@ui5/webcomponents-base 0.0.0-e7dd012d7 → 0.0.0-e818f286e

package/dist/sap/base/security/URLListValidator.js

@@ -0,0 +1,148 @@
+var rBasicUrl = /^(?:([^:\/?#]+):)?((?:\/\/((?:\[[^\]]+\]|[^\/?#:]+))(?::([0-9]+))?)?([^?#]*))(?:\?([^#]*))?(?:#(.*))?$/;
+var rCheckPath = /^([a-z0-9-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*$/i;
+var rCheckQuery = /^([a-z0-9-._~!$&'()*+,;=:@\/?]|%[0-9a-f]{2})*$/i;
+var rCheckFragment = rCheckQuery;
+var rCheckMail = /^([a-z0-9!$'*+:^_`{|}~-]|%[0-9a-f]{2})+(?:\.([a-z0-9!$'*+:^_`{|}~-]|%[0-9a-f]{2})+)*@(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/i;
+var rCheckIPv4 = /^([0-9]{1,3}\.){3}[0-9]{1,3}$/;
+var rCheckValidIPv4 = /^(([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])$/;
+var rCheckIPv6 = /^\[[^\]]+\]$/;
+var rCheckValidIPv6 = /^\[(((([0-9a-f]{1,4}:){6}|(::([0-9a-f]{1,4}:){5})|(([0-9a-f]{1,4})?::([0-9a-f]{1,4}:){4})|((([0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::([0-9a-f]{1,4}:){3})|((([0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::([0-9a-f]{1,4}:){2})|((([0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:)|((([0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::))(([0-9a-f]{1,4}:[0-9a-f]{1,4})|(([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])))|((([0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4})|((([0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::))\]$/i;
+var rCheckHostName = /^([a-z0-9]([a-z0-9\-]*[a-z0-9])?\.)*[a-z0-9]([a-z0-9\-]*[a-z0-9])?$/i;
+var oURLListValidator = {};
+oURLListValidator._createEntry = function (protocol, host, port, path) {
+  return new URLListValidatorEntry(protocol, host, port, path);
+};
+function URLListValidatorEntry(protocol, host, port, path) {
+  Object.defineProperties(this, {
+    protocol: {
+      value: protocol && protocol.toUpperCase(),
+      enumerable: true
+    },
+    host: {
+      value: host && host.toUpperCase(),
+      enumerable: true
+    },
+    port: {
+      value: port,
+      enumerable: true
+    },
+    path: {
+      value: path,
+      enumerable: true
+    }
+  });
+}
+var aAllowedEntries = [];
+oURLListValidator.clear = function () {
+  aAllowedEntries = [];
+};
+oURLListValidator.add = function (protocol, host, port, path) {
+  var oEntry = this._createEntry(protocol, host, port, path);
+  aAllowedEntries.push(oEntry);
+};
+oURLListValidator._delete = function (oEntry) {
+  aAllowedEntries.splice(aAllowedEntries.indexOf(oEntry), 1);
+};
+oURLListValidator.entries = function () {
+  return aAllowedEntries.slice();
+};
+oURLListValidator.validate = function (sUrl) {
+  var result = rBasicUrl.exec(sUrl);
+  if (!result) {
+    return false;
+  }
+  var sProtocol = result[1], sBody = result[2], sHost = result[3], sPort = result[4], sPath = result[5], sQuery = result[6], sHash = result[7];
+  if (sProtocol) {
+    sProtocol = sProtocol.toUpperCase();
+    if (aAllowedEntries.length <= 0) {
+      if (!(/^(https?|ftp)/i).test(sProtocol)) {
+        return false;
+      }
+    }
+  }
+  if (sHost) {
+    if (rCheckIPv4.test(sHost)) {
+      if (!rCheckValidIPv4.test(sHost)) {
+        return false;
+      }
+    } else if (rCheckIPv6.test(sHost)) {
+      if (!rCheckValidIPv6.test(sHost)) {
+        return false;
+      }
+    } else if (!rCheckHostName.test(sHost)) {
+      return false;
+    }
+    sHost = sHost.toUpperCase();
+  }
+  if (sPath) {
+    if (sProtocol === "MAILTO") {
+      var aAddresses = sBody.split(",");
+      for (var i = 0; i < aAddresses.length; i++) {
+        if (!rCheckMail.test(aAddresses[i])) {
+          return false;
+        }
+      }
+    } else {
+      var aComponents = sPath.split("/");
+      for (var i = 0; i < aComponents.length; i++) {
+        if (!rCheckPath.test(aComponents[i])) {
+          return false;
+        }
+      }
+    }
+  }
+  if (sQuery) {
+    if (!rCheckQuery.test(sQuery)) {
+      return false;
+    }
+  }
+  if (sHash) {
+    if (!rCheckFragment.test(sHash)) {
+      return false;
+    }
+  }
+  if (aAllowedEntries.length > 0) {
+    var bFound = false;
+    for (var i = 0; i < aAllowedEntries.length; i++) {
+      if (!sProtocol || !aAllowedEntries[i].protocol || sProtocol == aAllowedEntries[i].protocol) {
+        var bOk = false;
+        if (sHost && aAllowedEntries[i].host && (/^\*/).test(aAllowedEntries[i].host)) {
+          if (!aAllowedEntries[i]._hostRegexp) {
+            var sHostEscaped = aAllowedEntries[i].host.slice(1).replace(/[-[\]{}()*+?.,\\^$|#\s]/g, "\\$&");
+            aAllowedEntries[i]._hostRegexp = RegExp(sHostEscaped + "$");
+          }
+          var rFilter = aAllowedEntries[i]._hostRegexp;
+          if (rFilter.test(sHost)) {
+            bOk = true;
+          }
+        } else if (!sHost || !aAllowedEntries[i].host || sHost == aAllowedEntries[i].host) {
+          bOk = true;
+        }
+        if (bOk) {
+          if (!sHost && !sPort || !aAllowedEntries[i].port || sPort == aAllowedEntries[i].port) {
+            if (aAllowedEntries[i].path && (/\*$/).test(aAllowedEntries[i].path)) {
+              if (!aAllowedEntries[i]._pathRegexp) {
+                var sPathEscaped = aAllowedEntries[i].path.slice(0, -1).replace(/[-[\]{}()*+?.,\\^$|#\s]/g, "\\$&");
+                aAllowedEntries[i]._pathRegexp = RegExp("^" + sPathEscaped);
+              }
+              var rFilter = aAllowedEntries[i]._pathRegexp;
+              if (rFilter.test(sPath)) {
+                bFound = true;
+              }
+            } else if (!aAllowedEntries[i].path || sPath == aAllowedEntries[i].path) {
+              bFound = true;
+            }
+          }
+        }
+      }
+      if (bFound) {
+        break;
+      }
+    }
+    if (!bFound) {
+      return false;
+    }
+  }
+  return true;
+};
+export default oURLListValidator;

