here will be added to the standard set
-  plugins: undefined,
-  // ==================================================================================
-  // values below this line define standard behavior and probably shouldn't be changed
-  // but will be used if you do
-  // ==================================================================================
-  branding: false,
-  browser_spellcheck: true,
-  content_style: undefined,
-  // this will always be provided by the RCE
-  convert_urls: false,
-  font_formats: "Lato=lato,Helvetica Neue,Helvetica,Arial,sans-serif; Balsamiq Sans=Balsamiq Sans,lato,Helvetica Neue,Helvetica,Arial,sans-serif; Architect's Daughter=Architects Daughter,lato,Helvetica Neue,Helvetica,Arial,sans-serif; Andale Mono=andale mono,times; Arial=arial,helvetica,sans-serif; Arial Black=arial black,avant garde; Book Antiqua=book antiqua,palatino; Comic Sans MS=comic sans ms,sans-serif; Courier New=courier new,courier; Georgia=georgia,palatino; Helvetica=helvetica; Impact=impact,chicago; Symbol=symbol; Tahoma=tahoma,arial,helvetica,sans-serif; Terminal=terminal,monaco; Times New Roman=times new roman,times; Trebuchet MS=trebuchet ms,geneva; Verdana=verdana,geneva; Webdings=webdings; Wingdings=wingdings,zapf dingbats",
-  language_load: false,
-  language_url: 'none',
-  toolbar_mode: 'floating',
-  toolbar_ticky: true,
-  mobile: {
-    theme: 'silver'
-  },
-  preview_styles: 'font-family font-size font-weight font-style text-decoration text-transform border border-radius outline text-shadow',
-  remove_script_host: true,
-  resize: true,
-  // will get set from textareaId
-  // selector: '#textarea2',
-  skin: false,
-  statusbar: false,
-  // part of unifying tinymce and canvas_sanitize's element whitelist
-  // copied from
-  // https://www.tiny.cloud/docs-3x/reference/configuration/Configuration3x@valid_elements/#defaultruleset
-  // then edited.
-  //
-  // this list needs to be kept in sync with the list in gems/canvas_sanitize/lib/canvas_sanitize/canvas_sanitize.rb
-  valid_elements: '@[id|class|style|title|dir<ltr?rtl|lang|xml::lang|role],a[rel|rev|charset|hreflang|tabindex|accesskey|type|name|href|target|title|class],strong/b,em/i,strike/s,u,#p,-ol[type|compact],-ul[type|compact],-li,br,img[longdesc|usemap|src|border|alt|title|hspace|vspace|width|height|align|role],-sub,-sup,-blockquote[cite],-table[border=0|cellspacing|cellpadding|width|frame|rules|height|align|summary|bgcolor|background|bordercolor],-tr[rowspan|width|height|align|valign|bgcolor|background|bordercolor],tbody,thead,tfoot,#td[colspan|rowspan|width|height|align|valign|bgcolor|background|bordercolor|scope],#th[colspan|rowspan|width|height|align|valign|scope],caption,-div,-span,-code,-pre,address,-h1,-h2,-h3,-h4,-h5,-h6,hr[size|noshade],-font[face|size|color],dd,dl,dt,cite,abbr,acronym,del[datetime|cite],ins[datetime|cite],object[classid|width|height|codebase|*],param[name|value|_value],embed[type|width|height|src|*],map[name],area[shape|coords|href|alt|target],bdo,col[align|char|charoff|span|valign|width],colgroup[align|char|charoff|span|valign|width],dfn,kbd,q[cite],samp,small,tt,var,big,figure,figcaption,source[media|width|height|sizes|src|srcset|type],track,mark,article,aside,details,footer,header,nav,section,summary,time',
-  extended_valid_elements: '@[id|accesskey|class|dir|lang|style|tabindex|title|contenteditable|contextmenu|draggable|dropzone|hidden|longdesc|spellcheck|translate|align|role|aria-labelledby|aria-atomic|aria-busy|aria-controls|aria-describedby|aria-disabled|aria-dropeffect|aria-flowto|aria-grabbed|aria-haspopup|aria-hidden|aria-invalid|aria-label|aria-labelledby|aria-live|aria-owns|aria-relevant|aria-autocomplete|aria-checked|aria-disabled|aria-expanded|aria-haspopup|aria-hidden|aria-invalid|aria-label|aria-level|aria-multiline|aria-multiselectable|aria-orientation|aria-pressed|aria-readonly|aria-required|aria-selected|aria-sort|aria-valuemax|aria-valuemin|aria-valuenow|aria-valuetext],iframe[id|data-media-type|title|src