Something went wrong. Try again.
Mirror of https://github.com/improsocial/improAn extensible Bluesky client for web
Something went wrong. Try again.
JavaScript
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359import { describe, it } from "node:test";import assert from "node:assert/strict";import { PluginRenderer } from "/js/plugins/pluginRendering.js";
function makeBridge() { const calls = []; const bridge = { handleNodeEvent(pluginId, handlerId, event) { calls.push({ pluginId, handlerId, event }); }, }; return { bridge, calls };}
describe("PluginRenderer:render with fresh roots", () => { it("creates a fresh element when given a fresh root each call", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const node = { tag: "div", attrs: { class: "x" }, text: "hi" }; const first = renderer.createRoot().render(node); const second = renderer.createRoot().render(node); assert(first !== second); assert.deepEqual(first.textContent, "hi"); assert.deepEqual(first.getAttribute("class"), "x"); });
it("renders <toggle-switch> directly", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "toggle-switch" }); assert.deepEqual(element.tagName.toLowerCase(), "toggle-switch"); });
it("renders <input type=checkbox> as a real checkbox", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer .createRoot() .render({ tag: "input", attrs: { type: "checkbox" } }); assert.deepEqual(element.tagName.toLowerCase(), "input"); assert.deepEqual(element.getAttribute("type"), "checkbox"); });
it("renders <plugin-profiles-list> with attrs passed through", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "plugin-profiles-list", attrs: { dids: "did:test:a,did:test:b" }, }); assert.deepEqual(element.tagName.toLowerCase(), "plugin-profiles-list"); assert.deepEqual(element.getAttribute("dids"), "did:test:a,did:test:b"); });
it("drops disallowed attributes from <plugin-profiles-list>", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "plugin-profiles-list", attrs: { dids: "did:test:a", onclick: "alert(1)" }, }); assert(!element.hasAttribute("onclick")); });});
describe("PluginRenderer:root reconciliation", () => { it("returns the same element across renders when the tag matches", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const first = root.render({ tag: "div", text: "a" }); const second = root.render({ tag: "div", text: "b" }); assert(first === second); assert.deepEqual(second.textContent, "b"); });
it("replaces the element when the tag changes", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const first = root.render({ tag: "div" }); const second = root.render({ tag: "span" }); assert(first !== second); assert.deepEqual(second.tagName.toLowerCase(), "span"); });
it("patches attributes in place", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ tag: "input", attrs: { type: "text", value: "one", placeholder: "old" }, }); root.render({ tag: "input", attrs: { type: "text", value: "two" }, }); assert.deepEqual(element.getAttribute("value"), "two"); assert(!element.hasAttribute("placeholder")); });
it("preserves the value of a focused input across re-render", () => { document.body.innerHTML = ""; const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const input = root.render({ tag: "input", attrs: { type: "text", value: "initial" }, }); document.body.appendChild(input); input.focus(); input.value = "user-typed"; root.render({ tag: "input", attrs: { type: "text", value: "stale-from-worker" }, }); assert.deepEqual(input.value, "user-typed"); assert(document.activeElement === input); });
it("preserves a dirty input's live value across an ordinary re-render", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const input = root.render({ tag: "input", attrs: { type: "text", value: "default" }, }); // User edits the field (dirties the control); a patch must not clobber it. input.value = "user-edited"; root.render({ tag: "input", attrs: { type: "text", value: "default" }, }); assert.deepEqual(input.value, "user-edited"); });
it("rebuilds a fresh element after reset(), discarding dirty state", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const input = root.render({ tag: "input", attrs: { type: "text", value: "default" }, }); input.value = "user-edited"; root.reset(); const rebuilt = root.render({ tag: "input", attrs: { type: "text", value: "default" }, }); assert(rebuilt !== input); assert.deepEqual(rebuilt.value, "default"); });
