@weapp-vite/web 1.6.0 → 2.0.1

package/dist/runtime/nativeComponents/richText/helpers.mjs

@@ -1,230 +0,0 @@
-import { parseDocument } from "htmlparser2";
-
-//#region src/runtime/nativeComponents/richText/helpers.ts
-const ALLOWED_TAGS = /* @__PURE__ */ new Set([
-	"a",
-	"abbr",
-	"address",
-	"article",
-	"aside",
-	"b",
-	"bdi",
-	"bdo",
-	"big",
-	"blockquote",
-	"br",
-	"caption",
-	"center",
-	"cite",
-	"code",
-	"col",
-	"colgroup",
-	"dd",
-	"del",
-	"div",
-	"dl",
-	"dt",
-	"em",
-	"fieldset",
-	"font",
-	"h1",
-	"h2",
-	"h3",
-	"h4",
-	"h5",
-	"h6",
-	"header",
-	"hr",
-	"i",
-	"img",
-	"ins",
-	"label",
-	"legend",
-	"li",
-	"mark",
-	"ol",
-	"p",
-	"pre",
-	"q",
-	"rt",
-	"ruby",
-	"s",
-	"section",
-	"small",
-	"span",
-	"strong",
-	"sub",
-	"sup",
-	"table",
-	"tbody",
-	"td",
-	"tfoot",
-	"th",
-	"thead",
-	"tr",
-	"tt",
-	"u",
-	"ul"
-]);
-const ALLOWED_ATTRIBUTES = /* @__PURE__ */ new Set([
-	"abbr",
-	"align",
-	"alt",
-	"axis",
-	"bgcolor",
-	"border",
-	"cellpadding",
-	"cellspacing",
-	"class",
-	"colspan",
-	"dir",
-	"height",
-	"href",
-	"id",
-	"lang",
-	"rowspan",
-	"scope",
-	"span",
-	"start",
-	"style",
-	"summary",
-	"target",
-	"title",
-	"type",
-	"valign",
-	"width"
-]);
-const URL_ATTRIBUTES = /* @__PURE__ */ new Set(["href", "src"]);
-const ALLOWED_STYLE_PROPERTIES = /* @__PURE__ */ new Set([
-	"background",
-	"background-color",
-	"border",
-	"border-bottom",
-	"border-color",
-	"border-left",
-	"border-radius",
-	"border-right",
-	"border-style",
-	"border-top",
-	"border-width",
-	"color",
-	"display",
-	"font-family",
-	"font-size",
-	"font-style",
-	"font-weight",
-	"height",
-	"letter-spacing",
-	"line-height",
-	"margin",
-	"margin-bottom",
-	"margin-left",
-	"margin-right",
-	"margin-top",
-	"max-height",
-	"max-width",
-	"min-height",
-	"min-width",
-	"opacity",
-	"overflow",
-	"padding",
-	"padding-bottom",
-	"padding-left",
-	"padding-right",
-	"padding-top",
-	"text-align",
-	"text-decoration",
-	"text-indent",
-	"text-overflow",
-	"text-transform",
-	"vertical-align",
-	"white-space",
-	"width",
-	"word-break",
-	"word-wrap"
-]);
-function isRecord(value) {
-	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-function isSafeUrl(value, attribute) {
-	const normalized = Array.from(value).filter((character) => character.charCodeAt(0) > 32).join("").toLowerCase();
-	if (!normalized || normalized.startsWith("#") || normalized.startsWith("/") || normalized.startsWith("./") || normalized.startsWith("../")) return true;
-	if (/^(?:https?:|mailto:|tel:)/.test(normalized)) return true;
-	return attribute === "src" && /^data:image\/(?:gif|jpe?g|png|webp);base64,/.test(normalized);
-}
-function isSafeStyleValue(value) {
-	const normalized = value.toLowerCase().replace(/\s+/g, "");
-	return !normalized.includes("url(") && !normalized.includes("expression(") && !normalized.includes("javascript:") && !normalized.includes("behavior:") && !normalized.includes("-moz-binding");
-}
-function sanitizeRichTextStyle(value) {
-	const source = isRecord(value) ? Object.entries(value).map(([property, propertyValue]) => `${property}:${String(propertyValue)}`).join(";") : String(value ?? "");
