1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
#ifndef mozilla_dom_Sanitizer_h
#define mozilla_dom_Sanitizer_h
#include "mozilla/dom/BindingDeclarations.h"
#include "mozilla/dom/DocumentFragment.h"
#include "mozilla/dom/SanitizerBinding.h"
#include "nsString.h"
#include "nsIGlobalObject.h"
#include "nsIParserUtils.h"
#include "nsTreeSanitizer.h"
// XXX(Bug 1673929) This is not really needed here, but the generated
// SanitizerBinding.cpp needs it and does not include it.
#include "mozilla/dom/Document.h"
class nsISupports;
namespace mozilla {
class ErrorResult;
namespace dom {
class GlobalObject;
class Sanitizer final : public nsISupports, public nsWrapperCache {
public:
NS_DECL_CYCLE_COLLECTING_ISUPPORTS
NS_DECL_CYCLE_COLLECTION_WRAPPERCACHE_CLASS(Sanitizer);
explicit Sanitizer(nsIGlobalObject* aGlobal, const SanitizerConfig& aOptions)
: mGlobal(aGlobal), mTreeSanitizer(nsIParserUtils::SanitizerAllowStyle) {
MOZ_ASSERT(aGlobal);
mTreeSanitizer.WithWebSanitizerOptions(aGlobal, aOptions);
}
nsIGlobalObject* GetParentObject() const { return mGlobal; }
JSObject* WrapObject(JSContext* aCx,
JS::Handle<JSObject*> aGivenProto) override;
/**
* Sanitizer() WebIDL constructor
* @return a new Sanitizer object, with methods as below
*/
static already_AddRefed<Sanitizer> Constructor(
const GlobalObject& aGlobal, const SanitizerConfig& aOptions,
ErrorResult& aRv);
/**
* sanitize WebIDL method.
* @param aInput "bad" HTML that needs to be sanitized
* @return DocumentFragment of the sanitized HTML
*/
already_AddRefed<DocumentFragment> Sanitize(
const mozilla::dom::DocumentFragmentOrDocument& aInput, ErrorResult& aRv);
/**
* Sanitizes a fragment in place. This assumes that the fragment
* belongs but an inert document.
*
* @param aFragment Fragment to be sanitized in place
* @return DocumentFragment
*/
RefPtr<DocumentFragment> SanitizeFragment(RefPtr<DocumentFragment> aFragment,
ErrorResult& aRv);
/**
* Logs localized message to either content console or browser console
* @param aName Localization key
* @param aParams Localization parameters
* @param aFlags Logging Flag (see nsIScriptError)
*/
void LogLocalizedString(const char* aName, const nsTArray<nsString>& aParams,
uint32_t aFlags);
private:
~Sanitizer() = default;
already_AddRefed<DocumentFragment> InputToNewFragment(
const mozilla::dom::DocumentFragmentOrDocument& aInput, ErrorResult& aRv);
/**
* Logs localized message to either content console or browser console
* @param aMessage Message to log
* @param aFlags Logging Flag (see nsIScriptError)
* @param aInnerWindowID Inner Window ID (Logged on browser console if 0)
* @param aFromPrivateWindow If from private window
*/
static void LogMessage(const nsAString& aMessage, uint32_t aFlags,
uint64_t aInnerWindowID, bool aFromPrivateWindow);
RefPtr<nsIGlobalObject> mGlobal;
nsTreeSanitizer mTreeSanitizer;
};
} // namespace dom
} // namespace mozilla
#endif // ifndef mozilla_dom_Sanitizer_h
|