it("reuses matching children and patches their text in place", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ tag: "div", children: [ { tag: "span", text: "one" }, { tag: "span", text: "two" }, ], }); const firstChild = element.children[0]; const secondChild = element.children[1]; root.render({ tag: "div", children: [ { tag: "span", text: "ONE" }, { tag: "span", text: "two" }, ], }); assert(element.children[0] === firstChild); assert(element.children[1] === secondChild); assert.deepEqual(firstChild.textContent, "ONE"); });
it("appends new children and removes dropped ones", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ tag: "div", children: [{ tag: "span", text: "a" }], }); root.render({ tag: "div", children: [ { tag: "span", text: "a" }, { tag: "span", text: "b" }, ], }); assert.deepEqual(element.children.length, 2); root.render({ tag: "div", children: [] }); assert.deepEqual(element.children.length, 0); });
it("dispatches the updated handlerId after a re-render without leaking listeners", () => { const { bridge, calls } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const button = root.render({ tag: "button", events: { click: "h1" }, }); root.render({ tag: "button", events: { click: "h2" } }); button.dispatchEvent(new Event("click")); assert.deepEqual(calls.length, 1); assert.deepEqual(calls[0].handlerId, "h2"); });
it("stops dispatching when an event handler is removed", () => { const { bridge, calls } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const button = root.render({ tag: "button", events: { click: "h1" }, }); root.render({ tag: "button" }); button.dispatchEvent(new Event("click")); assert.deepEqual(calls.length, 0); });
it("clears stale text when the new node has neither text nor children", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ tag: "div", text: "hi" }); root.render({ tag: "div" }); assert.deepEqual(element.textContent, ""); });
it("renders both text and children with text as a leading text node", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ tag: "button", text: "Applying", children: [{ tag: "div", attrs: { class: "loading-spinner" } }], }); assert.deepEqual(element.childNodes.length, 2); assert.deepEqual(element.firstChild.nodeType, 3); assert.deepEqual(element.firstChild.textContent, "Applying"); assert.deepEqual(element.children.length, 1); assert.deepEqual(element.children[0].tagName.toLowerCase(), "div"); assert.deepEqual( element.children[0].getAttribute("class"), "loading-spinner", ); });
it("patches from text-only to text-plus-children, preserving spinner child", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ tag: "button", text: "Apply" }); assert.deepEqual(element.textContent, "Apply"); root.render({ tag: "button", text: "Applying", children: [{ tag: "div", attrs: { class: "loading-spinner" } }], }); assert.deepEqual(element.children.length, 1); assert.deepEqual(element.firstChild.nodeType, 3); assert.deepEqual(element.firstChild.textContent, "Applying"); assert.deepEqual( element.children[0].getAttribute("class"), "loading-spinner", ); });
it("patches from text-plus-children back to text-only, removing the child", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ tag: "button", text: "Applying", children: [{ tag: "div", attrs: { class: "loading-spinner" } }], }); root.render({ tag: "button", text: "Apply" }); assert.deepEqual(element.children.length, 0); assert.deepEqual(element.textContent, "Apply"); });
it("updates the leading text node in place when children stay stable", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ tag: "button", text: "Applying", children: [{ tag: "div", attrs: { class: "loading-spinner" } }], }); const originalSpinner = element.children[0]; root.render({ tag: "button", text: "Working", children: [{ tag: "div", attrs: { class: "loading-spinner" } }], }); assert.deepEqual(element.firstChild.textContent, "Working"); assert(element.children[0] === originalSpinner); });
