@nocobase/flow-engine 2.2.0-beta.5 → 2.2.0-beta.6

package/lib/utils/safeGlobals.js

@@ -1,367 +0,0 @@
-/**
- * This file is part of the NocoBase (R) project.
- * Copyright (c) 2020-2024 NocoBase Co., Ltd.
- * Authors: NocoBase Team.
- *
- * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
- * For more information, please refer to: https://www.nocobase.com/agreement.
- */
-
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var safeGlobals_exports = {};
-__export(safeGlobals_exports, {
-  __resetRunJSSafeGlobalsRegistryForTests: () => __resetRunJSSafeGlobalsRegistryForTests,
-  createSafeDocument: () => createSafeDocument,
-  createSafeNavigator: () => createSafeNavigator,
-  createSafeRunJSGlobals: () => createSafeRunJSGlobals,
-  createSafeWindow: () => createSafeWindow,
-  registerRunJSSafeDocumentGlobals: () => registerRunJSSafeDocumentGlobals,
-  registerRunJSSafeWindowGlobals: () => registerRunJSSafeWindowGlobals,
-  runjsWithSafeGlobals: () => runjsWithSafeGlobals
-});
-module.exports = __toCommonJS(safeGlobals_exports);
-function getRunJSSafeGlobalsRegistry() {
-  var _a, _b;
-  const g = globalThis;
-  if (((_a = g.__nocobaseRunJSSafeGlobalsRegistry) == null ? void 0 : _a.windowAllow) && ((_b = g.__nocobaseRunJSSafeGlobalsRegistry) == null ? void 0 : _b.documentAllow)) {
-    return g.__nocobaseRunJSSafeGlobalsRegistry;
-  }
-  const reg = {
-    windowAllow: /* @__PURE__ */ new Set(),
-    documentAllow: /* @__PURE__ */ new Set()
-  };
-  g.__nocobaseRunJSSafeGlobalsRegistry = reg;
-  return reg;
-}
-__name(getRunJSSafeGlobalsRegistry, "getRunJSSafeGlobalsRegistry");
-function registerRunJSSafeWindowGlobals(keys) {
-  if (!keys) return;
-  const reg = getRunJSSafeGlobalsRegistry();
-  for (const k of keys) {
-    if (typeof k !== "string") continue;
-    const key = k.trim();
-    if (!key) continue;
-    reg.windowAllow.add(key);
-  }
-}
-__name(registerRunJSSafeWindowGlobals, "registerRunJSSafeWindowGlobals");
-function registerRunJSSafeDocumentGlobals(keys) {
-  if (!keys) return;
-  const reg = getRunJSSafeGlobalsRegistry();
-  for (const k of keys) {
-    if (typeof k !== "string") continue;
-    const key = k.trim();
-    if (!key) continue;
-    reg.documentAllow.add(key);
-  }
-}
-__name(registerRunJSSafeDocumentGlobals, "registerRunJSSafeDocumentGlobals");
-function __resetRunJSSafeGlobalsRegistryForTests() {
-  var _a, _b, _c, _d;
-  const g = globalThis;
-  if (g.__nocobaseRunJSSafeGlobalsRegistry) {
-    try {
-      (_b = (_a = g.__nocobaseRunJSSafeGlobalsRegistry.windowAllow) == null ? void 0 : _a.clear) == null ? void 0 : _b.call(_a);
-      (_d = (_c = g.__nocobaseRunJSSafeGlobalsRegistry.documentAllow) == null ? void 0 : _c.clear) == null ? void 0 : _d.call(_c);
-    } catch {
-    }
-  }
-}
-__name(__resetRunJSSafeGlobalsRegistryForTests, "__resetRunJSSafeGlobalsRegistryForTests");
-function isAllowedDynamicWindowKey(key) {
-  return getRunJSSafeGlobalsRegistry().windowAllow.has(key);
-}
-__name(isAllowedDynamicWindowKey, "isAllowedDynamicWindowKey");
-function isAllowedDynamicDocumentKey(key) {
-  return getRunJSSafeGlobalsRegistry().documentAllow.has(key);
-}
-__name(isAllowedDynamicDocumentKey, "isAllowedDynamicDocumentKey");
-function createSafeWindow(extra) {
-  const getSafeBaseHref = /* @__PURE__ */ __name(() => `${window.location.origin}${window.location.pathname}`, "getSafeBaseHref");
-  const safeOpen = /* @__PURE__ */ __name((url, target2, features) => {
-    const isSafeUrl = /* @__PURE__ */ __name((u) => {
-      try {
-        const parsed = new URL(u, getSafeBaseHref());
-        const protocol = parsed.protocol.toLowerCase();
