@tiptap/extension-audio 3.31.2 → 3.31.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiptap/extension-audio",
-  "version": "3.31.2",
+  "version": "3.31.4",
   "description": "audio extension for tiptap",
   "keywords": [
     "tiptap",
@@ -39,10 +39,10 @@
     }
   },
   "devDependencies": {
-    "@tiptap/core": "^3.31.2"
+    "@tiptap/core": "^3.31.4"
   },
   "peerDependencies": {
-    "@tiptap/core": "3.31.2"
+    "@tiptap/core": "3.31.4"
   },
   "scripts": {
     "build": "vp pack"

package/src/audio.test.ts

@@ -0,0 +1,287 @@
+import { Editor } from '@tiptap/core'
+import { Audio } from './audio.js'
+import Document from '@tiptap/extension-document'
+import Paragraph from '@tiptap/extension-paragraph'
+import Text from '@tiptap/extension-text'
+import { describe, expect, it } from 'vite-plus/test'
+
+describe('extension-audio', () => {
+  const editorElClass = 'tiptap'
+  let editor: Editor | null = null
+
+  const createEditorEl = () => {
+    const editorEl = document.createElement('div')
+
+    editorEl.classList.add(editorElClass)
+    document.body.appendChild(editorEl)
+    return editorEl
+  }
+
+  const getEditorEl = () => document.querySelector(`.${editorElClass}`)
+
+  const destroyEditor = () => {
+    editor?.destroy()
+    editor = null
+    getEditorEl()?.remove()
+  }
+
+  it('does not output html for javascript schema or invalid links', () => {
+    editor = new Editor({
+      element: createEditorEl(),
+      extensions: [Document, Text, Paragraph, Audio],
+      content: {
+        type: 'doc',
+        content: [
+          {
+            type: 'audio',
+            attrs: {
+              // We want to ensure script URLs are filtered out
+              // oxlint-disable-next-line no-script-url
+              src: 'javascript:alert(window.origin)//audio',
+            },
+          },
+        ],
+      },
+    })
+
+    // oxlint-disable-next-line no-script-url
+    expect(editor.getHTML()).not.toContain('javascript:alert')
+
+    destroyEditor()
+  })
+
+  it('allows base64 sources only when enabled', () => {
+    const dataUrl = 'data:audio/mp3;base64,aGVsbG8='
+
+    editor = new Editor({
+      element: createEditorEl(),
+      extensions: [Document, Text, Paragraph, Audio],
+      content: {
+        type: 'doc',
+        content: [
+          {
+            type: 'audio',
+            attrs: {
+              src: dataUrl,
+            },
+          },
+        ],
+      },
+    })
+
+    expect(editor.getHTML()).not.toContain(dataUrl)
+
+    destroyEditor()
+
+    editor = new Editor({
+      element: createEditorEl(),
+      extensions: [Document, Text, Paragraph, Audio.configure({ allowBase64: true })],
+      content: {
+        type: 'doc',
+        content: [
+          {
+            type: 'audio',
+            attrs: {
+              src: dataUrl,
+            },
+          },
+        ],
+      },
+    })
+
+    expect(editor.getHTML()).toContain(dataUrl)
+
+    destroyEditor()
+  })
+
+  it('respects audio attributes and options', () => {
+    editor = new Editor({
+      element: createEditorEl(),
+      extensions: [
+        Document,
+        Text,
+        Paragraph,
+        Audio.configure({
+          autoplay: true,
+          controls: false,
+          loop: true,
+          muted: true,
+          preload: 'auto',
+          controlslist: 'nodownload',
+          crossorigin: 'anonymous',
+          disableRemotePlayback: true,
+        }),
+      ],
+      content: {
+        type: 'doc',
+        content: [
+          {
+            type: 'audio',
+            attrs: {
+              src: 'https://assets.tiptap.dev/sounds/loop.mp3',
+              controls: true,
+              preload: 'none',
+            },
+          },
+        ],
+      },
+    })
+
+    const html = editor.getHTML()
+
+    expect(html).toContain('<audio')
+    expect(html).toContain('src="https://assets.tiptap.dev/sounds/loop.mp3"')
+    expect(html).toContain('autoplay')
+    expect(html).toContain('loop')
+    expect(html).toContain('muted')
+    expect(html).toContain('controlslist="nodownload"')
