botframework-webchat 4.15.10-main.20230908.de79e0e → 4.15.10-main.20230915.bb5898e

package/src/markdown/markdownItPlugins/respectCRLF.ts

@@ -0,0 +1,7 @@
+// TODO: We should find some other ways to do this.
+const pre = (markdown: string): string =>
+  // IE11 does not support "u" flag and Babel could not remove it. We intentionally omitting the "u" flag here.
+  // eslint-disable-next-line require-unicode-regexp
+  markdown.replace(/\n\r|\r\n/g, carriageReturn => (carriageReturn === '\n\r' ? '\r\n' : '\n\r'));
+
+export { pre };

package/src/markdown/private/iterateLinkDefinitions.ts

@@ -0,0 +1,14 @@
+import { fromMarkdown } from 'mdast-util-from-markdown';
+import { type Definition, type Node } from 'mdast';
+
+function isDefinition(node: Node): node is Definition {
+  return node.type === 'definition';
+}
+
+export default function* iterateLinkDefinitions(markdown: string): Generator<Definition, void, void> {
+  for (const topLevelNode of fromMarkdown(markdown).children) {
+    if (isDefinition(topLevelNode)) {
+      yield topLevelNode;
+    }
+  }
+}

package/src/markdown/renderMarkdown.ts

@@ -0,0 +1,146 @@
+import { onErrorResumeNext } from 'botframework-webchat-core';
+import MarkdownIt from 'markdown-it';
+import sanitizeHTML from 'sanitize-html';
+
+import { pre as respectCRLFPre } from './markdownItPlugins/respectCRLF';
+import ariaLabel, { post as ariaLabelPost, pre as ariaLabelPre } from './markdownItPlugins/ariaLabel';
+import betterLink from './markdownItPlugins/betterLink';
+import iterateLinkDefinitions from './private/iterateLinkDefinitions';
+
+const SANITIZE_HTML_OPTIONS = Object.freeze({
+  allowedAttributes: {
+    a: ['aria-label', 'class', 'href', 'name', 'rel', 'target'],
+    button: ['aria-label', 'class', 'type', 'value'],
+    img: ['alt', 'class', 'src', 'title'],
+    span: ['aria-label']
+  },
+  allowedSchemes: ['data', 'http', 'https', 'ftp', 'mailto', 'sip', 'tel'],
+  allowedTags: [
+    'a',
+    'b',
+    'blockquote',
+    'br',
+    'button',
+    'caption',
+    'code',
+    'del',
+    'div',
+    'em',
+    'h1',
+    'h2',
+    'h3',
+    'h4',
+    'h5',
+    'h6',
+    'hr',
+    'i',
+    'img',
+    'ins',
+    'li',
+    'nl',
+    'ol',
+    'p',
+    'pre',
+    's',
+    'span',
+    'strike',
+    'strong',
+    'table',
+    'tbody',
+    'td',
+    'tfoot',
+    'th',
+    'thead',
+    'tr',
+    'ul'
+  ]
+});
+
+const MARKDOWN_IT_INIT = Object.freeze({
+  breaks: false,
+  html: false,
+  linkify: true,
+  typographer: true,
+  xhtmlOut: true
+});
+
+type BetterLinkDecoration = Exclude<ReturnType<Parameters<typeof betterLink>[1]>, undefined>;
+type RenderInit = { externalLinkAlt?: string };
+
+export default function render(
+  markdown: string,
+  { markdownRespectCRLF }: Readonly<{ markdownRespectCRLF: boolean }>,
+  { externalLinkAlt = '' }: Readonly<RenderInit> = Object.freeze({})
+): string {
+  const linkDefinitions = Array.from(iterateLinkDefinitions(markdown));
+
+  if (markdownRespectCRLF) {
+    markdown = respectCRLFPre(markdown);
+  }
+
+  markdown = ariaLabelPre(markdown);
+
+  const markdownIt = new MarkdownIt(MARKDOWN_IT_INIT)
+    .use(ariaLabel)
+    .use(betterLink, (href: string, textContent: string): BetterLinkDecoration | undefined => {
+      const decoration: BetterLinkDecoration = {
+        rel: 'noopener noreferrer',
+        target: '_blank'
+      };
+
+      const ariaLabelSegments: string[] = [textContent];
+      const classes: Set<string> = new Set();
+      const linkDefinition = linkDefinitions.find(({ url }) => url === href);
+      const protocol = onErrorResumeNext(() => new URL(href).protocol);
+
+      if (linkDefinition) {
+        ariaLabelSegments.push(
+          linkDefinition.title || onErrorResumeNext(() => new URL(linkDefinition.url).host) || linkDefinition.url
+        );
+
+        linkDefinition.identifier === textContent && classes.add('webchat__render-markdown__pure-identifier');
+      }
+
+      if (protocol === 'cite:') {
+        decoration.asButton = true;
+
+        classes.add('webchat__render-markdown__citation');
+      } else if (protocol === 'http:' || protocol === 'https:') {
+        decoration.iconAlt = externalLinkAlt;
+        decoration.iconClassName = 'webchat__render-markdown__external-link-icon';
+
+        ariaLabelSegments.push(externalLinkAlt);
+      }
+
+      // The first segment is textContent. Putting textContent is aria-label is useless.
+      if (ariaLabelSegments.length > 1) {
+        // If "aria-label" is already applied, do not overwrite it.
+        decoration.ariaLabel = (value: string) => value || ariaLabelSegments.join(' ');
+      }
+
+      decoration.className = Array.from(classes).join(' ');
+
+      // By default, Markdown-It will set "title" to the link title in link definition.
+
+      // However, "title" may be narrated by screen reader:
+      // - Edge
+      //   - <a> will narrate "aria-label" but not "title"
+      //   - <button> will narrate both "aria-label" and "title"
+      // - NVDA
+      //   - <a> will narrate both "aria-label" and "title"
+      //   - <button> will narrate both "aria-label" and "title"
+
+      // Title makes it very difficult to control narrations by the screen reader. Thus, we are disabling it in favor of "aria-label".
+      // This will not affect our accessibility compliance but UX. We could use a non-native tooltip or other forms of visual hint.
+
+      decoration.title = false;
+
+      return decoration;
+    });
+
+  let html = markdownIt.render(markdown);
+
+  html = ariaLabelPost(html);
+
+  return sanitizeHTML(html, SANITIZE_HTML_OPTIONS);
+}

