@ncds/ui-admin 1.8.25 → 1.8.26-alpha.0

package/dist/temp/src/components/overlays/notification/__tests__/supportTextLink.test.js

@@ -0,0 +1,73 @@
+// @vitest-environment jsdom
+import { createElement } from 'react';
+import { createRoot } from 'react-dom/client';
+import { act } from 'react-dom/test-utils';
+import { afterEach, describe, expect, it } from 'vitest';
+import { FullWidthNotification } from '../FullWidthNotification';
+import { MessageNotification } from '../MessageNotification';
+/**
+ * React 텍스트 링크(`supportTextLink`)의 프로토콜 검사 (#538 리뷰 H2).
+ * Vanilla `renderSupportingText` 와 같은 정책 — unsafe URL 이면 링크 없이 텍스트만 렌더한다.
+ */
+globalThis.IS_REACT_ACT_ENVIRONMENT = true;
+const cleanups = [];
+afterEach(() => {
+    for (const cleanup of cleanups.splice(0))
+        cleanup();
+});
+function mount(element) {
+    const container = document.createElement('div');
+    document.body.appendChild(container);
+    const root = createRoot(container);
+    act(() => {
+        root.render(element);
+    });
+    cleanups.push(() => {
+        act(() => root.unmount());
+        container.remove();
+    });
+    return container;
+}
+const IMPLEMENTATIONS = [
+    [
+        'MessageNotification(block)',
+        (supportTextLink) => mount(createElement(MessageNotification, {
+            title: '공지',
+            variant: 'block',
+            supportingText: '자세히 보기',
+            supportTextLink,
+        })),
+        '.ncua-message-notification__supporting-text',
+    ],
+    [
+        'FullWidthNotification',
+        (supportTextLink) => mount(createElement(FullWidthNotification, {
+            title: '공지',
+            supportingText: '자세히 보기',
+            supportTextLink,
+        })),
+        '.ncua-full-width-notification__supporting-text',
+    ],
+];
+const UNSAFE = [
+    'javascript:alert(1)',
+    ' JavaScript:alert(1)',
+    'JAVASCRIPT:alert(1)',
+    '\tjavascript:alert(1)',
+    'data:text/html,<script>alert(1)</script>',
+];
+const SAFE = ['https://example.com/notice/1', 'http://example.com/notice/1', '/notice/1', 'notice/1'];
+describe.each(IMPLEMENTATIONS)('%s — supportTextLink 프로토콜 검사', (_, render, supportingTextSelector) => {
+    it.each(UNSAFE)('unsafe %j → 링크 없이 텍스트만 렌더한다', (url) => {
+        const container = render(url);
+        expect(container.querySelector('a')).toBeNull();
+        expect(container.querySelector(supportingTextSelector)?.textContent).toBe('자세히 보기');
+    });
+    it.each(SAFE)('safe %j → 그대로 링크로 렌더한다', (url) => {
+        const container = render(url);
+        const anchors = container.querySelectorAll('a');
+        expect(anchors).toHaveLength(1);
+        expect(anchors[0].getAttribute('href')).toBe(url);
+        expect(anchors[0].querySelector(supportingTextSelector)?.textContent).toBe('자세히 보기');
+    });
+});

package/dist/temp/src/components/overlays/notification/linkTarget.d.ts

@@ -0,0 +1,11 @@
+import type { NotificationLinkTarget } from './Notification';
+/**
+ * 텍스트 링크(`supportTextLink`)의 `<a>`에 붙일 target·rel 속성.
+ *
+ * `'_blank'`일 때만 새 탭 + `rel="noopener noreferrer"`를 반환하고, `'_self'`(기본)는 아무 속성도 붙이지 않는다.
+ * Vanilla `applySupportTextLinkTarget`과 같은 마크업을 산출해야 한다.
+ */
+export declare function getLinkTargetAttributes(target?: NotificationLinkTarget): {
+    readonly target: "_blank";
+    readonly rel: "noopener noreferrer";
+} | undefined;

package/dist/temp/src/components/overlays/notification/linkTarget.js

@@ -0,0 +1,9 @@
+/**
+ * 텍스트 링크(`supportTextLink`)의 `<a>`에 붙일 target·rel 속성.
+ *
+ * `'_blank'`일 때만 새 탭 + `rel="noopener noreferrer"`를 반환하고, `'_self'`(기본)는 아무 속성도 붙이지 않는다.
+ * Vanilla `applySupportTextLinkTarget`과 같은 마크업을 산출해야 한다.
+ */
+export function getLinkTargetAttributes(target) {
+    return target === '_blank' ? { target: '_blank', rel: 'noopener noreferrer' } : undefined;
+}