it("removes the leading text node while keeping element children", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ tag: "button", text: "Applying", children: [{ tag: "div", attrs: { class: "loading-spinner" } }], }); root.render({ tag: "button", children: [{ tag: "div", attrs: { class: "loading-spinner" } }], }); assert.deepEqual(element.childNodes.length, 1); assert.deepEqual(element.children.length, 1); assert.deepEqual( element.children[0].getAttribute("class"), "loading-spinner", ); });
it("replaces a child whose tag no longer matches", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ tag: "div", children: [{ tag: "span", text: "x" }], }); const oldChild = element.children[0]; root.render({ tag: "div", children: [{ tag: "button", text: "x" }], }); assert(element.children[0] !== oldChild); assert.deepEqual(element.children[0].tagName.toLowerCase(), "button"); });});
describe("PluginRenderer:plugin-icon", () => { it("renders <plugin-icon> as <app-icon> with the icon attribute passed through", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "plugin-icon", attrs: { icon: "bell" }, }); assert.deepEqual(element.tagName.toLowerCase(), "app-icon"); assert.deepEqual(element.getAttribute("icon"), "bell"); });
it("drops disallowed attributes from <plugin-icon>", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "plugin-icon", attrs: { icon: "bell", onclick: "alert(1)" }, }); assert(!element.hasAttribute("onclick")); assert.deepEqual(element.getAttribute("icon"), "bell"); });});
describe("PluginRenderer:plugin-blob-image", () => { it("renders <plugin-blob-image> and passes did/cid/alt/cdn-prefix attrs", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "plugin-blob-image", attrs: { did: "did:plc:abc", cid: "bafkreiabcdefghijklmnopqrstuvwxyz234567", alt: ":blobcat:", "cdn-prefix": "feed_thumbnail", }, }); assert.deepEqual(element.tagName.toLowerCase(), "plugin-blob-image"); assert.deepEqual(element.getAttribute("did"), "did:plc:abc"); assert.deepEqual( element.getAttribute("cid"), "bafkreiabcdefghijklmnopqrstuvwxyz234567", ); assert.deepEqual(element.getAttribute("alt"), ":blobcat:"); assert.deepEqual(element.getAttribute("cdn-prefix"), "feed_thumbnail"); });
it("does not accept src or onclick on <plugin-blob-image>", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "plugin-blob-image", attrs: { did: "did:plc:abc", src: "https://evil.example.com/track.gif", onclick: "alert(1)", }, }); assert(!element.hasAttribute("src")); assert(!element.hasAttribute("onclick")); });
it("does not allow <img> tags from plugin trees", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "img", attrs: { src: "https://evil.example.com/track.gif" }, }); // Disallowed tags fall back to <span> and the src attribute is not on the allowlist. assert.deepEqual(element.tagName.toLowerCase(), "span"); assert(!element.hasAttribute("src")); });});
describe("PluginRenderer:custom element observedAttributes", () => { it("passes through attrs declared in a custom element's observedAttributes", () => { // plugin-icon declares observedAttributes = ["icon"] — verifies the // observedAttributes lookup is what allows `icon` through now that it // has been removed from the global ALLOWED_ATTRS list. const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "plugin-icon", attrs: { icon: "bell" }, }); assert.deepEqual(element.getAttribute("icon"), "bell"); });
it("drops custom attrs that aren't in observedAttributes", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "plugin-icon", attrs: { icon: "bell", "secret-mode": "on" }, }); assert.deepEqual(element.getAttribute("icon"), "bell"); assert(!element.hasAttribute("secret-mode")); });
it("does not scope a custom attr from one component onto another", () => { // `dids` is observed by plugin-profiles-list but not by plugin-icon — // it should not leak across tags. const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "plugin-icon", attrs: { icon: "bell", dids: "did:test:a" }, }); assert(!element.hasAttribute("dids")); });
it("removes a custom attr on patch when it's dropped from the new tree", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ tag: "plugin-icon", attrs: { icon: "bell" }, }); root.render({ tag: "plugin-icon", attrs: {} }); assert(!element.hasAttribute("icon")); });});
