vega-interpreter 1.1.0 → 1.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -163,6 +163,11 @@
163
163
  return apply('replace', arguments, String);
164
164
  },
165
165
  trim: x => String(x).trim(),
166
+ // Base64 encode/decode
167
+ // Convert binary string to base64-encoded ascii
168
+ btoa: x => btoa(x),
169
+ // Convert base64-encoded ascii to binary string
170
+ atob: x => atob(x),
166
171
  // regexp functions
167
172
  regexp: RegExp,
168
173
  test: (r, t) => RegExp(r).test(t)
@@ -212,11 +217,15 @@
212
217
  $.memberDepth += 1;
213
218
  const k = $(p.key);
214
219
  $.memberDepth -= 1;
215
- if (DisallowedMethods.has($(p.value))) {
220
+ const v = $(p.value);
221
+ if (vegaUtil.DisallowedObjectProperties.has(k)) {
216
222
  // eslint-disable-next-line no-console
217
223
  console.error(`Prevented interpretation of property "${k}" which could lead to insecure code execution`);
224
+ } else if (DisallowedMethods.has(v)) {
225
+ // eslint-disable-next-line no-console
226
+ console.error(`Prevented interpretation of method "${v}" which could lead to insecure code execution`);
218
227
  } else {
219
- o[k] = $(p.value);
228
+ o[k] = v;
220
229
  }
221
230
  return o;
222
231
  }, {})
@@ -1,2 +1,2 @@
1
- !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("vega-util")):"function"==typeof define&&define.amd?define(["exports","vega-util"],t):t((e="undefined"!=typeof globalThis?globalThis:e||self).vega=e.vega||{},e.vega)}(this,(function(e,t){"use strict";var n={NaN:NaN,E:Math.E,LN2:Math.LN2,LN10:Math.LN10,LOG2E:Math.LOG2E,LOG10E:Math.LOG10E,PI:Math.PI,SQRT1_2:Math.SQRT1_2,SQRT2:Math.SQRT2,MIN_VALUE:Number.MIN_VALUE,MAX_VALUE:Number.MAX_VALUE},r={"*":(e,t)=>e*t,"+":(e,t)=>e+t,"-":(e,t)=>e-t,"/":(e,t)=>e/t,"%":(e,t)=>e%t,">":(e,t)=>e>t,"<":(e,t)=>e<t,"<=":(e,t)=>e<=t,">=":(e,t)=>e>=t,"==":(e,t)=>e==t,"!=":(e,t)=>e!=t,"===":(e,t)=>e===t,"!==":(e,t)=>e!==t,"&":(e,t)=>e&t,"|":(e,t)=>e|t,"^":(e,t)=>e^t,"<<":(e,t)=>e<<t,">>":(e,t)=>e>>t,">>>":(e,t)=>e>>>t},a={"+":e=>+e,"-":e=>-e,"~":e=>~e,"!":e=>!e};const o=Array.prototype.slice,i=(e,t,n)=>{const r=n?n(t[0]):t[0];return r[e].apply(r,o.call(t,1))};var s={isNaN:Number.isNaN,isFinite:Number.isFinite,abs:Math.abs,acos:Math.acos,asin:Math.asin,atan:Math.atan,atan2:Math.atan2,ceil:Math.ceil,cos:Math.cos,exp:Math.exp,floor:Math.floor,log:Math.log,max:Math.max,min:Math.min,pow:Math.pow,random:Math.random,round:Math.round,sin:Math.sin,sqrt:Math.sqrt,tan:Math.tan,clamp:(e,t,n)=>Math.max(t,Math.min(n,e)),now:Date.now,utc:Date.UTC,datetime:(e,t,n,r,a,o,i)=>new Date(e,t||0,null!=n?n:1,r||0,a||0,o||0,i||0),date:e=>new Date(e).getDate(),day:e=>new Date(e).getDay(),year:e=>new Date(e).getFullYear(),month:e=>new Date(e).getMonth(),hours:e=>new Date(e).getHours(),minutes:e=>new Date(e).getMinutes(),seconds:e=>new Date(e).getSeconds(),milliseconds:e=>new Date(e).getMilliseconds(),time:e=>new Date(e).getTime(),timezoneoffset:e=>new Date(e).getTimezoneOffset(),utcdate:e=>new Date(e).getUTCDate(),utcday:e=>new Date(e).getUTCDay(),utcyear:e=>new Date(e).getUTCFullYear(),utcmonth:e=>new Date(e).getUTCMonth(),utchours:e=>new Date(e).getUTCHours(),utcminutes:e=>new Date(e).getUTCMinutes(),utcseconds:e=>new Date(e).getUTCSeconds(),utcmilliseconds:e=>new Date(e).getUTCMilliseconds(),length:e=>e.length,join:function(){return i("join",arguments)},indexof:function(){return i("indexOf",arguments)},lastindexof:function(){return i("lastIndexOf",arguments)},slice:function(){return i("slice",arguments)},reverse:e=>e.slice().reverse(),sort:e=>e.slice().sort(t.ascending),parseFloat:parseFloat,parseInt:parseInt,upper:e=>String(e).toUpperCase(),lower:e=>String(e).toLowerCase(),substring:function(){return i("substring",arguments,String)},split:function(){return i("split",arguments,String)},replace:function(){return i("replace",arguments,String)},trim:e=>String(e).trim(),regexp:RegExp,test:(e,t)=>RegExp(e).test(t)};const c=["view","item","group","xy","x","y"],u=new Set([Function,eval,setTimeout,setInterval]);"function"==typeof setImmediate&&u.add(setImmediate);const l={Literal:(e,t)=>t.value,Identifier:(e,t)=>{const r=t.name;return e.memberDepth>0?r:"datum"===r?e.datum:"event"===r?e.event:"item"===r?e.item:n[r]||e.params["$"+r]},MemberExpression:(e,t)=>{const n=!t.computed,r=e(t.object);n&&(e.memberDepth+=1);const a=e(t.property);if(n&&(e.memberDepth-=1),!u.has(r[a]))return r[a];console.error(`Prevented interpretation of member "${a}" which could lead to insecure code execution`)},CallExpression:(e,t)=>{const n=t.arguments;let r=t.callee.name;return r.startsWith("_")&&(r=r.slice(1)),"if"===r?e(n[0])?e(n[1]):e(n[2]):(e.fn[r]||s[r]).apply(e.fn,n.map(e))},ArrayExpression:(e,t)=>t.elements.map(e),BinaryExpression:(e,t)=>r[t.operator](e(t.left),e(t.right)),UnaryExpression:(e,t)=>a[t.operator](e(t.argument)),ConditionalExpression:(e,t)=>e(t.test)?e(t.consequent):e(t.alternate),LogicalExpression:(e,t)=>"&&"===t.operator?e(t.left)&&e(t.right):e(t.left)||e(t.right),ObjectExpression:(e,t)=>t.properties.reduce(((t,n)=>{e.memberDepth+=1;const r=e(n.key);return e.memberDepth-=1,u.has(e(n.value))?console.error(`Prevented interpretation of property "${r}" which could lead to insecure code execution`):t[r]=e(n.value),t}),{})};function m(e,t,n,r,a,o){const i=e=>l[e.type](i,e);return i.memberDepth=0,i.fn=Object.create(t),i.params=n,i.datum=r,i.event=a,i.item=o,c.forEach((e=>i.fn[e]=function(){return a.vega[e](...arguments)})),i(e)}var p={operator(e,t){const n=t.ast,r=e.functions;return e=>m(n,r,e)},parameter(e,t){const n=t.ast,r=e.functions;return(e,t)=>m(n,r,t,e)},event(e,t){const n=t.ast,r=e.functions;return e=>m(n,r,void 0,void 0,e)},handler(e,t){const n=t.ast,r=e.functions;return(e,t)=>{const a=t.item&&t.item.datum;return m(n,r,e,a,t)}},encode(e,t){const{marktype:n,channels:r}=t,a=e.functions,o="group"===n||"image"===n||"rect"===n;return(e,t)=>{const i=e.datum;let s,c=0;for(const n in r)s=m(r[n].ast,a,t,i,void 0,e),e[n]!==s&&(e[n]=s,c=1);return"rule"!==n&&function(e,t,n){let r;t.x2&&(t.x?(n&&e.x>e.x2&&(r=e.x,e.x=e.x2,e.x2=r),e.width=e.x2-e.x):e.x=e.x2-(e.width||0)),t.xc&&(e.x=e.xc-(e.width||0)/2),t.y2&&(t.y?(n&&e.y>e.y2&&(r=e.y,e.y=e.y2,e.y2=r),e.height=e.y2-e.y):e.y=e.y2-(e.height||0)),t.yc&&(e.y=e.yc-(e.height||0)/2)}(e,r,o),c}}};e.expressionInterpreter=p}));
1