|width|height|name|align|style|class|sandbox|allowfullscreen|webkitallowfullscreen|mozallowfullscreen|allow],i[iclass],a[hidden|href|target|rel|media|hreflang|type|charset|name|rev|shape|coords|download|alt],#p,li[value],-ol[reversed|start|type|compact],pre[width],table[border|summary|width|frame|rules|cellspacing|cellpadding|bgcolor],tbody[char|charoff|valign],td[colspan|rowspan|headers|abbr|axis|scope|align|char|charoff|valign|nowrap|bgcolor|width|height],tfoot[char|charoff|valign],th[colspan|rowspan|headers|scope|abbr|axis|align|char|charoff|valign|nowrap|bgcolor|width|height],thead[char|charoff|valign],tr[char|charoff|valign|bgcolor],-ul[compact],video[name|src|allowfullscreen|muted|poster|width|height|controls|playsinline],audio[name|src|muted|controls],annotation[href|xref|definitionURL|encoding|cd|name|src],annotation-xml[href|xref|definitionURL|encoding|cd|name|src],maction[href|xref|mathcolor|mathbackground|actiontype|selection],maligngroup[href|xref|mathcolor|mathbackground|groupalign],malignmark[href|xref|mathcolor|mathbackground|edge],math[xmlns|href|xref|display|maxwidth|overflow|altimg|altimg-width|altimg-height|altimg-valign|alttext|cdgroup|mathcolor|mathbackground|scriptlevel|displaystyle|scriptsizemultiplier|scriptminsize|infixlinebreakstyle|decimalpoint|mathvariant|mathsize|width|height|valign|form|fence|separator|lspace|rspace|stretchy|symmetric|maxsize|minsize|largeop|movablelimits|accent|linebreak|lineleading|linebreakstyle|linebreakmultchar|indentalign|indentshift|indenttarget|indentalignfirst|indentshiftfirst|indentalignlast|indentshiftlast|depth|lquote|rquote|linethickness|munalign|denomalign|bevelled|voffset|open|close|separators|notation|subscriptshift|superscriptshift|accentunder|align|rowalign|columnalign|groupalign|alignmentscope|columnwidth|rowspacing|columnspacing|rowlines|columnlines|frame|framespacing|equalrows|equalcolumns|side|minlabelspacing|rowspan|columnspan|edge|stackalign|charalign|charspacing|longdivstyle|position|shift|location|crossout|length|leftoverhang|rightoverhang|mslinethickness|selection],menclose[href|xref|mathcolor|mathbackground|notation],merror[href|xref|mathcolor|mathbackground],mfenced[href|xref|mathcolor|mathbackground|open|close|separators],mfrac[href|xref|mathcolor|mathbackground|linethickness|munalign|denomalign|bevelled],mglyph[href|xref|mathcolor|mathbackground|src|alt|width|height|valign],mi[href|xref|mathcolor|mathbackground|mathvariant|mathsize],mlabeledtr[href|xref|mathcolor|mathbackground],mlongdiv[href|xref|mathcolor|mathbackground|longdivstyle|align|stackalign|charalign|charspacing],mmultiscripts[href|xref|mathcolor|mathbackground|subscriptshift|superscriptshift],mn[href|xref|mathcolor|mathbackground|mathvariant|mathsize],mo[href|xref|mathcolor|mathbackground|mathvariant|mathsize|form|fence|separator|lspace|rspace|stretchy|symmetric|maxsize|minsize|largeop|movablelimits|accent|linebreak|lineleading|linebreakstyle|linebreakmultchar|indentalign|indentshift|indenttarget|indentalignfirst|indentshiftfirst|indentalignlast|indentshiftlast],mover[href|xref|mathcolor|mathbackground|accent|align],mpadded[href|xref|mathcolor|mathbackground|height|depth|width|lspace|voffset],mphantom[href|xref|mathcolor|mathbackground],mprescripts[href|xref|mathcolor|mathbackground],mroot[href|xref|mathcolor|mathbackground],mrow[href|xref|mathcolor|mathbackground],ms[href|xref|mathcolor|mathbackground|mathvariant|mathsize|lquote|rquote],mscarries[href|xref|mathcolor|mathbackground|position|location|crossout|scriptsizemultiplier],mscarry[href|xref|mathcolor|mathbackground|location|crossout],msgroup[href|xref|mathcolor|mathbackground|position|shift],msline[href|xref|mathcolor|mathbackground|position|length|leftoverhang|rightoverhang|mslinethickness],mspace[href|xref|mathcolor|mathbackground|mathvariant|mathsize],msqrt[href|xref|mathcolor|mathbackground],msrow[href|xref|mathcolor|mathbackground|position],mstack[href|xref|mathcolor|mathbackground|align|stackalign|charalign|charspacing],mstyle[href|xref|mathcolor|mathbackground|scriptlevel|displaystyle|scriptsizemultiplier|scriptminsize|infixlinebreakstyle|decimalpoint|mathvariant|mathsize|width|height|valign|form|fence|separator|lspace|rspace|stretchy|symmetric|maxsize|minsize|largeop|movablelimits|accent|linebreak|lineleading|linebreakstyle|linebreakmultchar|indentalign|indentshift|indenttarget|indentalignfirst|indentshiftfirst|indentalignlast|indentshiftlast|depth|lquote|rquote|linethickness|munalign|denomalign|bevelled|voffset|open|close|separators|notation|subscriptshift|superscriptshift|accentunder|align|rowalign|columnalign|groupalign|alignmentscope|columnwidth|rowspacing|columnspacing|rowlines|columnlines|frame|framespacing|equalrows|equalcolumns|side|minlabelspacing|rowspan|columnspan|edge|stackalign|charalign|charspacing|longdivstyle|position|shift|location|crossout|length|leftoverhang|rightoverhang|mslinethickness|selection],msub[href|xref|mathcolor|mathbackground|subscriptshift],msubsup[href|xref|mathcolor|mathbackground|subscriptshift|superscriptshift],msup[href|xref|mathcolor|mathbackground|superscriptshift],mtable[href|xref|mathcolor|mathbackground|align|rowalign|columnalign|groupalign|alignmentscope|columnwidth|width|rowspacing|columnspacing|rowlines|columnlines|frame|framespacing|equalrows|equalcolumns|displaystyle|side|minlabelspacing],mtd[href|xref|mathcolor|mathbackground|rowspan|columnspan|rowalign|columnalign|groupalign],mtext[href|xref|mathcolor|mathbackground|mathvariant|mathsize|width|height|depth|linebreak],mtr[href|xref|mathcolor|mathbackground|rowalign|columnalign|groupalign],munder[href|xref|mathcolor|mathbackground|accentunder|align],munderover[href|xref|mathcolor|mathbackground|accent|accentunder|align],none[href|xref|mathcolor|mathbackground],semantics[href|xref|definitionURL|encoding],picture,ruby,rp,rt,wbr' + // the svg necessary for the uploading placeholder's spinner
-  'svg[*],g[*],circle[*]',
-  non_empty_elements: 'td th iframe video audio object script a i area base basefont br col frame hr img input isindex link meta param embed source wbr track ruby',
-  // tiny's external link create/edit dialog config
-  target_list: false,
-  // don't show the target list when creating/editing links
-  link_title: false,
-  // don't show the title input when creating/editing links
-  default_link_target: '_blank',
-  // Remove the ability to add h1 tags (since there will already be an h1 on the page)
-  // but preserve the default Formats menu config otherwise
-  style_formats: [{
-    title: 'Headings',
-    items: [{
-      title: 'Heading 2',
-      format: 'h2'
-    }, {
-      title: 'Heading 3',
-      format: 'h3'
-    }, {
-      title: 'Heading 4',
-      format: 'h4'
-    }, {
-      title: 'Heading 5',
-      format: 'h5'
-    }, {
-      title: 'Heading 6',
-      format: 'h6'
-    }]
-  }, {
-    title: 'Inline',
-    items: [{
-      title: 'Bold',
-      format: 'bold'
-    }, {
-      title: 'Italic',
-      format: 'italic'
-    }, {
-      title: 'Underline',
-      format: 'underline'
-    }, {
-      title: 'Strikethrough',
-      format: 'strikethrough'
-    }, {
-      title: 'Superscript',
-      format: 'superscript'
-    }, {
-      title: 'Subscript',
-      format: 'subscript'
-    }, {
-      title: 'Code',
-      format: 'code'
-    }]
-  }, {
-    title: 'Blocks',
-    items: [{
-      title: 'Paragraph',
-      format: 'p'
-    }, {
-      title: 'Blockquote',
-      format: 'blockquote'
-    }, {
-      title: 'Div',
-      format: 'div'
-    }, {
-      title: 'Pre',
-      format: 'pre'
-    }]
-  }, {
-    title: 'Align',
-    items: [{
-      title: 'Left',
-      format: 'alignleft'
-    }, {
-      title: 'Center',
-      format: 'aligncenter'
-    }, {
-      title: 'Right',
-      format: 'alignright'
-    }, {
-      title: 'Justify',
-      format: 'alignjustify'
-    }]
-  }]
-};
-export default defaultTinymceConfig;

package/lib/elementDenylist.js

@@ -1,19 +0,0 @@
-/*
- * Copyright (C) 2023 - present Instructure, Inc.
