next-csrf
Version:
CSRF mitigation library for Next.js
82 lines (63 loc) • 2.19 kB
JavaScript
import keyBinding from './key.binding';
import nodeArray from '../util/node-array';
import { getParentComparator } from '../util/compare-position';
// Bug 286933 - Key events in the autocomplete popup should be hidden from page scripts
// @browser-issue Gecko https://bugzilla.mozilla.org/show_bug.cgi?id=286933
export default function () {
var map = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
var bindings = {};
var context = nodeArray(map.context)[0] || document.documentElement;
delete map.context;
var filter = nodeArray(map.filter);
delete map.filter;
var mapKeys = Object.keys(map);
if (!mapKeys.length) {
throw new TypeError('when/key requires at least one option key');
}
var registerBinding = function registerBinding(event) {
event.keyCodes.forEach(function (code) {
if (!bindings[code]) {
bindings[code] = [];
}
bindings[code].push(event);
});
};
mapKeys.forEach(function (text) {
if (typeof map[text] !== 'function') {
throw new TypeError('when/key requires option["' + text + '"] to be a function');
}
var addCallback = function addCallback(event) {
event.callback = map[text];
return event;
};
keyBinding(text).map(addCallback).forEach(registerBinding);
});
var handleKeyDown = function handleKeyDown(event) {
if (event.defaultPrevented) {
return;
}
if (filter.length) {
// ignore elements within the exempted sub-trees
var isParentOfElement = getParentComparator({ element: event.target, includeSelf: true });
if (filter.some(isParentOfElement)) {
return;
}
}
var key = event.keyCode || event.which;
if (!bindings[key]) {
return;
}
bindings[key].forEach(function (_event) {
if (!_event.matchModifiers(event)) {
return;
}
_event.callback.call(context, event, disengage);
});
};
context.addEventListener('keydown', handleKeyDown, false);
var disengage = function disengage() {
context.removeEventListener('keydown', handleKeyDown, false);
};
return { disengage: disengage };
}
//# sourceMappingURL=key.js.map