html2canvas-pro 2.1.0 → 2.1.1

package/src/core/__tests__/cache-storage.ts

@@ -1,278 +0,0 @@
-import { deepStrictEqual, fail } from 'assert';
-import { FEATURES } from '../features';
-import { CacheStorage } from '../cache-storage';
-import { Context } from '../context';
-import { Bounds } from '../../css/layout/bounds';
-import { Html2CanvasConfig } from '../../config';
-
-const proxy = 'http://example.com/proxy';
-
-const createMockContext = (origin: string, opts = {}) => {
-    const mockWindow = {
-        location: {
-            href: origin
-        },
-        document: {
-            createElement(_name: string) {
-                let _href = '';
-                return {
-                    set href(value: string) {
-                        _href = value;
-                    },
-                    get href() {
-                        return _href;
-                    },
-                    get protocol() {
-                        return new URL(_href).protocol;
-                    },
-                    get hostname() {
-                        return new URL(_href).hostname;
-                    },
-                    get port() {
-                        return new URL(_href).port;
-                    }
-                };
-            }
-        }
-    };
-
-    // For backward compatibility, also initialize static CacheStorage
-    CacheStorage.setContext(mockWindow as Window);
-
-    const config = new Html2CanvasConfig({ window: mockWindow as Window });
-
-    return new Context(
-        {
-            logging: false,
-            imageTimeout: 0,
-            useCORS: false,
-            allowTaint: false,
-            proxy,
-            ...opts
-        },
-        new Bounds(0, 0, 0, 0),
-        config
-    );
-};
-
-const images: ImageMock[] = [];
-const xhr: XMLHttpRequestMock[] = [];
-const sleep = async (timeout: number) => await new Promise((resolve) => setTimeout(resolve, timeout));
-
-class ImageMock {
-    src?: string;
-    crossOrigin?: string;
-    onload?: () => void;
-    constructor() {
-        images.push(this);
-    }
-}
-
-class XMLHttpRequestMock {
-    sent: boolean;
-    status: number;
-    timeout: number;
-    method?: string;
-    url?: string;
-    response?: string;
-    onload?: () => void;
-    ontimeout?: () => void;
-    constructor() {
-        this.sent = false;
-        this.status = 500;
-        this.timeout = 5000;
-        xhr.push(this);
-    }
-
-    async load(status: number, response: string) {
-        this.response = response;
-        this.status = status;
-        if (this.onload) {
-            this.onload();
-        }
-        await sleep(0);
-    }
-
-    open(method: string, url: string) {
-        this.method = method;
-        this.url = url;
-    }
-    send() {
-        this.sent = true;
-    }
-}
-
-Object.defineProperty(global, 'Image', { value: ImageMock, writable: true });
-Object.defineProperty(global, 'XMLHttpRequest', {
-    value: XMLHttpRequestMock,
-    writable: true
-});
-
-const setFeatures = (opts: { [key: string]: boolean } = {}) => {
-    const defaults: { [key: string]: boolean } = {
-        SUPPORT_SVG_DRAWING: true,
-        SUPPORT_CORS_IMAGES: true,
-        SUPPORT_CORS_XHR: true,
-        SUPPORT_RESPONSE_TYPE: false
-    };
-
-    Object.keys(defaults).forEach((key) => {
-        Object.defineProperty(FEATURES, key, {
-            value: typeof opts[key] === 'boolean' ? opts[key] : defaults[key],
-            writable: true
-        });
-    });
-};
-
-describe('cache-storage', () => {
-    beforeEach(() => setFeatures());
-    afterEach(() => {
-        xhr.splice(0, xhr.length);
-        images.splice(0, images.length);
-    });
-    it('addImage adds images to cache', async () => {
-        const { cache } = createMockContext('http://example.com', { proxy: null });
-        await cache.addImage('http://example.com/test.jpg');
-        await cache.addImage('http://example.com/test2.jpg');
-
-        deepStrictEqual(images.length, 2);
-        deepStrictEqual(images[0].src, 'http://example.com/test.jpg');
-        deepStrictEqual(images[1].src, 'http://example.com/test2.jpg');
-    });
-
-    it('addImage should not add duplicate entries', async () => {
-        const { cache } = createMockContext('http://example.com');
-        await cache.addImage('http://example.com/test.jpg');
-        await cache.addImage('http://example.com/test.jpg');
-
-        deepStrictEqual(images.length, 1);
-        deepStrictEqual(images[0].src, 'http://example.com/test.jpg');
-    });
-
-    describe('svg', () => {
-        it('should add svg images correctly', async () => {
-            const { cache } = createMockContext('http://example.com');
-            await cache.addImage('http://example.com/test.svg');
-            await cache.addImage('http://example.com/test2.svg');
-
-            deepStrictEqual(images.length, 2);
-            deepStrictEqual(images[0].src, 'http://example.com/test.svg');
