vega-interpreter 1.1.0 → 1.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -163,6 +163,11 @@
|
|
|
163
163
|
return apply('replace', arguments, String);
|
|
164
164
|
},
|
|
165
165
|
trim: x => String(x).trim(),
|
|
166
|
+
// Base64 encode/decode
|
|
167
|
+
// Convert binary string to base64-encoded ascii
|
|
168
|
+
btoa: x => btoa(x),
|
|
169
|
+
// Convert base64-encoded ascii to binary string
|
|
170
|
+
atob: x => atob(x),
|
|
166
171
|
// regexp functions
|
|
167
172
|
regexp: RegExp,
|
|
168
173
|
test: (r, t) => RegExp(r).test(t)
|
|
@@ -212,11 +217,15 @@
|
|
|
212
217
|
$.memberDepth += 1;
|
|
213
218
|
const k = $(p.key);
|
|
214
219
|
$.memberDepth -= 1;
|
|
215
|
-
|
|
220
|
+
const v = $(p.value);
|
|
221
|
+
if (vegaUtil.DisallowedObjectProperties.has(k)) {
|
|
216
222
|
// eslint-disable-next-line no-console
|
|
217
223
|
console.error(`Prevented interpretation of property "${k}" which could lead to insecure code execution`);
|
|
224
|
+
} else if (DisallowedMethods.has(v)) {
|
|
225
|
+
// eslint-disable-next-line no-console
|
|
226
|
+
console.error(`Prevented interpretation of method "${v}" which could lead to insecure code execution`);
|
|
218
227
|
} else {
|
|
219
|
-
o[k] =
|
|
228
|
+
o[k] = v;
|
|
220
229
|
}
|
|
221
230
|
return o;
|
|
222
231
|
}, {})
|
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("vega-util")):"function"==typeof define&&define.amd?define(["exports","vega-util"],t):t((e="undefined"!=typeof globalThis?globalThis:e||self).vega=e.vega||{},e.vega)}(this,(function(e,t){"use strict";var n={NaN:NaN,E:Math.E,LN2:Math.LN2,LN10:Math.LN10,LOG2E:Math.LOG2E,LOG10E:Math.LOG10E,PI:Math.PI,SQRT1_2:Math.SQRT1_2,SQRT2:Math.SQRT2,MIN_VALUE:Number.MIN_VALUE,MAX_VALUE:Number.MAX_VALUE},r={"*":(e,t)=>e*t,"+":(e,t)=>e+t,"-":(e,t)=>e-t,"/":(e,t)=>e/t,"%":(e,t)=>e%t,">":(e,t)=>e>t,"<":(e,t)=>e<t,"<=":(e,t)=>e<=t,">=":(e,t)=>e>=t,"==":(e,t)=>e==t,"!=":(e,t)=>e!=t,"===":(e,t)=>e===t,"!==":(e,t)=>e!==t,"&":(e,t)=>e&t,"|":(e,t)=>e|t,"^":(e,t)=>e^t,"<<":(e,t)=>e<<t,">>":(e,t)=>e>>t,">>>":(e,t)=>e>>>t},a={"+":e=>+e,"-":e=>-e,"~":e=>~e,"!":e=>!e};const o=Array.prototype.slice,i=(e,t,n)=>{const r=n?n(t[0]):t[0];return r[e].apply(r,o.call(t,1))};var s={isNaN:Number.isNaN,isFinite:Number.isFinite,abs:Math.abs,acos:Math.acos,asin:Math.asin,atan:Math.atan,atan2:Math.atan2,ceil:Math.ceil,cos:Math.cos,exp:Math.exp,floor:Math.floor,log:Math.log,max:Math.max,min:Math.min,pow:Math.pow,random:Math.random,round:Math.round,sin:Math.sin,sqrt:Math.sqrt,tan:Math.tan,clamp:(e,t,n)=>Math.max(t,Math.min(n,e)),now:Date.now,utc:Date.UTC,datetime:(e,t,n,r,a,o,i)=>new Date(e,t||0,null!=n?n:1,r||0,a||0,o||0,i||0),date:e=>new Date(e).getDate(),day:e=>new Date(e).getDay(),year:e=>new Date(e).getFullYear(),month:e=>new Date(e).getMonth(),hours:e=>new Date(e).getHours(),minutes:e=>new Date(e).getMinutes(),seconds:e=>new Date(e).getSeconds(),milliseconds:e=>new Date(e).getMilliseconds(),time:e=>new Date(e).getTime(),timezoneoffset:e=>new Date(e).getTimezoneOffset(),utcdate:e=>new Date(e).getUTCDate(),utcday:e=>new Date(e).getUTCDay(),utcyear:e=>new Date(e).getUTCFullYear(),utcmonth:e=>new Date(e).getUTCMonth(),utchours:e=>new Date(e).getUTCHours(),utcminutes:e=>new Date(e).getUTCMinutes(),utcseconds:e=>new Date(e).getUTCSeconds(),utcmilliseconds:e=>new Date(e).getUTCMilliseconds(),length:e=>e.length,join:function(){return i("join",arguments)},indexof:function(){return i("indexOf",arguments)},lastindexof:function(){return i("lastIndexOf",arguments)},slice:function(){return i("slice",arguments)},reverse:e=>e.slice().reverse(),sort:e=>e.slice().sort(t.ascending),parseFloat:parseFloat,parseInt:parseInt,upper:e=>String(e).toUpperCase(),lower:e=>String(e).toLowerCase(),substring:function(){return i("substring",arguments,String)},split:function(){return i("split",arguments,String)},replace:function(){return i("replace",arguments,String)},trim:e=>String(e).trim(),regexp:RegExp,test:(e,t)=>RegExp(e).test(t)};const c=["view","item","group","xy","x","y"],u=new Set([Function,eval,setTimeout,setInterval]);"function"==typeof setImmediate&&u.add(setImmediate);const l={Literal:(e,t)=>t.value,Identifier:(e,t)=>{const r=t.name;return e.memberDepth>0?r:"datum"===r?e.datum:"event"===r?e.event:"item"===r?e.item:n[r]||e.params["$"+r]},MemberExpression:(e,t)=>{const n=!t.computed,r=e(t.object);n&&(e.memberDepth+=1);const a=e(t.property);if(n&&(e.memberDepth-=1),!u.has(r[a]))return r[a];console.error(`Prevented interpretation of member "${a}" which could lead to insecure code execution`)},CallExpression:(e,t)=>{const n=t.arguments;let r=t.callee.name;return r.startsWith("_")&&(r=r.slice(1)),"if"===r?e(n[0])?e(n[1]):e(n[2]):(e.fn[r]||s[r]).apply(e.fn,n.map(e))},ArrayExpression:(e,t)=>t.elements.map(e),BinaryExpression:(e,t)=>r[t.operator](e(t.left),e(t.right)),UnaryExpression:(e,t)=>a[t.operator](e(t.argument)),ConditionalExpression:(e,t)=>e(t.test)?e(t.consequent):e(t.alternate),LogicalExpression:(e,t)=>"&&"===t.operator?e(t.left)&&e(t.right):e(t.left)||e(t.right),ObjectExpression:(e,
|
|
1
|
+
!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("vega-util")):"function"==typeof define&&define.amd?define(["exports","vega-util"],t):t((e="undefined"!=typeof globalThis?globalThis:e||self).vega=e.vega||{},e.vega)}(this,(function(e,t){"use strict";var n={NaN:NaN,E:Math.E,LN2:Math.LN2,LN10:Math.LN10,LOG2E:Math.LOG2E,LOG10E:Math.LOG10E,PI:Math.PI,SQRT1_2:Math.SQRT1_2,SQRT2:Math.SQRT2,MIN_VALUE:Number.MIN_VALUE,MAX_VALUE:Number.MAX_VALUE},r={"*":(e,t)=>e*t,"+":(e,t)=>e+t,"-":(e,t)=>e-t,"/":(e,t)=>e/t,"%":(e,t)=>e%t,">":(e,t)=>e>t,"<":(e,t)=>e<t,"<=":(e,t)=>e<=t,">=":(e,t)=>e>=t,"==":(e,t)=>e==t,"!=":(e,t)=>e!=t,"===":(e,t)=>e===t,"!==":(e,t)=>e!==t,"&":(e,t)=>e&t,"|":(e,t)=>e|t,"^":(e,t)=>e^t,"<<":(e,t)=>e<<t,">>":(e,t)=>e>>t,">>>":(e,t)=>e>>>t},a={"+":e=>+e,"-":e=>-e,"~":e=>~e,"!":e=>!e};const o=Array.prototype.slice,i=(e,t,n)=>{const r=n?n(t[0]):t[0];return r[e].apply(r,o.call(t,1))};var s={isNaN:Number.isNaN,isFinite:Number.isFinite,abs:Math.abs,acos:Math.acos,asin:Math.asin,atan:Math.atan,atan2:Math.atan2,ceil:Math.ceil,cos:Math.cos,exp:Math.exp,floor:Math.floor,log:Math.log,max:Math.max,min:Math.min,pow:Math.pow,random:Math.random,round:Math.round,sin:Math.sin,sqrt:Math.sqrt,tan:Math.tan,clamp:(e,t,n)=>Math.max(t,Math.min(n,e)),now:Date.now,utc:Date.UTC,datetime:(e,t,n,r,a,o,i)=>new Date(e,t||0,null!