-        if (protocol === "about:") return parsed.href === "about:blank";
-        return protocol === "http:" || protocol === "https:";
-      } catch {
-        return false;
-      }
-    }, "isSafeUrl");
-    if (!isSafeUrl(url)) {
-      throw new Error("Unsafe URL: window.open only allows http/https/about:blank.");
-    }
-    const sanitizedTarget = "_blank";
-    const enforceFeatures = /* @__PURE__ */ __name((f) => {
-      const set = /* @__PURE__ */ new Set();
-      if (f) {
-        f.split(",").map((s) => s.trim()).filter(Boolean).forEach((part) => {
-          const key = part.split("=")[0].trim().toLowerCase();
-          if (key !== "noopener" && key !== "noreferrer") set.add(part);
-        });
-      }
-      set.add("noopener");
-      set.add("noreferrer");
-      return Array.from(set).join(",");
-    }, "enforceFeatures");
-    const sanitizedFeatures = enforceFeatures(features);
-    const newWin = window.open.call(window, url, sanitizedTarget, sanitizedFeatures);
-    if (newWin && "opener" in newWin) {
-      try {
-        newWin.opener = null;
-      } catch {
-      }
-    }
-    return newWin;
-  }, "safeOpen");
-  const guardedNavigate = /* @__PURE__ */ __name((rawUrl, opts) => {
-    const parsed = new URL(rawUrl, getSafeBaseHref());
-    const protocol = parsed.protocol.toLowerCase();
-    const isAboutBlank = protocol === "about:" && parsed.href === "about:blank";
-    const isHttp = protocol === "http:" || protocol === "https:";
-    if (!isHttp && !isAboutBlank) {
-      throw new Error("Unsafe URL: only http/https/about:blank are allowed.");
-    }
-    if (isAboutBlank) {
-      return (opts == null ? void 0 : opts.replace) ? window.location.replace("about:blank") : window.location.assign("about:blank");
-    }
-    const sameOrigin = parsed.protocol === window.location.protocol && parsed.hostname === window.location.hostname && parsed.port === window.location.port;
-    if (sameOrigin) {
-      return (opts == null ? void 0 : opts.replace) ? window.location.replace(parsed.href) : window.location.assign(parsed.href);
-    }
-    const win = safeOpen(parsed.href);
-    if (!win) throw new Error("Popup blocked: cross-origin navigation is opened in a new tab.");
-  }, "guardedNavigate");
-  const safeLocation = new Proxy(
-    {},
-    {
-      get(_t, prop) {
-        switch (prop) {
-          case "origin":
-            return window.location.origin;
-          case "protocol":
-            return window.location.protocol;
-          case "host":
-            return window.location.host;
-          case "hostname":
-            return window.location.hostname;
-          case "port":
-            return window.location.port;
-          case "pathname":
-            return window.location.pathname;
-          case "assign":
-            return (u) => guardedNavigate(u, { replace: false });
-          case "replace":
-            return (u) => guardedNavigate(u, { replace: true });
-          case "reload":
-            return window.location.reload.bind(window.location);
-          case "href":
-            throw new Error("Reading location.href is not allowed.");
-          default:
-            throw new Error(`Access to location property "${prop}" is not allowed.`);
-        }
-      },
-      set(_t, prop, value) {
-        if (prop === "href") {
-          guardedNavigate(String(value), { replace: false });
-          return true;
-        }
-        throw new Error("Mutation on location is not allowed.");
-      }
-    }
-  );
-  const allowedGlobals = {
-    // 需绑定到原始 window，避免严格模式下触发 Illegal invocation
-    setTimeout: window.setTimeout.bind(window),