package/src/useComposerProps.ts

@@ -4,7 +4,7 @@ import { useMemo } from 'react';
 import createAdaptiveCardsAttachmentForScreenReaderMiddleware from './adaptiveCards/createAdaptiveCardsAttachmentForScreenReaderMiddleware';
 import createAdaptiveCardsAttachmentMiddleware from './adaptiveCards/createAdaptiveCardsAttachmentMiddleware';
 import createAdaptiveCardsStyleSet from './adaptiveCards/Styles/createAdaptiveCardsStyleSet';
-import defaultRenderMarkdown from './renderMarkdown';
+import defaultRenderMarkdown from './markdown/renderMarkdown';
 
 export default function useComposerProps({
   attachmentForScreenReaderMiddleware,

package/lib/renderMarkdown.d.ts

@@ -1,6 +0,0 @@
-export default function render(markdown: string, { markdownRespectCRLF }: {
-    markdownRespectCRLF: boolean;
-}, { externalLinkAlt }?: {
-    externalLinkAlt?: string;
-}): string;
-//# sourceMappingURL=renderMarkdown.d.ts.map

package/lib/renderMarkdown.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"renderMarkdown.d.ts","sourceRoot":"","sources":["../src/renderMarkdown.ts"],"names":[],"mappings":"AAuEA,MAAM,CAAC,OAAO,UAAU,MAAM,CAC5B,QAAQ,EAAE,MAAM,EAChB,EAAE,mBAAmB,EAAE,EAAE;IAAE,mBAAmB,EAAE,OAAO,CAAA;CAAE,EACzD,EAAE,eAAoB,EAAE,GAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D,MAAM,CAgER"}

