node-autotask 0.37.1 → 0.38.0

package/dist/chunk-5VHSLJMR.js

@@ -0,0 +1,71 @@
+// src/untrusted.ts
+var UNTRUSTED_OPEN = "<untrusted_content>";
+var UNTRUSTED_CLOSE = "</untrusted_content>";
+var UNTRUSTED_OPEN_NEUTRALISED = "\\u003Cuntrusted_content\\u003E";
+var UNTRUSTED_CLOSE_NEUTRALISED = "\\u003C\\/untrusted_content\\u003E";
+var REDACTED_MARKER = "[REDACTED]";
+function isPlainRecord(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+function wrapUntrusted(value) {
+  if (typeof value !== "string") return void 0;
+  if (value === "") return void 0;
+  if (value === REDACTED_MARKER) return void 0;
+  if (value.startsWith(UNTRUSTED_OPEN) && value.endsWith(UNTRUSTED_CLOSE) && !value.slice(UNTRUSTED_OPEN.length, value.length - UNTRUSTED_CLOSE.length).includes(UNTRUSTED_OPEN) && !value.slice(UNTRUSTED_OPEN.length, value.length - UNTRUSTED_CLOSE.length).includes(UNTRUSTED_CLOSE)) {
+    return value;
+  }
+  const inner = value.split(UNTRUSTED_OPEN).join(UNTRUSTED_OPEN_NEUTRALISED).split(UNTRUSTED_CLOSE).join(UNTRUSTED_CLOSE_NEUTRALISED);
+  return `${UNTRUSTED_OPEN}${inner}${UNTRUSTED_CLOSE}`;
+}
+function markUntrusted(record, fields) {
+  if (!isPlainRecord(record)) return record;
+  const fieldSet = new Set(fields);
+  const out = { ...record };
+  for (const key of Object.keys(record)) {
+    if (!fieldSet.has(key)) continue;
+    const wrapped = wrapUntrusted(record[key]);
+    if (wrapped !== void 0) out[key] = wrapped;
+  }
+  return out;
+}
+function deepMarkUntrusted(value, fields) {
+  if (Array.isArray(value)) return value.map((entry) => deepMarkUntrusted(entry, fields));
+  if (!isPlainRecord(value)) return value;
+  const marked = markUntrusted(value, fields);
+  const out = {};
+  for (const [key, entry] of Object.entries(marked)) {
+    out[key] = deepMarkUntrusted(entry, fields);
+  }
+  return out;
+}
+function stripUntrustedWrapper(value) {
+  if (typeof value !== "string") return value;
+  if (!value.startsWith(UNTRUSTED_OPEN) || !value.endsWith(UNTRUSTED_CLOSE)) return value;
+  const inner = value.slice(UNTRUSTED_OPEN.length, value.length - UNTRUSTED_CLOSE.length);
+  return inner;
+}
+function stripUntrustedDeep(value) {
+  if (typeof value === "string") return stripUntrustedWrapper(value);
+  if (Array.isArray(value)) return value.map((entry) => stripUntrustedDeep(entry));
+  if (!isPlainRecord(value)) return value;
+  const out = {};
+  for (const [key, entry] of Object.entries(value)) {
+    out[key] = stripUntrustedDeep(entry);
+  }
+  return out;
+}
+
+export {
+  UNTRUSTED_OPEN,
+  UNTRUSTED_CLOSE,
+  UNTRUSTED_OPEN_NEUTRALISED,
+  UNTRUSTED_CLOSE_NEUTRALISED,
+  REDACTED_MARKER,
+  wrapUntrusted,
+  markUntrusted,
+  deepMarkUntrusted,
+  stripUntrustedWrapper,
+  stripUntrustedDeep
+};