-	const declarations = [];
-	for (const declaration of source.split(";")) {
-		const separator = declaration.indexOf(":");
-		if (separator <= 0) continue;
-		const property = declaration.slice(0, separator).trim().toLowerCase();
-		const propertyValue = declaration.slice(separator + 1).trim();
-		if (ALLOWED_STYLE_PROPERTIES.has(property) && propertyValue && isSafeStyleValue(propertyValue)) declarations.push(`${property}: ${propertyValue}`);
-	}
-	return declarations.join("; ");
-}
-function sanitizeRichTextAttributes(value, tagName) {
-	if (!isRecord(value)) return {};
-	const attributes = {};
-	for (const [rawName, rawValue] of Object.entries(value)) {
-		const name = rawName.trim().toLowerCase();
-		if (name.startsWith("on") || name === "srcdoc") continue;
-		if (!ALLOWED_ATTRIBUTES.has(name) && name !== "src" && !name.startsWith("aria-") && !name.startsWith("data-")) continue;
-		if (name === "src" && tagName !== "img") continue;
-		const serialized = name === "style" ? sanitizeRichTextStyle(rawValue) : String(rawValue ?? "");
-		if (!serialized || URL_ATTRIBUTES.has(name) && !isSafeUrl(serialized, name)) continue;
-		attributes[name] = serialized;
-	}
-	if (tagName === "a") attributes.rel = "noopener noreferrer";
-	return attributes;
-}
-function convertSourceNode(value) {
-	if (!isRecord(value)) return [];
-	if (value.type === "text" || !value.name && typeof value.text === "string") return [{
-		type: "text",
-		text: String(value.text ?? "")
-	}];
-	const children = Array.isArray(value.children) ? value.children.flatMap(convertSourceNode) : [];
-	const name = String(value.name ?? "").toLowerCase();
-	if (!ALLOWED_TAGS.has(name)) return children;
-	return [{
-		type: "element",
-		name,
-		attrs: sanitizeRichTextAttributes(value.attrs, name),
-		children
-	}];
-}
-function convertParsedNode(node) {
-	if (node.type === "text") return [{
-		type: "text",
-		text: node.data
-	}];
-	if (node.type !== "tag") return [];
-	const element = node;
-	const children = element.children.flatMap(convertParsedNode);
-	const name = element.name.toLowerCase();
-	if (!ALLOWED_TAGS.has(name)) return children;
-	return [{
-		type: "element",
-		name,
-		attrs: sanitizeRichTextAttributes(element.attribs, name),
-		children
-	}];
-}
-function normalizeRichTextNodes(value) {
-	if (typeof value === "string") return parseDocument(value, {
-		decodeEntities: true,
-		lowerCaseAttributeNames: true,
-		lowerCaseTags: true
-	}).children.flatMap(convertParsedNode);
-	return (Array.isArray(value) ? value : [value]).flatMap(convertSourceNode);
-}
-
-//#endregion
-export { normalizeRichTextNodes, sanitizeRichTextAttributes, sanitizeRichTextStyle };
-//# sourceMappingURL=helpers.mjs.map

