Mercurial > caja-test
view js/ext/html-emitter.js @ 0:633c9cb05555
Origination.
author | Atul Varma <varmaa@toolness.com> |
---|---|
date | Sun, 07 Jun 2009 19:29:10 -0700 |
parents | |
children |
line wrap: on
line source
// Copyright (C) 2008 Google Inc. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. /** * @fileoverview * JavaScript support for TemplateCompiler.java. * <p> * This handles the problem of making sure that only the bits of a Gadget's * static HTML which should be visible to a script are visible, and provides * mechanisms to reliably find elements using dynamically generated unique IDs * in the face of DOM modifications by untrusted scripts. * * @author mikesamuel@gmail.com */ function HtmlEmitter(base, opt_tameDocument) { if (!base) { throw new Error(); } /** * Contiguous pairs of ex-descendants of base, and their ex-parent. * The detached elements (even indices) are ordered depth-first. */ var detached = null; /** Makes sure IDs are accessible within removed detached nodes. */ var idMap = null; var arraySplice = Array.prototype.splice; function buildIdMap() { idMap = {}; var descs = base.getElementsByTagName('*'); for (var i = 0, desc; (desc = descs[i]); ++i) { if (desc.id) { idMap[desc.id] = desc; } } } /** * Returns the element with the given ID under the base node. * @param id an auto-generated ID since we cannot rely on user supplied IDs * to be unique. * @return {Element|null} null if no such element exists. */ function byId(id) { if (!idMap) { buildIdMap(); } var node = idMap[id]; if (node) { return node; } for (; (node = base.ownerDocument.getElementById(id));) { if (base.contains ? base.contains(node) : (base.compareDocumentPosition(node) & 0x10)) { idMap[id] = node; return node; } else { node.id = ''; } } return null; } // Below we define the attach, unwrap, and finish operations. // These obey the conventions that: // (1) All detached nodes, along with their ex-parents are in detached, // and they are ordered depth-first. // (2) When a node is specified by an ID, after the operation is performed, // it is in the tree. // (3) Each node is attached to the same parent regardless of what the // script does. Even if a node is removed from the DOM by a script, // any of its children that appear after the script, will be added. // As an example, consider this HTML which has the end-tags removed since // they don't correspond to actual nodes. // <table> // <script> // <tr> // <td>Foo<script>Bar // <th>Baz // <script> // <p>The-End // There are two script elements, and we need to make sure that each only // sees the bits of the DOM that it is supposed to be aware of. // // To make sure that things work when javascript is off, we emit the whole // HTML tree, and then detach everything that shouldn't be present. // We represent the removed bits as pairs of (removedNode, parentItWasPartOf). // Including both makes us robust against changes scripts make to the DOM. // In this case, the detach operation results in the tree // <table> // and the detached list // [<tr><td>FooBar<th>Baz in <table>, <p>The-End in (base)] // After the first script executes, we reattach the bits needed by the second // script, which gives us the DOM // <table><tr><td>Foo // and the detached list // ['Bar' in <td>, <th>Baz in <tr>, <p>The-End in (base)] // Note that we did not simply remove items from the old detached list. Since // the second script was deeper than the first, we had to add only a portion // of the <tr>'s content which required doing a separate mini-detach operation // and push its operation on to the front of the detached list. // After the second script executes, we reattach the bits needed by the third // script, which gives us the DOM // <table><tr><td>FooBar<th>Baz // and the detached list // [<p>The-End in (base)] // After the third script executes, we reattached the rest of the detached // nodes, and we're done. // To perform a detach or reattach operation, we impose a depth-first ordering // on HTML start tags, and text nodes: // [0: <table>, 1: <tr>, 2: <td>, 3: 'Foo', 4: 'Bar', 5: <th>, 6: 'Baz', // 7: <p>, 8: 'The-End'] // Then the detach operation simply removes the minimal number of nodes from // the DOM to make sure that only a prefix of those nodes are present. // In the case above, we are detaching everything after item 0. // Then the reattach operation advances the number. In the example above, we // advance the index from 0 to 3, and then from 3 to 6. // The finish operation simply reattaches the rest, advancing the counter from // 6 to the end. // The minimal detached list from the node with DFS index I is the ordered // list such that a (node, parent) pair (N, P) is on the list if // dfs-index(N) > I and there is no pair (P, GP) on the list. // To calculate the minimal detached list given a node representing a point in // that ordering, we rely on the following observations: // The minimal detached list after a node, is the concatenation of // (1) that node's children in order // (2) the next sibling of that node and its later siblings, // the next sibling of that node's parent and its later siblings, // the next sibling of that node's grandparent and its later siblings, // etc., until base is reached. function detachOnto(limit, out) { // Set detached to be the minimal set of nodes that have to be removed // to make sure that limit is the last attached node in DFS order as // specified above. // First, store all the children. for (var child = limit.firstChild, next; child; child = next) { next = child.nextSibling; // removeChild kills nextSibling. out.push(child, limit); limit.removeChild(child); } // Second, store your ancestor's next siblings and recurse. for (var anc = limit, greatAnc; anc && anc !== base; anc = greatAnc) { greatAnc = anc.parentNode; for (var sibling = anc.nextSibling, next; sibling; sibling = next) { next = sibling.nextSibling; out.push(sibling, greatAnc); greatAnc.removeChild(sibling); } } } /** * Make sure that everything up to and including the node with the given ID * is attached, and that nothing that follows the node is attached. */ function attach(id) { var limit = byId(id); if (detached) { // Build an array of arguments to splice so we can replace the reattached // nodes with the nodes detached from limit. var newDetached = [0, 0]; // Since limit has no parent, detachOnto will bottom out at its sibling. detachOnto(limit, newDetached); // Find the node containing limit that appears on detached. for (var limitAnc = limit, parent; (parent = limitAnc.parentNode);) { limitAnc = parent; } // Reattach up to and including limit ancestor. var nConsumed = 0; while (true) { var toReattach = detached[nConsumed]; (detached[nConsumed + 1] /* the parent */).appendChild(toReattach); nConsumed += 2; if (toReattach === limitAnc) { break; } } // Replace the reattached bits with the ones detached from limit. newDetached[1] = nConsumed; // splice's second arg is the number removed arraySplice.apply(detached, newDetached); } else { // The first time attach is called, the limit is actually part of the DOM. // There's no point removing anything when all scripts are deferred. detached = []; detachOnto(limit, detached); } return limit; } /** * Removes a wrapper from a textNode * When a text node immediately precedes a script block, the limit will be * a text node. Text nodes can't be addressed by ID, so the TemplateCompiler * wraps them in a <span> which must be removed to be semantics preserving. */ function unwrap(wrapper) { // Text nodes must have exactly one child, so it must be first on the // detached list, since children are earlier than siblings by DFS order. var text = detached[0]; // If this is not true, the TemplateCompiler must be generating unwrap calls // out of order. // An untrusted script block should not be able to nuke the wrapper before // it's removed so there should be a parentNode. wrapper.parentNode.replaceChild(text, wrapper); detached.splice(0, 2); } /** * Reattach any remaining detached bits, free resources, and fire a document * loaded event. */ function finish() { if (detached) { for (var i = 0, n = detached.length; i < n; i += 2) { detached[i + 1].appendChild(detached[i]); } } // Release references so nodes can be garbage collected. idMap = detached = base = null; // Signals the close of the document and fires any window.onload event // handlers. var doc = opt_tameDocument; if (doc) { doc.signalLoaded___(); } return this; } this.byId = byId; this.attach = attach; this.unwrap = unwrap; this.finish = finish; this.setAttr = bridal.setAttribute; }