package/lib/renderMarkdown.js

@@ -1,115 +0,0 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.default = render;
-
-var _toConsumableArray2 = _interopRequireDefault(require("@babel/runtime/helpers/toConsumableArray"));
-
-var _slicedToArray2 = _interopRequireDefault(require("@babel/runtime/helpers/slicedToArray"));
-
-var _markdownItForInline = _interopRequireDefault(require("markdown-it-for-inline"));
-
-var _markdownIt = _interopRequireDefault(require("markdown-it"));
-
-var _markdownItAttrsEs = _interopRequireDefault(require("markdown-it-attrs-es5"));
-
-var _sanitizeHtml = _interopRequireDefault(require("sanitize-html"));
-
-/* eslint no-magic-numbers: ["error", { "ignore": [0, 1, 2] }] */
-var SANITIZE_HTML_OPTIONS = {
-  allowedAttributes: {
-    a: ['aria-label', 'href', 'name', 'rel', 'target', 'title'],
-    img: ['alt', 'class', 'src']
-  },
-  allowedSchemes: ['data', 'http', 'https', 'ftp', 'mailto', 'sip', 'tel'],
-  allowedTags: ['a', 'b', 'blockquote', 'br', 'caption', 'code', 'del', 'div', 'em', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'hr', 'i', 'img', 'ins', 'li', 'nl', 'ol', 'p', 'pre', 's', 'span', 'strike', 'strong', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'tr', 'ul']
-}; // Put a transparent pixel instead of the "open in new window" icon, so developers can easily modify the icon in CSS.
-
-var TRANSPARENT_GIF = 'data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7'; // This is used for parsing Markdown for external links.
-
-var internalMarkdownIt = new _markdownIt.default();
-var MARKDOWN_ATTRS_LEFT_DELIMITER = '⟬'; // Make sure the delimiter is free from any RegExp characters, such as *, ?, etc.
-// IE11 does not support "u" flag and Babel could not remove it. We intentionally omitting the "u" flag here.
-// eslint-disable-next-line require-unicode-regexp
-
-var MARKDOWN_ATTRS_LEFT_DELIMITER_PATTERN = new RegExp(MARKDOWN_ATTRS_LEFT_DELIMITER, 'g');
-var MARKDOWN_ATTRS_RIGHT_DELIMITER = '⟭'; // Make sure the delimiter is free from any RegExp characters, such as *, ?, etc.
-// IE11 does not support "u" flag and Babel could not remove it. We intentionally omitting the "u" flag here.
-// eslint-disable-next-line require-unicode-regexp
-
-var MARKDOWN_ATTRS_RIGHT_DELIMITER_PATTERN = new RegExp(MARKDOWN_ATTRS_RIGHT_DELIMITER, 'g');
-
-function render(markdown, _ref) {
-  var markdownRespectCRLF = _ref.markdownRespectCRLF;
-
-  var _ref2 = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : {},
-      _ref2$externalLinkAlt = _ref2.externalLinkAlt,
-      externalLinkAlt = _ref2$externalLinkAlt === void 0 ? '' : _ref2$externalLinkAlt;
-
-  if (markdownRespectCRLF) {
-    markdown = markdown.replace(/\n\r|\r\n/g, function (carriageReturn) {
-      return carriageReturn === '\n\r' ? '\r\n' : '\n\r';
-    });
-  } // Related to #3165.
-  // We only support attributes "aria-label" and should leave other attributes as-is.
-  // However, `markdown-it-attrs` remove unrecognized attributes, such as {hello}.
-  // Before passing to `markdown-it-attrs`, we will convert known attributes from {aria-label="..."} into ⟬aria-label="..."⟭ (using white tortoise shell brackets).
-  // Then, we ask `markdown-it-attrs` to only process the new brackets, so it should only try to process things that we allowlisted.
