next-csrf
Version:
CSRF mitigation library for Next.js
65 lines (53 loc) • 1.87 kB
JavaScript
/*
Debugging tool that observe changes to activeElement regardless of focus/blur events.
This utility does *not* work with ShadowDOM.
USAGE:
engage();
document.body.addEventListener('active-element', function(event) {
// event.detail.focus: element that received focus
// event.detail.blur: element that lost focus
}, false);
NOTE: You *can* use event-delegation on focus events by using the capture-phase:
document.body.addEventListener('focus', function(event) {
// event.target: element that received focus
// event.relatedTarget: element that lost focus
}, true);
*/
import '../prototype/window.requestanimationframe';
import CustomEvent from '../prototype/window.customevent';
import decorateService from '../util/decorate-service';
var previousActiveElement = void 0;
var raf = void 0;
function observeActiveElement() {
if (!document.activeElement) {
// IE10 does not redirect focus to <body> when the activeElement is removed
document.body.focus();
} else if (document.activeElement !== previousActiveElement) {
// https://developer.mozilla.org/en/docs/Web/API/CustomEvent
var activeElementEvent = new CustomEvent('active-element', {
bubbles: false,
cancelable: false,
detail: {
focus: document.activeElement,
blur: previousActiveElement
}
});
document.dispatchEvent(activeElementEvent);
previousActiveElement = document.activeElement;
}
if (raf === false) {
return;
}
raf = requestAnimationFrame(observeActiveElement);
}
function engage() {
raf = true;
previousActiveElement = document.activeElement;
observeActiveElement();
}
function disengage() {
cancelAnimationFrame(raf);
raf = false;
}
export default decorateService({ engage: engage, disengage: disengage });
//# sourceMappingURL=active-element.js.map