html-validate 8.12.0 → 8.13.0

package/dist/es/elements.js

@@ -33,6 +33,29 @@ function isInsideLandmark(node) {
   ];
   return Boolean(node.closest(selectors.join(",")));
 }
+function linkBodyOk(node) {
+  if (node.hasAttribute("itemprop")) {
+    return true;
+  }
+  const rel = node.getAttribute("rel");
+  if (!rel) {
+    return false;
+  }
+  if (typeof rel !== "string") {
+    return false;
+  }
+  const bodyOk = [
+    "dns-prefetch",
+    "modulepreload",
+    "pingback",
+    "preconnect",
+    "prefetch",
+    "preload",
+    "stylesheet"
+  ];
+  const tokens = rel.toLowerCase().split(/\s+/);
+  return tokens.some((keyword) => bodyOk.includes(keyword));
+}
 var html5 = defineMetadata({
   "*": {
     attributes: {
@@ -109,7 +132,74 @@ var html5 = defineMetadata({
         enum: ReferrerPolicy
       },
       rel: {
-        allowed: allowedIfAttributeIsPresent("href")
+        allowed(node, attr) {
+          if (!node.hasAttribute("href")) {
+            return `requires "href" attribute to be present`;
+          }
+          if (!attr || attr === "" || typeof attr !== "string") {
+            return null;
+          }
+          const disallowed = [
+            /* whatwg */
+            "canonical",
+            "dns-prefetch",
+            "expect",
+            "icon",
+            "manifest",
+            "modulepreload",
+            "pingback",
+            "preconnect",
+            "prefetch",
+            "preload",
+            "stylesheet",
+            /* microformats.org */
+            "apple-touch-icon",
+            "apple-touch-icon-precomposed",
+            "apple-touch-startup-image",
+            "authorization_endpoint",
+            "component",
+            "chrome-webstore-item",
+            "dns-prefetch",
+            "edit",
+            "gbfs",
+            "gtfs-static",
+            "gtfs-realtime",
+            "import",
+            "mask-icon",
+            "meta",
+            "micropub",
+            "openid.delegate",
+            "openid.server",
+            "openid2.local_id",
+            "openid2.provider",
+            "p3pv1",
+            "pgpkey",
+            "schema.dcterms",
+            "service",
+            "shortlink",
+            "sitemap",
+            "subresource",
+            "sword",
+            "timesheet",
+            "token_endpoint",
+            "wlwmanifest",
+            "stylesheet/less",
+            "token_endpoint",
+            "yandex-tableau-widget"
+          ];
+          const tokens = attr.toLowerCase().split(/\s+/);
+          for (const keyword of tokens) {
+            if (disallowed.includes(keyword)) {
+              return `<a> does not allow rel="${keyword}"`;
+            }
+            if (keyword.startsWith("dcterms.")) {
+              return `<a> does not allow rel="${keyword}"`;
+            }
+          }
+          return null;
+        },
+        list: true,
+        enum: ["/.+/"]
       },
       shape: {
         deprecated: true
@@ -207,7 +297,72 @@ var html5 = defineMetadata({
         enum: ReferrerPolicy
       },
       rel: {
-        allowed: allowedIfAttributeIsPresent("href")
+        allowed(node, attr) {
+          if (!node.hasAttribute("href")) {
+            return `requires "href" attribute to be present`;
+          }
+          if (!attr || attr === "" || typeof attr !== "string") {
+            return null;
+          }
+          const disallowed = [
+            /* whatwg */
+            "canonical",
+            "dns-prefetch",
+            "expect",
+            "icon",
+            "manifest",
+            "modulepreload",
+            "pingback",
+            "preconnect",
+            "prefetch",
+            "preload",
+            "stylesheet",
+            /* microformats.org */
+            "apple-touch-icon",
+            "apple-touch-icon-precomposed",
+            "apple-touch-startup-image",
+            "authorization_endpoint",
+            "component",
+            "chrome-webstore-item",
+            "dns-prefetch",
+            "edit",
+            "gbfs",
+            "gtfs-static",
+            "gtfs-realtime",
+            "import",
+            "mask-icon",
+            "meta",
+            "micropub",
+            "openid.delegate",
+            "openid.server",
+            "openid2.local_id",
+            "openid2.provider",
+            "p3pv1",
+            "pgpkey",
+            "schema.dcterms",
+            "service",
+            "shortlink",
+            "sitemap",
+            "subresource",
+            "sword",
+            "timesheet",
+            "token_endpoint",
+            "wlwmanifest",
+            "stylesheet/less",
+            "token_endpoint",
+            "yandex-tableau-widget"
+          ];
+          const tokens = attr.toLowerCase().split(/\s+/);
+          for (const keyword of tokens) {
+            if (disallowed.includes(keyword)) {
+              return `<area> does not allow rel="${keyword}"`;
+            }
+            if (keyword.startsWith("dcterms.")) {
+              return `<area> does not allow rel="${keyword}"`;
+            }
+          }
+          return null;
+        }
       },
       shape: {
         allowed(node, attr) {
@@ -766,6 +921,42 @@ var html5 = defineMetadata({
       novalidate: {
         boolean: true
       },
+      rel: {
+        allowed(_, attr) {
+          if (!attr || attr === "" || typeof attr !== "string") {
+            return null;
+          }
+          const disallowed = [
+            /* whatwg */
+            "alternate",
+            "canonical",
+            "author",
+            "bookmark",
+            "dns-prefetch",
+            "expect",
+            "icon",
+            "manifest",
+            "modulepreload",
+            "pingback",
+            "preconnect",
+            "prefetch",
+            "preload",
+            "privacy-policy",
+            "stylesheet",
+            "tag",
+            "terms-of-service"
+          ];
+          const tokens = attr.toLowerCase().split(/\s+/);
+          for (const keyword of tokens) {
+            if (disallowed.includes(keyword)) {
+              return `<form> does not allow rel="${keyword}"`;
+            }
+          }
+          return null;
+        },
+        list: true,
+        enum: ["/.+/"]
+      },
       target: {
         enum: ["/[^_].*/", "_blank", "_self", "_parent", "_top"]
       }
@@ -1369,6 +1560,12 @@ var html5 = defineMetadata({
   },
   link: {
     metadata: true,
+    flow(node) {
+      return linkBodyOk(node);
+    },
+    phrasing(node) {
+      return linkBodyOk(node);
+    },
     void: true,
     attributes: {
       as: {
@@ -1428,6 +1625,37 @@ var html5 = defineMetadata({
       referrerpolicy: {
         enum: ReferrerPolicy
       },
+      rel: {
+        allowed(_, attr) {
+          if (!attr || attr === "" || typeof attr !== "string") {
+            return null;
+          }
+          const disallowed = [
+            /* whatwg */
+            "bookmark",
+            "external",
+            "nofollow",
+            "noopener",
+            "noreferrer",
+            "opener",
+            "tag",
+            /* microformats.org */
+            "disclosure",
+            "entry-content",
+            "lightbox",
+            "lightvideo"
+          ];
+          const tokens = attr.toLowerCase().split(/\s+/);
+          for (const keyword of tokens) {
+            if (disallowed.includes(keyword)) {
+              return `<link> does not allow rel="${keyword}"`;
+            }
+          }
+          return null;
+        },
+        list: true,
+        enum: ["/.+/"]
+      },
       target: {
         deprecated: true
       },