=n?n:1,r||0,a||0,o||0,i||0),date:e=>new Date(e).getDate(),day:e=>new Date(e).getDay(),year:e=>new Date(e).getFullYear(),month:e=>new Date(e).getMonth(),hours:e=>new Date(e).getHours(),minutes:e=>new Date(e).getMinutes(),seconds:e=>new Date(e).getSeconds(),milliseconds:e=>new Date(e).getMilliseconds(),time:e=>new Date(e).getTime(),timezoneoffset:e=>new Date(e).getTimezoneOffset(),utcdate:e=>new Date(e).getUTCDate(),utcday:e=>new Date(e).getUTCDay(),utcyear:e=>new Date(e).getUTCFullYear(),utcmonth:e=>new Date(e).getUTCMonth(),utchours:e=>new Date(e).getUTCHours(),utcminutes:e=>new Date(e).getUTCMinutes(),utcseconds:e=>new Date(e).getUTCSeconds(),utcmilliseconds:e=>new Date(e).getUTCMilliseconds(),length:e=>e.length,join:function(){return i("join",arguments)},indexof:function(){return i("indexOf",arguments)},lastindexof:function(){return i("lastIndexOf",arguments)},slice:function(){return i("slice",arguments)},reverse:e=>e.slice().reverse(),sort:e=>e.slice().sort(t.ascending),parseFloat:parseFloat,parseInt:parseInt,upper:e=>String(e).toUpperCase(),lower:e=>String(e).toLowerCase(),substring:function(){return i("substring",arguments,String)},split:function(){return i("split",arguments,String)},replace:function(){return i("replace",arguments,String)},trim:e=>String(e).trim(),btoa:e=>btoa(e),atob:e=>atob(e),regexp:RegExp,test:(e,t)=>RegExp(e).test(t)};const c=["view","item","group","xy","x","y"],u=new Set([Function,eval,setTimeout,setInterval]);"function"==typeof setImmediate&&u.add(setImmediate);const l={Literal:(e,t)=>t.value,Identifier:(e,t)=>{const r=t.name;return e.memberDepth>0?r:"datum"===r?e.datum:"event"===r?e.event:"item"===r?e.item:n[r]||e.params["$"+r]},MemberExpression:(e,t)=>{const n=!t.computed,r=e(t.object);n&&(e.memberDepth+=1);const a=e(t.property);if(n&&(e.memberDepth-=1),!u.has(r[a]))return r[a];console.error(`Prevented interpretation of member "${a}" which could lead to insecure code execution`)},CallExpression:(e,t)=>{const n=t.arguments;let r=t.callee.name;return r.startsWith("_")&&(r=r.slice(1)),"if"===r?e(n[0])?e(n[1]):e(n[2]):(e.fn[r]||s[r]).apply(e.fn,n.map(e))},ArrayExpression:(e,t)=>t.elements.map(e),BinaryExpression:(e,t)=>r[t.operator](e(t.left),e(t.right)),UnaryExpression:(e,t)=>a[t.operator](e(t.argument)),ConditionalExpression:(e,t)=>e(t.test)?e(t.consequent):e(t.alternate),LogicalExpression:(e,t)=>"&&"===t.operator?e(t.left)&&e(t.right):e(t.left)||e(t.right),ObjectExpression:(e,n)=>n.properties.reduce(((n,r)=>{e.memberDepth+=1;const a=e(r.key);e.memberDepth-=1;const o=e(r.value);return t.DisallowedObjectProperties.has(a)?console.error(`Prevented interpretation of property "${a}" which could lead to insecure code execution`):u.has(o)?console.error(`Prevented interpretation of method "${o}" which could lead to insecure code execution`):n[a]=o,n}),{})};function p(e,t,n,r,a,o){const i=e=>l[e.type](i,e);return i.memberDepth=0,i.fn=Object.create(t),i.params=n,i.datum=r,i.event=a,i.item=o,c.forEach((e=>i.fn[e]=function(){return a.vega[e](...arguments)})),i(e)}var m={operator(e,t){const n=t.ast,r=e.functions;return e=>p(n,r,e)},parameter(e,t){const n=t.ast,r=e.functions;return(e,t)=>p(n,r,t,e)},event(e,t){const n=t.ast,r=e.functions;return e=>p(n,r,void 0,void 0,e)},handler(e,t){const n=t.ast,r=e.functions;return(e,t)=>{const a=t.item&&t.item.datum;return p(n,r,e,a,t)}},encode(e,t){const{marktype:n,channels:r}=t,a=e.functions,o="group"===n||"image"===n||"rect"===n;return(e,t)=>{const i=e.datum;let s,c=0;for(const n in r)s=p(r[n].ast,a,t,i,void 0,e),e[n]!==s&&(e[n]=s,c=1);return"rule"!==n&&function(e,t,n){let r;t.x2&&(t.x?(n&&e.x>e.x2&&(r=e.x,e.x=e.x2,e.x2=r),e.width=e.x2-e.x):e.x=e.x2-(e.width||0)),t.xc&&(e.x=e.xc-(e.width||0)/2),t.y2&&(t.y?(n&&e.y>e.y2&&(r=e.y,e.y=e.y2,e.y2=r),e.height=e.y2-e.y):e.y=e.y2-(e.height||0)),t.yc&&(e.y=e.yc-(e.height||0)/2)}(e,r,o),c}}};e.expressionInterpreter=m}));
|
|
2
2
|
//# sourceMappingURL=vega-interpreter.min.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"vega-interpreter.min.js","sources":["../src/constants.js","../src/ops-binary.js","../src/ops-unary.js","../src/functions.js","../src/interpret.js","../src/expression.js","../src/adjust-spatial.js"],"sourcesContent":["export default {\n NaN: NaN,\n E: Math.E,\n LN2: Math.LN2,\n LN10: Math.LN10,\n LOG2E: Math.LOG2E,\n LOG10E: Math.LOG10E,\n PI: Math.PI,\n SQRT1_2: Math.SQRT1_2,\n SQRT2: Math.SQRT2,\n MIN_VALUE: Number.MIN_VALUE,\n MAX_VALUE: Number.MAX_VALUE\n};\n","export default {\n '*': (a, b) => a * b,\n '+': (a, b) => a + b,\n '-': (a, b) => a - b,\n '/': (a, b) => a / b,\n '%': (a, b) => a % b,\n '>': (a, b) => a > b,\n '<': (a, b) => a < b,\n '<=': (a, b) => a <= b,\n '>=': (a, b) => a >= b,\n '==': (a, b) => a == b,\n '!=': (a, b) => a != b,\n '===': (a, b) => a === b,\n '!==': (a, b) => a !== b,\n '&': (a, b) => a & b,\n '|': (a, b) => a | b,\n '^': (a, b) => a ^ b,\n '<<': (a, b) => a << b,\n '>>': (a, b) => a >> b,\n '>>>': (a, b) => a >>> b\n};\n","export default {\n '+': a => +a,\n '-': a => -a,\n '~': a => ~a,\n '!': a => !a\n};\n","import { ascending } from 'vega-util';\n\nconst slice = Array.prototype.slice;\n\nconst apply = (m, args, cast) => {\n const obj = cast ? cast(args[0]) : args[0];\n return obj[m].apply(obj, slice.call(args, 1));\n};\n\nconst datetime = (y, m, d, H, M, S, ms) =>\n new Date(y, m || 0, d != null ? d : 1, H || 0, M || 0, S || 0, ms || 0);\n\nexport default {\n // math functions\n isNaN: Number.isNaN,\n isFinite: Number.isFinite,\n abs: Math.abs,\n acos: Math.acos,\n asin: Math.asin,\n atan: Math.atan,\n atan2: Math.atan2,\n ceil: Math.ceil,\n cos: Math.cos,\n exp: Math.exp,\n floor: Math.floor,\n log: Math.log,\n max: Math.max,\n min: Math.min,\n pow: Math.pow,\n random: Math.random,\n round: Math.round,\n sin: Math.sin,\n sqrt: Math.sqrt,\n tan: Math.tan,\n clamp: (a, b, c) => Math.max(b, Math.min(c, a)),\n\n // date functions\n now: Date.now,\n utc: Date.UTC,\n datetime: datetime,\n date: d => new Date(d).getDate(),\n day: d => new Date(d).getDay(),\n year: d => new Date(d).getFullYear(),\n month: d => new Date(d).getMonth(),\n hours: d => new Date(d).getHours(),\n minutes: d => new Date(d).getMinutes(),\n seconds: d => new Date(d).getSeconds(),\n milliseconds: d => new Date(d).getMilliseconds(),\n time: d => new