- *
- * This file is part of Canvas.
- *
- * Canvas is free software: you can redistribute it and/or modify it under
- * the terms of the GNU Affero General Public License as published by the Free
- * Software Foundation, version 3 of the License.
- *
- * Canvas is distributed in the hope that it will be useful, but WITHOUT ANY
- * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
- * A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
- * details.
- *
- * You should have received a copy of the GNU Affero General Public License along
- * with this program. If not, see <http://www.gnu.org/licenses/>.
- */
-const elementDenylist = ('html,base,head,link,meta,style,title,body,main,data,rb,rtc,portal,svg,canvas,noscript,script,button,datalist,fieldset,form,input,label,legend,meter,optgroup' + ',option,output,progress,select,textarea,dialog,menu,slot,template,applet,basefont,bgsound,blink,center,content,dir,frame,frameset,hgroup,image,keygen,marquee,menuitem,nobr,noembed' + ',noframes,plaintext,rb,rtc,shadow,spacer,xmp').split(',');
-export default elementDenylist;

package/lib/enhance-user-content/doc_previews.js

@@ -1,233 +0,0 @@
-/*
- * Copyright (C) 2022 - present Instructure, Inc.
- *
- * This file is part of Canvas.
- *
- * Canvas is free software: you can redistribute it and/or modify it under
- * the terms of the GNU Affero General Public License as published by the Free
- * Software Foundation, version 3 of the License.
- *
- * Canvas is distributed in the hope that it will be useful, but WITHOUT ANY
- * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
- * A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
- * details.
- *
- * You should have received a copy of the GNU Affero General Public License along
- * with this program. If not, see <http://www.gnu.org/licenses/>.
- */
-import React from 'react';
-import ReactDOM from 'react-dom';
-import formatMessage from '../format-message';
-import { Spinner } from '@instructure/ui-spinner';
-import { getData, setData } from './jqueryish_funcs';
-export const previewableMimeTypes = ['application/vnd.openxmlformats-officedocument.wordprocessingml.template', 'application/vnd.oasis.opendocument.spreadsheet', 'application/vnd.sun.xml.writer', 'application/excel', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', 'text/rtf', 'application/vnd.openxmlformats-officedocument.spreadsheetml.template', 'application/vnd.sun.xml.impress', 'application/vnd.sun.xml.calc', 'application/vnd.ms-excel', 'application/msword', 'application/mspowerpoint', 'application/rtf', 'application/vnd.oasis.opendocument.presentation', 'application/vnd.oasis.opendocument.text', 'application/vnd.openxmlformats-officedocument.presentationml.template', 'application/vnd.openxmlformats-officedocument.presentationml.slideshow', 'text/plain', 'application/vnd.openxmlformats-officedocument.presentationml.presentation', 'application/vnd.openxmlformats-officedocument.wordprocessingml.document', 'application/postscript', 'application/pdf', 'application/vnd.ms-powerpoint']; // check to see if a file of a certan mimeType is previewable inline in the browser
-// ex: isPreviewable("application/mspowerpoint")  -> true
-
-export function isPreviewable(mimeType) {
-  return previewableMimeTypes.includes(mimeType);
-} // Show a loading spinner
-// The typical use is to show the spinner next to a canvas file link
-// while the inline preview is loading. It's also used when previewing
-// student submitted files in speedgrader, in which case $link is really
-// the div containing the preview iframe. We handle these 2 cases by
-// telling the function to put the spinner adjacent to $link,
-// or to put it in the center of the preview container.