describe("PluginRenderer:custom element refresh", () => { it("calls refresh() on custom elements during patch", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const first = root.render({ tag: "plugin-icon" }); let calls = 0; first.refresh = () => { calls++; }; root.render({ tag: "plugin-icon" }); assert.deepEqual(calls, 1); root.render({ tag: "plugin-icon" }); assert.deepEqual(calls, 2); });
it("does not call refresh on built-in tags", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const first = root.render({ tag: "div" }); let called = false; // `refresh` on a plain element should never be invoked. first.refresh = () => { called = true; }; root.render({ tag: "div" }); assert.deepEqual(called, false); });});
describe("PluginRenderer:anchor tags", () => { it("renders <a> with safe https href and forces target/rel", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "a", attrs: { href: "https://example.com/page" }, text: "click", }); assert.deepEqual(element.tagName.toLowerCase(), "a"); assert.deepEqual(element.getAttribute("href"), "https://example.com/page"); assert.deepEqual(element.getAttribute("target"), "_blank"); assert.deepEqual(element.getAttribute("rel"), "noopener noreferrer"); });
it("strips non-https href schemes on create", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); for (const href of [ "http://example.com", "javascript:alert(1)", "data:text/html,<script>1</script>", "mailto:a@b.co", "ftp://example.com", "//example.com", "/relative", "not a url", ]) { const element = renderer .createRoot() .render({ tag: "a", attrs: { href }, text: "x" }); assert(!element.hasAttribute("href"), `should reject href: ${href}`); assert.deepEqual(element.getAttribute("target"), "_blank"); assert.deepEqual(element.getAttribute("rel"), "noopener noreferrer"); } });
it("ignores plugin-supplied target and rel attributes", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "a", attrs: { href: "https://example.com", target: "_self", rel: "opener", }, }); assert.deepEqual(element.getAttribute("target"), "_blank"); assert.deepEqual(element.getAttribute("rel"), "noopener noreferrer"); });
it("shows the external link warning modal when an external <a> is clicked", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "a", attrs: { href: "https://example.com/page" }, text: "click", }); document.body.appendChild(element); const event = new Event("click", { bubbles: true, cancelable: true }); element.dispatchEvent(event); assert(event.defaultPrevented, "click should be prevented"); const dialog = document.querySelector(".external-link-warning-modal"); assert(dialog, "warning modal should be rendered"); dialog.remove(); element.remove(); });
it("removes href on patch when it becomes unsafe", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ tag: "a", attrs: { href: "https://example.com/a" }, }); root.render({ tag: "a", attrs: { href: "javascript:alert(1)" }, }); assert(!element.hasAttribute("href")); });});
describe("PluginRenderer:union node model", () => { const TEXT = Node.TEXT_NODE;
it("renders interleaved text and element children in order", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, events: {}, children: [ { type: "text", value: "before " }, { type: "element", tag: "em", attrs: {}, events: {}, children: [{ type: "text", value: "middle" }], }, { type: "text", value: " after" }, ], }); const kinds = Array.from(element.childNodes).map((child) => child.nodeType); assert.deepEqual(kinds, [TEXT, Node.ELEMENT_NODE, TEXT]); assert.deepEqual(element.childNodes[0].nodeValue, "before "); assert.deepEqual(element.childNodes[1].tagName.toLowerCase(), "em"); assert.deepEqual(element.childNodes[1].textContent, "middle"); assert.deepEqual(element.childNodes[2].nodeValue, " after"); });
it("renders a bare text node at the root", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const node = renderer.createRoot().render({ type: "text", value: "hello" }); assert.deepEqual(node.nodeType, TEXT); assert.deepEqual(node.nodeValue, "hello"); });
it("patches a text node's value in place across renders", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const first = root.render({ type: "text", value: "one" }); const second = root.render({ type: "text", value: "two" }); assert(first === second); assert.deepEqual(second.nodeValue, "two"); });
