@nocobase/app-plugin-mail 0.0.0-stage → 1.0.0-beta.8

package/dist/client/lib/mail-template.js

@@ -0,0 +1,189 @@
+const TEMPLATE_VARIABLE = /\{\{\s*([A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*|\.\d+)*)\s*\}\}/gu;
+const UNSAFE_PATH_SEGMENTS = new Set(['__proto__', 'constructor', 'prototype']);
+const ALLOWED_TAGS = new Set([
+    'A',
+    'B',
+    'BLOCKQUOTE',
+    'BR',
+    'DIV',
+    'EM',
+    'FONT',
+    'H1',
+    'H2',
+    'H3',
+    'H4',
+    'H5',
+    'H6',
+    'IMG',
+    'I',
+    'LI',
+    'OL',
+    'P',
+    'S',
+    'SPAN',
+    'STRONG',
+    'U',
+    'UL',
+]);
+export function renderMailTemplate(template, variables = {}) {
+    const subject = interpolateMailTemplate(template.subject, variables);
+    const text = interpolateMailTemplate(template.text ?? '', variables);
+    const html = sanitizeMailHtml(interpolateMailTemplate(template.html, variables, escapeHtml));
+    return {
+        subject,
+        text: text || htmlToPlainText(html),
+        html: html || plainTextToMailHtml(text),
+    };
+}
+export function interpolateMailTemplate(source, variables, encode = (value) => value) {
+    return source.replace(TEMPLATE_VARIABLE, (placeholder, path) => {
+        const value = resolveTemplateValue(variables, path);
+        return value === undefined ? placeholder : encode(stringifyValue(value));
+    });
+}
+export function plainTextToMailHtml(text) {
+    if (!text)
+        return '';
+    return text
+        .split(/\n{2,}/u)
+        .map((paragraph) => `<p>${escapeHtml(paragraph).replaceAll('\n', '<br>')}</p>`)
+        .join('');
+}
+export function htmlToPlainText(html) {
+    if (!html)
+        return '';
+    const container = document.createElement('div');
+    container.innerHTML = sanitizeMailHtml(html);
+    for (const element of container.querySelectorAll('br')) {
+        element.replaceWith('\n');
+    }
+    for (const element of container.querySelectorAll('p, div, li, blockquote')) {
+        element.append('\n');
+    }
+    return (container.textContent ?? '').replace(/\n{3,}/gu, '\n\n').trimEnd();
+}
+export function sanitizeMailHtml(html) {
+    if (!html)
+        return '';
+    const container = document.createElement('div');
+    container.innerHTML = html;
+    sanitizeChildren(container);
+    return container.innerHTML;
+}
+function sanitizeChildren(parent) {
+    for (const child of [...parent.children]) {
+        if (child.tagName === 'SCRIPT' || child.tagName === 'STYLE') {
+            child.remove();
+            continue;
+        }
+        if (!ALLOWED_TAGS.has(child.tagName)) {
+            sanitizeChildren(child);
+            child.replaceWith(...child.childNodes);
+            continue;
+        }
+        // Retain only bounded pixel font sizes, never arbitrary pasted CSS.
+        const style = document.createElement('span').style;
+        style.cssText = child.getAttribute('style') ?? '';
+        const pixelFontSize = style.fontSize;
+        child.removeAttribute('style');
+        for (const attribute of [...child.attributes]) {
+            const allowed = child.tagName === 'A' &&
+                ['href', 'rel', 'target', 'title'].includes(attribute.name);
+            const fontSize = child.tagName === 'FONT' &&
+                attribute.name === 'size' &&
+                /^[1-7]$/u.test(attribute.value);
+            const imageAttribute = child.tagName === 'IMG' &&
+                (['alt', 'title', 'src'].includes(attribute.name) ||
+                    (['width', 'height'].includes(attribute.name) &&
+                        /^[1-9]\d{0,4}$/u.test(attribute.value) &&
+                        Number(attribute.value) <= 10000));
+            const signatureClass = child.tagName === 'DIV' &&
+                attribute.name === 'class' &&
+                attribute.value === 'nocobase-mail-signature';
+            if (!allowed && !fontSize && !imageAttribute && !signatureClass)
+                child.removeAttribute(attribute.name);
+        }
+        if (/^(?:10|12|14|16|18|24|32|48)px$/u.test(pixelFontSize)) {
+            child.setAttribute('style', `font-size: ${pixelFontSize};`);
+        }
+        // Keep imported legacy 48px text distinct from the editor's temporary marker.
+        if (child.tagName === 'FONT' && child.getAttribute('size') === '7') {
+            if (!child.hasAttribute('style')) {
+                child.setAttribute('style', 'font-size: 48px;');
+            }
+            child.removeAttribute('size');
+        }
+        if (child.tagName === 'A') {
+            const href = child.getAttribute('href');
+            if (href && !isSafeLink(href))
+                child.removeAttribute('href');
+            if (child.getAttribute('target') === '_blank') {
+                child.setAttribute('rel', 'noopener noreferrer');
+            }
+            else {
+                child.removeAttribute('target');
+                child.removeAttribute('rel');
+            }
+        }
+        if (child.tagName === 'IMG') {
+            const src = child.getAttribute('src');
+            if (!src || !isSafeImageSource(src))
+                child.removeAttribute('src');
+        }
+        sanitizeChildren(child);
+    }
+}
+function resolveTemplateValue(variables, path) {
+    let value = variables;
+    for (const segment of path.split('.')) {
+        if (UNSAFE_PATH_SEGMENTS.has(segment))
+            return undefined;
+        if (Array.isArray(value) && /^\d+$/u.test(segment)) {
+            value = value[Number(segment)];
+            continue;
+        }
+        if (!isRecord(value) || !Object.hasOwn(value, segment))
+            return undefined;
+        value = value[segment];
+    }
+    return value;
+}
+function stringifyValue(value) {
+    if (value === null)
+        return '';
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'number' || typeof value === 'boolean') {
+        return String(value);
+    }
+    if (typeof value === 'bigint')
+        return String(value);
+    if (typeof value === 'symbol')
+        return value.description ?? '';
+    if (typeof value === 'function')
+        return '';
+    try {
+        return JSON.stringify(value) ?? '';
+    }
+    catch {
+        return '';
+    }
+}
+function escapeHtml(value) {
+    return value
+        .replaceAll('&', '&amp;')
+        .replaceAll('<', '&lt;')
+        .replaceAll('>', '&gt;')
+        .replaceAll('"', '&quot;')
+        .replaceAll("'", '&#39;');
+}
+function isSafeLink(href) {
+    return /^(?:https?:|mailto:|tel:|#)/iu.test(href.trim());
+}
+function isSafeImageSource(src) {
+    return /^(?:https?:|cid:|\/(?!\/)|data:image\/(?:gif|jpe?g|png|webp);base64,)/iu.test(src.trim());
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+//# sourceMappingURL=mail-template.js.map