+ !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("vega-util")):"function"==typeof define&&define.amd?define(["exports","vega-util"],t):t((e="undefined"!=typeof globalThis?globalThis:e||self).vega=e.vega||{},e.vega)}(this,(function(e,t){"use strict";var n={NaN:NaN,E:Math.E,LN2:Math.LN2,LN10:Math.LN10,LOG2E:Math.LOG2E,LOG10E:Math.LOG10E,PI:Math.PI,SQRT1_2:Math.SQRT1_2,SQRT2:Math.SQRT2,MIN_VALUE:Number.MIN_VALUE,MAX_VALUE:Number.MAX_VALUE},r={"*":(e,t)=>e*t,"+":(e,t)=>e+t,"-":(e,t)=>e-t,"/":(e,t)=>e/t,"%":(e,t)=>e%t,">":(e,t)=>e>t,"<":(e,t)=>e<t,"<=":(e,t)=>e<=t,">=":(e,t)=>e>=t,"==":(e,t)=>e==t,"!=":(e,t)=>e!=t,"===":(e,t)=>e===t,"!==":(e,t)=>e!==t,"&":(e,t)=>e&t,"|":(e,t)=>e|t,"^":(e,t)=>e^t,"<<":(e,t)=>e<<t,">>":(e,t)=>e>>t,">>>":(e,t)=>e>>>t},a={"+":e=>+e,"-":e=>-e,"~":e=>~e,"!":e=>!e};const o=Array.prototype.slice,i=(e,t,n)=>{const r=n?n(t[0]):t[0];return r[e].apply(r,o.call(t,1))};var s={isNaN:Number.isNaN,isFinite:Number.isFinite,abs:Math.abs,acos:Math.acos,asin:Math.asin,atan:Math.atan,atan2:Math.atan2,ceil:Math.ceil,cos:Math.cos,exp:Math.exp,floor:Math.floor,log:Math.log,max:Math.max,min:Math.min,pow:Math.pow,random:Math.random,round:Math.round,sin:Math.sin,sqrt:Math.sqrt,tan:Math.tan,clamp:(e,t,n)=>Math.max(t,Math.min(n,e)),now:Date.now,utc:Date.UTC,datetime:(e,t,n,r,a,o,i)=>new Date(e,t||0,null!=n?n:1,r||0,a||0,o||0,i||0),date:e=>new Date(e).getDate(),day:e=>new Date(e).getDay(),year:e=>new Date(e).getFullYear(),month:e=>new Date(e).getMonth(),hours:e=>new Date(e).getHours(),minutes:e=>new Date(e).getMinutes(),seconds:e=>new Date(e).getSeconds(),milliseconds:e=>new Date(e).getMilliseconds(),time:e=>new Date(e).getTime(),timezoneoffset:e=>new Date(e).getTimezoneOffset(),utcdate:e=>new Date(e).getUTCDate(),utcday:e=>new Date(e).getUTCDay(),utcyear:e=>new Date(e).getUTCFullYear(),utcmonth:e=>new Date(e).getUTCMonth(),utchours:e=>new Date(e).getUTCHours(),utcminutes:e=>new Date(e).getUTCMinutes(),utcseconds:e=>new Date(e).getUTCSeconds(),utcmilliseconds:e=>new Date(e).getUTCMilliseconds(),length:e=>e.length,join:function(){return i("join",arguments)},indexof:function(){return i("indexOf",arguments)},lastindexof:function(){return i("lastIndexOf",arguments)},slice:function(){return i("slice",arguments)},reverse:e=>e.slice().reverse(),sort:e=>e.slice().sort(t.ascending),parseFloat:parseFloat,parseInt:parseInt,upper:e=>String(e).toUpperCase(),lower:e=>String(e).toLowerCase(),substring:function(){return i("substring",arguments,String)},split:function(){return i("split",arguments,String)},replace:function(){return i("replace",arguments,String)},trim:e=>String(e).trim(),btoa:e=>btoa(e),atob:e=>atob(e),regexp:RegExp,test:(e,t)=>RegExp(e).test(t)};const c=["view","item","group","xy","x","y"],u=new Set([Function,eval,setTimeout,setInterval]);"function"==typeof setImmediate&&u.add(setImmediate);const l={Literal:(e,t)=>t.value,Identifier:(e,t)=>{const r=t.name;return e.memberDepth>0?r:"datum"===r?e.datum:"event"===r?e.event:"item"===r?e.item:n[r]||e.params["$"+r]},MemberExpression:(e,t)=>{const n=!t.computed,r=e(t.object);n&&(e.memberDepth+=1);const a=e(t.property);if(n&&(e.memberDepth-=1),!u.has(r[a]))return r[a];console.error(`Prevented interpretation of member "${a}" which could lead to insecure code execution`)},CallExpression:(e,t)=>{const n=t.arguments;let r=t.callee.name;return r.startsWith("_")&&(r=r.slice(1)),"if"===r?e(n[0])?e(n[1]):e(n[2]):(e.fn[r]||s[r]).apply(e.fn,n.map(e))},ArrayExpression:(e,t)=>t.elements.map(e),BinaryExpression:(e,t)=>r[t.operator](e(t.left),e(t.right)),UnaryExpression:(e,t)=>a[t.operator](e(t.argument)),ConditionalExpression:(e,t)=>e(t.test)?e(t.consequent):e(t.alternate),LogicalExpression:(e,t)=>"&&"===t.operator?e(t.left)&&e(t.right):e(t.left)||e(t.right),ObjectExpression:(e,n)=>n.properties.reduce(((n,r)=>{e.memberDepth+=1;const a=e(r.key);e.memberDepth-=1;const o=e(r.value);return t.DisallowedObjectProperties.has(a)?console.error(`Prevented interpretation of property "${a}" which could lead to insecure code execution`):u.has(o)?console.error(`Prevented interpretation of method "${o}" which could lead to insecure code execution`):n[a]=o,n}),{})};function p(e,t,n,r,a,o){const i=e=>l[e.type](i,e);return i.memberDepth=0,i.fn=Object.create(t),i.params=n,i.datum=r,i.event=a,i.item=o,c.forEach((e=>i.fn[e]=function(){return a.vega[e](...arguments)})),i(e)}var m={operator(e,t){const n=t.ast,r=e.functions;return e=>p(n,r,e)},parameter(e,t){const n=t.ast,r=e.functions;return(e,t)=>p(n,r,t,e)},event(e,t){const n=t.ast,r=e.functions;return e=>p(n,r,void 0,void 0,e)},handler(e,t){const n=t.ast,r=e.functions;return(e,t)=>{const a=t.item&&t.item.datum;return p(n,r,e,a,t)}},encode(e,t){const{marktype:n,channels:r}=t,a=e.functions,o="group"===n||"image"===n||"rect"===n;return(e,t)=>{const i=e.datum;let s,c=0;for(const n in r)s=p(r[n].ast,a,t,i,void 0,e),e[n]!==s&&(e[n]=s,c=1);return"rule"!==n&&function(e,t,n){let r;t.x2&&(t.x?(n&&e.x>e.x2&&(r=e.x,e.x=e.x2,e.x2=r),e.width=e.x2-e.x):e.x=e.x2-(e.width||0)),t.xc&&(e.x=e.xc-(e.width||0)/2),t.y2&&(t.y?(n&&e.y>e.y2&&(r=e.y,e.y=e.y2,e.y2=r),e.height=e.y2-e.y):e.y=e.y2-(e.height||0)),t.yc&&(e.y=e.yc-(e.height||0)/2)}(e,r,o),c}}};e.expressionInterpreter=m}));
2
2
  //# sourceMappingURL=vega-interpreter.min.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"vega-interpreter.min.js","sources":["../src/constants.js","../src/ops-binary.js","../src/ops-unary.js","../src/functions.js","../src/interpret.js","../src/expression.js","../src/adjust-spatial.js"],"sourcesContent":["export default {\n NaN: NaN,\n E: Math.E,\n LN2: Math.LN2,\n LN10: Math.LN10,\n LOG2E: Math.LOG2E,\n LOG10E: Math.LOG10E,\n PI: Math.PI,\n SQRT1_2: Math.SQRT1_2,\n SQRT2: Math.SQRT2,\n MIN_VALUE: Number.MIN_VALUE,\n MAX_VALUE: Number.MAX_VALUE\n};\n","export default {\n '*': (a, b) => a * b,\n '+': (a, b) => a + b,\n '-': (a, b) => a - b,\n '/': (a, b) => a / b,\n '%': (a, b) => a % b,\n '>': (a, b) => a > b,\n '<': (a, b) => a < b,\n '<=': (a, b) => a <= b,\n '>=': (a, b) => a >= b,\n '==': (a, b) => a == b,\n '!=': (a, b) => a != b,\n '===': (a, b) => a === b,\n '!==': (a, b) => a !