it("patches a text child's value without recreating the node", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ type: "element", tag: "span", attrs: {}, events: {}, children: [{ type: "text", value: "a" }], }); const textNode = element.firstChild; root.render({ type: "element", tag: "span", attrs: {}, events: {}, children: [{ type: "text", value: "b" }], }); assert(element.firstChild === textNode); assert.deepEqual(textNode.nodeValue, "b"); });
it("replaces a text child with an element child when the kind changes", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ type: "element", tag: "span", attrs: {}, events: {}, children: [{ type: "text", value: "x" }], }); assert.deepEqual(element.firstChild.nodeType, TEXT); root.render({ type: "element", tag: "span", attrs: {}, events: {}, children: [ { type: "element", tag: "em", attrs: {}, events: {}, children: [] }, ], }); assert.deepEqual(element.firstChild.nodeType, Node.ELEMENT_NODE); assert.deepEqual(element.firstChild.tagName.toLowerCase(), "em"); });
it("inserts and removes text children at the tail", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ type: "element", tag: "span", attrs: {}, events: {}, children: [{ type: "text", value: "a" }], }); root.render({ type: "element", tag: "span", attrs: {}, events: {}, children: [ { type: "text", value: "a" }, { type: "text", value: "b" }, ], }); assert.deepEqual(element.childNodes.length, 2); assert.deepEqual(element.textContent, "ab"); root.render({ type: "element", tag: "span", attrs: {}, events: {}, children: [{ type: "text", value: "a" }], }); assert.deepEqual(element.childNodes.length, 1); assert.deepEqual(element.textContent, "a"); });});
describe("PluginRenderer:legacy normalization", () => { it("converts a legacy leading-text node into a text child", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "span", attrs: {}, text: "before ", children: [{ tag: "em", text: "middle" }], events: {}, }); assert.deepEqual(element.childNodes[0].nodeType, Node.TEXT_NODE); assert.deepEqual(element.childNodes[0].nodeValue, "before "); assert.deepEqual(element.childNodes[1].tagName.toLowerCase(), "em"); assert.deepEqual(element.childNodes[1].textContent, "middle"); });});
describe("PluginRenderer:inline styles", () => { it("applies serialized styles via setProperty on create", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: { class: "strut" }, styles: { height: "0.68333em", "vertical-align": "-0.08333em" }, events: {}, children: [], }); assert.deepEqual(element.style.getPropertyValue("height"), "0.68333em"); assert.deepEqual( element.style.getPropertyValue("vertical-align"), "-0.08333em", ); });
it("still rejects a raw `style` attribute", (t) => { t.mock.method(console, "warn", () => {}); const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: { style: "color: red" }, events: {}, children: [], }); assert(!element.hasAttribute("style")); });
it("drops values containing a resource function", (t) => { t.mock.method(console, "warn", () => {}); const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, styles: { background: 'url("https://evil.test/x.png")', color: "red", }, events: {}, children: [], }); assert.deepEqual(element.style.getPropertyValue("background"), ""); assert.deepEqual(element.style.getPropertyValue("color"), "red"); });
it("drops values containing a backslash (blocks CSS-escape url() smuggling)", (t) => { t.mock.method(console, "warn", () => {}); const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, styles: { background: "\\75rl(https://evil.test/x)", color: "red", }, events: {}, children: [], }); assert.deepEqual(element.style.getPropertyValue("background"), ""); assert.deepEqual(element.style.getPropertyValue("color"), "red"); });
it("drops resource functions inside custom property values", (t) => { t.mock.method(console, "warn", () => {}); const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, styles: { "--bg": "url(https://evil.test/x)" }, events: {}, children: [], }); assert.deepEqual(element.style.getPropertyValue("--bg"), ""); });
it("drops values exceeding the max length", (t) => { t.mock.method(console, "warn", () => {}); const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, styles: { color: "a".repeat(129), background: "blue" }, events: {}, children: [], }); assert.deepEqual(element.style.getPropertyValue("color"), ""); assert.deepEqual(element.style.getPropertyValue("background"), "blue"); });