-            deepStrictEqual(images[1].src, 'http://example.com/test2.svg');
-        });
-
-        it('should omit svg images if not supported', async () => {
-            setFeatures({ SUPPORT_SVG_DRAWING: false });
-            const { cache } = createMockContext('http://example.com');
-            await cache.addImage('http://example.com/test.svg');
-            await cache.addImage('http://example.com/test2.svg');
-
-            deepStrictEqual(images.length, 0);
-        });
-    });
-
-    describe('cross-origin', () => {
-        it('addImage should not add images it cannot load/render', async () => {
-            const { cache } = createMockContext('http://example.com', {
-                proxy: undefined
-            });
-            await cache.addImage('http://html2canvas.hertzen.com/test.jpg');
-            deepStrictEqual(images.length, 0);
-        });
-
-        it('addImage should add images if tainting enabled', async () => {
-            const { cache } = createMockContext('http://example.com', {
-                allowTaint: true,
-                proxy: undefined
-            });
-            await cache.addImage('http://html2canvas.hertzen.com/test.jpg');
-            deepStrictEqual(images.length, 1);
-            deepStrictEqual(images[0].src, 'http://html2canvas.hertzen.com/test.jpg');
-            deepStrictEqual(images[0].crossOrigin, undefined);
-        });
-
-        it('addImage should add images if cors enabled', async () => {
-            const { cache } = createMockContext('http://example.com', { useCORS: true });
-            await cache.addImage('http://html2canvas.hertzen.com/test.jpg');
-            deepStrictEqual(images.length, 1);
-            deepStrictEqual(images[0].src, 'http://html2canvas.hertzen.com/test.jpg');
-            deepStrictEqual(images[0].crossOrigin, 'anonymous');
-        });
-
-        it('addImage should not add images if cors enabled but not supported', async () => {
-            setFeatures({ SUPPORT_CORS_IMAGES: false });
-
-            const { cache } = createMockContext('http://example.com', {
-                useCORS: true,
-                proxy: undefined
-            });
-            await cache.addImage('http://html2canvas.hertzen.com/test.jpg');
-            deepStrictEqual(images.length, 0);
-        });
-
-        it('addImage should not add images to proxy if cors enabled', async () => {
-            const { cache } = createMockContext('http://example.com', { useCORS: true });
-            await cache.addImage('http://html2canvas.hertzen.com/test.jpg');
-            deepStrictEqual(images.length, 1);
-            deepStrictEqual(images[0].src, 'http://html2canvas.hertzen.com/test.jpg');
-            deepStrictEqual(images[0].crossOrigin, 'anonymous');
-        });
-
-        it('addImage should use proxy ', async () => {
-            const { cache } = createMockContext('http://example.com');
-            await cache.addImage('http://html2canvas.hertzen.com/test.jpg');
-            deepStrictEqual(xhr.length, 1);
-            deepStrictEqual(
-                xhr[0].url,
-                `${proxy}?url=${encodeURIComponent('http://html2canvas.hertzen.com/test.jpg')}&responseType=text`
-            );
-            await xhr[0].load(200, '<data response>');
-
-            deepStrictEqual(images.length, 1);
-            deepStrictEqual(images[0].src, '<data response>');
-        });
-
-        it('proxy should respect imageTimeout', async () => {
-            const { cache } = createMockContext('http://example.com', {
-                imageTimeout: 10
-            });
-            await cache.addImage('http://html2canvas.hertzen.com/test.jpg');
-
-            deepStrictEqual(xhr.length, 1);
-            deepStrictEqual(
-                xhr[0].url,
-                `${proxy}?url=${encodeURIComponent('http://html2canvas.hertzen.com/test.jpg')}&responseType=text`
-            );
-            deepStrictEqual(xhr[0].timeout, 10);
-            if (xhr[0].ontimeout) {
-                xhr[0].ontimeout();
-            }
-            try {
-                await cache.match('http://html2canvas.hertzen.com/test.jpg');
-                fail('Expected result to timeout');
-            } catch (e) {}
-        });
-    });
-
-    it('match should return cache entry', async () => {
-        const { cache } = createMockContext('http://example.com');
-        await cache.addImage('http://example.com/test.jpg');
-
-        if (images[0].onload) {
-            images[0].onload();
-        }
-
-        const response = await cache.match('http://example.com/test.jpg');
-
-        deepStrictEqual((response as HTMLImageElement).src, 'http://example.com/test.jpg');
-    });
-
-    it('image should respect imageTimeout', async () => {
-        const { cache } = createMockContext('http://example.com', { imageTimeout: 10 });
-        cache.addImage('http://example.com/test.jpg');
-
-        try {
-            await cache.match('http://example.com/test.jpg');