Date(d).getTime(),\n timezoneoffset: d => new Date(d).getTimezoneOffset(),\n utcdate: d => new Date(d).getUTCDate(),\n utcday: d => new Date(d).getUTCDay(),\n utcyear: d => new Date(d).getUTCFullYear(),\n utcmonth: d => new Date(d).getUTCMonth(),\n utchours: d => new Date(d).getUTCHours(),\n utcminutes: d => new Date(d).getUTCMinutes(),\n utcseconds: d => new Date(d).getUTCSeconds(),\n utcmilliseconds: d => new Date(d).getUTCMilliseconds(),\n\n // sequence functions\n length: x => x.length,\n join: function() { return apply('join', arguments); },\n indexof: function() { return apply('indexOf', arguments); },\n lastindexof: function() { return apply('lastIndexOf', arguments); },\n slice: function() { return apply('slice', arguments); },\n reverse: x => x.slice().reverse(),\n sort: x => x.slice().sort(ascending),\n\n // string functions\n parseFloat: parseFloat,\n parseInt: parseInt,\n upper: x => String(x).toUpperCase(),\n lower: x => String(x).toLowerCase(),\n substring: function() { return apply('substring', arguments, String); },\n split: function() { return apply('split', arguments, String); },\n replace: function() { return apply('replace', arguments, String); },\n trim: x => String(x).trim(),\n\n // regexp functions\n regexp: RegExp,\n test: (r, t) => RegExp(r).test(t)\n};\n","import Constants from './constants';\nimport Ops from './ops-binary';\nimport Unary from './ops-unary';\nimport Functions from './functions';\n\nconst EventFunctions = ['view', 'item', 'group', 'xy', 'x', 'y'];\nconst DisallowedMethods = new Set([\n Function,\n eval,\n setTimeout,\n setInterval\n]);\n\nif (typeof setImmediate === 'function') DisallowedMethods.add(setImmediate);\n\nconst Visitors = {\n Literal: ($, n) => n.value,\n\n Identifier: ($, n) => {\n const id = n.name;\n return $.memberDepth > 0 ? id\n : id === 'datum' ? $.datum\n : id === 'event' ? $.event\n : id === 'item' ? $.item\n : Constants[id] || $.params['$' + id];\n },\n\n MemberExpression: ($, n) => {\n const d = !n.computed,\n o = $(n.object);\n if (d) $.memberDepth += 1;\n const p = $(n.property);\n if (d) $.memberDepth -= 1;\n if (DisallowedMethods.has(o[p])) {\n // eslint-disable-next-line no-console\n console.error(`Prevented interpretation of member \"${p}\" which could lead to insecure code execution`);\n return;\n }\n return o[p];\n },\n\n CallExpression: ($, n) => {\n const args = n.arguments;\n let name = n.callee.name;\n\n // handle special internal functions used by encoders\n // re-route to corresponding standard function\n if (name.startsWith('_')) {\n name = name.slice(1);\n }\n\n // special case \"if\" due to conditional evaluation of branches\n return name === 'if'\n ? ($(args[0]) ? $(args[1]) : $(args[2]))\n : ($.fn[name] || Functions[name]).apply($.fn, args.map($));\n },\n\n ArrayExpression: ($, n) => n.elements.map($),\n\n BinaryExpression: ($, n) => Ops[n.operator]($(n.left), $(n.right)),\n\n UnaryExpression: ($, n) => Unary[n.operator]($(n.argument)),\n\n ConditionalExpression: ($, n) => $(n.test)\n ? $(n.consequent)\n : $(n.alternate),\n\n LogicalExpression: ($, n) => n.operator === '&&'\n ? $(n.left) && $(n.right)\n : $(n.left) || $(n.right),\n\n ObjectExpression: ($, n) => n.properties.reduce((o, p) => {\n $.memberDepth += 1;\n const k = $(p.key);\n $.memberDepth -= 1;\n if (DisallowedMethods.has($(p.value))) {\n // eslint-disable-next-line no-console\n console.error(`Prevented interpretation of property \"${k}\" which could lead to insecure code execution`);\n } else {\n o[k] = $(p.value);\n }\n return o;\n }, {})\n};\n\nexport default function(ast, fn, params, datum, event, item) {\n const $ = n => Visitors[n.type]($, n);\n $.memberDepth = 0;\n $.fn = Object.create(fn);\n $.params = params;\n $.datum = datum;\n $.event = event;\n $.item = item;\n\n // route event functions to annotated vega event context\n EventFunctions.forEach(f => $.fn[f] = (...args) => event.vega[f](...args));\n\n return $(ast);\n}\n","import adjustSpatial from './adjust-spatial';\nimport interpret from './interpret';\n\nexport default {\n /**\n * Parse an expression used to update an operator value.\n */\n operator(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return _ => interpret(ast, fn, _);\n },\n\n /**\n * Parse an expression provided as an operator parameter value.\n */\n parameter(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return (datum, _) => interpret(ast, fn, _, datum);\n },\n\n /**\n * Parse an expression applied to an event stream.\n */\n event(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return event => interpret(ast, fn, undefined, undefined, event);\n },\n\n /**\n * Parse an expression used to handle an event-driven operator update.\n */\n handler(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return (_, event) => {\n const datum = event.item && event.item.datum;\n return interpret(ast, fn, _, datum, event);\n };\n },\n\n /**\n * Parse an expression that performs visual encoding.\n */\n encode(ctx, encode) {\n const {marktype, channels} = encode,\n fn = ctx.functions,\n swap = marktype === 'group'\n || marktype === 'image'\n || marktype === 'rect';\n\n return (item, _) => {\n const datum = item.datum;\n let m = 0, v;\n\n for (const name in channels) {\n v = interpret(channels[name].ast, fn, _, datum, undefined, item);\n if (item[name] !== v) {\n item[name] = v;\n m = 1;\n }\n }\n\n if (marktype !== 'rule') {\n adjustSpatial(item, channels, swap);\n }\n return m;\n };\n }\n};\n","export default function(item, encode, swap) {\n let t;\n\n if (encode.x2) {\n if (encode.x) {\n if (swap && item.x > item.x2) {\n t = item.x;\n item.x = item.x2;\n item.x2 = t;\n }\n item.width = item.x2 - item.x;\n } else {\n item.x = item.x2 - (item.width || 0);\n }\n }\n\n if (encode.xc) {\n item.x = item.xc - (item.width || 0) / 2;\n }\n\n if (encode.y2) {\n if (encode.y) {\n if (swap && item.y > item.y2) {\n t = item.y;\n item.y = item.y2;\n item.y2 = t;\n }\n item.height = item.y2 - item.y;\n } else {\n item.y = item.y2 - (item.height || 0);\n }\n }\n\n if (encode.yc) {\n item.y = item.yc - (item.height || 0) / 2;\n }\n}\n"],"names":["Constants","NaN","E","Math","LN2","LN10","LOG2E","LOG10E","PI","SQRT1_2","SQRT2","MIN_VALUE","Number","MAX_VALUE","Ops","*","a","b","+","-","/","%",">","<","<=",">=","==","!=","===","!