it("caps the number of declarations per node", (t) => { t.mock.method(console, "warn", () => {}); const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const styles = {}; for (let i = 0; i < 100; i++) styles[`--v${i}`] = `${i}px`; const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, styles, events: {}, children: [], }); // Only the first 64 declarations survive normalization. assert.deepEqual(element.style.getPropertyValue("--v0"), "0px"); assert.deepEqual(element.style.getPropertyValue("--v63"), "63px"); assert.deepEqual(element.style.getPropertyValue("--v64"), ""); });
it("permits !important", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, styles: { color: "red !important" }, events: {}, children: [], }); assert.deepEqual(element.style.getPropertyPriority("color"), "important"); });
it("updates changed style values in place on patch", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ type: "element", tag: "span", attrs: {}, styles: { height: "1em", color: "red" }, events: {}, children: [], }); root.render({ type: "element", tag: "span", attrs: {}, styles: { height: "2em", color: "red" }, events: {}, children: [], }); assert.deepEqual(element.style.getPropertyValue("height"), "2em"); assert.deepEqual(element.style.getPropertyValue("color"), "red"); });
it("removes style declarations that are absent from the new tree", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ type: "element", tag: "span", attrs: {}, styles: { height: "1em", color: "red" }, events: {}, children: [], }); root.render({ type: "element", tag: "span", attrs: {}, styles: { height: "1em" }, events: {}, children: [], }); assert.deepEqual(element.style.getPropertyValue("height"), "1em"); assert.deepEqual(element.style.getPropertyValue("color"), ""); });
it("removes a previously applied style when its new value is invalid", (t) => { t.mock.method(console, "warn", () => {}); const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const element = root.render({ type: "element", tag: "span", attrs: {}, styles: { background: "red" }, events: {}, children: [], }); root.render({ type: "element", tag: "span", attrs: {}, styles: { background: 'url("https://evil.test/x.png")' }, events: {}, children: [], }); assert.deepEqual(element.style.getPropertyValue("background"), ""); });});
describe("PluginRenderer:malformed and oversized nodes", () => { it("renders an empty span when the whole tree is malformed", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const node = renderer.createRoot().render(null); assert.deepEqual(node.nodeType, Node.ELEMENT_NODE); assert.deepEqual(node.tagName.toLowerCase(), "span"); assert.deepEqual(node.childNodes.length, 0); });
it("drops a text child whose value is not a string", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, events: {}, children: [ { type: "text", value: { toString: () => "nope" } }, { type: "text", value: "ok" }, ], }); assert.deepEqual(element.childNodes.length, 1); assert.deepEqual(element.textContent, "ok"); });
it("drops a child with an unknown node type", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, events: {}, children: [ { type: "comment", value: "x" }, { type: "text", value: "kept" }, ], }); assert.deepEqual(element.childNodes.length, 1); assert.deepEqual(element.textContent, "kept"); });
it("ignores attrs, events, and children on a text node", () => { const { bridge, calls } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const node = renderer.createRoot().render({ type: "text", value: "plain", attrs: { onclick: "alert(1)" }, events: { click: "h1" }, children: [{ type: "text", value: "nested" }], }); assert.deepEqual(node.nodeType, Node.TEXT_NODE); assert.deepEqual(node.nodeValue, "plain"); assert(typeof node.setAttribute !== "function"); assert.deepEqual(calls.length, 0); });
it("truncates children beyond the per-element limit", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const children = Array.from({ length: 1050 }, () => ({ type: "text", value: "x", })); const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, events: {}, children, }); assert.deepEqual(element.childNodes.length, 1000); });