-//
-// $link: the DOM node that serves as the reference for locating the spinner
-// position: one of 'adjacent' or 'centered'
-
-export function showLoadingImage($link) {
-  let position = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : 'adjacent';
-  const dir = $link && window.getComputedStyle($link).direction || 'ltr';
-  const boundingBox = $link.getBoundingClientRect();
-  const offsetLeft = boundingBox.left + (position === 'adjacent' ? dir === 'ltr' ? boundingBox.width : -24 : boundingBox.width / 2);
-  $link.style.marginInlineEnd = '28px';
-  const imageMarginInlineStart = position === 'adjacent' ? '5px' : '-12px';
-  const imageMarginTop = position === 'adjacent' ? 0 : '-12px';
-  const zIndex = parseInt($link.style.zIndex || 0, 10) + 1;
-  const $imageHolder = document.createElement('div');
-  $imageHolder.setAttribute('class', 'loading_image_holder');
-  const list = getData($link, 'loading_images') || [];
-  list.push($imageHolder);
-  setData($link, 'loading_images', list);
-
-  if (!$link.style.position || $link.style.position === 'static') {
-    const top = `${boundingBox.top + window.scrollY + (position === 'adjacent' ? 0 : boundingBox.height / 2)}px`;
-    const left = `${offsetLeft}px`;
-    $imageHolder.setAttribute('style', `z-index: ${zIndex}; position: absolute; top: ${top}; left: ${left}; margin-inline-start: ${imageMarginInlineStart}; margin-top: ${imageMarginTop}`);
-    document.body.appendChild($imageHolder);
-  } else {
-    const top = `${position === 'adjacent' ? 0 : boundingBox.height / 2}px`;
-    const left = `${offsetLeft}px`;
-    $imageHolder.setAttribute('style', `z-index:${zIndex}; position: absolute; top: ${top}; left: ${left}; margin-inline-start:${imageMarginInlineStart}; margin-top: ${imageMarginTop}`);
-    $link.appendChild($imageHolder);
-  }
-
-  ReactDOM.render( /*#__PURE__*/React.createElement(Spinner, {
-    size: "x-small",
-    renderTitle: formatMessage('Loading')
-  }), $imageHolder);
-  return $link;
-}
-export function removeLoadingImage($link) {
-  var _$link$querySelector;
-
-  (_$link$querySelector = $link.querySelector('.loading_image')) === null || _$link$querySelector === void 0 ? void 0 : _$link$querySelector.remove();
-  const list = getData($link, 'loading_images') || [];
-  list.forEach(item => {
-    if (item) {
-      item.remove();
-    }
-  });
-  setData($link, 'loading_images', null);
-  $link.style.marginInlineEnd = '';
-  return $link;
-}
-export function loadDocPreview($container, options) {
-  let opts = {
-    width: '100%',
-    height: '400px',
-    ...getData($container),
-    ...options
-  };
-  if (!$container) return; // an issue in specs
-
-  function tellAppIViewedThisInline() {
-    // if I have a url to ping back to the app that I viewed this file inline, ping it.