== b,\n '&': (a, b) => a & b,\n '|': (a, b) => a | b,\n '^': (a, b) => a ^ b,\n '<<': (a, b) => a << b,\n '>>': (a, b) => a >> b,\n '>>>': (a, b) => a >>> b\n};\n","export default {\n '+': a => +a,\n '-': a => -a,\n '~': a => ~a,\n '!': a => !a\n};\n","import { ascending } from 'vega-util';\n\nconst slice = Array.prototype.slice;\n\nconst apply = (m, args, cast) => {\n const obj = cast ? cast(args[0]) : args[0];\n return obj[m].apply(obj, slice.call(args, 1));\n};\n\nconst datetime = (y, m, d, H, M, S, ms) =>\n new Date(y, m || 0, d != null ? d : 1, H || 0, M || 0, S || 0, ms || 0);\n\nexport default {\n // math functions\n isNaN: Number.isNaN,\n isFinite: Number.isFinite,\n abs: Math.abs,\n acos: Math.acos,\n asin: Math.asin,\n atan: Math.atan,\n atan2: Math.atan2,\n ceil: Math.ceil,\n cos: Math.cos,\n exp: Math.exp,\n floor: Math.floor,\n log: Math.log,\n max: Math.max,\n min: Math.min,\n pow: Math.pow,\n random: Math.random,\n round: Math.round,\n sin: Math.sin,\n sqrt: Math.sqrt,\n tan: Math.tan,\n clamp: (a, b, c) => Math.max(b, Math.min(c, a)),\n\n // date functions\n now: Date.now,\n utc: Date.UTC,\n datetime: datetime,\n date: d => new Date(d).getDate(),\n day: d => new Date(d).getDay(),\n year: d => new Date(d).getFullYear(),\n month: d => new Date(d).getMonth(),\n hours: d => new Date(d).getHours(),\n minutes: d => new Date(d).getMinutes(),\n seconds: d => new Date(d).getSeconds(),\n milliseconds: d => new Date(d).getMilliseconds(),\n time: d => new Date(d).getTime(),\n timezoneoffset: d => new Date(d).getTimezoneOffset(),\n utcdate: d => new Date(d).getUTCDate(),\n utcday: d => new Date(d).getUTCDay(),\n utcyear: d => new Date(d).getUTCFullYear(),\n utcmonth: d => new Date(d).getUTCMonth(),\n utchours: d => new Date(d).getUTCHours(),\n utcminutes: d => new Date(d).getUTCMinutes(),\n utcseconds: d => new Date(d).getUTCSeconds(),\n utcmilliseconds: d => new Date(d).getUTCMilliseconds(),\n\n // sequence functions\n length: x => x.length,\n join: function() { return apply('join', arguments); },\n indexof: function() { return apply('indexOf', arguments); },\n lastindexof: function() { return apply('lastIndexOf', arguments); },\n slice: function() { return apply('slice', arguments); },\n reverse: x => x.slice().reverse(),\n sort: x => x.slice().sort(ascending),\n\n // string functions\n parseFloat: parseFloat,\n parseInt: parseInt,\n upper: x => String(x).toUpperCase(),\n lower: x => String(x).toLowerCase(),\n substring: function() { return apply('substring', arguments, String); },\n split: function() { return apply('split', arguments, String); },\n replace: function() { return apply('replace', arguments, String); },\n trim: x => String(x).trim(),\n\n // regexp functions\n regexp: RegExp,\n test: (r, t) => RegExp(r).test(t)\n};\n","import Constants from './constants';\nimport Ops from './ops-binary';\nimport Unary from './ops-unary';\nimport Functions from './functions';\n\nconst EventFunctions = ['view', 'item', 'group', 'xy', 'x', 'y'];\nconst DisallowedMethods = new Set([\n Function,\n eval,\n setTimeout,\n setInterval\n]);\n\nif (typeof setImmediate === 'function') DisallowedMethods.add(setImmediate);\n\nconst Visitors = {\n Literal: ($, n) => n.value,\n\n Identifier: ($, n) => {\n const id = n.name;\n return $.memberDepth > 0 ? id\n : id === 'datum' ? $.datum\n : id === 'event' ? $.event\n : id === 'item' ? $.item\n : Constants[id] || $.params['$' + id];\n },\n\n MemberExpression: ($, n) => {\n const d = !n.computed,\n o = $(n.object);\n if (d) $.memberDepth += 1;\n const p = $(n.property);\n if (d) $.memberDepth -= 1;\n if (DisallowedMethods.has(o[p])) {\n // eslint-disable-next-line no-console\n console.error(`Prevented interpretation of member \"${p}\" which could lead to insecure code execution`);\n return;\n }\n return o[p];\n },\n\n CallExpression: ($, n) => {\n const args = n.arguments;\n let name = n.callee.name;\n\n // handle special internal functions used by encoders\n // re-route to corresponding standard function\n if (name.startsWith('_')) {\n name = name.slice(1);\n }\n\n // special case \"if\" due to conditional evaluation of branches\n return name === 'if'\n ? ($(args[0]) ? $(args[1]) : $(args[2]))\n : ($.fn[name] || Functions[name]).apply($.fn, args.map($));\n },\n\n ArrayExpression: ($, n) => n.elements.map($),\n\n BinaryExpression: ($, n) => Ops[n.operator]($(n.left), $(n.right)),\n\n UnaryExpression: ($, n) => Unary[n.operator]($(n.argument)),\n\n ConditionalExpression: ($, n) => $(n.test)\n ? $(n.consequent)\n : $(n.alternate),\n\n LogicalExpression: ($, n) => n.operator === '&&'\n ? $(n.left) && $(n.right)\n : $(n.left) || $(n.right),\n\n ObjectExpression: ($, n) => n.properties.reduce((o, p) => {\n $.memberDepth += 1;\n const k = $(p.key);\n $.memberDepth -= 1;\n if (DisallowedMethods.has($(p.value))) {\n // eslint-disable-next-line no-console\n console.error(`Prevented interpretation of property \"${k}\" which could lead to insecure code execution`);\n } else {\n o[k] = $(p.value);\n }\n return o;\n }, {})\n};\n\nexport default function(ast, fn, params, datum, event, item) {\n const $ = n => Visitors[n.type]($, n);\n $.memberDepth = 0;\n $.fn = Object.create(fn);\n $.params = params;\n $.datum = datum;\n $.event = event;\n $.item = item;\n\n // route event functions to annotated vega event context\n EventFunctions.forEach(f => $.fn[f] = (...args) => event.vega[f](...args));\n\n return $(ast);\n}\n","import adjustSpatial from './adjust-spatial';\nimport interpret from './interpret';\n\nexport default {\n /**\n * Parse an expression used to update an operator value.\n */\n operator(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return _ => interpret(ast, fn, _);\n },\n\n /**\n * Parse an expression provided as an operator parameter value.\n */\n parameter(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return (datum, _) => interpret(ast, fn, _, datum);\n },\n\n /**\n * Parse an expression applied to an event stream.\n */\n event(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return event => interpret(ast, fn, undefined, undefined, event);\n },\n\n /**\n * Parse an expression used to handle an event-driven operator update.\n */\n handler(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return (_, event) => {\n const datum = event.item && event.item.datum;\n return interpret(ast, fn, _, datum, event);\n };\n },\n\n /**\n * Parse an expression that performs visual encoding.\n */\n encode(ctx, encode) {\n const {marktype, channels} = encode,\n fn = ctx.functions,\n swap = marktype === 'group'\n || marktype === 'image'\n || marktype === 'rect';\n\n return (item, _) => {\n const datum = item.datum;\n let m = 0, v;\n\n for (const name in channels) {\n v = interpret(channels[name].ast, fn, _, datum, undefined, item);\n if (item[name] !== v) {\n item[name] = v;\n m = 1;\n }\n }\n\n if (marktype !