next-csrf
Version:
CSRF mitigation library for Next.js
97 lines (71 loc) • 2.57 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", {
value: true
});
exports.default = function () {
var map = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
var bindings = {};
var context = (0, _nodeArray2.default)(map.context)[0] || document.documentElement;
delete map.context;
var filter = (0, _nodeArray2.default)(map.filter);
delete map.filter;
var mapKeys = Object.keys(map);
if (!mapKeys.length) {
throw new TypeError('when/key requires at least one option key');
}
var registerBinding = function registerBinding(event) {
event.keyCodes.forEach(function (code) {
if (!bindings[code]) {
bindings[code] = [];
}
bindings[code].push(event);
});
};
mapKeys.forEach(function (text) {
if (typeof map[text] !== 'function') {
throw new TypeError('when/key requires option["' + text + '"] to be a function');
}
var addCallback = function addCallback(event) {
event.callback = map[text];
return event;
};
(0, _key2.default)(text).map(addCallback).forEach(registerBinding);
});
var handleKeyDown = function handleKeyDown(event) {
if (event.defaultPrevented) {
return;
}
if (filter.length) {
// ignore elements within the exempted sub-trees
var isParentOfElement = (0, _comparePosition.getParentComparator)({ element: event.target, includeSelf: true });
if (filter.some(isParentOfElement)) {
return;
}
}
var key = event.keyCode || event.which;
if (!bindings[key]) {
return;
}
bindings[key].forEach(function (_event) {
if (!_event.matchModifiers(event)) {
return;
}
_event.callback.call(context, event, disengage);
});
};
context.addEventListener('keydown', handleKeyDown, false);
var disengage = function disengage() {
context.removeEventListener('keydown', handleKeyDown, false);
};
return { disengage: disengage };
};
var _key = require('./key.binding');
var _key2 = _interopRequireDefault(_key);
var _nodeArray = require('../util/node-array');
var _nodeArray2 = _interopRequireDefault(_nodeArray);
var _comparePosition = require('../util/compare-position');
function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
module.exports = exports['default'];
// Bug 286933 - Key events in the autocomplete popup should be hidden from page scripts
// @browser-issue Gecko https://bugzilla.mozilla.org/show_bug.cgi?id=286933
//# sourceMappingURL=key.js.map