==","&","|","^","<<",">>",">>>","Unary","slice","Array","prototype","apply","m","args","cast","obj","call","Functions","isNaN","isFinite","abs","acos","asin","atan","atan2","ceil","cos","exp","floor","log","max","min","pow","random","round","sin","sqrt","tan","clamp","c","now","Date","utc","UTC","datetime","y","d","H","M","S","ms","date","getDate","day","getDay","year","getFullYear","month","getMonth","hours","getHours","minutes","getMinutes","seconds","getSeconds","milliseconds","getMilliseconds","time","getTime","timezoneoffset","getTimezoneOffset","utcdate","getUTCDate","utcday","getUTCDay","utcyear","getUTCFullYear","utcmonth","getUTCMonth","utchours","getUTCHours","utcminutes","getUTCMinutes","utcseconds","getUTCSeconds","utcmilliseconds","getUTCMilliseconds","length","x","join","arguments","indexof","lastindexof","reverse","sort","ascending","parseFloat","parseInt","upper","String","toUpperCase","lower","toLowerCase","substring","split","replace","trim","regexp","RegExp","test","r","t","EventFunctions","DisallowedMethods","Set","Function","eval","setTimeout","setInterval","setImmediate","add","Visitors","Literal","$","n","value","Identifier","id","name","memberDepth","datum","event","item","params","MemberExpression","computed","o","object","p","property","has","console","error","CallExpression","callee","startsWith","fn","map","ArrayExpression","elements","BinaryExpression","operator","left","right","UnaryExpression","argument","ConditionalExpression","consequent","alternate","LogicalExpression","ObjectExpression","properties","reduce","k","key","interpret","ast","type","Object","create","forEach","f","vega","expression","ctx","expr","functions","_","parameter","undefined","handler","encode","marktype","channels","swap","v","x2","width","xc","y2","height","yc","adjustSpatial"],"mappings":"8RAAe,IAAAA,EAAA,CACbC,IAAYA,IACZC,EAAYC,KAAKD,EACjBE,IAAYD,KAAKC,IACjBC,KAAYF,KAAKE,KACjBC,MAAYH,KAAKG,MACjBC,OAAYJ,KAAKI,OACjBC,GAAYL,KAAKK,GACjBC,QAAYN,KAAKM,QACjBC,MAAYP,KAAKO,MACjBC,UAAYC,OAAOD,UACnBE,UAAYD,OAAOC,WCXNC,EAAA,CACb,IAAKC,CAACC,EAAGC,IAAMD,EAAIC,EACnB,IAAKC,CAACF,EAAGC,IAAMD,EAAIC,EACnB,IAAKE,CAACH,EAAGC,IAAMD,EAAIC,EACnB,IAAKG,CAACJ,EAAGC,IAAMD,EAAIC,EACnB,IAAKI,CAACL,EAAGC,IAAMD,EAAIC,EACnB,IAAKK,CAACN,EAAGC,IAAMD,EAAIC,EACnB,IAAKM,CAACP,EAAGC,IAAMD,EAAIC,EACnB,KAAMO,CAACR,EAAGC,IAAMD,GAAKC,EACrB,KAAMQ,CAACT,EAAGC,IAAMD,GAAKC,EACrB,KAAMS,CAACV,EAAGC,IAAMD,GAAKC,EACrB,KAAMU,CAACX,EAAGC,IAAMD,GAAKC,EACrB,MAAOW,CAACZ,EAAGC,IAAMD,IAAMC,EACvB,MAAOY,CAACb,EAAGC,IAAMD,IAAMC,EACvB,IAAKa,CAACd,EAAGC,IAAMD,EAAIC,EACnB,IAAKc,CAACf,EAAGC,IAAMD,EAAIC,EACnB,IAAKe,CAAChB,EAAGC,IAAMD,EAAIC,EACnB,KAAMgB,CAACjB,EAAGC,IAAMD,GAAKC,EACrB,KAAMiB,CAAClB,EAAGC,IAAMD,GAAKC,EACrB,MAAOkB,CAACnB,EAAGC,IAAMD,IAAMC,GCnBVmB,EAAA,CACb,IAAKpB,IAAMA,EACX,IAAKA,IAAMA,EACX,IAAKA,IAAMA,EACX,IAAKA,IAAMA,GCFb,MAAMqB,EAAQC,MAAMC,UAAUF,MAExBG,EAAQA,CAACC,EAAGC,EAAMC,KACtB,MAAMC,EAAMD,EAAOA,EAAKD,EAAK,IAAMA,EAAK,GACxC,OAAOE,EAAIH,GAAGD,MAAMI,EAAKP,EAAMQ,KAAKH,EAAM,GAAG,EAMhC,IAAAI,EAAA,CAEbC,MAAWnC,OAAOmC,MAClBC,SAAWpC,OAAOoC,SAClBC,IAAW9C,KAAK8C,IAChBC,KAAW/C,KAAK+C,KAChBC,KAAWhD,KAAKgD,KAChBC,KAAWjD,KAAKiD,KAChBC,MAAWlD,KAAKkD,MAChBC,KAAWnD,KAAKmD,KAChBC,IAAWpD,KAAKoD,IAChBC,IAAWrD,KAAKqD,IAChBC,MAAWtD,KAAKsD,MAChBC,IAAWvD,KAAKuD,IAChBC,IAAWxD,KAAKwD,IAChBC,IAAWzD,KAAKyD,IAChBC,IAAW1D,KAAK0D,IAChBC,OAAW3D,KAAK2D,OAChBC,MAAW5D,KAAK4D,MAChBC,IAAW7D,KAAK6D,IAChBC,KAAW9D,KAAK8D,KAChBC,IAAW/D,KAAK+D,IAChBC,MAAWA,CAACnD,EAAGC,EAAGmD,IAAMjE,KAAKwD,IAAI1C,EAAGd,KAAKyD,IAAIQ,EAAGpD,IAGhDqD,IAAkBC,KAAKD,IACvBE,IAAkBD,KAAKE,IACvBC,SA9BeA,CAACC,EAAGjC,EAAGkC,EAAGC,EAAGC,EAAGC,EAAGC,IAClC,IAAIT,KAAKI,EAAGjC,GAAK,EAAQ,MAALkC,EAAYA,EAAI,EAAGC,GAAK,EAAGC,GAAK,EAAGC,GAAK,EAAGC,GAAM,GA8BrEC,KAAkBL,GAAK,IAAIL,KAAKK,GAAGM,UACnCC,IAAkBP,GAAK,IAAIL,KAAKK,GAAGQ,SACnCC,KAAkBT,GAAK,IAAIL,KAAKK,GAAGU,cACnCC,MAAkBX,GAAK,IAAIL,KAAKK,GAAGY,WACnCC,MAAkBb,GAAK,IAAIL,KAAKK,GAAGc,WACnCC,QAAkBf,GAAK,IAAIL,KAAKK,GAAGgB,aACnCC,QAAkBjB,GAAK,IAAIL,KAAKK,GAAGkB,aACnCC,aAAkBnB,GAAK,IAAIL,KAAKK,GAAGoB,kBACnCC,KAAkBrB,GAAK,IAAIL,KAAKK,GAAGsB,UACnCC,eAAkBvB,GAAK,IAAIL,KAAKK,GAAGwB,oBACnCC,QAAkBzB,GAAK,IAAIL,KAAKK,GAAG0B,aACnCC,OAAkB3B,GAAK,IAAIL,KAAKK,GAAG4B,YACnCC,QAAkB7B,GAAK,IAAIL,KAAKK,GAAG8B,iBACnCC,SAAkB/B,GAAK,IAAIL,KAAKK,GAAGgC,cACnCC,SAAkBjC,GAAK,IAAIL,KAAKK,GAAGkC,cACnCC,WAAkBnC,GAAK,IAAIL,KAAKK,GAAGoC,gBACnCC,WAAkBrC,GAAK,IAAIL,KAAKK,GAAGsC,gBACnCC,gBAAkBvC,GAAK,IAAIL,KAAKK,GAAGwC,qBAGnCC,OAAcC,GAAKA,EAAED,OACrBE,KAAc,WAAa,OAAO9E,EAAM,OAAQ+E,UAAa,EAC7DC,QAAc,WAAa,OAAOhF,EAAM,UAAW+E,UAAa,EAChEE,YAAc,WAAa,OAAOjF,EAAM,cAAe+E,UAAa,EACpElF,MAAc,WAAa,OAAOG,EAAM,QAAS+E,UAAa,EAC9DG,QAAcL,GAAKA,EAAEhF,QAAQqF,UAC7BC,KAAcN,GAAKA,EAAEhF,QAAQsF,KAAKC,EAAAA,WAGlCC,WAAcA,WACdC,SAAcA,SACdC,MAAcV,GAAKW,OAAOX,GAAGY,cAC7BC,MAAcb,GAAKW,OAAOX,GAAGc,cAC7BC,UAAc,WAAa,OAAO5F,EAAM,YAAa+E,UAAWS,OAAU,EAC1EK,MAAc,WAAa,OAAO7F,EAAM,QAAS+E,UAAWS,OAAU,EACtEM,QAAc,WAAa,OAAO9F,EAAM,UAAW+E,UAAWS,OAAU,EACxEO,KAAclB,GAAKW,OAAOX,GAAGkB,OAG7BC,OAAcC,OACdC,KAAcA,CAACC,EAAGC,IAAMH,OAAOE,GAAGD,KAAKE,IC3EzC,MAAMC,EAAiB,CAAC,OAAQ,OAAQ,QAAS,KAAM,IAAK,KACtDC,EAAoB,IAAIC,IAAI,CAChCC,SACAC,KACAC,WACAC,cAG0B,mBAAjBC,cAA6BN,EAAkBO,IAAID,cAE9D,MAAME,EAAW,CACfC,QAASA,CAACC,EAAGC,IAAMA,EAAEC,MAErBC,WAAYA,CAACH,EAAGC,KACd,MAAMG,EAAKH,EAAEI,KACb,OAAOL,EAAEM,YAAc,EAAIF,EAChB,UAAPA,EAAiBJ,EAAEO,MACZ,UAAPH,EAAiBJ,EAAEQ,MACZ,SAAPJ,EAAgBJ,EAAES,KAClBjK,EAAU4J,IAAOJ,EAAEU,OAAO,IAAMN,EAAG,EAGzCO,iBAAkBA,CAACX,EAAGC,KACpB,MAAM9E,GAAK8E,EAAEW,SACPC,EAAIb,EAAEC,EAAEa,QACV3F,IAAG6E,EAAEM,aAAe,GACxB,MAAMS,EAAIf,EAAEC,EAAEe,UAEd,GADI7F,IAAG6E,EAAEM,aAAe,IACpBhB,EAAkB2B,IAAIJ,EAAEE,IAK5B,OAAOF,EAAEE,GAHPG,QAAQC,MAAM,uCAAuCJ,iDAG5C,EAGbK,eAAgBA,CAACpB,EAAGC,KAClB,MAAM/G,EAAO+G,EAAElC,UACf,IAAIsC,EAAOJ,EAAEoB,OAAOhB,KASpB,OALIA,EAAKiB,WAAW,OAClBjB,EAAOA,EAAKxH,MAAM,IAIJ,OAATwH,EACFL,EAAE9G,EAAK,IAAM8G,EAAE9G,EAAK,IAAM8G,EAAE9G,EAAK,KACjC8G,EAAEuB,GAAGlB,IAAS/G,EAAU+G,IAAOrH,MAAMgH,EAAEuB,GAAIrI,EAAKsI,IAAIxB,GAAG,EAG9DyB,gBAAiBA,CAACzB,EAAGC,IAAMA,EAAEyB,SAASF,IAAIxB,GAE1C2B,iBAAkBA,CAAC3B,EAAGC,IAAM3I,EAAI2I,EAAE2B,UAAU5B,EAAEC,EAAE4B,MAAO7B,EAAEC,EAAE6B,QAE3DC,gBAAiBA,CAAC/B,EAAGC,IAAMrH,EAAMqH,EAAE2B,UAAU5B,EAAEC,EAAE+B,WAEjDC,sBAAuBA,CAACjC,EAAGC,IAAMD,EAAEC,EAAEf,MACjCc,EAAEC,EAAEiC,YACJlC,EAAEC,EAAEkC,WAERC,kBAAmBA,CAACpC,EAAGC,IAAqB,OAAfA,EAAE2B,SAC3B5B,EAAEC,EAAE4B,OAAS7B,EAAEC,EAAE6B,OACjB9B,EAAEC,EAAE4B,OAAS7B,EAAEC,EAAE6B,OAErBO,iBAAkBA,CAACrC,EAAGC,IAAMA,EAAEqC,WAAWC,QAAO,CAAC