package/dist/runtime/nativeComponents/richText/helpers.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"helpers.mjs","names":[],"sources":["../../../../src/runtime/nativeComponents/richText/helpers.ts"],"sourcesContent":["import type { DataNode, Element, Node } from 'domhandler'\nimport { parseDocument } from 'htmlparser2'\n\nexport interface RichTextSourceNode {\n  type?: string\n  name?: string\n  attrs?: Record<string, unknown>\n  children?: RichTextSourceNode[]\n  text?: string\n}\n\nexport type SafeRichTextNode\n  = | { type: 'text', text: string }\n    | { type: 'element', name: string, attrs: Record<string, string>, children: SafeRichTextNode[] }\n\nconst ALLOWED_TAGS = new Set([\n  'a',\n  'abbr',\n  'address',\n  'article',\n  'aside',\n  'b',\n  'bdi',\n  'bdo',\n  'big',\n  'blockquote',\n  'br',\n  'caption',\n  'center',\n  'cite',\n  'code',\n  'col',\n  'colgroup',\n  'dd',\n  'del',\n  'div',\n  'dl',\n  'dt',\n  'em',\n  'fieldset',\n  'font',\n  'h1',\n  'h2',\n  'h3',\n  'h4',\n  'h5',\n  'h6',\n  'header',\n  'hr',\n  'i',\n  'img',\n  'ins',\n  'label',\n  'legend',\n  'li',\n  'mark',\n  'ol',\n  'p',\n  'pre',\n  'q',\n  'rt',\n  'ruby',\n  's',\n  'section',\n  'small',\n  'span',\n  'strong',\n  'sub',\n  'sup',\n  'table',\n  'tbody',\n  'td',\n  'tfoot',\n  'th',\n  'thead',\n  'tr',\n  'tt',\n  'u',\n  'ul',\n])\n\nconst ALLOWED_ATTRIBUTES = new Set([\n  'abbr',\n  'align',\n  'alt',\n  'axis',\n  'bgcolor',\n  'border',\n  'cellpadding',\n  'cellspacing',\n  'class',\n  'colspan',\n  'dir',\n  'height',\n  'href',\n  'id',\n  'lang',\n  'rowspan',\n  'scope',\n  'span',\n  'start',\n  'style',\n  'summary',\n  'target',\n  'title',\n  'type',\n  'valign',\n  'width',\n])\n\nconst URL_ATTRIBUTES = new Set(['href', 'src'])\n\nconst ALLOWED_STYLE_PROPERTIES = new Set([\n  'background',\n  'background-color',\n  'border',\n  'border-bottom',\n  'border-color',\n  'border-left',\n  'border-radius',\n  'border-right',\n  'border-style',\n  'border-top',\n  'border-width',\n  'color',\n  'display',\n  'font-family',\n  'font-size',\n  'font-style',\n  'font-weight',\n  'height',\n  'letter-spacing',\n  'line-height',\n  'margin',\n  'margin-bottom',\n  'margin-left',\n  'margin-right',\n  'margin-top',\n  'max-height',\n  'max-width',\n  'min-height',\n  'min-width',\n  'opacity',\n  'overflow',\n  'padding',\n  'padding-bottom',\n  'padding-left',\n  'padding-right',\n  'padding-top',\n  'text-align',\n  'text-decoration',\n  'text-indent',\n  'text-overflow',\n  'text-transform',\n  'vertical-align',\n  'white-space',\n  'width',\n  'word-break',\n  'word-wrap',\n])\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === 'object' && !Array.isArray(value)\n}\n\nfunction isSafeUrl(value: string, attribute: string) {\n  const normalized = Array.from(value)\n    .filter(character => character.charCodeAt(0) > 0x20)\n    .join('')\n    .toLowerCase()\n  if (!normalized || normalized.startsWith('#') || normalized.startsWith('/') || normalized.startsWith('./') || normalized.startsWith('../')) {\n    return true\n  }\n  if (/^(?:https?:|mailto:|tel:)/.test(normalized)) {\n    return true\n  }\n  return attribute === 'src' && /^data:image\\/(?:gif|jpe?g|png|webp);base64,/.test(normalized)\n}\n\nfunction isSafeStyleValue(value: string) {\n  const normalized = value.toLowerCase().replace(/\\s+/g, '')\n  return !normalized.includes('url(')\n    && !normalized.includes('expression(')\n    && !normalized.includes('javascript:')\n    && !normalized.includes('behavior:')\n    && !normalized.includes('-moz-binding')\n}\n\nexport function