@mintlify/common 1.0.811 → 1.0.812

package/dist/mdx/plugins/remark/remarkMdxRemoveJs.js

@@ -211,6 +211,99 @@ export function rebuildStyleValue(properties) {
     });
     return `{ ${parts.join(', ')} }`;
 }
+function isPrimitiveLiteralExpression(node) {
+    if (node.type === 'Literal')
+        return true;
+    return (node.type === 'UnaryExpression' &&
+        node.operator === '-' &&
+        typeof node.argument === 'object' &&
+        node.argument != null &&
+        node.argument.type === 'Literal');
+}
+function isSafeJsxAttributeValue(value) {
+    if (value == null)
+        return true;
+    if (typeof value !== 'object')
+        return false;
+    const node = value;
+    if (node.type === 'Literal')
+        return true;
+    if (node.type !== 'JSXExpressionContainer')
+        return false;
+    if (typeof node.expression !== 'object' || node.expression == null)
+        return false;
+    return isPrimitiveLiteralExpression(node.expression);
+}
+const DANGEROUS_ELEMENT_NAMES = new Set(['script', 'style', 'iframe', 'meta']);
+function isSafeJsxElementName(name) {
+    if (typeof name !== 'object' || name == null)
+        return false;
+    const node = name;
+    if (node.type !== 'JSXIdentifier')
+        return false;
+    const elementName = node.name;
+    if (typeof elementName !== 'string')
+        return false;
+    return !DANGEROUS_ELEMENT_NAMES.has(elementName.toLowerCase());
+}
+function isEventHandlerAttribute(attributeNode) {
+    const name = attributeNode.name;
+    if (typeof name !== 'object' || name == null)
+        return false;
+    const nameNode = name;
+    if (typeof nameNode.name !== 'string')
+        return false;
+    return /^on[A-Z]/.test(nameNode.name);
+}
+function isSafeStaticJsxNode(node) {
+    if (node.type === 'JSXText')
+        return true;
+    if (node.type === 'JSXEmptyExpression')
+        return true;
+    if (node.type === 'JSXExpressionContainer') {
+        if (typeof node.expression !== 'object' || node.expression == null)
+            return false;
+        const expression = node.expression;
+        if (expression.type === 'JSXEmptyExpression')
+            return true;
+        return isPrimitiveLiteralExpression(expression);
+    }
+    if (node.type === 'JSXFragment') {
+        if (!Array.isArray(node.children))
+            return false;
+        return node.children.every((child) => typeof child === 'object' && child != null && isSafeStaticJsxNode(child));
+    }
+    if (node.type !== 'JSXElement')
+        return false;
+    if (typeof node.openingElement !== 'object' || node.openingElement == null)
+        return false;
+    const openingElement = node.openingElement;
+    if (!isSafeJsxElementName(openingElement.name))
+        return false;
+    if (!Array.isArray(openingElement.attributes))
+        return false;
+    const attributesAreSafe = openingElement.attributes.every((attribute) => {
+        if (typeof attribute !== 'object' || attribute == null)
+            return false;
+        const attributeNode = attribute;
+        if (attributeNode.type !== 'JSXAttribute')
+            return false;
+        if (isEventHandlerAttribute(attributeNode))
+            return false;
+        return isSafeJsxAttributeValue(attributeNode.value);
+    });
+    if (!attributesAreSafe)
+        return false;
+    if (!Array.isArray(node.children))
+        return false;
+    return node.children.every((child) => typeof child === 'object' && child != null && isSafeStaticJsxNode(child));
+}
+function isSafeStaticJsx(estree) {
+    const stmt = estree === null || estree === void 0 ? void 0 : estree.body[0];
+    if ((stmt === null || stmt === void 0 ? void 0 : stmt.type) !== 'ExpressionStatement')
+        return false;
+    return isSafeStaticJsxNode(stmt.expression);
+}
 function collectIdentifiersFromPattern(pattern, out) {
     if (pattern.type === 'Identifier') {
         out.push({ name: pattern.name, isFunction: false });
@@ -400,7 +493,7 @@ export function remarkMdxRemoveJs() {
             if (!('attributes' in node))
                 return CONTINUE;
             const newAttributes = node.attributes.map((attr) => {
-                var _a, _b, _c, _d, _e, _f, _g;
+                var _a, _b, _c, _d, _e, _f, _g, _h;
                 if (attr.type === 'mdxJsxAttribute' && !(attr.value instanceof Object))
                     return attr;
                 if (typeof attr.value === 'string' && isStringSafe(attr.value))
@@ -414,7 +507,9 @@ export function remarkMdxRemoveJs() {
                     }
                     if (((_b = attr.value.data) === null || _b === void 0 ? void 0 : _b.estree) && isArrayOfStringLiterals(attr.value.data.estree))
                         return attr;
-                    if (attr.name === 'style' && ((_c = attr.value.data) === null || _c === void 0 ? void 0 : _c.estree)) {
+                    if (isSafeStaticJsx((_c = attr.value.data) === null || _c === void 0 ? void 0 : _c.estree))
+                        return attr;
+                    if (attr.name === 'style' && ((_d = attr.value.data) === null || _d === void 0 ? void 0 : _d.estree)) {
                         const filteredEstree = filterStyleProperties(attr.value.data.estree);
                         if (filteredEstree) {
                             const stmt = filteredEstree.body[0];
@@ -428,9 +523,9 @@ export function remarkMdxRemoveJs() {
                         return undefined;
                     }
                     if (Object.keys(DEFAULT_PROP_EXPRESSIONS).includes(attr.name)) {
-                        attr.value.value = (_e = (_d = DEFAULT_PROP_EXPRESSIONS[attr.name]) === null || _d === void 0 ? void 0 : _d.value) !== null && _e !== void 0 ? _e : '{}';
+                        attr.value.value = (_f = (_e = DEFAULT_PROP_EXPRESSIONS[attr.name]) === null || _e === void 0 ? void 0 : _e.value) !== null && _f !== void 0 ? _f : '{}';
                         attr.value.data = {
-                            estree: structuredClone((_g = (_f = DEFAULT_PROP_EXPRESSIONS[attr.name]) === null || _f === void 0 ? void 0 : _f.estree) !== null && _g !== void 0 ? _g : objectEstree),
+                            estree: structuredClone((_h = (_g = DEFAULT_PROP_EXPRESSIONS[attr.name]) === null || _g === void 0 ? void 0 : _g.estree) !== null && _h !== void 0 ? _h : objectEstree),
                         };
                         return attr;
                     }