1B,EAAGE,KAClDf,EAAEM,aAAe,EACjB,MAAMkC,EAAIxC,EAAEe,EAAE0B,KAQd,OAPAzC,EAAEM,aAAe,EACbhB,EAAkB2B,IAAIjB,EAAEe,EAAEb,QAE5BgB,QAAQC,MAAM,yCAAyCqB,kDAEvD3B,EAAE2B,GAAKxC,EAAEe,EAAEb,OAENW,CAAC,GACP,CAAE,IAGQ,SAAA6B,EAASC,EAAKpB,EAAIb,EAAQH,EAAOC,EAAOC,GACrD,MAAMT,EAAIC,GAAKH,EAASG,EAAE2C,MAAM5C,EAAGC,GAWnC,OAVAD,EAAEM,YAAc,EAChBN,EAAEuB,GAAKsB,OAAOC,OAAOvB,GACrBvB,EAAEU,OAASA,EACXV,EAAEO,MAAQA,EACVP,EAAEQ,MAAQA,EACVR,EAAES,KAAOA,EAGTpB,EAAe0D,SAAQC,GAAKhD,EAAEuB,GAAGyB,GAAK,WAAA,OAAaxC,EAAMyC,KAAKD,MAAGjF,cAE1DiC,EAAE2C,EACX,CC/Fe,IAAAO,EAAA,CAIbtB,QAAAA,CAASuB,EAAKC,GACZ,MAAMT,EAAMS,EAAKT,IAAKpB,EAAK4B,EAAIE,UAC/B,OAAOC,GAAKZ,EAAUC,EAAKpB,EAAI+B,EAChC,EAKDC,SAAAA,CAAUJ,EAAKC,GACb,MAAMT,EAAMS,EAAKT,IAAKpB,EAAK4B,EAAIE,UAC/B,MAAO,CAAC9C,EAAO+C,IAAMZ,EAAUC,EAAKpB,EAAI+B,EAAG/C,EAC5C,EAKDC,KAAAA,CAAM2C,EAAKC,GACT,MAAMT,EAAMS,EAAKT,IAAKpB,EAAK4B,EAAIE,UAC/B,OAAO7C,GAASkC,EAAUC,EAAKpB,OAAIiC,OAAWA,EAAWhD,EAC1D,EAKDiD,OAAAA,CAAQN,EAAKC,GACX,MAAMT,EAAMS,EAAKT,IAAKpB,EAAK4B,EAAIE,UAC/B,MAAO,CAACC,EAAG9C,KACT,MAAMD,EAAQC,EAAMC,MAAQD,EAAMC,KAAKF,MACvC,OAAOmC,EAAUC,EAAKpB,EAAI+B,EAAG/C,EAAOC,EAAM,CAE7C,EAKDkD,MAAAA,CAAOP,EAAKO,GACV,MAAMC,SAACA,EAAQC,SAAEA,GAAYF,EACvBnC,EAAK4B,EAAIE,UACTQ,EAAoB,UAAbF,GACa,UAAbA,GACa,SAAbA,EAEb,MAAO,CAAClD,EAAM6C,KACZ,MAAM/C,EAAQE,EAAKF,MACnB,IAAWuD,EAAP7K,EAAI,EAER,IAAK,MAAMoH,KAAQuD,EACjBE,EAAIpB,EAAUkB,EAASvD,GAAMsC,IAAKpB,EAAI+B,EAAG/C,OAAOiD,EAAW/C,GACvDA,EAAKJ,KAAUyD,IACjBrD,EAAKJ,GAAQyD,EACb7K,EAAI,GAOR,MAHiB,SAAb0K,GC7DK,SAASlD,EAAMiD,EAAQG,GACpC,IAAIzE,EAEAsE,EAAOK,KACLL,EAAO7F,GACLgG,GAAQpD,EAAK5C,EAAI4C,EAAKsD,KACxB3E,EAAIqB,EAAK5C,EACT4C,EAAK5C,EAAI4C,EAAKsD,GACdtD,EAAKsD,GAAK3E,GAEZqB,EAAKuD,MAAQvD,EAAKsD,GAAKtD,EAAK5C,GAE5B4C,EAAK5C,EAAI4C,EAAKsD,IAAMtD,EAAKuD,OAAS,IAIlCN,EAAOO,KACTxD,EAAK5C,EAAI4C,EAAKwD,IAAMxD,EAAKuD,OAAS,GAAK,GAGrCN,EAAOQ,KACLR,EAAOxI,GACL2I,GAAQpD,EAAKvF,EAAIuF,EAAKyD,KACxB9E,EAAIqB,EAAKvF,EACTuF,EAAKvF,EAAIuF,EAAKyD,GACdzD,EAAKyD,GAAK9E,GAEZqB,EAAK0D,OAAS1D,EAAKyD,GAAKzD,EAAKvF,GAE7BuF,EAAKvF,EAAIuF,EAAKyD,IAAMzD,EAAK0D,QAAU,IAInCT,EAAOU,KACT3D,EAAKvF,EAAIuF,EAAK2D,IAAM3D,EAAK0D,QAAU,GAAK,EAE5C,CD0BQE,CAAc5D,EAAMmD,EAAUC,GAEzB5K,CAAC,CAEZ"}
|
|
1
|
+
{"version":3,"file":"vega-interpreter.min.js","sources":["../src/constants.js","../src/ops-binary.js","../src/ops-unary.js","../src/functions.js","../src/interpret.js","../src/expression.js","../src/adjust-spatial.js"],"sourcesContent":["export default {\n NaN: NaN,\n E: Math.E,\n LN2: Math.LN2,\n LN10: Math.LN10,\n LOG2E: Math.LOG2E,\n LOG10E: Math.LOG10E,\n PI: Math.PI,\n SQRT1_2: Math.SQRT1_2,\n SQRT2: Math.SQRT2,\n MIN_VALUE: Number.MIN_VALUE,\n MAX_VALUE: Number.MAX_VALUE\n};\n","export default {\n '*': (a, b) => a * b,\n '+': (a, b) => a + b,\n '-': (a, b) => a - b,\n '/': (a, b) => a / b,\n '%': (a, b) => a % b,\n '>': (a, b) => a > b,\n '<': (a, b) => a < b,\n '<=': (a, b) => a <= b,\n '>=': (a, b) => a >= b,\n '==': (a, b) => a == b,\n '!=': (a, b) => a != b,\n '===': (a, b) => a === b,\n '!==': (a, b) => a !== b,\n '&': (a, b) => a & b,\n '|': (a, b) => a | b,\n '^': (a, b) => a ^ b,\n '<<': (a, b) => a << b,\n '>>': (a, b) => a >> b,\n '>>>': (a, b) => a >>> b\n};\n","export default {\n '+': a => +a,\n '-': a => -a,\n '~': a => ~a,\n '!': a => !a\n};\n","import { ascending } from 'vega-util';\n\nconst slice = Array.prototype.slice;\n\nconst apply = (m, args, cast) => {\n const obj = cast ? cast(args[0]) : args[0];\n return obj[m].apply(obj, slice.call(args, 1));\n};\n\nconst datetime = (y, m, d, H, M, S, ms) =>\n new Date(y, m || 0, d != null ? d : 1, H || 0, M || 0, S || 0, ms || 0);\n\nexport default {\n // math functions\n isNaN: Number.isNaN,\n isFinite: Number.isFinite,\n abs: Math.abs,\n acos: Math.acos,\n asin: Math.asin,\n atan: Math.atan,\n atan2: Math.atan2,\n ceil: Math.ceil,\n cos: Math.cos,\n exp: Math.exp,\n floor: Math.floor,\n log: Math.log,\n max: Math.max,\n min: Math.min,\n pow: Math.pow,\n random: Math.random,\n round: Math.round,\n sin: Math.sin,\n sqrt: Math.sqrt,\n tan: Math.tan,\n clamp: (a, b, c) => Math.max(b, Math.min(c, a)),\n\n // date functions\n now: Date.now,\n utc: Date.UTC,\n datetime: datetime,\n date: d => new Date(d).getDate(),\n day: d => new Date(d).getDay(),\n year: d => new Date(d).getFullYear(),\n month: d => new Date(d).getMonth(),\n hours: d => new Date(d).getHours(),\n minutes: d => new Date(d).getMinutes(),\n seconds: d => new Date(d).getSeconds(),\n milliseconds: d => new Date(d).getMilliseconds(),\n time: d => new Date(d).getTime(),\n timezoneoffset: d => new Date(d).getTimezoneOffset(),\n utcdate: d => new Date(d).getUTCDate(),\n utcday: d => new Date(d).getUTCDay(),\n utcyear: d => new Date(d).getUTCFullYear(),\n utcmonth: d => new Date(d).getUTCMonth(),\n utchours: d => new Date(d).getUTCHours(),\n utcminutes: d => new Date(d).getUTCMinutes(),\n utcseconds: d => new Date(d).getUTCSeconds(),\n utcmilliseconds: d => new Date(d).getUTCMilliseconds(),\n\n // sequence functions\n length: x => x.length,\n join: function() { return apply('join', arguments); },\n indexof: function() { return apply('indexOf', arguments); },\n lastindexof: function() { return apply('lastIndexOf', arguments); },\n slice: function() { return apply('slice', arguments); },\n reverse: x => x.slice().reverse(),\n sort: x => x.slice().sort(ascending),\n\n // string functions\n parseFloat: parseFloat,\n parseInt: parseInt,\n upper: x => String(x).toUpperCase(),\n lower: x => String(x).toLowerCase(),\n substring: function() { return apply('substring', arguments, String); },\n split: function() { return apply('split', arguments, String); },\n replace: function() { return apply('replace', arguments, String); },\n trim: x => String(x).trim(),\n // Base64 encode/decode\n // Convert binary string to base64-encoded ascii\n btoa: x => btoa(x),\n // Convert base64-encoded ascii to binary string\n atob: x => atob(x),\n\n // regexp functions\n regexp: RegExp,\n test: (r, t) => RegExp(r).test(t)\n};\n","import Constants from './constants';\nimport Ops from './ops-binary';\nimport Unary from './ops-unary';\nimport Functions from './functions';\nimport {DisallowedObjectProperties} from 'vega-util';\n\nconst EventFunctions = ['view', 'item', 'group', 'xy', 'x', 'y'];\nconst DisallowedMethods = new Set([\n Function,\n eval,\n setTimeout,\n setInterval\n]);\n\nif (typeof setImmediate === 