-    if (opts.attachment_view_inline_ping_url) {
-      fetch(opts.attachment_view_inline_ping_url, {
-        method: 'POST'
-      });
-    }
-  }
-
-  if (opts.crocodoc_session_url) {
-    const sanitizedUrl = sanitizeUrl(opts.crocodoc_session_url);
-    const iframe = document.createElement('iframe');
-    iframe.setAttribute('src', sanitizedUrl);
-    iframe.setAttribute('width', opts.width);
-    iframe.setAttribute('height', opts.height);
-    iframe.setAttribute('allowfullscreen', '1');
-    iframe.id = opts.id;
-    $container.appendChild(iframe);
-    iframe.load(() => {
-      tellAppIViewedThisInline('crocodoc');
-      if (typeof opts.ready === 'function') opts.ready();
-    });
-  } else if (opts.canvadoc_session_url) {
-    const canvadocWrapper = document.createElement('div');
-    canvadocWrapper.setAttribute('style', 'overflow: auto; resize: vertical; border: 1px solid transparent; height: 100%;');
-    $container.appendChild(canvadocWrapper);
-    const minHeight = opts.iframe_min_height !== undefined ? opts.iframe_min_height : '800px';
-    const sanitizedUrl = sanitizeUrl(opts.canvadoc_session_url);
-    const iframe = document.createElement('iframe');
-    iframe.addEventListener('load', () => {
-      tellAppIViewedThisInline('canvadocs');
-      if (typeof opts.ready === 'function') opts.ready();
-    });
-    iframe.setAttribute('src', sanitizedUrl);
-    iframe.setAttribute('width', opts.width);
-    iframe.setAttribute('allowfullscreen', '1');
-    iframe.setAttribute('style', `border: 0; overflow: auto; height: 99%; min-height: ${minHeight}`);
-    iframe.id = opts.id;
-    canvadocWrapper.appendChild(iframe);
-  } else if (!opts.disableGooglePreviews && (!opts.mimetype || isPreviewable(opts.mimetype)) && opts.attachment_id || opts.public_url) {
-    // else if it's something google docs preview can handle and we can get a public url to this document.
-    const loadGooglePreview = function () {
-      // this handles both ssl and plain http.
-      const googleDocPreviewUrl = `//docs.google.com/viewer?${new URLSearchParams({
-        embedded: true,
-        url: opts.public_url
-      }).toString()}`;
-
-      if (!opts.ajax_valid || opts.ajax_valid()) {
-        const iframe = document.createElement('iframe');
-        iframe.addEventListener('load', () => {
-          tellAppIViewedThisInline('google');
-
-          if (typeof opts.ready === 'function') {
-            opts.ready();
-          }
-        });
-        iframe.setAttribute('src', googleDocPreviewUrl);
-        iframe.setAttribute('height', opts.height);
-        iframe.setAttribute('width', '100%');
-        $container.appendChild(iframe);
-      }
-    };
-
-    if (opts.public_url) {
-      loadGooglePreview();
-    } else if (opts.attachment_id) {
-      let url = `/api/v1/files/${opts.attachment_id}/public_url.json`;
-
-      if (opts.submission_id) {
-        url += '?' + new URLSearchParams({
-          submission_id: opts.submission_id
-        }).toString();
-      }
-
-      if (opts.verifier) {
-        url += `${opts.submission_id ? '&' : '?'}verifier=${opts.verifier}`;
-      } else {
-        const match = window.location.search.match(/verifier=([^&]+)(?:&|$)/);
-        const ver = match && match[1];
-
-        if (ver) {
-          url += `${opts.submission_id ? '&' : '?'}verifier=${ver}`;
-        }
-      }
-
-      showLoadingImage($container, 'centered'); // eslint-disable-next-line promise/catch-or-return
-
-      fetch(url).then(response => {
-        if (!response.ok) throw new Error(`${response.status}: ${response.statusText}`);
-        return response;
-      }).then(response => response.json()).then(data => {
-        if (data.public_url) {
-          opts = { ...opts,
-            ...data
-          };
-          loadGooglePreview();
-        }
-      }).catch(ex => {
-        // eslint-disable-next-line no-console
-        console.error(ex);
-      }).finally(() => {
-        removeLoadingImage($container);
-      });
-    }
-  } else {
-    // else fall back with a message that the document can't be viewed inline
-    const paragraph = document.createElement('p');
-
-    if (opts.attachment_preview_processing) {
-      paragraph.textContent = formatMessage('The document preview is currently being processed. Please try again later.');
-    } else {
-      paragraph.textContent = formatMessage('This document cannot be displayed within Canvas.');
-    }
-
-    $container.empty().append(paragraph);
-  }
-}
-/**
- * Replaces bad urls with harmless urls in cases where bad urls might cause harm
- * @param {string} url
- */
-
-export function sanitizeUrl(url) {
-  const defaultUrl = 'about:blank';
-
-  try {
-    const parsedUrl = new URL(url, window.location.origin); // eslint-disable-next-line no-script-url
-
-    if (parsedUrl.protocol === 'javascript:') {
-      return defaultUrl;
-    }
-
-    return url;
-  } catch (e) {
-    // URL() throws TypeError if url is not a valid URL
-    return defaultUrl;
-  }
-}