src/validator-integration.js - main - githubmirror/amphtml

src/validator-integration.js
80 строк2 KB
Ecenaz Ozmen
♻️Make loadScript function in validator-integration Trusted Types compatible (#38703)
04 апр 2023, 08:31
04 апр 2023, 08:31201864e
import {propagateNonce} from '#core/dom';
import {getHashParams} from '#core/types/string/url';

import {loadPromise} from '#utils/event-helper';

import * as urls from './config/urls';
import {isModeDevelopment} from './mode';

/**
 * Triggers validation for the current document if there is a script in the
 * page that has a "development" attribute and the bypass validation via
 * #validate=0 is absent.
 *
 * @param {!Window} win Destination window for the new element.
 */
export function maybeValidate(win) {
  const filename = win.location.href;
  if (filename.startsWith('about:')) {
    // Should only happen in tests.
    return;
  }
  let validator = false;
  const params = getHashParams(win);
  if (isModeDevelopment(win, params)) {
    validator = params['validate'] !== '0';
  }

  if (validator) {
    loadScript(win.document, `${urls.cdn}/v0/validator_wasm.js`).then(() => {
      /* global amp: false */
      amp.validator.validateUrlAndLog(filename, win.document);
    });
  }
}

/**
 * Loads script
 *
 * @param {Document} doc
 * @param {string} url
 * @return {!Promise}
 */
export function loadScript(doc, url) {
  const script = /** @type {!HTMLScriptElement} */ (
    doc.createElement('script')
  );
  // Make script.src assignment Trusted Types compatible for compatible browsers
  if (self.trustedTypes && self.trustedTypes.createPolicy) {
    const policy = self.trustedTypes.createPolicy(
      'validator-integration#loadScript',
      {
        createScriptURL: function (url) {
          // Only allow trusted URLs
          // Using explicit cdn domain as no other AMP Cache hosts validator_
          // wasm so we can assume the explicit cdn domain is cdn.ampproject.org
          // instead of using the dynamic cdn value from src/config/urls.js
          // eslint-disable-next-line local/no-forbidden-terms
          if (url === 'https://cdn.ampproject.org/v0/validator_wasm.js') {
            return url;
          } else {
            return '';
          }
        },
      }
    );
    script.src = policy.createScriptURL(url);
  } else {
    script.src = url;
  }
  propagateNonce(doc, script);

  const promise = loadPromise(script).then(
    () => {
      doc.head.removeChild(script);
    },
    () => {}
  );
  doc.head.appendChild(script);
  return promise;
}