-    clearTimeout: window.clearTimeout.bind(window),
-    setInterval: window.setInterval.bind(window),
-    clearInterval: window.clearInterval.bind(window),
-    console,
-    Math,
-    Date,
-    FormData,
-    ...typeof Blob !== "undefined" ? { Blob } : {},
-    ...typeof URL !== "undefined" ? { URL } : {},
-    // 事件侦听仅绑定到真实 window，便于少量需要的全局监听
-    addEventListener: addEventListener.bind(window),
-    // 安全的 window.open 代理
-    open: safeOpen,
-    // 安全的 location 代理
-    location: safeLocation,
-    ...extra || {}
-  };
-  const target = /* @__PURE__ */ Object.create(null);
-  return new Proxy(target, {
-    get(t, prop) {
-      if (typeof prop !== "string") {
-        return Reflect.get(t, prop);
-      }
-      if (prop in allowedGlobals) return allowedGlobals[prop];
-      if (Object.prototype.hasOwnProperty.call(t, prop)) return t[prop];
-      if (isAllowedDynamicWindowKey(prop)) {
-        const v = window[prop];
-        if (typeof v === "function") return v.bind(window);
-        return v;
-      }
-      throw new Error(`Access to global property "${prop}" is not allowed.`);
-    },
-    set(t, prop, value) {
-      if (typeof prop !== "string") {
-        Reflect.set(t, prop, value);
-        return true;
-      }
-      if (prop in allowedGlobals) {
-        throw new Error(`Mutation of global property "${prop}" is not allowed.`);
-      }
-      t[prop] = value;
-      return true;
-    },
-    has(t, prop) {
-      if (typeof prop !== "string") return Reflect.has(t, prop);
-      if (prop in allowedGlobals) return true;
-      if (Object.prototype.hasOwnProperty.call(t, prop)) return true;
-      if (isAllowedDynamicWindowKey(prop)) return true;
-      return false;
-    }
-  });
-}
-__name(createSafeWindow, "createSafeWindow");
-function createSafeDocument(extra) {
-  const allowed = {
-    createElement: document.createElement.bind(document),
-    querySelector: document.querySelector.bind(document),
-    querySelectorAll: document.querySelectorAll.bind(document),
-    ...extra || {}
-  };
-  const target = /* @__PURE__ */ Object.create(null);
-  return new Proxy(target, {
-    get(t, prop) {
-      if (typeof prop !== "string") {
-        return Reflect.get(t, prop);
-      }
-      if (prop in allowed) return allowed[prop];
-      if (Object.prototype.hasOwnProperty.call(t, prop)) return t[prop];
-      if (isAllowedDynamicDocumentKey(prop)) {
-        const v = document[prop];
-        if (typeof v === "function") return v.bind(document);
-        return v;
-      }
-      throw new Error(`Access to document property "${prop}" is not allowed.`);
-    },
-    set(t, prop, value) {
-      if (typeof prop !== "string") {
-        Reflect.set(t, prop, value);
-        return true;
-      }
-      if (prop in allowed) {
-        throw new Error(`Mutation of document property "${prop}" is not allowed.`);
-      }
-      t[prop] = value;
-      return true;
-    },
-    has(t, prop) {
-      if (typeof prop !== "string") return Reflect.has(t, prop);
-      if (prop in allowed) return true;
-      if (Object.prototype.hasOwnProperty.call(t, prop)) return true;
-      if (isAllowedDynamicDocumentKey(prop)) return true;
-      return false;
-    }
-  });
-}
-__name(createSafeDocument, "createSafeDocument");
-function createSafeNavigator(extra) {
-  var _a;
-  const nav = typeof window !== "undefined" && window.navigator || void 0;
-  const clipboard = {};
-  const writeText = (_a = nav == null ? void 0 : nav.clipboard) == null ? void 0 : _a.writeText;
-  if (typeof writeText === "function") {
-    clipboard.writeText = writeText.bind(nav.clipboard);
-  }
-  const allowed = {
-    clipboard