-  // Lastly, we revert tortoise shell brackets back to curly brackets, for unprocessed attributes.
-
-
-  markdown = markdown.replace(/\{[\t-\r \xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000\uFEFF]*aria\x2Dlabel()[\t-\r \xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000\uFEFF]*\}/gi, "".concat(MARKDOWN_ATTRS_LEFT_DELIMITER, "aria-label").concat(MARKDOWN_ATTRS_RIGHT_DELIMITER)).replace(/\{[\t-\r \xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000\uFEFF]*aria\x2Dlabel=("(?:(?!")[\s\S])*"|(?:(?![\t-\r \}\xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000\uFEFF])[\s\S])*)[\t-\r \xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000\uFEFF]*\}/gi, function (_, valueInsideQuotes) {
-    return "".concat(MARKDOWN_ATTRS_LEFT_DELIMITER, "aria-label=").concat(valueInsideQuotes).concat(MARKDOWN_ATTRS_RIGHT_DELIMITER);
-  });
-  var html = new _markdownIt.default({
-    breaks: false,
-    html: false,
-    linkify: true,
-    typographer: true,
-    xhtmlOut: true
-  }).use(_markdownItAttrsEs.default, {
-    // `markdown-it-attrs` is added for accessibility and allow bot developers to specify `aria-label`.
-    // We are allowlisting `aria-label` only as it is allowlisted in `sanitize-html`.
-    // Other `aria-*` will be sanitized even we allowlisted here.
-    allowedAttributes: ['aria-label'],
-    leftDelimiter: MARKDOWN_ATTRS_LEFT_DELIMITER,
-    rightDelimiter: MARKDOWN_ATTRS_RIGHT_DELIMITER
-  }).use(_markdownItForInline.default, 'url_new_win', 'link_open', function (tokens, index) {
-    var token = tokens[+index];
-    token.attrSet('rel', 'noopener noreferrer');
-    token.attrSet('target', '_blank');
-    var linkOpenToken = tokens.find(function (_ref3) {
-      var type = _ref3.type;
-      return type === 'link_open';
-    });
-
-    var _linkOpenToken$attrs$ = linkOpenToken.attrs.find(function (_ref4) {
-      var _ref5 = (0, _slicedToArray2.default)(_ref4, 1),
-          name = _ref5[0];
-
-      return name === 'href';
-    }),
-        _linkOpenToken$attrs$2 = (0, _slicedToArray2.default)(_linkOpenToken$attrs$, 2),
-        href = _linkOpenToken$attrs$2[1]; // Adds a new icon if the link is http: or https:.
-    // Don't add if it's a phone number, etc.
-
-
-    if (/^http[s\u017F]?:/i.test(href)) {
-      externalLinkAlt && token.attrSet('title', externalLinkAlt);
-      var iconTokens = internalMarkdownIt.parseInline("![".concat(externalLinkAlt, "](").concat(TRANSPARENT_GIF, ")"))[0].children;
-      iconTokens[0].attrJoin('class', 'webchat__markdown__external-link-icon');
-      tokens.splice.apply(tokens, [index + 2, 0].concat((0, _toConsumableArray2.default)(iconTokens)));
-    }
-  }).render(markdown); // Restore attributes not processed by `markdown-it-attrs`.
-  // TODO: [P2] #2511 After we fixed our polyfill story, we should use "String.prototype.replaceAll" instead of RegExp for replace all occurrences.
-
-  html = html.replace(MARKDOWN_ATTRS_LEFT_DELIMITER_PATTERN, '{').replace(MARKDOWN_ATTRS_RIGHT_DELIMITER_PATTERN, '}'); // The signature from "sanitize-html" module is not correct.
-  // @ts-ignore
-
-  return (0, _sanitizeHtml.default)(html, SANITIZE_HTML_OPTIONS);
-}
-//# sourceMappingURL=data:application/json;charset=utf-8;base64,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

