5ca2148c7e
* ⚡ Adjust `format` script * 🔥 Remove exemption for `editor-ui` * 🎨 Prettify * 👕 Fix lint
62 lines
1.8 KiB
TypeScript
62 lines
1.8 KiB
TypeScript
import xss, { friendlyAttrValue } from 'xss';
|
|
|
|
/*
|
|
Constants and utility functions that help in HTML, CSS and DOM manipulation
|
|
*/
|
|
|
|
export function sanitizeHtml(dirtyHtml: string) {
|
|
const allowedAttributes = ['href', 'name', 'target', 'title', 'class', 'id'];
|
|
const allowedTags = ['p', 'strong', 'b', 'code', 'a', 'br', 'i', 'em', 'small'];
|
|
|
|
const sanitizedHtml = xss(dirtyHtml, {
|
|
onTagAttr: (tag, name, value) => {
|
|
if (tag === 'img' && name === 'src') {
|
|
// Only allow http requests to supported image files from the `static` directory
|
|
const isImageFile = value.split('#')[0].match(/\.(jpeg|jpg|gif|png|webp)$/) !== null;
|
|
const isStaticImageFile = isImageFile && value.startsWith('/static/');
|
|
if (!value.startsWith('https://') && !isStaticImageFile) {
|
|
return '';
|
|
}
|
|
}
|
|
|
|
// Allow `allowedAttributes` and all `data-*` attributes
|
|
if (allowedAttributes.includes(name) || name.startsWith('data-')) {
|
|
return `${name}="${friendlyAttrValue(value)}"`;
|
|
}
|
|
|
|
return;
|
|
// Return nothing, means keep the default handling measure
|
|
},
|
|
onTag: (tag) => {
|
|
if (!allowedTags.includes(tag)) return '';
|
|
return;
|
|
},
|
|
});
|
|
|
|
return sanitizedHtml;
|
|
}
|
|
|
|
export function getStyleTokenValue(name: string): string {
|
|
const style = getComputedStyle(document.body);
|
|
return style.getPropertyValue(name);
|
|
}
|
|
|
|
export function setPageTitle(title: string) {
|
|
window.document.title = title;
|
|
}
|
|
|
|
export function convertRemToPixels(rem: string) {
|
|
return parseInt(rem, 10) * parseFloat(getComputedStyle(document.documentElement).fontSize);
|
|
}
|
|
|
|
export function isChildOf(parent: Element, child: Element): boolean {
|
|
if (child.parentElement === null) {
|
|
return false;
|
|
}
|
|
if (child.parentElement === parent) {
|
|
return true;
|
|
}
|
|
|
|
return isChildOf(parent, child.parentElement);
|
|
}
|