-  };
-  Object.defineProperty(allowed, "onLine", {
-    get: /* @__PURE__ */ __name(() => !!(nav == null ? void 0 : nav.onLine), "get"),
-    enumerable: true,
-    configurable: false
-  });
-  Object.defineProperty(allowed, "language", {
-    get: /* @__PURE__ */ __name(() => nav == null ? void 0 : nav.language, "get"),
-    enumerable: true,
-    configurable: false
-  });
-  Object.defineProperty(allowed, "languages", {
-    get: /* @__PURE__ */ __name(() => (nav == null ? void 0 : nav.languages) ? [...nav.languages] : void 0, "get"),
-    enumerable: true,
-    configurable: false
-  });
-  Object.assign(allowed, extra || {});
-  return new Proxy(
-    {},
-    {
-      get(_t, prop) {
-        if (prop in allowed) return allowed[prop];
-        throw new Error(`Access to navigator property "${String(prop)}" is not allowed.`);
-      }
-    }
-  );
-}
-__name(createSafeNavigator, "createSafeNavigator");
-function createSafeRunJSGlobals(extraGlobals) {
-  const globals = {};
-  try {
-    const navigator = createSafeNavigator();
-    globals.navigator = navigator;
-    try {
-      globals.window = createSafeWindow({ navigator });
-    } catch {
-    }
-  } catch {
-  }
-  try {
-    globals.document = createSafeDocument();
-  } catch {
-  }
-  return extraGlobals ? { ...globals, ...extraGlobals } : globals;
-}
-__name(createSafeRunJSGlobals, "createSafeRunJSGlobals");
-async function runjsWithSafeGlobals(ctx, code, options, extraGlobals) {
-  if (!ctx || typeof ctx !== "object" && typeof ctx !== "function") return void 0;
-  const runjs = ctx.runjs;
-  if (typeof runjs !== "function") return void 0;
-  return ctx.runjs(
-    code,
-    createSafeRunJSGlobals(extraGlobals),
-    options
-  );
-}
-__name(runjsWithSafeGlobals, "runjsWithSafeGlobals");
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  __resetRunJSSafeGlobalsRegistryForTests,
-  createSafeDocument,
-  createSafeNavigator,
-  createSafeRunJSGlobals,
-  createSafeWindow,
-  registerRunJSSafeDocumentGlobals,
-  registerRunJSSafeWindowGlobals,
-  runjsWithSafeGlobals
-});

package/src/utils/__tests__/runjsRequireAsyncAutoWhitelist.test.ts

@@ -1,38 +0,0 @@
-/**
- * This file is part of the NocoBase (R) project.
- * Copyright (c) 2020-2024 NocoBase Co., Ltd.
- * Authors: NocoBase Team.
- *
- * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
- * For more information, please refer to: https://www.nocobase.com/agreement.
- */
-
-import { beforeEach, describe, expect, it } from 'vitest';
-import { runjsRequireAsync } from '../runjsModuleLoader';
-import { __resetRunJSSafeGlobalsRegistryForTests, createSafeWindow } from '../safeGlobals';
-
-beforeEach(() => {
-  __resetRunJSSafeGlobalsRegistryForTests();
-});
-
-describe('runjsRequireAsync auto whitelist', () => {
-  it('should allow safeWindow to access globals introduced during requireAsync', async () => {
-    const key = '__nb_require_async_added_global__';
-    delete (window as any)[key];
-
-    const safeWin: any = createSafeWindow();
-    expect(() => safeWin[key]).toThrow(/not allowed/);
-
-    const requirejs: any = (deps: string[], onLoad: (...args: any[]) => void) => {
-      // Simulate a remote library attaching itself to the real window.
-      (window as any)[key] = { ok: true };
-      onLoad(undefined);
-    };
-
-    await runjsRequireAsync(requirejs, 'https://example.com/fake-lib.js');
-
-    expect(safeWin[key]).toEqual({ ok: true });
-
-    delete (window as any)[key];
-  });
-});

package/src/utils/__tests__/safeGlobals.test.ts

@@ -1,106 +0,0 @@
-/**
- * This file is part of the NocoBase (R) project.
- * Copyright (c) 2020-2024 NocoBase Co., Ltd.