sanitizeRichTextStyle(value: unknown) {\n  const source = isRecord(value)\n    ? Object.entries(value)\n        .map(([property, propertyValue]) => `${property}:${String(propertyValue)}`)\n        .join(';')\n    : String(value ?? '')\n  const declarations: string[] = []\n  for (const declaration of source.split(';')) {\n    const separator = declaration.indexOf(':')\n    if (separator <= 0) {\n      continue\n    }\n    const property = declaration.slice(0, separator).trim().toLowerCase()\n    const propertyValue = declaration.slice(separator + 1).trim()\n    if (ALLOWED_STYLE_PROPERTIES.has(property) && propertyValue && isSafeStyleValue(propertyValue)) {\n      declarations.push(`${property}: ${propertyValue}`)\n    }\n  }\n  return declarations.join('; ')\n}\n\nexport function sanitizeRichTextAttributes(value: unknown, tagName: string) {\n  if (!isRecord(value)) {\n    return {}\n  }\n  const attributes: Record<string, string> = {}\n  for (const [rawName, rawValue] of Object.entries(value)) {\n    const name = rawName.trim().toLowerCase()\n    if (name.startsWith('on') || name === 'srcdoc') {\n      continue\n    }\n    if (!ALLOWED_ATTRIBUTES.has(name) && name !== 'src' && !name.startsWith('aria-') && !name.startsWith('data-')) {\n      continue\n    }\n    if (name === 'src' && tagName !== 'img') {\n      continue\n    }\n    const serialized = name === 'style' ? sanitizeRichTextStyle(rawValue) : String(rawValue ?? '')\n    if (!serialized || (URL_ATTRIBUTES.has(name) && !isSafeUrl(serialized, name))) {\n      continue\n    }\n    attributes[name] = serialized\n  }\n  if (tagName === 'a') {\n    attributes.rel = 'noopener noreferrer'\n  }\n  return attributes\n}\n\nfunction convertSourceNode(value: unknown): SafeRichTextNode[] {\n  if (!isRecord(value)) {\n    return []\n  }\n  if (value.type === 'text' || (!value.name && typeof value.text === 'string')) {\n    return [{ type: 'text', text: String(value.text ?? '') }]\n  }\n  const children = Array.isArray(value.children)\n    ? value.children.flatMap(convertSourceNode)\n    : []\n  const name = String(value.name ?? '').toLowerCase()\n  if (!ALLOWED_TAGS.has(name)) {\n    return children\n  }\n  return [{\n    type: 'element',\n    name,\n    attrs: sanitizeRichTextAttributes(value.attrs, name),\n    children,\n  }]\n}\n\nfunction convertParsedNode(node: Node): SafeRichTextNode[] {\n  if (node.type === 'text') {\n    return [{ type: 'text', text: (node as DataNode).data }]\n  }\n  if (node.type !== 'tag') {\n    return []\n  }\n  const element = node as Element\n  const children = element.children.flatMap(convertParsedNode)\n  const name = element.name.toLowerCase()\n  if (!ALLOWED_TAGS.has(name)) {\n    return children\n  }\n  return [{\n    type: 'element',\n    name,\n    attrs: sanitizeRichTextAttributes(element.attribs, name),\n    children,\n  }]\n}\n\nexport function normalizeRichTextNodes(value: unknown): SafeRichTextNode[] {\n  if (typeof value === 'string') {\n    const document = parseDocument(value, {\n      decodeEntities: true,\n      lowerCaseAttributeNames: true,\n      lowerCaseTags: true,\n    })\n    return document.children.flatMap(convertParsedNode)\n  }\n  const values = Array.isArray(value) ? value : [value]\n  return values.flatMap(convertSourceNode)\n}\n"],"mappings":";;;AAeA,MAAM,+BAAe,IAAI,IAAI;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,qCAAqB,IAAI,IAAI;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,iCAAiB,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC;AAE9C,MAAM,2CAA2B,IAAI,IAAI;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,SAAS,OAAkD;CAClE,OAAO,QAAQ,KAAK,KAAK,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,UAAU,OAAe,WAAmB;CACnD,MAAM,aAAa,MAAM,KAAK,KAAK,CAAC,CACjC,QAAO,cAAa,UAAU,WAAW,CAAC,IAAI,EAAI,CAAC,CACnD,KAAK,EAAE,CAAC,CACR,YAAY;CACf,IAAI,CAAC,cAAc,WAAW,WAAW,GAAG,KAAK,WAAW,WAAW,GAAG,KAAK,WAAW,WAAW,IAAI,KAAK,WAAW,WAAW,KAAK,GACvI,OAAO;CAET,IAAI,4BAA4B,KAAK,UAAU,GAC7C,OAAO;CAET,OAAO,cAAc,SAAS,8CAA8C,KAAK,UAAU;AAC7F;AAEA,SAAS,iBAAiB,OAAe;CACvC,MAAM,aAAa,MAAM,YAAY,CAAC,CAAC,QAAQ,QAAQ,EAAE;CACzD,OAAO,CAAC,WAAW,SAAS,MAAM,KAC7B,CAAC,WAAW,SAAS,aAAa,KAClC,CAAC,WAAW,SAAS,aAAa,KAClC,CAAC,WAAW,SAAS,WAAW,KAChC,CAAC,WAAW,SAAS,cAAc;AAC1C;AAEA,SAAgB,sBAAsB,OAAgB;CACpD,MAAM,SAAS,SAAS,KAAK,IACzB,OAAO,QAAQ,KAAK,CAAC,CAClB,KAAK,CAAC,UAAU,mBAAmB,GAAG,SAAS,GAAG,OAAO,aAAa,GAAG,CAAC,CAC1E,KAAK,GAAG,IACX,OAAO,SAAS,EAAE;CACtB,MAAM,eAAyB,CAAC;CAChC,KAAK,MAAM,eAAe,OAAO,MAAM,GAAG,GAAG;EAC3C,MAAM,YAAY,YAAY,QAAQ,GAAG;EACzC,IAAI,aAAa,GACf;EAEF,MAAM,WAAW,YAAY,MAAM,GAAG,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY;EACpE,MAAM,gBAAgB,YAAY,MAAM,YAAY,CAAC,CAAC,CAAC,KAAK;EAC5D,IAAI,yBAAyB,IAAI,QAAQ,KAAK,iBAAiB,iBAAiB,aAAa,GAC3F,aAAa,KAAK,GAAG,SAAS,IAAI,eAAe;CAErD;CACA,OAAO,aAAa,KAAK,IAAI;AAC/B;AAEA,SAAgB,2BAA2B,OAAgB,SAAiB;CAC1E,IAAI,CAAC,SAAS,KAAK,GACjB,OAAO,CAAC;CAEV,MAAM,aAAqC,CAAC;CAC5C,KAAK,MAAM,CAAC,SAAS,aAAa,OAAO,QAAQ,KAAK,GAAG;EACvD,MAAM,OAAO,QAAQ,KAAK,CAAC,CAAC,YAAY;EACxC,IAAI,KAAK,WAAW,IAAI,KAAK,SAAS,UACpC;EAEF,IAAI,CAAC,mBAAmB,IAAI,IAAI,KAAK,SAAS,SAAS,CAAC,KAAK,WAAW,OAAO,KAAK,CAAC,KAAK,WAAW,OAAO,GAC1G;EAEF,IAAI,SAAS,SAAS,YAAY,OAChC;EAEF,MAAM,aAAa,SAAS,UAAU,sBAAsB,QAAQ,IAAI,OAAO,YAAY,EAAE;EAC7F,IAAI,CAAC,cAAe,eAAe,IAAI,IAAI,KAAK,CAAC,UAAU,YAAY,IAAI,GACzE;EAEF,WAAW,QAAQ;CACrB;CACA,IAAI,YAAY,KACd,WAAW,MAAM;CAEnB,OAAO;AACT;AAEA,SAAS,kBAAkB,OAAoC;CAC7D,IAAI,CAAC,SAAS,KAAK,GACjB,OAAO,CAAC;CAEV,IAAI,MAAM,SAAS,UAAW,CAAC,MAAM,QAAQ,OAAO,MAAM,SAAS,UACjE,OAAO,CAAC;EAAE,MAAM;EAAQ,MAAM,OAAO,MAAM,QAAQ,EAAE;CAAE,CAAC;CAE1D,MAAM,WAAW,MAAM,QAAQ,MAAM,QAAQ,IACzC,MAAM,SAAS,QAAQ,iBAAiB,IACxC,CAAC;CACL,MAAM,OAAO,OAAO,MAAM,QAAQ,EAAE,CAAC,CAAC,YAAY;CAClD,IAAI,CAAC,aAAa,IAAI,IAAI,GACxB,OAAO;CAET,OAAO,CAAC;EACN,MAAM;EACN;EACA,OAAO,2BAA2B,MAAM,OAAO,IAAI;EACnD;CACF,CAAC;AACH;AAEA,SAAS,kBAAkB,MAAgC;CACzD,IAAI,KAAK,SAAS,QAChB,OAAO,CAAC;EAAE,MAAM;EAAQ,MAAO,KAAkB;CAAK,CAAC;CAEzD,IAAI,KAAK,SAAS,OAChB,OAAO,CAAC;CAEV,MAAM,UAAU;CAChB,MAAM,WAAW,QAAQ,SAAS,QAAQ,iBAAiB;CAC3D,MAAM,OAAO,QAAQ,KAAK,YAAY;CACtC,IAAI,CAAC,aAAa,IAAI,IAAI,GACxB,OAAO;CAET,OAAO,CAAC;EACN,MAAM;EACN;EACA,OAAO,2BAA2B,QAAQ,SAAS,IAAI;EACvD;CACF,CAAC;AACH;AAEA,SAAgB,uBAAuB,OAAoC;CACzE,IAAI,OAAO,UAAU,UAMnB,OALiB,cAAc,OAAO;EACpC,gBAAgB;EAChB,yBAAyB;EACzB,eAAe;CACjB,CACc,CAAC,CAAC,SAAS,QAAQ,iBAAiB;CAGpD,QADe,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK,EACvC,CAAC,QAAQ,iBAAiB;AACzC"}