'function') DisallowedMethods.add(setImmediate);\n\nconst Visitors = {\n Literal: ($, n) => n.value,\n\n Identifier: ($, n) => {\n const id = n.name;\n return $.memberDepth > 0 ? id\n : id === 'datum' ? $.datum\n : id === 'event' ? $.event\n : id === 'item' ? $.item\n : Constants[id] || $.params['$' + id];\n },\n\n MemberExpression: ($, n) => {\n const d = !n.computed,\n o = $(n.object);\n if (d) $.memberDepth += 1;\n const p = $(n.property);\n if (d) $.memberDepth -= 1;\n if (DisallowedMethods.has(o[p])) {\n // eslint-disable-next-line no-console\n console.error(`Prevented interpretation of member \"${p}\" which could lead to insecure code execution`);\n return;\n }\n return o[p];\n },\n\n CallExpression: ($, n) => {\n const args = n.arguments;\n let name = n.callee.name;\n\n // handle special internal functions used by encoders\n // re-route to corresponding standard function\n if (name.startsWith('_')) {\n name = name.slice(1);\n }\n\n // special case \"if\" due to conditional evaluation of branches\n return name === 'if'\n ? ($(args[0]) ? $(args[1]) : $(args[2]))\n : ($.fn[name] || Functions[name]).apply($.fn, args.map($));\n },\n\n ArrayExpression: ($, n) => n.elements.map($),\n\n BinaryExpression: ($, n) => Ops[n.operator]($(n.left), $(n.right)),\n\n UnaryExpression: ($, n) => Unary[n.operator]($(n.argument)),\n\n ConditionalExpression: ($, n) => $(n.test)\n ? $(n.consequent)\n : $(n.alternate),\n\n LogicalExpression: ($, n) => n.operator === '&&'\n ? $(n.left) && $(n.right)\n : $(n.left) || $(n.right),\n\n ObjectExpression: ($, n) => n.properties.reduce((o, p) => {\n $.memberDepth += 1;\n const k = $(p.key);\n $.memberDepth -= 1;\n const v = $(p.value);\n if (DisallowedObjectProperties.has(k)) { // eslint-disable-next-line no-console\n console.error(`Prevented interpretation of property \"${k}\" which could lead to insecure code execution`);\n } else if (DisallowedMethods.has(v)) { // eslint-disable-next-line no-console\n console.error(`Prevented interpretation of method \"${v}\" which could lead to insecure code execution`);\n } else {\n o[k] = v;\n }\n return o;\n }, {})\n};\n\nexport default function(ast, fn, params, datum, event, item) {\n const $ = n => Visitors[n.type]($, n);\n $.memberDepth = 0;\n $.fn = Object.create(fn);\n $.params = params;\n $.datum = datum;\n $.event = event;\n $.item = item;\n\n // route event functions to annotated vega event context\n EventFunctions.forEach(f => $.fn[f] = (...args) => event.vega[f](...args));\n\n return $(ast);\n}\n","import adjustSpatial from './adjust-spatial';\nimport interpret from './interpret';\n\nexport default {\n /**\n * Parse an expression used to update an operator value.\n */\n operator(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return _ => interpret(ast, fn, _);\n },\n\n /**\n * Parse an expression provided as an operator parameter value.\n */\n parameter(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return (datum, _) => interpret(ast, fn, _, datum);\n },\n\n /**\n * Parse an expression applied to an event stream.\n */\n event(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return event => interpret(ast, fn, undefined, undefined, event);\n },\n\n /**\n * Parse an expression used to handle an event-driven operator update.\n */\n handler(ctx, expr) {\n const ast = expr.ast, fn = ctx.functions;\n return (_, event) => {\n const datum = event.item && event.item.datum;\n return interpret(ast, fn, _, datum, event);\n };\n },\n\n /**\n * Parse an expression that performs visual encoding.\n */\n encode(ctx, encode) {\n const {marktype, channels} = encode,\n fn = ctx.functions,\n swap = marktype === 'group'\n || marktype === 'image'\n || marktype === 'rect';\n\n return (item, _) => {\n const datum = item.datum;\n let m = 0, v;\n\n for (const name in channels) {\n v = interpret(channels[name].ast, fn, _, datum, undefined, item);\n if (item[name] !== v) {\n item[name] = v;\n m = 1;\n }\n }\n\n if (marktype !== 'rule') {\n adjustSpatial(item, channels, swap);\n }\n return m;\n };\n }\n};\n","export default function(item, encode, swap) {\n let t;\n\n if (encode.x2) {\n if (encode.x) {\n if (swap && item.x > item.x2) {\n t = item.x;\n item.x = item.x2;\n item.x2 = t;\n }\n item.width = item.x2 - item.x;\n } else {\n item.x = item.x2 - (item.width || 0);\n }\n }\n\n if (encode.xc) {\n item.x = item.xc - (item.width || 0) / 2;\n }\n\n if (encode.y2) {\n if (encode.y) {\n if (swap && item.y > item.y2) {\n t = item.y;\n item.y = item.y2;\n item.y2 = t;\n }\n item.height = item.y2 - item.y;\n } else {\n item.y = item.y2 - (item.height || 0);\n }\n }\n\n if (encode.yc) {\n item.y = item.yc - (item.height || 0) / 2;\n }\n}\n"],"names":["Constants","NaN","E","Math","LN2","LN10","LOG2E","LOG10E","PI","SQRT1_2","SQRT2","MIN_VALUE","Number","MAX_VALUE","Ops","*","a","b","+","-","/","%",">","<","<=",">=","==","!=","===","!==","&","|","^","<<",">>",">>>","Unary","slice","Array","prototype","apply","m","args","cast","obj","call","Functions","isNaN","isFinite","abs","acos","asin","atan","atan2","ceil","cos","exp","floor","log","max","min","pow","random","round","sin","sqrt","tan","clamp","c","now","Date","utc","UTC","datetime","y","d","H","M","S","ms","date","getDate","day","getDay","year","getFullYear","month","getMonth","hours","getHours","minutes","getMinutes","seconds","getSeconds","milliseconds","getMilliseconds","time","getTime","timezoneoffset","getTimezoneOffset","utcdate","getUTCDate","utcday","getUTCDay","utcyear","getUTCFullYear","utcmonth","getUTCMonth","utchours","getUTCHours","utcminutes","getUTCMinutes","utcseconds","getUTCSeconds","utcmilliseconds","getUTCMilliseconds","length","x","join","arguments","indexof","lastindexof","reverse","sort","ascending","parseFloat","parseInt","upper","String","toUpperCase","lower","toLowerCase","substring","split","replace","trim","btoa","atob","regexp","RegExp","test","r","t","EventFunctions","DisallowedMethods","Set","Function","eval","setTimeout","setInterval","setImmediate","add","Visitors","Literal","$","n","value","Identifier","id","name","memberDepth","datum","event","item","params","MemberExpression","computed","o","object","p","property","has","console","error","CallExpression","callee","startsWith","fn","map","ArrayExpression","elements","BinaryExpression","operator","left","right","UnaryExpression","argument","ConditionalExpression