-            fail('Expected result to timeout');
-        } catch (e) {}
-    });
-});

package/src/core/__tests__/logger.ts

@@ -1,29 +0,0 @@
-import { Logger } from '../logger';
-
-describe('logger', () => {
-    let infoSpy: any;
-
-    beforeEach(() => {
-        infoSpy = vi.spyOn(console, 'info').mockImplementation(() => {
-            // do nothing
-        });
-    });
-
-    afterEach(() => {
-        infoSpy.mockRestore();
-    });
-
-    it('should call console.info when logger enabled', () => {
-        const id = Math.random().toString();
-        const logger = new Logger({ id, enabled: true });
-        logger.info('testing');
-        expect(infoSpy).toHaveBeenLastCalledWith(id, expect.stringMatching(/\d+ms/), 'testing');
-    });
-
-    it("shouldn't call console.info when logger disabled", () => {
-        const id = Math.random().toString();
-        const logger = new Logger({ id, enabled: false });
-        logger.info('testing');
-        expect(infoSpy).not.toHaveBeenCalled();
-    });
-});

package/src/core/__tests__/validator.ts

@@ -1,359 +0,0 @@
-import { strictEqual } from 'assert';
-import { createDefaultValidator, createStrictValidator } from '../validator';
-
-describe('Validator', () => {
-    describe('URL validation', () => {
-        const validator = createDefaultValidator();
-
-        it('should accept valid HTTP URLs', () => {
-            const result = validator.validateUrl('http://example.com/test.jpg', 'image');
-            strictEqual(result.valid, true);
-        });
-
-        it('should accept valid HTTPS URLs', () => {
-            const result = validator.validateUrl('https://example.com/test.jpg', 'image');
-            strictEqual(result.valid, true);
-        });
-
-        it('should accept data URLs by default', () => {
-            const result = validator.validateUrl('data:image/png;base64,iVBORw0KGgo=', 'image');
-            strictEqual(result.valid, true);
-        });
-
-        it('should accept blob URLs', () => {
-            const result = validator.validateUrl('blob:http://example.com/uuid', 'image');
-            strictEqual(result.valid, true);
-        });
-
-        it('should reject invalid protocols', () => {
-            const result = validator.validateUrl('ftp://example.com/test.jpg', 'image');
-            strictEqual(result.valid, false);
-            strictEqual(result.error?.includes('Protocol'), true);
-        });
-
-        it('should reject file:// URLs', () => {
-            const result = validator.validateUrl('file:///etc/passwd', 'image');
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject javascript: URLs', () => {
-            const result = validator.validateUrl('javascript:alert(1)', 'general');
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject empty URLs', () => {
-            const result = validator.validateUrl('', 'image');
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject non-string URLs', () => {
-            const result = validator.validateUrl(null as any, 'image');
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject malformed URLs', () => {
-            const result = validator.validateUrl('not a url', 'image');
-            strictEqual(result.valid, false);
-            strictEqual(result.error?.includes('Invalid URL'), true);
-        });
-    });
-
-    describe('Proxy URL validation (SSRF prevention)', () => {
-        it('should reject localhost for proxy URLs', () => {
-            const validator = createDefaultValidator();
-            const result = validator.validateUrl('http://localhost:8080/proxy', 'proxy');
-            strictEqual(result.valid, false);
-            strictEqual(result.error?.includes('Localhost'), true);
-        });
-
-        it('should reject 127.0.0.1 for proxy URLs', () => {
-            const validator = createDefaultValidator();
-            const result = validator.validateUrl('http://127.0.0.1/proxy', 'proxy');
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject ::1 for proxy URLs', () => {
-            const validator = createDefaultValidator();
-            const result = validator.validateUrl('http://[::1]/proxy', 'proxy');
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject private IP ranges (10.x.x.x)', () => {
-            const validator = createDefaultValidator();
-            const result = validator.validateUrl('http://10.0.0.1/proxy', 'proxy');
-            strictEqual(result.valid, false);
-            strictEqual(result.error?.includes('Private IP'), true);
-        });
-
-        it('should reject private IP ranges (172.16-31.x.x)', () => {
-            const validator = createDefaultValidator();
-            const results = [
-                validator.validateUrl('http://172.16.0.1/proxy', 'proxy'),
-                validator.validateUrl('http://172.20.0.1/proxy', 'proxy'),
-                validator.validateUrl('http://172.31.255.254/proxy', 'proxy')
-            ];