package/dist/client/lib/mail-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mail-template.js","sourceRoot":"","sources":["../../../client/lib/mail-template.ts"],"names":[],"mappings":"AAWA,MAAM,iBAAiB,GACrB,iEAAiE,CAAC;AACpE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAChF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,GAAG;IACH,GAAG;IACH,YAAY;IACZ,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,GAAG;IACH,GAAG;IACH,MAAM;IACN,QAAQ;IACR,GAAG;IACH,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,UAAU,kBAAkB,CAChC,QAAyD,EACzD,YAAmC,EAAE;IAErC,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,uBAAuB,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,gBAAgB,CAC3B,uBAAuB,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAC9D,CAAC;IACF,OAAO;QACL,OAAO;QACP,IAAI,EAAE,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC;QACnC,IAAI,EAAE,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAc,EACd,SAAgC,EAChC,SAAoC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IAEpD,OAAO,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,IAAY,EAAE,EAAE;QACrE,MAAM,KAAK,GAAG,oBAAoB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACpD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,IAAI;SACR,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CACF,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAC1E;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAChD,SAAS,CAAC,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7C,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC3E,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAChD,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC;IAC3B,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC5B,OAAO,SAAS,CAAC,SAAS,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAe;IACvC,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC5D,KAAK,CAAC,MAAM,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,KAAK,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QACD,oEAAoE;QACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;QACnD,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC;QACrC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/B,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,KAAK,GAAG;gBACrB,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,QAAQ,GACZ,KAAK,CAAC,OAAO,KAAK,MAAM;gBACxB,SAAS,CAAC,IAAI,KAAK,MAAM;gBACzB,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,cAAc,GAClB,KAAK,CAAC,OAAO,KAAK,KAAK;gBACvB,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC/C,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;wBAC3C,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;wBACvC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;YACzC,MAAM,cAAc,GAClB,KAAK,CAAC,OAAO,KAAK,KAAK;gBACvB,SAAS,CAAC,IAAI,KAAK,OAAO;gBAC1B,SAAS,CAAC,KAAK,KAAK,yBAAyB,CAAC;YAChD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc;gBAC7D,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,kCAAkC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3D,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,cAAc,aAAa,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,8EAA8E;QAC9E,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YAClD,CAAC;YACD,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC7D,IAAI,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC9C,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAChC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACpE,CAAC;QACD,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAAgC,EAChC,IAAY;IAEZ,IAAI,KAAK,GAAY,SAAS,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACzE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9D,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,yEAAyE,CAAC,IAAI,CACnF,GAAG,CAAC,IAAI,EAAE,CACX,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC"}

package/dist/client/lib/utils.d.ts

@@ -0,0 +1,2 @@
+export { cn } from 'cn';
+//# sourceMappingURL=utils.d.ts.map

package/dist/client/lib/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../client/lib/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,IAAI,CAAC"}

package/dist/client/lib/utils.js

@@ -0,0 +1,2 @@
+export { cn } from 'cn';
+//# sourceMappingURL=utils.js.map

package/dist/client/lib/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../client/lib/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,IAAI,CAAC"}