","consequent","alternate","LogicalExpression","ObjectExpression","properties","reduce","k","key","v","DisallowedObjectProperties","interpret","ast","type","Object","create","forEach","f","vega","expression","ctx","expr","functions","_","parameter","undefined","handler","encode","marktype","channels","swap","x2","width","xc","y2","height","yc","adjustSpatial"],"mappings":"8RAAe,IAAAA,EAAA,CACbC,IAAYA,IACZC,EAAYC,KAAKD,EACjBE,IAAYD,KAAKC,IACjBC,KAAYF,KAAKE,KACjBC,MAAYH,KAAKG,MACjBC,OAAYJ,KAAKI,OACjBC,GAAYL,KAAKK,GACjBC,QAAYN,KAAKM,QACjBC,MAAYP,KAAKO,MACjBC,UAAYC,OAAOD,UACnBE,UAAYD,OAAOC,WCXNC,EAAA,CACb,IAAKC,CAACC,EAAGC,IAAMD,EAAIC,EACnB,IAAKC,CAACF,EAAGC,IAAMD,EAAIC,EACnB,IAAKE,CAACH,EAAGC,IAAMD,EAAIC,EACnB,IAAKG,CAACJ,EAAGC,IAAMD,EAAIC,EACnB,IAAKI,CAACL,EAAGC,IAAMD,EAAIC,EACnB,IAAKK,CAACN,EAAGC,IAAMD,EAAIC,EACnB,IAAKM,CAACP,EAAGC,IAAMD,EAAIC,EACnB,KAAMO,CAACR,EAAGC,IAAMD,GAAKC,EACrB,KAAMQ,CAACT,EAAGC,IAAMD,GAAKC,EACrB,KAAMS,CAACV,EAAGC,IAAMD,GAAKC,EACrB,KAAMU,CAACX,EAAGC,IAAMD,GAAKC,EACrB,MAAOW,CAACZ,EAAGC,IAAMD,IAAMC,EACvB,MAAOY,CAACb,EAAGC,IAAMD,IAAMC,EACvB,IAAKa,CAACd,EAAGC,IAAMD,EAAIC,EACnB,IAAKc,CAACf,EAAGC,IAAMD,EAAIC,EACnB,IAAKe,CAAChB,EAAGC,IAAMD,EAAIC,EACnB,KAAMgB,CAACjB,EAAGC,IAAMD,GAAKC,EACrB,KAAMiB,CAAClB,EAAGC,IAAMD,GAAKC,EACrB,MAAOkB,CAACnB,EAAGC,IAAMD,IAAMC,GCnBVmB,EAAA,CACb,IAAKpB,IAAMA,EACX,IAAKA,IAAMA,EACX,IAAKA,IAAMA,EACX,IAAKA,IAAMA,GCFb,MAAMqB,EAAQC,MAAMC,UAAUF,MAExBG,EAAQA,CAACC,EAAGC,EAAMC,KACtB,MAAMC,EAAMD,EAAOA,EAAKD,EAAK,IAAMA,EAAK,GACxC,OAAOE,EAAIH,GAAGD,MAAMI,EAAKP,EAAMQ,KAAKH,EAAM,GAAG,EAMhC,IAAAI,EAAA,CAEbC,MAAWnC,OAAOmC,MAClBC,SAAWpC,OAAOoC,SAClBC,IAAW9C,KAAK8C,IAChBC,KAAW/C,KAAK+C,KAChBC,KAAWhD,KAAKgD,KAChBC,KAAWjD,KAAKiD,KAChBC,MAAWlD,KAAKkD,MAChBC,KAAWnD,KAAKmD,KAChBC,IAAWpD,KAAKoD,IAChBC,IAAWrD,KAAKqD,IAChBC,MAAWtD,KAAKsD,MAChBC,IAAWvD,KAAKuD,IAChBC,IAAWxD,KAAKwD,IAChBC,IAAWzD,KAAKyD,IAChBC,IAAW1D,KAAK0D,IAChBC,OAAW3D,KAAK2D,OAChBC,MAAW5D,KAAK4D,MAChBC,IAAW7D,KAAK6D,IAChBC,KAAW9D,KAAK8D,KAChBC,IAAW/D,KAAK+D,IAChBC,MAAWA,CAACnD,EAAGC,EAAGmD,IAAMjE,KAAKwD,IAAI1C,EAAGd,KAAKyD,IAAIQ,EAAGpD,IAGhDqD,IAAkBC,KAAKD,IACvBE,IAAkBD,KAAKE,IACvBC,SA9BeA,CAACC,EAAGjC,EAAGkC,EAAGC,EAAGC,EAAGC,EAAGC,IAClC,IAAIT,KAAKI,EAAGjC,GAAK,EAAQ,MAALkC,EAAYA,EAAI,EAAGC,GAAK,EAAGC,GAAK,EAAGC,GAAK,EAAGC,GAAM,GA8BrEC,KAAkBL,GAAK,IAAIL,KAAKK,GAAGM,UACnCC,IAAkBP,GAAK,IAAIL,KAAKK,GAAGQ,SACnCC,KAAkBT,GAAK,IAAIL,KAAKK,GAAGU,cACnCC,MAAkBX,GAAK,IAAIL,KAAKK,GAAGY,WACnCC,MAAkBb,GAAK,IAAIL,KAAKK,GAAGc,WACnCC,QAAkBf,GAAK,IAAIL,KAAKK,GAAGgB,aACnCC,QAAkBjB,GAAK,IAAIL,KAAKK,GAAGkB,aACnCC,aAAkBnB,GAAK,IAAIL,KAAKK,GAAGoB,kBACnCC,KAAkBrB,GAAK,IAAIL,KAAKK,GAAGsB,UACnCC,eAAkBvB,GAAK,IAAIL,KAAKK,GAAGwB,oBACnCC,QAAkBzB,GAAK,IAAIL,KAAKK,GAAG0B,aACnCC,OAAkB3B,GAAK,IAAIL,KAAKK,GAAG4B,YACnCC,QAAkB7B,GAAK,IAAIL,KAAKK,GAAG8B,iBACnCC,SAAkB/B,GAAK,IAAIL,KAAKK,GAAGgC,cACnCC,SAAkBjC,GAAK,IAAIL,KAAKK,GAAGkC,cACnCC,WAAkBnC,GAAK,IAAIL,KAAKK,GAAGoC,gBACnCC,WAAkBrC,GAAK,IAAIL,KAAKK,GAAGsC,gBACnCC,gBAAkBvC,GAAK,IAAIL,KAAKK,GAAGwC,qBAGnCC,OAAcC,GAAKA,EAAED,OACrBE,KAAc,WAAa,OAAO9E,EAAM,OAAQ+E,UAAa,EAC7DC,QAAc,WAAa,OAAOhF,EAAM,UAAW+E,UAAa,EAChEE,YAAc,WAAa,OAAOjF,EAAM,cAAe+E,UAAa,EACpElF,MAAc,WAAa,OAAOG,EAAM,QAAS+E,UAAa,EAC9DG,QAAcL,GAAKA,EAAEhF,QAAQqF,UAC7BC,KAAcN,GAAKA,EAAEhF,QAAQsF,KAAKC,EAAAA,WAGlCC,WAAcA,WACdC,SAAcA,SACdC,MAAcV,GAAKW,OAAOX,GAAGY,cAC7BC,MAAcb,GAAKW,OAAOX,GAAGc,cAC7BC,UAAc,WAAa,OAAO5F,EAAM,YAAa+E,UAAWS,OAAU,EAC1EK,MAAc,WAAa,OAAO7F,EAAM,QAAS+E,UAAWS,OAAU,EACtEM,QAAc,WAAa,OAAO9F,EAAM,UAAW+E,UAAWS,OAAU,EACxEO,KAAclB,GAAKW,OAAOX,GAAGkB,OAG7BC,KAAcnB,GAAKmB,KAAKnB,GAExBoB,KAAcpB,GAAKoB,KAAKpB,GAGxBqB,OAAcC,OACdC,KAAcA,CAACC,EAAGC,IAAMH,OAAOE,GAAGD,KAAKE,IC/EzC,MAAMC,EAAiB,CAAC,OAAQ,OAAQ,QAAS,KAAM,IAAK,KACtDC,EAAoB,IAAIC,IAAI,CAChCC,SACAC,KACAC,WACAC,cAG0B,mBAAjBC,cAA6BN,EAAkBO,IAAID,cAE9D,MAAME,EAAW,CACfC,QAASA,CAACC,EAAGC,IAAMA,EAAEC,MAErBC,WAAYA,CAACH,EAAGC,KACd,MAAMG,EAAKH,EAAEI,KACb,OAAOL,EAAEM,YAAc,EAAIF,EAChB,UAAPA,EAAiBJ,EAAEO,MACZ,UAAPH,EAAiBJ,EAAEQ,MACZ,SAAPJ,EAAgBJ,EAAES,KAClBnK,EAAU8J,IAAOJ,EAAEU,OAAO,IAAMN,EAAG,EAGzCO,iBAAkBA,CAACX,EAAGC,KACpB,MAAMhF,GAAKgF,EAAEW,SACPC,EAAIb,EAAEC,EAAEa,QACV7F,IAAG+E,EAAEM,aAAe,GACxB,MAAMS,EAAIf,EAAEC,EAAEe,UAEd,GADI/F,IAAG+E,EAAEM,aAAe,IACpBhB,EAAkB2B,IAAIJ,EAAEE,IAK5B,OAAOF,EAAEE,GAHPG,QAAQC,MAAM,uCAAuCJ,iDAG5C,EAGbK,eAAgBA,CAACpB,EAAGC,KAClB,MAAMjH,EAAOiH,EAAEpC,UACf,IAAIwC,EAAOJ,EAAEoB,OAAOhB,KASpB,OALIA,EAAKiB,WAAW,OAClBjB,EAAOA,EAAK1H,MAAM,IAIJ,OAAT0H,EACFL,EAAEhH,EAAK,IAAMgH,EAAEhH,EAAK,IAAMgH,EAAEhH,EAAK,KACjCgH,EAAEuB,GAAGlB,IAASjH,EAAUiH,IAAOvH,MAAMkH,EAAEuB,GAAIvI,EAAKwI,IAAIxB,GAAG,EAG9DyB,gBAAiBA,CAACzB,EAAGC,IAAMA,EAAEyB,SAASF,IAAIxB,GAE1C2B,iBAAkBA,CAAC3B,EAAGC,IAAM7I,EAAI6I,EAAE2B,UAAU5B,EAAEC,EAAE4B,MAAO7B,EAAEC,EAAE6B,QAE3DC,gBAAiBA,CAAC/B,EAAGC,IAAMvH,EAAMuH,EAAE2B,UAAU5B,EAAEC,EAAE+B,WAEjDC,sBAAuBA,CAACjC,EAAGC,IAAMD,EAAEC,EAAEf,MACjCc,EAAEC,EAAEiC,YACJlC,EAAEC,EAAEkC,WAERC,kBAAmBA,CAACpC,EAAGC,IAAqB,OAAfA,EAAE2B,SAC3B5B,EAAEC,EAAE4B,OAAS7B,EAAEC,EAAE6B,OACjB9B,EAAEC,EAAE4B,OAAS7B,EAAEC,EAAE6B,OAErBO,iBAAkBA,CAACrC,EAAGC,IAAMA,EAAEqC,WAAWC,QAAO,CAAC1B,EAAGE,KAClDf,EAAEM,aAAe,EACjB,MAAMkC,EAAIxC,EAAEe,EAAE0B,KACdzC,EAAEM,aAAe,EACjB,MAAMoC,EAAI1C,EAAEe,EAAEb,OAQd,OAPIyC,EAA0BA,2BAAC1B,IAAIuB,GACjCtB,QAAQC,MAAM,yCAAyCqB,kDAC9ClD,EAAkB2B,IAAIyB,GAC/BxB,QAAQC,MAAM,uCAAuCuB,kDAErD7B,EAAE2B,GAAKE,EAEF7B,CAAC,GACP,CAAE,IAGQ,SAAA+B,EAASC,EAAKtB,EAAIb,EAAQH,EAAOC,EAAOC,GACrD,MAAMT,EAAIC,GAAKH,EAASG,EAAE6C,MAAM9C,EAAGC,GAWnC,OAVAD,EAAEM,YAAc,EAChBN,EAAEuB,GAAKwB,OAAOC,OAAOzB,GACrBvB,EAAEU,OAASA,EACXV,EAAEO,MAAQA,EACVP,EAAEQ,MAAQA,EACVR,EAAES,KAAOA,EAGTpB,EAAe4D,SAAQC,GAAKlD,EAAEuB,GAAG2B,GAAK,WAAA,OAAa1C,EAAM2C,KAAKD,MAAGrF,cAE1DmC,EAAE6C,EACX,CClGe,IAAAO,EAAA,CAIbxB,QAAAA,CAASyB,EAAKC,GACZ,MAAMT,EAAMS,EAAKT,IAAKtB,EAAK8B,EAAIE,UAC/B,OAAOC,GAAKZ,EAAUC,EAAKtB,EAAIiC,EAChC,EAKDC,SAAAA,CAAUJ,EAAKC,GACb,MAAMT,EAAMS,EAAKT,IAAKtB,EAAK8B,EAAIE,UAC/B,MAAO,CAAChD,EAAOiD,IAAMZ,EAAUC,EAAKtB,EAAIiC,EAAGjD,EAC5C,EAKDC,KAAAA,CAAM6C,EAAKC,GACT,MAAMT,EAAMS,EAAKT,IAAKtB,EAAK8B,EAAIE,UAC/B,OAAO/C,GAASoC,EAAUC,EAAKtB,OAAImC,OAAWA,EAAWlD,EAC1D,EAKDmD,OAAAA,CAAQN,EAAKC,GACX,MAAMT,EAAMS,EAAKT,IAAKtB,EAAK8B,EAAIE,UAC/B,MAAO,CAACC,EAAGhD,KACT,MAAMD,EAAQC,EAAMC,MAAQD,EAAMC,KAAKF,MACvC,OAAOqC,EAAUC,EAAKtB,EAAIiC,EAAGjD,EAAOC,EAAM,CAE7C,EAKDoD,MAAAA,CAAOP,EAAKO,GACV,MAAMC,SAACA,EAAQC,SAAEA,GAAYF,EACvBrC,EAAK8B,EAAIE,UACTQ,EAAoB,UAAbF,GACa,UAAbA,GACa,SAAbA,EAEb,MAAO,CAACpD,EAAM+C,KACZ,MAAMjD,EAAQE,EAAKF,MACnB,IAAWmC,EAAP3J,EAAI,EAER,IAAK,MAAMsH,KAAQyD,EACjBpB,EAAIE,EAAUkB,EAASzD,GAAMwC,IAAKtB,EAAIiC,EAAGjD,OAAOmD,EAAWjD,GACvDA,EAAKJ,KAAUqC,IACjBjC,EAAKJ,GAAQqC,EACb3J,EAAI,GAOR,MAHiB,SAAb8K,GC7DK,SAASpD,EAAMmD,EAAQG,GACpC,IAAI3E,EAEAwE,EAAOI,KACLJ,EAAOjG,GACLoG,GAAQtD,EAAK9C,EAAI8C,EAAKuD,KACxB5E,EAAIqB,EAAK9C,EACT8C,EAAK9C,EAAI8C,EAAKuD,GACdvD,EAAKuD,GAAK5E,GAEZqB,EAAKwD,MAAQxD,EAAKuD,GAAKvD,EAAK9C,GAE5B8C,EAAK9C,EAAI8C,EAAKuD,IAAMvD,EAAKwD,OAAS,IAIlCL,EAAOM,KACTzD,EAAK9C,EAAI8C,EAAKyD,IAAMzD,EAAKwD,OAAS,GAAK,GAGrCL,EAAOO,KACLP,EAAO5I,GACL+I,GAAQtD,EAAKzF,EAAIyF,EAAK0D,KACxB/E,EAAIqB,EAAKzF,EACTyF,EAAKzF,EAAIyF,EAAK0D,GACd1D,EAAK0D,GAAK/E,GAEZqB,EAAK2D,OAAS3D,EAAK0D,GAAK1D,EAAKzF,GAE7ByF,EAAKzF,EAAIyF,EAAK0D,IAAM1D,EAAK2D,QAAU,IAInCR,EAAOS,KACT5D,EAAKzF,EAAIyF,EAAK4D,IAAM5D,EAAK2D,QAAU,GAAK,EAE5C,CD0BQE,CAAc7D,EAAMqD,EAAUC,GAEzBhL,CAAC,CAEZ"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import { ascending } from 'vega-util';