-            results.forEach((result) => strictEqual(result.valid, false));
-        });
-
-        it('should reject private IP ranges (192.168.x.x)', () => {
-            const validator = createDefaultValidator();
-            const result = validator.validateUrl('http://192.168.1.1/proxy', 'proxy');
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject link-local addresses', () => {
-            const validator = createDefaultValidator();
-            const result = validator.validateUrl('http://169.254.1.1/proxy', 'proxy');
-            strictEqual(result.valid, false);
-        });
-
-        it('should accept public IPs for proxy URLs', () => {
-            const validator = createDefaultValidator();
-            const result = validator.validateUrl('https://8.8.8.8/proxy', 'proxy');
-            strictEqual(result.valid, true);
-        });
-
-        it('should enforce proxy domain whitelist', () => {
-            const validator = createStrictValidator(['example.com', 'trusted.org']);
-
-            const allowed = validator.validateUrl('https://example.com/proxy', 'proxy');
-            strictEqual(allowed.valid, true);
-
-            const notAllowed = validator.validateUrl('https://evil.com/proxy', 'proxy');
-            strictEqual(notAllowed.valid, false);
-            strictEqual(notAllowed.error?.includes('not in the allowed list'), true);
-        });
-
-        it('should allow subdomains of whitelisted domains', () => {
-            const validator = createStrictValidator(['example.com']);
-            const result = validator.validateUrl('https://api.example.com/proxy', 'proxy');
-            strictEqual(result.valid, true);
-        });
-    });
-
-    describe('CSP nonce validation', () => {
-        const validator = createDefaultValidator();
-
-        it('should accept valid nonce', () => {
-            const result = validator.validateCspNonce('ABC123def456GHI789jkl');
-            strictEqual(result.valid, true);
-        });
-
-        it('should reject empty nonce', () => {
-            const result = validator.validateCspNonce('');
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject non-string nonce', () => {
-            const result = validator.validateCspNonce(123 as any);
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject too short nonce', () => {
-            const result = validator.validateCspNonce('short');
-            strictEqual(result.valid, false);
-            strictEqual(result.error?.includes('too short'), true);
-        });
-
-        it('should reject nonce with invalid characters', () => {
-            const result = validator.validateCspNonce('ABC<script>alert(1)</script>');
-            strictEqual(result.valid, false);
-            strictEqual(result.error?.includes('invalid characters'), true);
-        });
-
-        it('should accept base64-like nonces', () => {
-            const result = validator.validateCspNonce('AbCdEfGhIjKlMnOpQrStUvWxYz0123456789+/=');
-            strictEqual(result.valid, true);
-        });
-    });
-
-    describe('Image timeout validation', () => {
-        const validator = createDefaultValidator();
-
-        it('should accept valid timeout', () => {
-            const result = validator.validateImageTimeout(15000);
-            strictEqual(result.valid, true);
-        });
-
-        it('should reject negative timeout', () => {
-            const result = validator.validateImageTimeout(-1000);
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject non-number timeout', () => {
-            const result = validator.validateImageTimeout('15000' as any);
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject NaN timeout', () => {
-            const result = validator.validateImageTimeout(NaN);
-            strictEqual(result.valid, false);
-        });
-
-        it('should enforce maximum timeout', () => {
-            const strictValidator = createStrictValidator([]);
-            const result = strictValidator.validateImageTimeout(120000); // 2 minutes
-            strictEqual(result.valid, false);
-            strictEqual(result.error?.includes('exceeds maximum'), true);
-        });
-
-        it('should accept timeout within limit', () => {
-            const strictValidator = createStrictValidator([]);
-            const result = strictValidator.validateImageTimeout(30000); // 30 seconds
-            strictEqual(result.valid, true);
-        });
-    });
-
-    describe('Dimensions validation', () => {
-        const validator = createDefaultValidator();
-
-        it('should accept valid dimensions', () => {
-            const result = validator.validateDimensions(800, 600);
-            strictEqual(result.valid, true);
-        });
-
-        it('should reject zero dimensions', () => {
-            const result = validator.validateDimensions(0, 600);
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject negative dimensions', () => {
-            const result = validator.validateDimensions(800, -100);
