next-csrf
Version:
CSRF mitigation library for Next.js
105 lines (81 loc) • 3.5 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", {
value: true
});
exports.default = function () {
var _ref2 = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {},
context = _ref2.context,
filter = _ref2.filter;
context = (0, _contextToElement2.default)({
label: 'get/insignificant-branches',
defaultToDocument: true,
context: context
});
filter = (0, _nodeArray2.default)(filter);
if (!filter.length) {
throw new TypeError('get/insignificant-branches requires valid options.filter');
}
return queryInsignificantBranches({
context: context,
filter: filter
});
};
var _contextToElement = require('../util/context-to-element');
var _contextToElement2 = _interopRequireDefault(_contextToElement);
var _nodeArray = require('../util/node-array');
var _nodeArray2 = _interopRequireDefault(_nodeArray);
var _comparePosition = require('../util/compare-position');
var _getDocument = require('../util/get-document');
var _getDocument2 = _interopRequireDefault(_getDocument);
function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
// find all highest elements within context that do not contain any of the filter elements.
// (basically the tree minus the parent paths of each filtered element reduced to the top most nodes)
// originally inspired by Marcy Sutton's Material Dialog Component:
// https://github.com/angular/material/blob/v0.11.1/src/components/dialog/dialog.js#L748-L783
// to avoid this behavior: https://marcysutton.com/slides/mobile-a11y-seattlejs/#/36
function queryInsignificantBranches(_ref) {
var context = _ref.context,
filter = _ref.filter;
var containsFilteredElement = function containsFilteredElement(node) {
var containsNode = (0, _comparePosition.getParentComparator)({ parent: node });
return filter.some(containsNode);
};
// We'd use a Set() for this, if we could
var insiginificantBranches = [];
// see https://developer.mozilla.org/en-US/docs/Web/API/NodeFilter
var CollectInsignificantBranchesFilter = function CollectInsignificantBranchesFilter(node) {
if (filter.some(function (element) {
return node === element;
})) {
// we've hit a filtered element and can ignore its children
return NodeFilter.FILTER_REJECT;
}
if (containsFilteredElement(node)) {
// we've hit a significant tree, so we'll have to keep investigating
return NodeFilter.FILTER_ACCEPT;
}
// we've found an insignificant tree
insiginificantBranches.push(node);
return NodeFilter.FILTER_REJECT;
};
// IE requires a function, Browsers require {acceptNode: function}
// see https://www.bennadel.com/blog/2607-finding-html-comment-nodes-in-the-dom-using-treewalker.htm
CollectInsignificantBranchesFilter.acceptNode = CollectInsignificantBranchesFilter;
var _document = (0, _getDocument2.default)(context);
// see https://developer.mozilla.org/en-US/docs/Web/API/Document/createTreeWalker
var walker = _document.createTreeWalker(
// root element to start search in
context,
// element type filter
NodeFilter.SHOW_ELEMENT,
// custom NodeFilter filter
CollectInsignificantBranchesFilter,
// deprecated, but IE requires it
false);
while (walker.nextNode()) {
// collection things is happening through the filter method
}
return insiginificantBranches;
}
module.exports = exports['default'];
//# sourceMappingURL=insignificant-branches.js.map