it("drops a text node that exceeds the max text length", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, events: {}, children: [ { type: "text", value: "z".repeat(16 * 1024 + 1) }, { type: "text", value: "kept" }, ], }); assert.deepEqual(element.childNodes.length, 1); assert.deepEqual(element.textContent, "kept"); });
it("stops descending past the max depth", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); let node = { type: "text", value: "deep" }; for (let level = 0; level < 70; level++) { node = { type: "element", tag: "span", attrs: {}, events: {}, children: [node], }; } // Should not throw; the subtree past the limit is dropped. const element = renderer.createRoot().render(node); assert.deepEqual(element.tagName.toLowerCase(), "span"); });
it("reports all issues in a single consolidated warning with the total", (t) => { const warn = t.mock.method(console, "warn", () => {}); const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, events: {}, children: [ { type: "comment", value: "x" }, { type: "comment", value: "y" }, { type: "text", value: 5 }, { type: "text", value: "kept" }, ], }); assert.deepEqual(warn.mock.callCount(), 1); const message = warn.mock.calls[0].arguments[0]; assert(message.includes("demo")); assert(message.includes("3 issue(s)")); assert(message.includes('unknown node type "comment" ×2')); assert(message.includes("text node value is not a string")); });
it("emits no warning when there are no issues", (t) => { const warn = t.mock.method(console, "warn", () => {}); const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); renderer.createRoot().render({ type: "element", tag: "span", attrs: {}, events: {}, children: [{ type: "text", value: "ok" }], }); assert.deepEqual(warn.mock.callCount(), 0); });});
const SVG_NS = "http://www.w3.org/2000/svg";const HTML_NS = "http://www.w3.org/1999/xhtml";
function svgTree(pathAttrs = { d: "M0 0 L10 10" }) { return { type: "element", tag: "svg", attrs: { viewBox: "0 0 10 10", width: "10", height: "10" }, children: [ { type: "element", tag: "path", attrs: pathAttrs, children: [] }, ], };}
describe("PluginRenderer:svg", () => { it("renders <svg><path> with the SVG namespace", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render(svgTree()); assert.deepEqual(element.namespaceURI, SVG_NS); assert.deepEqual(element.tagName, "svg"); const path = element.firstChild; assert.deepEqual(path.namespaceURI, SVG_NS); assert.deepEqual(path.getAttribute("d"), "M0 0 L10 10"); });
it("preserves camelCase attributes like viewBox", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render(svgTree()); assert.deepEqual(element.getAttribute("viewBox"), "0 0 10 10"); assert(!element.hasAttribute("viewbox")); });
it("replaces disallowed SVG tags with an inert <g>", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "svg", attrs: {}, children: [ { type: "element", tag: "script", attrs: {}, children: [] }, { type: "element", tag: "foreignObject", attrs: {}, children: [] }, { type: "element", tag: "path", attrs: { d: "M0 0" }, children: [] }, ], }); assert.deepEqual(element.childNodes.length, 3); const [first, second, third] = element.childNodes; assert.deepEqual(first.namespaceURI, SVG_NS); assert.deepEqual(first.tagName, "g"); assert.deepEqual(second.tagName, "g"); assert.deepEqual(third.tagName, "path"); });
it("drops disallowed SVG attributes and on* handlers", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "svg", attrs: { onclick: "alert(1)", xmlns: "http://evil", id: "grad" }, children: [], }); assert(!element.hasAttribute("onclick")); assert(!element.hasAttribute("xmlns")); assert(!element.hasAttribute("id")); });
it("rejects url() in SVG attribute values", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "svg", attrs: {}, children: [ { type: "element", tag: "path", attrs: { d: "M0 0", fill: "url(https://evil.example/x.svg)" }, children: [], }, ], }); const path = element.firstChild; assert(!path.hasAttribute("fill")); assert.deepEqual(path.getAttribute("d"), "M0 0"); });