+    expect(html).toContain('crossorigin="anonymous"')
+    expect(html).toContain('disableremoteplayback')
+    expect(html).toContain('preload="none"')
+    expect(html).toContain('controls')
+
+    destroyEditor()
+  })
+
+  it('does not insert invalid audio sources via command', () => {
+    editor = new Editor({
+      element: createEditorEl(),
+      extensions: [Document, Text, Paragraph, Audio],
+    })
+
+    const succeeded = editor.commands.setAudio({
+      // We want to ensure script URLs are filtered out
+      // oxlint-disable-next-line no-script-url
+      src: 'javascript:alert(1)',
+    })
+
+    expect(succeeded).toBe(false)
+    // oxlint-disable-next-line no-script-url
+    expect(editor.getHTML()).not.toContain('javascript:alert')
+
+    const validInsert = editor.commands.setAudio({
+      src: 'https://assets.tiptap.dev/sounds/loop.mp3',
+      loop: true,
+      muted: true,
+      disableremoteplayback: true,
+      controls: false,
+    })
+
+    expect(validInsert).toBe(true)
+
+    const html = editor.getHTML()
+
+    expect(html).toContain('src="https://assets.tiptap.dev/sounds/loop.mp3"')
+    expect(html).toContain('loop')
+    expect(html).toContain('muted')
+    expect(html).toContain('disableremoteplayback')
+    expect(html).not.toContain('controls')
+
+    destroyEditor()
+  })
+
+  it('creates audio node when pasting a valid audio URL', () => {
+    editor = new Editor({
+      element: createEditorEl(),
+      extensions: [Document, Text, Paragraph, Audio],
+    })
+
+    const audioUrl = 'https://assets.tiptap.dev/sounds/loop.mp3'
+
+    // Simulate paste by inserting plain text content that matches the paste rule regex
+    editor.view.pasteText(audioUrl)
+
+    const json = editor.getJSON()
+    const audioNode = json.content?.find(node => node.type === 'audio')
+
+    expect(audioNode).toBeDefined()
+    expect(audioNode?.attrs?.src).toBe(audioUrl)
+
+    destroyEditor()
+  })
+
+  it('does not create audio node when paste handler is disabled', () => {
+    editor = new Editor({
+      element: createEditorEl(),
+      extensions: [Document, Text, Paragraph, Audio.configure({ addPasteHandler: false })],
+    })
+
+    const audioUrl = 'https://assets.tiptap.dev/sounds/loop.mp3'
+
+    editor.commands.insertContent(audioUrl)
+
+    const json = editor.getJSON()
+    const audioNode = json.content?.find(node => node.type === 'audio')
+
+    expect(audioNode).toBeUndefined()
+
+    destroyEditor()
+  })
+
+  it('renders audio node as inline when inline option is enabled', () => {
+    editor = new Editor({
+      element: createEditorEl(),
+      extensions: [Document, Text, Paragraph, Audio.configure({ inline: true })],
+      content: {
+        type: 'doc',
+        content: [
+          {
+            type: 'paragraph',
+            content: [
+              {
+                type: 'text',
+                text: 'Audio: ',
+              },
+              {
+                type: 'audio',
+                attrs: {
+                  src: 'https://assets.tiptap.dev/sounds/loop.mp3',
+                },
+              },
+            ],
+          },
+        ],
+      },
+    })
+
+    const html = editor.getHTML()
+
+    expect(html).toContain('<p>Audio: <audio')
+    expect(html).toContain('src="https://assets.tiptap.dev/sounds/loop.mp3"')
+
+    destroyEditor()
+  })
+
+  it('renders audio node as block by default', () => {
+    editor = new Editor({
+      element: createEditorEl(),
+      extensions: [Document, Text, Paragraph, Audio],
+      content: {
+        type: 'doc',
+        content: [
+          {
+            type: 'paragraph',
+            content: [
+              {
+                type: 'text',
+                text: 'Some text',
+              },
+            ],
+          },
+          {
+            type: 'audio',
+            attrs: {
+              src: 'https://assets.tiptap.dev/sounds/loop.mp3',
+            },
+          },
+        ],
+      },
+    })
+
+    const html = editor.getHTML()
+
+    expect(html).toContain('<p>Some text</p><audio')
+
+    destroyEditor()
+  })
+})