- * Authors: NocoBase Team.
- *
- * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
- * For more information, please refer to: https://www.nocobase.com/agreement.
- */
-
-import { beforeEach, describe, expect, it } from 'vitest';
-import {
-  __resetRunJSSafeGlobalsRegistryForTests,
-  createSafeDocument,
-  createSafeNavigator,
-  createSafeWindow,
-  registerRunJSSafeDocumentGlobals,
-  registerRunJSSafeWindowGlobals,
-} from '../safeGlobals';
-
-beforeEach(() => {
-  __resetRunJSSafeGlobalsRegistryForTests();
-});
-
-describe('safeGlobals', () => {
-  it('createSafeWindow exposes only allowed globals and extras', () => {
-    const win: any = createSafeWindow({ foo: 123 });
-    expect(typeof win.setTimeout).toBe('function');
-    expect(win.console).toBeDefined();
-    expect(win.foo).toBe(123);
-    expect(new win.FormData()).toBeInstanceOf(window.FormData);
-    if (typeof window.Blob !== 'undefined') {
-      expect(typeof win.Blob).toBe('function');
-      expect(new win.Blob(['x'])).toBeInstanceOf(window.Blob);
-    }
-    if (typeof window.URL !== 'undefined') {
-      expect(win.URL).toBe(window.URL);
-      expect(typeof win.URL.createObjectURL).toBe('function');
-    }
-    // access to location proxy is allowed, but sensitive props throw
-    expect(() => win.location.href).toThrow(/not allowed/);
-  });
-
-  it('createSafeWindow allows writing new props and reading them back', () => {
-    const win: any = createSafeWindow();
-    win.someLib = { ok: true };
-    expect(win.someLib).toEqual({ ok: true });
-    expect('someLib' in win).toBe(true);
-  });
-
-  it('createSafeWindow can access dynamically registered globals from real window', () => {
-    const key = '__nb_safe_window_global__';
-    (window as any)[key] = { v: 1 };
-    registerRunJSSafeWindowGlobals([key]);
-
-    const win: any = createSafeWindow();
-    expect(win[key]).toEqual({ v: 1 });
-
-    delete (window as any)[key];
-  });
-
-  it('createSafeDocument exposes whitelisted methods and extras', () => {
-    const doc: any = createSafeDocument({ bar: true });
-    expect(typeof doc.createElement).toBe('function');
-    expect(doc.bar).toBe(true);
-    expect(() => doc.cookie).toThrow(/not allowed/);
-  });
-
-  it('createSafeDocument allows writing new props and reading them back', () => {
-    const doc: any = createSafeDocument();
-    doc.someLib = { ok: true };
-    expect(doc.someLib).toEqual({ ok: true });
-    expect('someLib' in doc).toBe(true);
-  });
-
-  it('createSafeDocument can access dynamically registered globals from real document', () => {
-    const key = '__nb_safe_document_global__';
-    (document as any)[key] = 123;
-    registerRunJSSafeDocumentGlobals([key]);
-
-    const doc: any = createSafeDocument();
-    expect(doc[key]).toBe(123);
-
-    delete (document as any)[key];
-  });
-
-  it('createSafeNavigator exposes limited props and guards others', () => {
-    const nav: any = createSafeNavigator();
-    // clipboard object should always exist
-    expect(typeof nav.clipboard).toBe('object');
-    // writeText may or may not exist depending on environment
-    if (typeof navigator !== 'undefined' && (navigator as any).clipboard?.writeText) {
-      expect(typeof nav.clipboard.writeText).toBe('function');
-    } else {
-      expect(typeof nav.clipboard.writeText === 'undefined' || typeof nav.clipboard.writeText === 'function').toBe(
-        true,
-      );
-    }
-    // readable properties
-    expect(() => void nav.onLine).not.toThrow();
-    expect(() => void nav.language).not.toThrow();
-    expect(() => void nav.languages).not.toThrow();
-    // blocked properties
-    expect(() => (nav as any).geolocation).toThrow(/not allowed/);
-    expect(() => (nav as any).userAgent).toThrow(/not allowed/);
-  });
-});