next-csrf
Version:
CSRF mitigation library for Next.js
23 lines (19 loc) • 826 B
JavaScript
import gif from './media/gif';
import platform from '../util/platform';
// https://developer.mozilla.org/en-US/docs/Web/HTML/Element/img#attr-usemap
export default {
element: 'div',
mutate: function mutate(element) {
element.innerHTML = '<map name="image-map-area-href-test">' + '<area shape="rect" coords="63,19,144,45"></map>' + '<img usemap="#image-map-area-href-test" alt="" src="' + gif + '">';
return element.querySelector('area');
},
validate: function validate(element, focusTarget, _document) {
if (platform.is.GECKO) {
// fixes https://github.com/medialize/ally.js/issues/35
// Firefox loads the DataURI asynchronously, causing a false-negative
return true;
}
return _document.activeElement === focusTarget;
}
};
//# sourceMappingURL=focus-area-without-href.js.map