it("caps oversized d and points attributes", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const huge = "M" + "0 ".repeat(20000); const element = renderer.createRoot().render({ type: "element", tag: "svg", attrs: {}, children: [ { type: "element", tag: "path", attrs: { d: huge }, children: [] }, ], }); assert(!element.firstChild.hasAttribute("d")); });
it("patches attribute updates on an SVG subtree", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const first = root.render(svgTree({ d: "M0 0" })); const second = root.render(svgTree({ d: "M1 1" })); assert(first === second); assert.deepEqual(first.firstChild.getAttribute("d"), "M1 1"); });
it("removes attributes that are no longer present on patch", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const root = renderer.createRoot(); const first = root.render({ type: "element", tag: "svg", attrs: { viewBox: "0 0 10 10", width: "10" }, children: [], }); root.render({ type: "element", tag: "svg", attrs: { viewBox: "0 0 10 10" }, children: [], }); assert(!first.hasAttribute("width")); });
it("allows <title>, <desc>, and role/aria attributes for a11y", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ type: "element", tag: "svg", attrs: { role: "img", "aria-label": "square root" }, children: [ { type: "element", tag: "title", attrs: {}, children: [{ type: "text", value: "sqrt" }], }, { type: "element", tag: "desc", attrs: {}, children: [{ type: "text", value: "a radical" }], }, ], }); assert.deepEqual(element.getAttribute("role"), "img"); assert.deepEqual(element.getAttribute("aria-label"), "square root"); const [title, desc] = element.childNodes; assert.deepEqual(title.namespaceURI, SVG_NS); assert.deepEqual(title.tagName, "title"); assert.deepEqual(title.textContent, "sqrt"); assert.deepEqual(desc.textContent, "a radical"); });
it("leaves existing HTML rendering unaffected", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const element = renderer.createRoot().render({ tag: "div", attrs: { class: "x" }, children: [{ type: "text", value: "hello" }], }); assert.deepEqual(element.namespaceURI, HTML_NS); assert.deepEqual(element.textContent, "hello"); });});
describe("PluginRenderer:file input change events", () => { it("allows the accept attribute on a file input", () => { const { bridge } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const input = renderer.createRoot().render({ tag: "input", attrs: { type: "file", accept: "image/png" }, }); assert.deepEqual(input.getAttribute("accept"), "image/png"); });
it("stages the picked File and delivers an opaque token, never the file itself", () => { const { bridge, calls } = makeBridge(); const stageCalls = []; const pluginService = { pluginFileStaging: { stage: (pluginId, file) => { stageCalls.push({ pluginId, file }); return "token-123"; }, }, }; const renderer = new PluginRenderer(bridge, "demo", pluginService); const input = renderer.createRoot().render({ tag: "input", attrs: { type: "file", accept: "image/png" }, events: { change: "h1" }, }); const file = new File(["png-bytes"], "sprite.png", { type: "image/png" }); Object.defineProperty(input, "files", { value: [file], configurable: true, }); input.dispatchEvent(new Event("change")); assert.deepEqual(calls.length, 1); assert.deepEqual(calls[0].event, { type: "change", target: { value: "token-123", fileName: "sprite.png", fileSize: file.size, }, }); assert.deepEqual(stageCalls.length, 1); assert.deepEqual(stageCalls[0].pluginId, "demo"); assert(stageCalls[0].file === file); });
it("delivers an empty change event when no file is selected", () => { const { bridge, calls } = makeBridge(); const pluginService = { pluginFileStaging: { stage: () => "token" }, }; const renderer = new PluginRenderer(bridge, "demo", pluginService); const input = renderer.createRoot().render({ tag: "input", attrs: { type: "file" }, events: { change: "h1" }, }); input.dispatchEvent(new Event("change")); assert.deepEqual(calls[0].event, { type: "change", target: {} }); });
it("does not treat a text input's change event as a file event", () => { const { bridge, calls } = makeBridge(); const renderer = new PluginRenderer(bridge, "demo"); const input = renderer.createRoot().render({ tag: "input", attrs: { type: "text", value: "hi" }, events: { change: "h1" }, }); input.dispatchEvent(new Event("change")); assert.deepEqual(calls[0].event, { type: "change", target: { value: "hi", checked: false }, }); });});