|
|
1
|
+
import { ascending, DisallowedObjectProperties } from 'vega-util';
|
|
2
2
|
|
|
3
3
|
function adjustSpatial (item, encode, swap) {
|
|
4
4
|
let t;
|
|
@@ -159,6 +159,11 @@ var Functions = {
|
|
|
159
159
|
return apply('replace', arguments, String);
|
|
160
160
|
},
|
|
161
161
|
trim: x => String(x).trim(),
|
|
162
|
+
// Base64 encode/decode
|
|
163
|
+
// Convert binary string to base64-encoded ascii
|
|
164
|
+
btoa: x => btoa(x),
|
|
165
|
+
// Convert base64-encoded ascii to binary string
|
|
166
|
+
atob: x => atob(x),
|
|
162
167
|
// regexp functions
|
|
163
168
|
regexp: RegExp,
|
|
164
169
|
test: (r, t) => RegExp(r).test(t)
|
|
@@ -208,11 +213,15 @@ const Visitors = {
|
|
|
208
213
|
$.memberDepth += 1;
|
|
209
214
|
const k = $(p.key);
|
|
210
215
|
$.memberDepth -= 1;
|
|
211
|
-
|
|
216
|
+
const v = $(p.value);
|
|
217
|
+
if (DisallowedObjectProperties.has(k)) {
|
|
212
218
|
// eslint-disable-next-line no-console
|
|
213
219
|
console.error(`Prevented interpretation of property "${k}" which could lead to insecure code execution`);
|
|
220
|
+
} else if (DisallowedMethods.has(v)) {
|
|
221
|
+
// eslint-disable-next-line no-console
|
|
222
|
+
console.error(`Prevented interpretation of method "${v}" which could lead to insecure code execution`);
|
|
214
223
|
} else {
|
|
215
|
-
o[k] =
|
|
224
|
+
o[k] = v;
|
|
216
225
|
}
|
|
217
226
|
return o;
|
|
218
227
|
}, {})
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "vega-interpreter",
|
|
3
|
-
"version": "1.1
|
|
3
|
+
"version": "1.2.1",
|
|
4
4
|
"description": "CSP-compliant interpreter for Vega expressions.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"vega",
|
|
@@ -23,10 +23,9 @@
|
|
|
23
23
|
"prepublishOnly": "yarn test && yarn build"
|
|
24
24
|
},
|
|
25
25
|
"dependencies": {
|
|
26
|
-
"vega-util": "^1.17.
|
|
26
|
+
"vega-util": "^1.17.4"
|
|
27
27
|
},
|
|
28
28
|
"devDependencies": {
|
|
29
|
-
"vega": "
|
|
30
|
-
}
|
|
31
|
-
"gitHead": "0e1eb8b091bc83a343bcb23caa87a6d8762abc54"
|
|
29
|
+
"vega": "5.33.1"
|
|
30
|
+
}
|
|
32
31
|
}
|
package/src/functions.js
CHANGED
|
@@ -75,6 +75,11 @@ export default {
|
|
|
75
75
|
split: function() { return apply('split', arguments, String); },
|
|
76
76
|
replace: function() { return apply('replace', arguments, String); },
|
|
77
77
|
trim: x => String(x).trim(),
|
|
78
|
+
// Base64 encode/decode
|
|
79
|
+
// Convert binary string to base64-encoded ascii
|
|
80
|
+
btoa: x => btoa(x),
|
|
81
|
+
// Convert base64-encoded ascii to binary string
|
|
82
|
+
atob: x => atob(x),
|
|
78
83
|
|
|
79
84
|
// regexp functions
|
|
80
85
|
regexp: RegExp,
|
package/src/interpret.js
CHANGED
|
@@ -2,6 +2,7 @@ import Constants from './constants';
|
|
|
2
2
|
import Ops from './ops-binary';
|
|
3
3
|
import Unary from './ops-unary';
|
|
4
4
|
import Functions from './functions';
|
|
5
|
+
import {DisallowedObjectProperties} from 'vega-util';
|
|
5
6
|
|
|
6
7
|
const EventFunctions = ['view', 'item', 'group', 'xy', 'x', 'y'];
|
|
7
8
|
const DisallowedMethods = new Set([
|
|
@@ -73,11 +74,13 @@ const Visitors = {
|
|
|
73
74
|
$.memberDepth += 1;
|
|
74
75
|
const k = $(p.key);
|
|
75
76
|
$.memberDepth -= 1;
|
|
76
|
-
|
|
77
|
-
|
|
77
|
+
const v = $(p.value);
|
|
78
|
+
if (DisallowedObjectProperties.has(k)) { // eslint-disable-next-line no-console
|
|
78
79
|
console.error(`Prevented interpretation of property "${k}" which could lead to insecure code execution`);
|
|
80
|
+
} else if (DisallowedMethods.has(v)) { // eslint-disable-next-line no-console
|
|
81
|
+
console.error(`Prevented interpretation of method "${v}" which could lead to insecure code execution`);
|
|
79
82
|
} else {
|
|
80
|
-
o[k] =
|
|
83
|
+
o[k] = v;
|
|
81
84
|
}
|
|
82
85
|
return o;
|
|
83
86
|
}, {})
|
package/LICENSE
DELETED
|
@@ -1,27 +0,0 @@
|
|
|
1
|
-
Copyright (c) 2015-2023, University of Washington Interactive Data Lab
|
|
2
|
-
All rights reserved.
|
|
3
|
-
|
|
4
|
-
Redistribution and use in source and binary forms, with or without
|
|
5
|
-
modification, are permitted provided that the following conditions are met:
|
|
6
|
-
|
|
7
|
-
1. Redistributions of source code must retain the above copyright notice, this
|
|
8
|
-
list of conditions and the following disclaimer.
|
|
9
|
-
|
|
10
|
-
2. Redistributions in binary form must reproduce the above copyright notice,
|
|
11
|
-
this list of conditions and the following disclaimer in the documentation
|
|
12
|
-
and/or other materials provided with the distribution.
|
|
13
|
-
|
|
14
|
-
3. Neither the name of the copyright holder nor the names of its contributors
|
|
15
|
-
may be used to endorse or promote products derived from this software
|
|
16
|
-
without specific prior written permission.
|
|
17
|
-
|
|
18
|
-
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
19
|
-
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
20
|
-
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
|
21
|
-
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE
|
|
22
|
-
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
23
|
-
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
|
24
|
-
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
|
|
25
|
-
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
|
26
|
-
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
|
27
|
-
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|