package/src/renderMarkdown.ts

@@ -1,140 +0,0 @@
-/* eslint no-magic-numbers: ["error", { "ignore": [0, 1, 2] }] */
-
-import iterator from 'markdown-it-for-inline';
-import MarkdownIt from 'markdown-it';
-import markdownItAttrs from 'markdown-it-attrs-es5';
-import sanitizeHTML from 'sanitize-html';
-
-const SANITIZE_HTML_OPTIONS = {
-  allowedAttributes: {
-    a: ['aria-label', 'href', 'name', 'rel', 'target', 'title'],
-    img: ['alt', 'class', 'src']
-  },
-  allowedSchemes: ['data', 'http', 'https', 'ftp', 'mailto', 'sip', 'tel'],
-  allowedTags: [
-    'a',
-    'b',
-    'blockquote',
-    'br',
-    'caption',
-    'code',
-    'del',
-    'div',
-    'em',
-    'h1',
-    'h2',
-    'h3',
-    'h4',
-    'h5',
-    'h6',
-    'hr',
-    'i',
-    'img',
-    'ins',
-    'li',
-    'nl',
-    'ol',
-    'p',
-    'pre',
-    's',
-    'span',
-    'strike',
-    'strong',
-    'table',
-    'tbody',
-    'td',
-    'tfoot',
-    'th',
-    'thead',
-    'tr',
-    'ul'
-  ]
-};
-
-// Put a transparent pixel instead of the "open in new window" icon, so developers can easily modify the icon in CSS.
-const TRANSPARENT_GIF = 'data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7';
-
-// This is used for parsing Markdown for external links.
-const internalMarkdownIt = new MarkdownIt();
-
-const MARKDOWN_ATTRS_LEFT_DELIMITER = '⟬';
-// Make sure the delimiter is free from any RegExp characters, such as *, ?, etc.
-// IE11 does not support "u" flag and Babel could not remove it. We intentionally omitting the "u" flag here.
-// eslint-disable-next-line require-unicode-regexp
-const MARKDOWN_ATTRS_LEFT_DELIMITER_PATTERN = new RegExp(MARKDOWN_ATTRS_LEFT_DELIMITER, 'g');
-
-const MARKDOWN_ATTRS_RIGHT_DELIMITER = '⟭';
-// Make sure the delimiter is free from any RegExp characters, such as *, ?, etc.
-// IE11 does not support "u" flag and Babel could not remove it. We intentionally omitting the "u" flag here.
-// eslint-disable-next-line require-unicode-regexp
-const MARKDOWN_ATTRS_RIGHT_DELIMITER_PATTERN = new RegExp(MARKDOWN_ATTRS_RIGHT_DELIMITER, 'g');
-
-export default function render(
-  markdown: string,
-  { markdownRespectCRLF }: { markdownRespectCRLF: boolean },
-  { externalLinkAlt = '' }: { externalLinkAlt?: string } = {}
-): string {
-  if (markdownRespectCRLF) {
-    markdown = markdown.replace(/\n\r|\r\n/gu, carriageReturn => (carriageReturn === '\n\r' ? '\r\n' : '\n\r'));
-  }
-
-  // Related to #3165.
-  // We only support attributes "aria-label" and should leave other attributes as-is.
-  // However, `markdown-it-attrs` remove unrecognized attributes, such as {hello}.
-  // Before passing to `markdown-it-attrs`, we will convert known attributes from {aria-label="..."} into ⟬aria-label="..."⟭ (using white tortoise shell brackets).
-  // Then, we ask `markdown-it-attrs` to only process the new brackets, so it should only try to process things that we allowlisted.
-  // Lastly, we revert tortoise shell brackets back to curly brackets, for unprocessed attributes.
-  markdown = markdown
-    .replace(/\{\s*aria-label()\s*\}/giu, `${MARKDOWN_ATTRS_LEFT_DELIMITER}aria-label${MARKDOWN_ATTRS_RIGHT_DELIMITER}`)
-    .replace(
-      /\{\s*aria-label=("[^"]*"|[^\s}]*)\s*\}/giu,
-      (_, valueInsideQuotes) =>
-        `${MARKDOWN_ATTRS_LEFT_DELIMITER}aria-label=${valueInsideQuotes}${MARKDOWN_ATTRS_RIGHT_DELIMITER}`
-    );
-
-  let html = new MarkdownIt({
-    breaks: false,
-    html: false,
-    linkify: true,
-    typographer: true,
-    xhtmlOut: true
-  })
-    .use(markdownItAttrs, {
-      // `markdown-it-attrs` is added for accessibility and allow bot developers to specify `aria-label`.
-      // We are allowlisting `aria-label` only as it is allowlisted in `sanitize-html`.
-      // Other `aria-*` will be sanitized even we allowlisted here.
-      allowedAttributes: ['aria-label'],
-      leftDelimiter: MARKDOWN_ATTRS_LEFT_DELIMITER,
-      rightDelimiter: MARKDOWN_ATTRS_RIGHT_DELIMITER
-    })
-    .use(iterator, 'url_new_win', 'link_open', (tokens, index) => {
-      const token = tokens[+index];
-
-      token.attrSet('rel', 'noopener noreferrer');
-      token.attrSet('target', '_blank');
-
-      const linkOpenToken = tokens.find(({ type }) => type === 'link_open');
-      const [, href] = linkOpenToken.attrs.find(([name]) => name === 'href');
-
-      // Adds a new icon if the link is http: or https:.
-      // Don't add if it's a phone number, etc.
-      if (/^https?:/iu.test(href)) {
-        externalLinkAlt && token.attrSet('title', externalLinkAlt);
-
-        const iconTokens = internalMarkdownIt.parseInline(`![${externalLinkAlt}](${TRANSPARENT_GIF})`)[0].children;
-
-        iconTokens[0].attrJoin('class', 'webchat__markdown__external-link-icon');
-
-        tokens.splice(index + 2, 0, ...iconTokens);
-      }
-    })
-    .render(markdown);
-
-  // Restore attributes not processed by `markdown-it-attrs`.
-  // TODO: [P2] #2511 After we fixed our polyfill story, we should use "String.prototype.replaceAll" instead of RegExp for replace all occurrences.
-  html = html.replace(MARKDOWN_ATTRS_LEFT_DELIMITER_PATTERN, '{').replace(MARKDOWN_ATTRS_RIGHT_DELIMITER_PATTERN, '}');
-
-  // The signature from "sanitize-html" module is not correct.
-  // @ts-ignore
-  return sanitizeHTML(html, SANITIZE_HTML_OPTIONS);
-}