package/dist/sap/base/security/encodeCSS.js

@@ -0,0 +1,14 @@
+import toHex from '../strings/toHex.js';
+var rCSS = /[\x00-\x2f\x3a-\x40\x5b-\x60\x7b-\xff\u2028\u2029][0-9A-Fa-f]?/g;
+var fnCSS = function (sChar) {
+    var iChar = sChar.charCodeAt(0);
+    if (sChar.length === 1) {
+        return '\\' + toHex(iChar);
+    } else {
+        return '\\' + toHex(iChar) + ' ' + sChar.substr(1);
+    }
+};
+var fnEncodeCSS = function (sString) {
+    return sString.replace(rCSS, fnCSS);
+};
+export default fnEncodeCSS;

package/dist/sap/base/security/encodeXML.js

@@ -0,0 +1,23 @@
+import toHex from '../strings/toHex.js';
+var rHtml = /[\x00-\x2b\x2f\x3a-\x40\x5b-\x5e\x60\x7b-\xff\u2028\u2029]/g, rHtmlReplace = /[\x00-\x08\x0b\x0c\x0e-\x1f\x7f-\x9f]/, mHtmlLookup = {
+        '<': '&lt;',
+        '>': '&gt;',
+        '&': '&amp;',
+        '"': '&quot;'
+    };
+var fnHtml = function (sChar) {
+    var sEncoded = mHtmlLookup[sChar];
+    if (!sEncoded) {
+        if (rHtmlReplace.test(sChar)) {
+            sEncoded = '&#xfffd;';
+        } else {
+            sEncoded = '&#x' + toHex(sChar.charCodeAt(0)) + ';';
+        }
+        mHtmlLookup[sChar] = sEncoded;
+    }
+    return sEncoded;
+};
+var fnEncodeXML = function (sString) {
+    return sString.replace(rHtml, fnHtml);
+};
+export default fnEncodeXML;

package/dist/sap/base/security/sanitizeHTML.js

@@ -0,0 +1,16 @@
+import assert from '../assert.js';
+import URLListValidator from './URLListValidator.js';
+import '../../ui/thirdparty/caja-html-sanitizer.js';
+var fnSanitizeHTML = function (sHTML, mOptions) {
+    assert(window.html && window.html.sanitize, 'Sanitizer should have been loaded');
+    mOptions = mOptions || {
+        uriRewriter: function (sUrl) {
+            if (URLListValidator.validate(sUrl)) {
+                return sUrl;
+            }
+        }
+    };
+    var oTagPolicy = mOptions.tagPolicy || window.html.makeTagPolicy(mOptions.uriRewriter, mOptions.tokenPolicy);
+    return window.html.sanitizeWithPolicy(sHTML, oTagPolicy);
+};
+export default fnSanitizeHTML;

package/dist/sap/base/strings/toHex.js

@@ -0,0 +1,8 @@
+var fnToHex = function (iChar, iLength) {
+  var sHex = iChar.toString(16);
+  if (iLength) {
+    sHex = sHex.padStart(iLength, "0");
+  }
+  return sHex;
+};
+export default fnToHex;

package/dist/sap/base/util/now.js

@@ -0,0 +1,7 @@
+var fnNow = !(typeof window != "undefined" && window.performance && performance.now && performance.timing) ? Date.now : (function () {
+  var iNavigationStart = performance.timing.navigationStart;
+  return function perfnow() {
+    return iNavigationStart + performance.now();
+  };
+})();
+export default fnNow;