== 'rule') {\n adjustSpatial(item, channels, swap);\n }\n return m;\n };\n }\n};\n","export default function(item, encode, swap) {\n let t;\n\n if (encode.x2) {\n if (encode.x) {\n if (swap && item.x > item.x2) {\n t = item.x;\n item.x = item.x2;\n item.x2 = t;\n }\n item.width = item.x2 - item.x;\n } else {\n item.x = item.x2 - (item.width || 0);\n }\n }\n\n if (encode.xc) {\n item.x = item.xc - (item.width || 0) / 2;\n }\n\n if (encode.y2) {\n if (encode.y) {\n if (swap && item.y > item.y2) {\n t = item.y;\n item.y = item.y2;\n item.y2 = t;\n }\n item.height = item.y2 - item.y;\n } else {\n item.y = item.y2 - (item.height || 0);\n }\n }\n\n if (encode.yc) {\n item.y = item.yc - (item.height || 0) / 2;\n }\n}\n"],"names":["Constants","NaN","E","Math","LN2","LN10","LOG2E","LOG10E","PI","SQRT1_2","SQRT2","MIN_VALUE","Number","MAX_VALUE","Ops","*","a","b","+","-","/","%",">","<","<=",">=","==","!=","===","!==","&","|","^","<<",">>",">>>","Unary","slice","Array","prototype","apply","m","args","cast","obj","call","Functions","isNaN","isFinite","abs","acos","asin","atan","atan2","ceil","cos","exp","floor","log","max","min","pow","random","round","sin","sqrt","tan","clamp","c","now","Date","utc","UTC","datetime","y","d","H","M","S","ms","date","getDate","day","getDay","year","getFullYear","month","getMonth","hours","getHours","minutes","getMinutes","seconds","getSeconds","milliseconds","getMilliseconds","time","getTime","timezoneoffset","getTimezoneOffset","utcdate","getUTCDate","utcday","getUTCDay","utcyear","getUTCFullYear","utcmonth","getUTCMonth","utchours","getUTCHours","utcminutes","getUTCMinutes","utcseconds","getUTCSeconds","utcmilliseconds","getUTCMilliseconds","length","x","join","arguments","indexof","lastindexof","reverse","sort","ascending","parseFloat","parseInt","upper","String","toUpperCase","lower","toLowerCase","substring","split","replace","trim","regexp","RegExp","test","r","t","EventFunctions","DisallowedMethods","Set","Function","eval","setTimeout","setInterval","setImmediate","add","Visitors","Literal","$","n","value","Identifier","id","name","memberDepth","datum","event","item","params","MemberExpression","computed","o","object","p","property","has","console","error","CallExpression","callee","startsWith","fn","map","ArrayExpression","elements","BinaryExpression","operator","left","right","UnaryExpression","argument","ConditionalExpression","consequent","alternate","LogicalExpression","ObjectExpression","properties","reduce","k","key","interpret","ast","type","Object","create","forEach","f","vega","expression","ctx","expr","functions","_","parameter","undefined","handler","encode","marktype","channels","swap","v","x2","width","xc","y2","height","yc","adjustSpatial"],"mappings":"8RAAe,IAAAA,EAAA,CACbC,IAAYA,IACZC,EAAYC,KAAKD,EACjBE,IAAYD,KAAKC,IACjBC,KAAYF,KAAKE,KACjBC,MAAYH,KAAKG,MACjBC,OAAYJ,KAAKI,OACjBC,GAAYL,KAAKK,GACjBC,QAAYN,KAAKM,QACjBC,MAAYP,KAAKO,MACjBC,UAAYC,OAAOD,UACnBE,UAAYD,OAAOC,WCXNC,EAAA,CACb,IAAKC,CAACC,EAAGC,IAAMD,EAAIC,EACnB,IAAKC,CAACF,EAAGC,IAAMD,EAAIC,EACnB,IAAKE,CAACH,EAAGC,IAAMD,EAAIC,EACnB,IAAKG,CAACJ,EAAGC,IAAMD,EAAIC,EACnB,IAAKI,CAACL,EAAGC,IAAMD,EAAIC,EACnB,IAAKK,CAACN,EAAGC,IAAMD,EAAIC,EACnB,IAAKM,CAACP,EAAGC,IAAMD,EAAIC,EACnB,KAAMO,CAACR,EAAGC,IAAMD,GAAKC,EACrB,KAAMQ,CAACT,EAAGC,IAAMD,GAAKC,EACrB,KAAMS,CAACV,EAAGC,IAAMD,GAAKC,EACrB,KAAMU,CAACX,EAAGC,IAAMD,GAAKC,EACrB,MAAOW,CAACZ,EAAGC,IAAMD,IAAMC,EACvB,MAAOY,CAACb,EAAGC,IAAMD,IAAMC,EACvB,IAAKa,CAACd,EAAGC,IAAMD,EAAIC,EACnB,IAAKc,CAACf,EAAGC,IAAMD,EAAIC,EACnB,IAAKe,CAAChB,EAAGC,IAAMD,EAAIC,EACnB,KAAMgB,CAACjB,EAAGC,IAAMD,GAAKC,EACrB,KAAMiB,CAAClB,EAAGC,IAAMD,GAAKC,EACrB,MAAOkB,CAACnB,EAAGC,IAAMD,IAAMC,GCnBVmB,EAAA,CACb,IAAKpB,IAAMA,EACX,IAAKA,IAAMA,EACX,IAAKA,IAAMA,EACX,IAAKA,IAAMA,GCFb,MAAMqB,EAAQC,MAAMC,UAAUF,MAExBG,EAAQA,CAACC,EAAGC,EAAMC,KACtB,MAAMC,EAAMD,EAAOA,EAAKD,EAAK,IAAMA,EAAK,GACxC,OAAOE,EAAIH,GAAGD,MAAMI,EAAKP,EAAMQ,KAAKH,EAAM,GAAG,EAMhC,IAAAI,EAAA,CAEbC,MAAWnC,OAAOmC,MAClBC,SAAWpC,OAAOoC,SAClBC,IAAW9C,KAAK8C,IAChBC,KAAW/C,KAAK+C,KAChBC,KAAWhD,KAAKgD,KAChBC,KAAWjD,KAAKiD,KAChBC,MAAWlD,KAAKkD,MAChBC,KAAWnD,KAAKmD,KAChBC,IAAWpD,KAAKoD,IAChBC,IAAWrD,KAAKqD,IAChBC,MAAWtD,KAAKsD,MAChBC,IAAWvD,KAAKuD,IAChBC,IAAWxD,KAAKwD,IAChBC,IAAWzD,KAAKyD,IAChBC,IAAW1D,KAAK0D,IAChBC,OAAW3D,KAAK2D,OAChBC,MAAW5D,KAAK4D,MAChBC,IAAW7D,KAAK6D,IAChBC,KAAW9D,KAAK8D,KAChBC,IAAW/D,KAAK+D,IAChBC,MAAWA,CAACnD,EAAGC,EAAGmD,IAAMjE,KAAKwD,IAAI1C,EAAGd,KAAKyD,IAAIQ,EAAGpD,IAGhDqD,IAAkBC,KAAKD,IACvBE,IAAkBD,KAAKE,IACvBC,SA9BeA,CAACC,EAAGjC,EAAGkC,EAAGC,EAAGC,EAAGC,EAAGC,IAClC,IAAIT,KAAKI,EAAGjC,GAAK,EAAQ,MAALkC,EAAYA,EAAI,EAAGC,GAAK,EAAGC,GAAK,EAAGC,GAAK,EAAGC,GAAM,GA8BrEC,KAAkBL,GAAK,IAAIL,KAAKK,GAAGM,UACnCC,IAAkBP,GAAK,IAAIL,KAAKK,GAAGQ,SACnCC,KAAkBT,GAAK,IAAIL,KAAKK,GAAGU,cACnCC,MAAkBX,GAAK,IAAIL,KAAKK,GAAGY,WACnCC,MAAkBb,GAAK,IAAIL,KAAKK,GAAGc,WACnCC,QAAkBf,GAAK,IAAIL,KAAKK,GAAGgB,aACnCC,QAAkBjB,GAAK,IAAIL,KAAKK,GAAGkB,aACnCC,aAAkBnB,GAAK,IAAIL,KAAKK,GAAGoB,kBACnCC,KAAkBrB,GAAK,IAAIL,KAAKK,GAAGsB,UACnCC,eAAkBvB,GAAK,IAAIL,KAAKK,GAAGwB,oBACnCC,QAAkBzB,GAAK,IAAIL,KAAKK,GAAG0B,aACnCC,OAAkB3B,GAAK,IAAIL,KAAKK,GAAG4B,YACnCC,QAAkB7B,GAAK,IAAIL,KAAKK,GAAG8B,iBACnCC,SAAkB/B,GAAK,IAAIL,KAAKK,GAAGgC,cACnCC,SAAkBjC,GAAK,IAAIL,KAAKK,GAAGkC,cACnCC,WAAkBnC,GAAK,IAAIL,KAAKK,GAAGoC,gBACnCC,WAAkBrC,GAAK,IAAIL,KAAKK,GAAGsC,gBACnCC,gBAAkBvC,GAAK,IAAIL,KAAKK,GAAGwC,qBAGnCC,OAAcC,GAAKA,EAAED,OACrBE,KAAc,WAAa,OAAO9E,EAAM,OAAQ+E,UAAa,EAC7DC,QAAc,WAAa,OAAOhF,EAAM,UAAW+E,UAAa,EAChEE,YAAc,WAAa,OAAOjF,EAAM,cAAe+E,UAAa,EACpElF,MAAc,WAAa,OAAOG,EAAM,QAAS+E,UAAa,EAC9DG,QAAcL,GAAKA,EAAEhF,QAAQqF,UAC7BC,KAAcN,GAAKA,EAAEhF,QAAQsF,KAAKC,EAAAA,WAGlCC,WAAcA,WACdC,SAAcA,SACdC,MAAcV,GAAKW,OAAOX,GAAGY,cAC7BC,MAAcb,GAAKW,OAAOX,GAAGc,cAC7BC,UAAc,WAAa,OAAO5F,EAAM,YAAa+E,UAAWS,OAAU,EAC1EK,MAAc,WAAa,OAAO7F,EAAM,QAAS+E,UAAWS,OAAU,EACtEM,QAAc,WAAa,OAAO9F,EAAM,UAAW+E,UAAWS,OAAU,EACxEO,KAAclB,GAAKW,OAAOX,GAAGkB,OAG7BC,OAAcC,OACdC,KAAcA,CAACC,EAAGC,IAAMH,OAAOE,GAAGD,KAAKE,IC3EzC,MAAMC,EAAiB,CAAC,OAAQ,OAAQ,QAAS,KAAM,IAAK,KACtDC,EAAoB,IAAIC,IAAI,CAChCC,SACAC,KACAC,WACAC,cAG0B,mBAAjBC,cAA6BN,EAAkBO,IAAID,cAE9D,MAAME,EAAW,CACfC,QAASA,CAACC,EAAGC,IAAMA,EAAEC,MAErBC,WAAYA,CAACH,EAAGC,KACd,MAAMG,EAAKH,EAAEI,KACb,OAAOL,EAAEM,YAAc,EAAIF,EAChB,UAAPA,EAAiBJ,EAAEO,MACZ,UAAPH,EAAiBJ,EAAEQ,MACZ,SAAPJ,EAAgBJ,EAAES,KAClBjK,EAAU4J,IAAOJ,EAAEU,OAAO,IAAMN,EAAG,EAGzCO,iBAAkBA,CAACX,EAAGC,KACpB,MAAM9E,GAAK8E,EAAEW,SACPC,EAAIb,EAAEC,EAAEa,QACV3F,IAAG6E,EAAEM,aAAe,GACxB,MAAMS,EAAIf,EAAEC,EAAEe,UAEd,GADI7F,IAAG6E,EAAEM,aAAe,IACpBhB,EAAkB2B,IAAIJ,EAAEE,IAK5B,OAAOF,EAAEE,GAHPG,QAAQC,MAAM,uCAAuCJ,iDAG5C,EAGbK,eAAgBA,CAACpB,EAAGC,KAClB,MAAM/G,EAAO+G,EAAElC,UACf,IAAIsC,EAAOJ,EAAEoB,OAAOhB,KASpB,OALIA,EAAKiB,WAAW,OAClBjB,EAAOA,EAAKxH,MAAM,IAIJ,OAATwH,EACFL,EAAE9G,EAAK,IAAM8G,EAAE9G,EAAK,IAAM8G,EAAE9G,EAAK,KACjC8G,EAAEuB,GAAGlB,IAAS/G,EAAU+G,IAAOrH,MAAMgH,EAAEuB,GAAIrI,EAAKsI,IAAIxB,GAAG,EAG9DyB,gBAAiBA,CAACzB,EAAGC,IAAMA,EAAEyB,SAASF,IAAIxB,GAE1C2B,iBAAkBA,CAAC3B,EAAGC,IAAM3I,EAAI2I,EAAE2B,UAAU5B,EAAEC,EAAE4B,MAAO7B,EAAEC,EAAE6B,QAE3DC,gBAAiBA,CAAC/B,EAAGC,IAAMrH,EAAMqH,EAAE2B,UAAU5B,EAAEC,EAAE+B,WAEjDC,sBAAuBA,CAACjC,EAAGC,IAAMD,EAAEC,EAAEf,MACjCc,EAAEC,EAAEiC,YACJlC,EAAEC,EAAEkC,WAERC,kBAAmBA,CAACpC,EAAGC,IAAqB,OAAfA,EAAE2B,SAC3B5B,EAAEC,EAAE4B,OAAS7B,EAAEC,EAAE6B,OACjB9B,EAAEC,EAAE4B,OAAS7B,EAAEC,EAAE6B,OAErBO,iBAAkBA,CAACrC,EAAGC,IAAMA,EAAEqC,WAAWC,QAAO,CAAC1B,EAAGE,KAClDf,EAAEM,aAAe,EACjB,MAAMkC,EAAIxC,EAAEe,EAAE0B,KAQd,OAPAzC,EAAEM,aAAe,EACbhB,EAAkB2B,IAAIjB,EAAEe,EAAEb,QAE5BgB,QAAQC,MAAM,yCAAyCqB,kDAEvD3B,EAAE2B,GAAKxC,EAAEe,EAAEb,OAENW,CAAC,GACP,CAAE,IAGQ,SAAA6B,EAASC,EAAKpB,EAAIb,EAAQH,EAAOC,EAAOC,GACrD,MAAMT,EAAIC,GAAKH,EAASG,EAAE2C,MAAM5C,EAAGC,GAWnC,OAVAD,EAAEM,YAAc,EAChBN,EAAEuB,GAAKsB,OAAOC,OAAOvB,GACrBvB,EAAEU,OAASA,EACXV,EAAEO,MAAQA,EACVP,EAAEQ,MAAQA,EACVR,EAAES,KAAOA,EAGTpB,EAAe0D,SAAQC,GAAKhD,EAAEuB,GAAGyB,GAAK,WAAA,OAAaxC,EAAMyC,KAAKD,MAAGjF,cAE1DiC,EAAE2C,EACX,CC/Fe,IAAAO,EAAA,CAIbtB,QAAAA,CAASuB,EAAKC,GACZ,MAAMT,EAAMS,EAAKT,IAAKpB,EAAK4B,EAAIE,UAC/B,OAAOC,GAAKZ,EAAUC,EAAKpB,EAAI+B,EAChC,EAKDC,SAAAA,CAAUJ,EAAKC,GACb,MAAMT,EAAMS,EAAKT,IAAKpB,EAAK4B,EAAIE,UAC/B,MAAO,CAAC9C,EAAO+C,IAAMZ,EAAUC,EAAKpB,EAAI+B,EAAG/C,EAC5C,EAKDC,KAAAA,CAAM2C,EAAKC,GACT,MAAMT,EAAMS,EAAKT,IAAKpB,EAAK4B,EAAIE,UAC/B,OAAO7C,GAASkC,EAAUC,EAAKpB,OAAIiC,OAAWA,EAAWhD,EAC1D,EAKDiD,OAAAA,CAAQN,EAAKC,GACX,MAAMT,EAAMS,EAAKT,IAAKpB,EAAK4B,EAAIE,UAC/B,MAAO,CAACC,EAAG9C,KACT,MAAMD,EAAQC,EAAMC,MAAQD,EAAMC,KAAKF,MACvC,OAAOmC,EAAUC,EAAKpB,EAAI+B,EAAG/C,EAAOC,EAAM,CAE7C,EAKDkD,MAAAA,CAAOP,EAAKO,GACV,MAAMC,SAACA,EAAQC,SAAEA,GAAYF,EACvBnC,EAAK4B,EAAIE,UACTQ,EAAoB,UAAbF,GACa,UAAbA,GACa,SAAbA,EAEb,MAAO,CAAClD,EAAM6C,KACZ,MAAM/C,EAAQE,EAAKF,MACnB,IAAWuD,EAAP7K,EAAI,EAER,IAAK,MAAMoH,KAAQuD,EACjBE,EAAIpB,EAAUkB,EAASvD,GAAMsC,IAAKpB,EAAI+B,EAAG/C,OAAOiD,EAAW/C,GACvDA,EAAKJ,KAAUyD,IACjBrD,EAAKJ,GAAQyD,EACb7K,EAAI,GAOR,MAHiB,SAAb0K,GC7DK,SAASlD,EAAMiD,EAAQG,GACpC,IAAIzE,EAEAsE,EAAOK,KACLL,EAAO7F,GACLgG,GAAQpD,EAAK5C,EAAI4C,EAAKsD,KACxB3E,EAAIqB,EAAK5C,EACT4C,EAAK5C,EAAI4C,EAAKsD,GACdtD,EAAKsD,GAAK3E,GAEZqB,EAAKuD,MAAQvD,EAAKsD,GAAKtD,EAAK5C,GAE5B4C,EAAK5C,EAAI4C,EAAKsD,IAAMtD,EAAKuD,OAAS,IAIlCN,EAAOO,KACTxD,EAAK5C,EAAI4C,EAAKwD,IAAMxD,EAAKuD,OAAS,GAAK,GAGrCN,EAAOQ,KACLR,EAAOxI,GACL2I,GAAQpD,EAAKvF,EAAIuF,EAAKyD,KACxB9E,EAAIqB,EAAKvF,EACTuF,EAAKvF,EAAIuF,EAAKyD,GACdzD,EAAKyD,GAAK9E,GAEZqB,EAAK0D,OAAS1D,EAAKyD,GAAKzD,EAAKvF,GAE7BuF,EAAKvF,EAAIuF,EAAKyD,IAAMzD,EAAK0D,QAAU,IAInCT,EAAOU,KACT3D,EAAKvF,EAAIuF,EAAK2D,IAAM3D,EAAK0D,QAAU,GAAK,EAE5C,CD0BQE,CAAc5D,EAAMmD,EAAUC,GAEzB5K,CAAC,CAEZ"}
1
+ {"version":3,"file":"vega-interpreter.min.js","sources":["../src/constants.js","../src/ops-binary.js","../src/ops-unary.js","../src/functions.js","../src/interpret.js","../src/expression.js","../src/adjust-spatial.js"],"sourcesContent":["export default {\n NaN: NaN,\n E: Math.E,\n LN2: Math.LN2,\n LN10: Math.LN10,\n LOG2E: Math.LOG2E,\n LOG10E: Math.LOG10E,\n PI: Math.PI,\n SQRT1_2: Math.SQRT1_2,\n SQRT2: Math.SQRT2,\n MIN_VALUE: Number.MIN_VALUE,\n MAX_VALUE: Number.MAX_VALUE\n};\n","export default {\n '*': (a, b) => a * b,\n '+': (a, b) => a + b,\n '-': (a, b) => a - b,\n '/': (a, b) => a / b,\n '%': (a, b) => a % b,\n '>': (a, b) => a > b,\n '<': (a, b) => a < b,\n '<=': (a, b) => a <= b,\n '>=': (a, b) => a >= b,\n '==': (a, b) => a == b,\n '!=': (a, b) => a != b,\n '===': (a, b) => a === b,\n '!==': (a, b) => a !== b,\n '&': (a, b) => a & b,\n '|': (a, b) => a | b,\n '^': (a, b) => a ^ b,\n '<<': (a, b) => a << b,\n '>>': (a, b) => a >> b,\n '>>>': (a, b) => a >>> b\n};\n","export default {\n '+': a => +a,\n '-': a => -a,\n '~': a => ~a,\n '!': a => !a\n};\n","import { ascending } from 'vega-util';\n\nconst slice = Array.prototype.slice;\n\nconst apply = (m, args, cast) => {\n const obj = cast ? cast(args[0]) : args[0];\n return obj[m].apply(obj, slice.call(args, 1));\n};\n\nconst datetime = (y, m, d, H, M, S, ms) =>\n new Date(y, m || 0, d != null ? d : 1, H || 0, M || 0, S || 0, ms || 0);\n\nexport default {\n // math functions\n isNaN: Number.isNaN,\n isFinite: Number.isFinite,\n abs: Math.abs,\n acos: Math.acos,\n asin: Math.asin,\n atan: Math.atan,\n atan2: Math.atan2,\n ceil: Math.ceil,\n cos: Math.cos,\n exp: Math.exp,\n floor: Math.floor,\n log: Math.log,\n max: Math.max,\n min: Math.min,\n pow: Math.pow,\n random: Math.random,\n round: Math.round,\n sin: Math.sin,\n sqrt: Math.sqrt,\n tan: Math.tan,\n clamp: (a, b, c) => Math.max(b, Math.min(c, a)),\n\n // date functions\n now: Date.now,\n utc: Date.UTC,\n datetime: datetime,\n date: d => new Date(d).getDate(),\n day: d => new Date(d).getDay(),\n year: d => new Date(d).getFullYear(),\n month: d => new Date(d).getMonth(),\n hours: d => new Date(d).getHours(),\n minutes: d => new Date(d).getMinutes(),\n seconds: d => new Date(d).getSeconds(),\n milliseconds: d => new Date(d).getMilliseconds(),\n time: d => new Date(d).getTime(),\n timezoneoffset: d => new Date(d).getTimezoneOffset(),\n utcdate: d => new Date(d).getUTCDate(),\n utcday: d => new Date(d).getUTCDay(),\n utcyear: d => new Date(d).getUTCFullYear(),\n utcmonth: d => new Date(d).getUTCMonth(),\n utchours: d => new Date(d).getUTCHours(),\n utcminutes: d => new Date(d).getUTCMinutes(),\n utcseconds: d => new Date(d).getUTCSeconds(),\n utcmilliseconds: d => new Date(d).getUTCMilliseconds(),\n\n // sequence functions\n length: x => x.length,\n join: function() { return apply('join', arguments); },\n indexof: function() { return apply('indexOf', arguments); },\n lastindexof: function() { return apply('lastIndexOf', arguments); },\n slice: function() { return apply('slice', arguments); },\n reverse: x => x.slice().reverse(),\n sort: x => x.slice().sort(ascending),\n\n // string functions\n parseFloat: parseFloat,\n parseInt: parseInt,\n upper: x => String(x).toUpperCase(),\n lower: x => String(x).toLowerCase(),\n substring: function() { return apply('substring', arguments, String); },\n split: function() { return apply('split', arguments, String); },\n replace: function() { return apply('replace', arguments, String); },\n trim: x => String(x).trim(),\n // Base64 encode/decode\n // Convert binary string to base64-encoded ascii\n btoa: x => btoa(x),\n // Convert base64-encoded ascii to binary string\n atob: x => atob(x),\n\n // regexp functions\n regexp: RegExp,\n test: (r, t) => RegExp(r).test(t)\n};\n","import Constants from './constants';\nimport Ops from './ops-binary';\nimport Unary from './ops-unary';\nimport Functions from './functions';\nimport {DisallowedObjectProperties} from 'vega-util';\n\nconst EventFunctions = ['view', 'item', 'group', 'xy', 'x', 'y'];\nconst DisallowedMethods = new Set([\n Function,\n eval,\n setTimeout,\n setInterval\n]);\n\nif (typeof setImmediate === 'function') DisallowedMethods.add(setImmediate);\n\nconst Visitors = {\n Literal: ($, n) => n.value,\n\n Identifier: ($, n) => {\n const id = n.name;\n return $.memberDepth > 0 ? id\n : id === 'datum' ? $.datum\n : id === 'event' ? $.event\n : id === 'item' ? $.item\n : Constants[id] || $.params['$' + id];\n },\n\n MemberExpression: ($, n) => {\n const d = !n.computed,\n o = $(n.object);\n if (d) $.memberDepth += 1;\n const p = $(n.property);\n if (d) $.memberDepth -= 1;\n if (DisallowedMethods.has(o[p])) {\n // eslint-disable-next-line no-console\n console.error(`Prevented interpretation of member \"${p}\" which could lead to insecure code execution`);\n return;\n }\n return o[p];\n },\n\n CallExpression: ($, n) => {\n const args = n.arguments;\n let name = n.callee.name;\n\n // handle special internal functions used by encoders\n // re-route to corresponding standard function\n if (name.startsWith('_')) {\n name = name.slice(1);\n }\n\n // special case \"if\" due to conditional evaluation of branches\n return name === 'if'\n ? ($(args[0]) ? $(args[1]) : $(args[2]))\n : ($.fn[name] || Functions[name]).apply($.fn, args.map($));\n },\n\n ArrayExpression: ($, n) => n.elements.map($),\n\n BinaryExpression: ($, n) => Ops[n.operator]($(n.left), $(n.right)),\n\n UnaryExpression: ($, n) => Unary[n.operator]($(n.argument)),\n\n ConditionalExpression: ($, n) => $(n.test)\n ? $(n.consequent)\n : $(n.alternate),\n\n LogicalExpression: ($, n) => n.operator === '&&'\n ? $(n.left) && $(n.right)\n : $(n.left) || $(n.right),\n\n ObjectExpression: ($, n) => n.properties.reduce((o, p) => {\n $.memberDepth += 1;\n const k = $(p.key);\n $.memberDepth -= 1;\n const v = $(p.value);\n if (DisallowedObjectProperties.has(k)) { // eslint-disable-next-line no-console\n console.error(`Prevented interpretation of property \"${k}\" which could lead to insecure code execution`);\n } else if (DisallowedMethods.has(v)) { // eslint-disable-next-line no-console\n console.error(`Prevented interpretation of method \"${v}\" which could lead to insecure code execution`);\n } else {\n o[k] = v;\n }\n return o;\n }, {})\n};\n\nexport default function(ast, fn, params, datum, event, item) {\n const $ = n => Visitors[n.type]($, n);\n $.memberDepth = 0;\n $.fn = Object.create(fn);\n $.params = params;\n $.datum = datum;\n $.event = event;\n $.item = item;\n\n // route event functions to annotated vega event context\n EventFunctions.forEach(f => $.fn[f] = (...args) => event.vega[f](...args));\n\n return $(ast);\n}\n","import adjustSpatial from './adjust-spatial';\nimport interpret from './interpret';\n\nexport default {\n /**\n * Parse an expression used to update an operator value.\n */\n operator(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return _ => interpret(ast, fn, _);\n },\n\n /**\n * Parse an expression provided as an operator parameter value.\n */\n parameter(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return (datum, _) => interpret(ast, fn, _, datum);\n },\n\n /**\n * Parse an expression applied to an event stream.\n */\n event(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return event => interpret(ast, fn, undefined, undefined, event);\n },\n\n /**\n * Parse an expression used to handle an event-driven operator update.\n */\n handler(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return (_, event) => {\n const datum = event.item && event.item.datum;\n return interpret(ast, fn, _, datum, event);\n };\n },\n\n /**\n * Parse an expression that performs visual encoding.\n */\n encode(ctx, encode) {\n const {marktype, channels} = encode,\n fn = ctx.functions,\n swap = marktype === 'group'\n || marktype === 'image'\n || marktype === 'rect';\n\n return (item, _) => {\n const datum = item.datum;\n let m = 0, v;\n\n for (const name in channels) {\n v = interpret(channels[name].ast, fn, _, datum, undefined, item);\n if (item[name] !== v) {\n item[name] = v;\n m = 1;\n }\n }\n\n if (marktype !== 'rule') {\n adjustSpatial(item, channels, swap);\n }\n return m;\n };\n }\n};\n","export default function(item, encode, swap) {\n let t;\n\n if (encode.x2) {\n if (encode.x) {\n if (swap && item.x > item.x2) {\n t = item.x;\n item.x = item.x2;\n item.x2 = t;\n }\n item.width = item.x2 - item.x;\n } else {\n item.x = item.x2 - (item.width || 0);\n }\n }\n\n if (encode.xc) {\n item.x = item.xc - (item.width || 0) / 2;\n }\n\n if (encode.y2) {\n if (encode.y) {\n if (swap && item.y > item.y2) {\n t = item.y;\n item.y = item.y2;\n item.y2 = t;\n }\n item.height = item.y2 - item.y;\n } else {\n item.y = item.y2 - (item.height || 0);\n }\n }\n\n if (encode.yc) {\n item.y = item.yc - (item.height || 0) / 2;\n }\n}\n"],"names":["Constants","NaN","E","Math","LN2","LN10","LOG2E","LOG10E","PI","SQRT1_2","SQRT2","MIN_VALUE","Number","MAX_VALUE","Ops","*","a","b","+","-","/","%",">","<","<=",">=","==","!=","===","!