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject NaN dimensions', () => {
-            const result = validator.validateDimensions(NaN, 600);
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject non-number dimensions', () => {
-            const result = validator.validateDimensions('800' as any, 600);
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject dimensions exceeding maximum', () => {
-            const result = validator.validateDimensions(40000, 600);
-            strictEqual(result.valid, false);
-            strictEqual(result.error?.includes('exceed maximum'), true);
-        });
-
-        it('should accept dimensions at the limit', () => {
-            const result = validator.validateDimensions(32767, 32767);
-            strictEqual(result.valid, true);
-        });
-    });
-
-    describe('Scale validation', () => {
-        const validator = createDefaultValidator();
-
-        it('should accept valid scale', () => {
-            const result = validator.validateScale(2);
-            strictEqual(result.valid, true);
-        });
-
-        it('should accept fractional scale', () => {
-            const result = validator.validateScale(0.5);
-            strictEqual(result.valid, true);
-        });
-
-        it('should reject zero scale', () => {
-            const result = validator.validateScale(0);
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject negative scale', () => {
-            const result = validator.validateScale(-2);
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject too large scale', () => {
-            const result = validator.validateScale(20);
-            strictEqual(result.valid, false);
-            strictEqual(result.error?.includes('too large'), true);
-        });
-
-        it('should reject NaN scale', () => {
-            const result = validator.validateScale(NaN);
-            strictEqual(result.valid, false);
-        });
-    });
-
-    describe('Element validation', () => {
-        const validator = createDefaultValidator();
-
-        it('should reject null element', () => {
-            const result = validator.validateElement(null);
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject undefined element', () => {
-            const result = validator.validateElement(undefined);
-            strictEqual(result.valid, false);
-        });
-
-        it('should reject non-object element', () => {
-            const result = validator.validateElement('not an element' as any);
-            strictEqual(result.valid, false);
-        });
-
-        // Note: Full HTMLElement testing requires DOM environment (jsdom/browser)
-    });
-
-    describe('Options validation', () => {
-        const validator = createDefaultValidator();
-
-        it('should accept valid options', () => {
-            const options = {
-                scale: 2,
-                width: 800,
-                height: 600,
-                imageTimeout: 15000
-            };
-            const result = validator.validateOptions(options);
-            strictEqual(result.valid, true);
-        });
-
-        it('should collect multiple errors', () => {
-            const options = {
-                scale: -1,
-                width: -800,
-                imageTimeout: -5000
-            };
-            const result = validator.validateOptions(options);
-            strictEqual(result.valid, false);
-            // Should contain multiple error messages
-            strictEqual(result.error?.includes('Scale'), true);
-            strictEqual(result.error?.includes('Dimensions'), true);
-            strictEqual(result.error?.includes('timeout'), true);
-        });
-
-        it('should allow missing optional fields', () => {
-            const options = {};
-            const result = validator.validateOptions(options);
-            strictEqual(result.valid, true);
-        });
-    });
-
-    describe('Strict validator', () => {
-        const strictValidator = createStrictValidator(['trusted.com']);
-
-        it('should reject data URLs in strict mode', () => {
-            // Note: This would need implementation in createStrictValidator
-            // Currently it doesn't disable data URLs
-        });
-
-        it('should enforce shorter timeout in strict mode', () => {
-            const result = strictValidator.validateImageTimeout(120000);
-            strictEqual(result.valid, false);
-        });
-
-        it('should enforce proxy whitelist in strict mode', () => {
-            const allowed = strictValidator.validateUrl('https://trusted.com/proxy', 'proxy');
-            strictEqual(allowed.valid, true);
-
-            const denied = strictValidator.validateUrl('https://untrusted.com/proxy', 'proxy');
-            strictEqual(denied.valid, false);
-        });
-    });
-});

package/src/core/bitwise.ts

@@ -1 +0,0 @@
-export const contains = (bit: number, value: number): boolean => (bit & value) !== 0;