==","&","|","^","<<",">>",">>>","Unary","slice","Array","prototype","apply","m","args","cast","obj","call","Functions","isNaN","isFinite","abs","acos","asin","atan","atan2","ceil","cos","exp","floor","log","max","min","pow","random","round","sin","sqrt","tan","clamp","c","now","Date","utc","UTC","datetime","y","d","H","M","S","ms","date","getDate","day","getDay","year","getFullYear","month","getMonth","hours","getHours","minutes","getMinutes","seconds","getSeconds","milliseconds","getMilliseconds","time","getTime","timezoneoffset","getTimezoneOffset","utcdate","getUTCDate","utcday","getUTCDay","utcyear","getUTCFullYear","utcmonth","getUTCMonth","utchours","getUTCHours","utcminutes","getUTCMinutes","utcseconds","getUTCSeconds","utcmilliseconds","getUTCMilliseconds","length","x","join","arguments","indexof","lastindexof","reverse","sort","ascending","parseFloat","parseInt","upper","String","toUpperCase","lower","toLowerCase","substring","split","replace","trim","btoa","atob","regexp","RegExp","test","r","t","EventFunctions","DisallowedMethods","Set","Function","eval","setTimeout","setInterval","setImmediate","add","Visitors","Literal","$","n","value","Identifier","id","name","memberDepth","datum","event","item","params","MemberExpression","computed","o","object","p","property","has","console","error","CallExpression","callee","startsWith","fn","map","ArrayExpression","elements","BinaryExpression","operator","left","right","UnaryExpression","argument","ConditionalExpression","consequent","alternate","LogicalExpression","ObjectExpression","properties","reduce","k","key","v","DisallowedObjectProperties","interpret","ast","type","Object","create","forEach","f","vega","expression","ctx","expr","functions","_","parameter","undefined","handler","encode","marktype","channels","swap","x2","width","xc","y2","height","yc","adjustSpatial"],"mappings":"8RAAe,IAAAA,EAAA,CACbC,IAAYA,IACZC,EAAYC,KAAKD,EACjBE,IAAYD,KAAKC,IACjBC,KAAYF,KAAKE,KACjBC,MAAYH,KAAKG,MACjBC,OAAYJ,KAAKI,OACjBC,GAAYL,KAAKK,GACjBC,QAAYN,KAAKM,QACjBC,MAAYP,KAAKO,MACjBC,UAAYC,OAAOD,UACnBE,UAAYD,OAAOC,WCXNC,EAAA,CACb,IAAKC,CAACC,EAAGC,IAAMD,EAAIC,EACnB,IAAKC,CAACF,EAAGC,IAAMD,EAAIC,EACnB,IAAKE,CAACH,EAAGC,IAAMD,EAAIC,EACnB,IAAKG,CAACJ,EAAGC,IAAMD,EAAIC,EACnB,IAAKI,CAACL,EAAGC,IAAMD,EAAIC,EACnB,IAAKK,CAACN,EAAGC,IAAMD,EAAIC,EACnB,IAAKM,CAACP,EAAGC,IAAMD,EAAIC,EACnB,KAAMO,CAACR,EAAGC,IAAMD,GAAKC,EACrB,KAAMQ,CAACT,EAAGC,IAAMD,GAAKC,EACrB,KAAMS,CAACV,EAAGC,IAAMD,GAAKC,EACrB,KAAMU,CAACX,EAAGC,IAAMD,GAAKC,EACrB,MAAOW,CAACZ,EAAGC,IAAMD,IAAMC,EACvB,MAAOY,CAACb,EAAGC,IAAMD,IAAMC,EACvB,IAAKa,CAACd,EAAGC,IAAMD,EAAIC,EACnB,IAAKc,CAACf,EAAGC,IAAMD,EAAIC,EACnB,IAAKe,CAAChB,EAAGC,IAAMD,EAAIC,EACnB,KAAMgB,CAACjB,EAAGC,IAAMD,GAAKC,EACrB,KAAMiB,CAAClB,EAAGC,IAAMD,GAAKC,EACrB,MAAOkB,CAACnB,EAAGC,IAAMD,IAAMC,GCnBVmB,EAAA,CACb,IAAKpB,IAAMA,EACX,IAAKA,IAAMA,EACX,IAAKA,IAAMA,EACX,IAAKA,IAAMA,GCFb,MAAMqB,EAAQC,MAAMC,UAAUF,MAExBG,EAAQA,CAACC,EAAGC,EAAMC,KACtB,MAAMC,EAAMD,EAAOA,EAAKD,EAAK,IAAMA,EAAK,GACxC,OAAOE,EAAIH,GAAGD,MAAMI,EAAKP,EAAMQ,KAAKH,EAAM,GAAG,EAMhC,IAAAI,EAAA,CAEbC,MAAWnC,OAAOmC,MAClBC,SAAWpC,OAAOoC,SAClBC,IAAW9C,KAAK8C,IAChBC,KAAW/C,KAAK+C,KAChBC,KAAWhD,KAAKgD,KAChBC,KAAWjD,KAAKiD,KAChBC,MAAWlD,KAAKkD,MAChBC,KAAWnD,KAAKmD,KAChBC,IAAWpD,KAAKoD,IAChBC,IAAWrD,KAAKqD,IAChBC,MAAWtD,KAAKsD,MAChBC,IAAWvD,KAAKuD,IAChBC,IAAWxD,KAAKwD,IAChBC,IAAWzD,KAAKyD,IAChBC,IAAW1D,KAAK0D,IAChBC,OAAW3D,KAAK2D,OAChBC,MAAW5D,KAAK4D,MAChBC,IAAW7D,KAAK6D,IAChBC,KAAW9D,KAAK8D,KAChBC,IAAW/D,KAAK+D,IAChBC,MAAWA,CAACnD,EAAGC,EAAGmD,IAAMjE,KAAKwD,IAAI1C,EAAGd,KAAKyD,IAAIQ,EAAGpD,IAGhDqD,IAAkBC,KAAKD,IACvBE,IAAkBD,KAAKE,IACvBC,SA9BeA,CAACC,EAAGjC,EAAGkC,EAAGC,EAAGC,EAAGC,EAAGC,IAClC,IAAIT,KAAKI,EAAGjC,GAAK,EAAQ,MAALkC,EAAYA,EAAI,EAAGC,GAAK,EAAGC,GAAK,EAAGC,GAAK,EAAGC,GAAM,GA8BrEC,KAAkBL,GAAK,IAAIL,KAAKK,GAAGM,UACnCC,IAAkBP,GAAK,IAAIL,KAAKK,GAAGQ,SACnCC,KAAkBT,GAAK,IAAIL,KAAKK,GAAGU,cACnCC,MAAkBX,GAAK,IAAIL,KAAKK,GAAGY,WACnCC,MAAkBb,GAAK,IAAIL,KAAKK,GAAGc,WACnCC,QAAkBf,GAAK,IAAIL,KAAKK,GAAGgB,aACnCC,QAAkBjB,GAAK,IAAIL,KAAKK,GAAGkB,aACnCC,aAAkBnB,GAAK,IAAIL,KAAKK,GAAGoB,kBACnCC,KAAkBrB,GAAK,IAAIL,KAAKK,GAAGsB,UACnCC,eAAkBvB,GAAK,IAAIL,KAAKK,GAAGwB,oBACnCC,QAAkBzB,GAAK,IAAIL,KAAKK,GAAG0B,aACnCC,OAAkB3B,GAAK,IAAIL,KAAKK,GAAG4B,YACnCC,QAAkB7B,GAAK,IAAIL,KAAKK,GAAG8B,iBACnCC,SAAkB/B,GAAK,IAAIL,KAAKK,GAAGgC,cACnCC,SAAkBjC,GAAK,IAAIL,KAAKK,GAAGkC,cACnCC,WAAkBnC,GAAK,IAAIL,KAAKK,GAAGoC,gBACnCC,WAAkBrC,GAAK,IAAIL,KAAKK,GAAGsC,gBACnCC,gBAAkBvC,GAAK,IAAIL,KAAKK,GAAGwC,qBAGnCC,OAAcC,GAAKA,EAAED,OACrBE,KAAc,WAAa,OAAO9E,EAAM,OAAQ+E,UAAa,EAC7DC,QAAc,WAAa,OAAOhF,EAAM,UAAW+E,UAAa,EAChEE,YAAc,WAAa,OAAOjF,EAAM,cAAe+E,UAAa,EACpElF,MAAc,WAAa,OAAOG,EAAM,QAAS+E,UAAa,EAC9DG,QAAcL,GAAKA,EAAEhF,QAAQqF,UAC7BC,KAAcN,GAAKA,EAAEhF,QAAQsF,KAAKC,EAAAA,WAGlCC,WAAcA,WACdC,SAAcA,SACdC,MAAcV,GAAKW,OAAOX,GAAGY,cAC7BC,MAAcb,GAAKW,OAAOX,GAAGc,cAC7BC,UAAc,WAAa,OAAO5F,EAAM,YAAa+E,UAAWS,OAAU,EAC1EK,MAAc,WAAa,OAAO7F,EAAM,QAAS+E,UAAWS,OAAU,EACtEM,QAAc,WAAa,OAAO9F,EAAM,UAAW+E,UAAWS,OAAU,EACxEO,KAAclB,GAAKW,OAAOX,GAAGkB,OAG7BC,KAAcnB,GAAKmB,KAAKnB,GAExBoB,KAAcpB,GAAKoB,KAAKpB,GAGxBqB,OAAcC,OACdC,KAAcA,CAACC,EAAGC,IAAMH,OAAOE,GAAGD,KAAKE,IC/EzC,MAAMC,EAAiB,CAAC,OAAQ,OAAQ,QAAS,KAAM,IAAK,KACtDC,EAAoB,IAAIC,IAAI,CAChCC,SACAC,KACAC,WACAC,cAG0B,mBAAjBC,cAA6BN,EAAkBO,IAAID,cAE9D,MAAME,EAAW,CACfC,QAASA,CAACC,EAAGC,IAAMA,EAAEC,MAErBC,WAAYA,CAACH,EAAGC,KACd,MAAMG,EAAKH,EAAEI,KACb,OAAOL,EAAEM,YAAc,EAAIF,EAChB,UAAPA,EAAiBJ,EAAEO,MACZ,UAAPH,EAAiBJ,EAAEQ,MACZ,SAAPJ,EAAgBJ,EAAES,KAClBnK,EAAU8J,IAAOJ,EAAEU,OAAO,IAAMN,EAAG,EAGzCO,iBAAkBA,CAACX,EAAGC,KACpB,MAAMhF,GAAKgF,EAAEW,SACPC,EAAIb,EAAEC,EAAEa,QACV7F,IAAG+E,EAAEM,aAAe,GACxB,MAAMS,EAAIf,EAAEC,EAAEe,UAEd,GADI/F,IAAG+E,EAAEM,aAAe,IACpBhB,EAAkB2B,IAAIJ,EAAEE,IAK5B,OAAOF,EAAEE,GAHPG,QAAQC,MAAM,uCAAuCJ,iDAG5C,EAGbK,eAAgBA,CAACpB,EAAGC,KAClB,MAAMjH,EAAOiH,EAAEpC,UACf,IAAIwC,EAAOJ,EAAEoB,OAAOhB,KASpB,OALIA,EAAKiB,WAAW,OAClBjB,EAAOA,EAAK1H,MAAM,IAIJ,OAAT0H,EACFL,EAAEhH,EAAK,IAAMgH,EAAEhH,EAAK,IAAMgH,EAAEhH,EAAK,KACjCgH,EAAEuB,GAAGlB,IAASjH,EAAUiH,IAAOvH,MAAMkH,EAAEuB,GAAIvI,EAAKwI,IAAIxB,GAAG,EAG9DyB,gBAAiBA,CAACzB,EAAGC,IAAMA,EAAEyB,SAASF,IAAIxB,GAE1C2B,iBAAkBA,CAAC3B,EAAGC,IAAM7I,EAAI6I,EAAE2B,UAAU5B,EAAEC,EAAE4B,MAAO7B,EAAEC,EAAE6B,QAE3DC,gBAAiBA,CAAC/B,EAAGC,IAAMvH,EAAMuH,EAAE2B,UAAU5B,EAAEC,EAAE+B,WAEjDC,sBAAuBA,CAACjC,EAAGC,IAAMD,EAAEC,EAAEf,MACjCc,EAAEC,EAAEiC,YACJlC,EAAEC,EAAEkC,WAERC,kBAAmBA,CAACpC,EAAGC,IAAqB,OAAfA,EAAE2B,SAC3B5B,EAAEC,EAAE4B,OAAS7B,EAAEC,EAAE6B,OACjB9B,EAAEC,EAAE4B,OAAS7B,EAAEC,EAAE6B,OAErBO,iBAAkBA,CAACrC,EAAGC,IAAMA,EAAEqC,WAAWC,QAAO,CAAC1B,EAAGE,KAClDf,EAAEM,aAAe,EACjB,MAAMkC,EAAIxC,EAAEe,EAAE0B,KACdzC,EAAEM,aAAe,EACjB,MAAMoC,EAAI1C,EAAEe,EAAEb,OAQd,OAPIyC,EAA0BA,2BAAC1B,IAAIuB,GACjCtB,QAAQC,MAAM,yCAAyCqB,kDAC9ClD,EAAkB2B,IAAIyB,GAC/BxB,QAAQC,MAAM,uCAAuCuB,kDAErD7B,EAAE2B,GAAKE,EAEF7B,CAAC,GACP,CAAE,IAGQ,SAAA+B,EAASC,EAAKtB,EAAIb,EAAQH,EAAOC,EAAOC,GACrD,MAAMT,EAAIC,GAAKH,EAASG,EAAE6C,MAAM9C,EAAGC,GAWnC,OAVAD,EAAEM,YAAc,EAChBN,EAAEuB,GAAKwB,OAAOC,OAAOzB,GACrBvB,EAAEU,OAASA,EACXV,EAAEO,MAAQA,EACVP,EAAEQ,MAAQA,EACVR,EAAES,KAAOA,EAGTpB,EAAe4D,SAAQC,GAAKlD,EAAEuB,GAAG2B,GAAK,WAAA,OAAa1C,EAAM2C,KAAKD,MAAGrF,cAE1DmC,EAAE6C,EACX,CClGe,IAAAO,EAAA,CAIbxB,QAAAA,CAASyB,EAAKC,GACZ,MAAMT,EAAMS,EAAKT,IAAKtB,EAAK8B,EAAIE,UAC/B,OAAOC,GAAKZ,EAAUC,EAAKtB,EAAIiC,EAChC,EAKDC,SAAAA,CAAUJ,EAAKC,GACb,MAAMT,EAAMS,EAAKT,IAAKtB,EAAK8B,EAAIE,UAC/B,MAAO,CAAChD,EAAOiD,IAAMZ,EAAUC,EAAKtB,EAAIiC,EAAGjD,EAC5C,EAKDC,KAAAA,CAAM6C,EAAKC,GACT,MAAMT,EAAMS,EAAKT,IAAKtB,EAAK8B,EAAIE,UAC/B,OAAO/C,GAASoC,EAAUC,EAAKtB,OAAImC,OAAWA,EAAWlD,EAC1D,EAKDmD,OAAAA,CAAQN,EAAKC,GACX,MAAMT,EAAMS,EAAKT,IAAKtB,EAAK8B,EAAIE,UAC/B,MAAO,CAACC,EAAGhD,KACT,MAAMD,EAAQC,EAAMC,MAAQD,EAAMC,KAAKF,MACvC,OAAOqC,EAAUC,EAAKtB,EAAIiC,EAAGjD,EAAOC,EAAM,CAE7C,EAKDoD,MAAAA,CAAOP,EAAKO,GACV,MAAMC,SAACA,EAAQC,SAAEA,GAAYF,EACvBrC,EAAK8B,EAAIE,UACTQ,EAAoB,UAAbF,GACa,UAAbA,GACa,SAAbA,EAEb,MAAO,CAACpD,EAAM+C,KACZ,MAAMjD,EAAQE,EAAKF,MACnB,IAAWmC,EAAP3J,EAAI,EAER,IAAK,MAAMsH,KAAQyD,EACjBpB,EAAIE,EAAUkB,EAASzD,GAAMwC,IAAKtB,EAAIiC,EAAGjD,OAAOmD,EAAWjD,GACvDA,EAAKJ,KAAUqC,IACjBjC,EAAKJ,GAAQqC,EACb3J,EAAI,GAOR,MAHiB,SAAb8K,GC7DK,SAASpD,EAAMmD,EAAQG,GACpC,IAAI3E,EAEAwE,EAAOI,KACLJ,EAAOjG,GACLoG,GAAQtD,EAAK9C,EAAI8C,EAAKuD,KACxB5E,EAAIqB,EAAK9C,EACT8C,EAAK9C,EAAI8C,EAAKuD,GACdvD,EAAKuD,GAAK5E,GAEZqB,EAAKwD,MAAQxD,EAAKuD,GAAKvD,EAAK9C,GAE5B8C,EAAK9C,EAAI8C,EAAKuD,IAAMvD,EAAKwD,OAAS,IAIlCL,EAAOM,KACTzD,EAAK9C,EAAI8C,EAAKyD,IAAMzD,EAAKwD,OAAS,GAAK,GAGrCL,EAAOO,KACLP,EAAO5I,GACL+I,GAAQtD,EAAKzF,EAAIyF,EAAK0D,KACxB/E,EAAIqB,EAAKzF,EACTyF,EAAKzF,EAAIyF,EAAK0D,GACd1D,EAAK0D,GAAK/E,GAEZqB,EAAK2D,OAAS3D,EAAK0D,GAAK1D,EAAKzF,GAE7ByF,EAAKzF,EAAIyF,EAAK0D,IAAM1D,EAAK2D,QAAU,IAInCR,EAAOS,KACT5D,EAAKzF,EAAIyF,EAAK4D,IAAM5D,EAAK2D,QAAU,GAAK,EAE5C,CD0BQE,CAAc7D,EAAMqD,EAAUC,GAEzBhL,CAAC,CAEZ"}
@@ -1,4 +1,4 @@
1
- import { ascending } from 'vega-util';
1
+ import { ascending, DisallowedObjectProperties } from 'vega-util';
2
2
 
3
3
  function adjustSpatial (item, encode, swap) {
4
4
  let t;
@@ -159,6 +159,11 @@ var Functions = {
159
159
  return apply('replace', arguments, String);
160
160
  },
161
161
  trim: x => String(x).trim(),
162
+ // Base64 encode/decode
163
+ // Convert binary string to base64-encoded ascii
164
+ btoa: x => btoa(x),
165
+ // Convert base64-encoded ascii to binary string
166
+ atob: x => atob(x),
162
167
  // regexp functions
163
168
  regexp: RegExp,
164
169
  test: (r, t) => RegExp(r).test(t)
@@ -208,11 +213,15 @@ const Visitors = {
208
213
  $.memberDepth += 1;
209
214
  const k = $(p.key);
210
215
  $.memberDepth -= 1;
211
- if (DisallowedMethods.has($(p.value))) {
216
+ const v = $(p.value);
217
+ if (DisallowedObjectProperties.has(k)) {
212
218
  // eslint-disable-next-line no-console
213
219
  console.error(`Prevented interpretation of property "${k}" which could lead to insecure code execution`);
220
+ } else if (DisallowedMethods.has(v)) {
221
+ // eslint-disable-next-line no-console
222
+ console.error(`Prevented interpretation of method "${v}" which could lead to insecure code execution`);
214
223
  } else {
215
- o[k] = $(p.value);
224
+ o[k] = v;
216
225
  }
217
226
  return o;
218
227
  }, {})
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "vega-interpreter",
3
- "version": "1.1.0",
3
+ "version": "1.2.1",
4
4
  "description": "CSP-compliant interpreter for Vega expressions.",
5
5
  "keywords": [
6
6
  "vega",
@@ -23,10 +23,9 @@
23
23
  "prepublishOnly": "yarn test && yarn build"
24
24
  },
25
25
  "dependencies": {
26
- "vega-util": "^1.17.3"
26
+ "vega-util": "^1.17.4"
27
27
  },
28
28
  "devDependencies": {
29
- "vega": "*"
30
- },
31
- "gitHead": "0e1eb8b091bc83a343bcb23caa87a6d8762abc54"
29
+ "vega": "5.33.1"
30
+ }
32
31
  }
package/src/functions.js CHANGED
@@ -75,6 +75,11 @@ export default {
75
75
  split: function() { return apply('split', arguments, String); },
76
76
  replace: function() { return apply('replace', arguments, String); },
77
77
  trim: x => String(x).trim(),
78
+ // Base64 encode/decode
79
+ // Convert binary string to base64-encoded ascii
80
+ btoa: x => btoa(x),
81
+ // Convert base64-encoded ascii to binary string
82
+ atob: x => atob(x),
78
83
 
79
84
  // regexp functions
80
85
  regexp: RegExp,
package/src/interpret.js CHANGED
@@ -2,6 +2,7 @@ import Constants from './constants';
2
2
  import Ops from './ops-binary';
3
3
  import Unary from './ops-unary';
4
4
  import Functions from './functions';
5
+ import {DisallowedObjectProperties} from 'vega-util';
5
6
 
6
7
  const EventFunctions = ['view', 'item', 'group', 'xy', 'x', 'y'];
7
8
  const DisallowedMethods = new Set([
@@ -73,11 +74,13 @@ const Visitors = {
73
74
  $.memberDepth += 1;
74
75
  const k = $(p.key);
75
76
  $.memberDepth -= 1;
76
- if (DisallowedMethods.has($(p.value))) {
77
- // eslint-disable-next-line no-console
77
+ const v = $(p.value);
78
+ if (DisallowedObjectProperties.has(k)) { // eslint-disable-next-line no-console
78
79
  console.error(`Prevented interpretation of property "${k}" which could lead to insecure code execution`);
80
+ } else if (DisallowedMethods.has(v)) { // eslint-disable-next-line no-console
81
+ console.error(`Prevented interpretation of method "${v}" which could lead to insecure code execution`);
79
82
  } else {
80
- o[k] = $(p.value);
83
+ o[k] = v;
81
84
  }
82
85
  return o;
83
86
  }, {})
package/LICENSE DELETED
@@ -1,27 +0,0 @@
1
- Copyright (c) 2015-2023, University of Washington Interactive Data Lab
2
- All rights reserved.
3
-
4
- Redistribution and use in source and binary forms, with or without
5
- modification, are permitted provided that the following conditions are met:
6
-
7
- 1. Redistributions of source code must retain the above copyright notice, this
8
- list of conditions and the following disclaimer.
9
-
10
- 2. Redistributions in binary form must reproduce the above copyright notice,
11
- this list of conditions and the following disclaimer in the documentation
12
- and/or other materials provided with the distribution.
13
-
14
- 3. Neither the name of the copyright holder nor the names of its contributors
15
- may be used to endorse or promote products derived from this software
16
- without specific prior written permission.
17
-
18
- THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
19
- AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20
- IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
21
- DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE
22
- FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
23
- DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
24
- SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
25
- CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
26
- OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
27
- OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.