leizongmin / js-xss / #52

pending completion

Build # #52

Build Type

push

travis-pro

Committed by

web-flow

Commit Message

<a href="https://github.com/leizongmin/js-xss/commit/<a class=hub.com/leizongmin/js-xss/commit/3d66aafdc27e60a7200c486c09068a4a2dcf1c60">3d66aafdc<a href="https://github.com/leizongmin/js-xss/commit/3d66aafdc27e60a7200c486c09068a4a2dcf1c60">">Merge </a><a class="double-link" href="https://github.com/leizongmin/js-xss/commit/<a class="double-link" href="https://github.com/leizongmin/js-xss/commit/1e34b3de232ab769151e09d13cab9f839de5f6f4">1e34b3de2</a>">1e34b3de2</a><a href="https://github.com/leizongmin/js-xss/commit/3d66aafdc27e60a7200c486c09068a4a2dcf1c60"> into ed295cae2">ed295cae2</a>

Run Details

205 of 220 branches covered (93.18%)

11 of 11 new or added lines in 4 files covered. (100.0%)

360 of 372 relevant lines covered (96.77%)

171.52 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

98.99

/lib/parser.js

/**
 * Simple HTML Parser
 *
 * @author Zongmin Lei<leizongmin@gmail.com>
 */

var _ = require("./util");

/**
 * get tag name
 *
 * @param {String} html e.g. '<a hef="#">'
 * @return {String}
 */
function getTagName(html) {
  let i = _.spaceIndex(html);
  let tagName;
  if (i === -1) {
    tagName = html.slice(1, -1);
  } else {
    tagName = html.slice(1, i + 1);
  }
  tagName = _.trim(tagName).toLowerCase();
  if (tagName.slice(0, 1) === "/") tagName = tagName.slice(1);
  if (tagName.slice(-1) === "/") tagName = tagName.slice(0, -1);
  return tagName;
}

/**
 * is close tag?
 *
 * @param {String} html 如：'<a hef="#">'
 * @return {Boolean}
 */
function isClosing(html) {
  return html.slice(0, 2) === "</";
}

/**
 * parse input html and returns processed html
 *
 * @param {String} html
 * @param {Function} onTag e.g. function (sourcePosition, position, tag, html, isClosing)
 * @param {Function} escapeHtml
 * @return {String}
 */
function parseTag(html, onTag, escapeHtml) {
  "use strict";

  var rethtml = "";
  var lastPos = 0;
  var tagStart = false;
  var quoteStart = false;
  var currentPos = 0;
  var len = html.length;
  var currentTagName = "";
  var currentHtml = "";

  chariterator: for (currentPos = 0; currentPos < len; currentPos++) {
    var c = html.charAt(currentPos);
    if (tagStart === false) {
      if (c === "<") {
        tagStart = currentPos;
        continue;
      }
    } else {
      if (quoteStart === false) {
        if (c === "<") {
          rethtml += escapeHtml(html.slice(lastPos, currentPos));
          tagStart = currentPos;
          lastPos = currentPos;
          continue;
        }
        if (c === ">") {
          rethtml += escapeHtml(html.slice(lastPos, tagStart));
          currentHtml = html.slice(tagStart, currentPos + 1);
          currentTagName = getTagName(currentHtml);
          rethtml += onTag(
            tagStart,
            rethtml.length,
            currentTagName,
            currentHtml,
            isClosing(currentHtml)
          );
          lastPos = currentPos + 1;
          tagStart = false;
          continue;
        }
        if (c === '"' || c === "'") {
          var i = 1;
          var ic = html.charAt(currentPos - i);

          while (ic.trim() === "" || ic === "=") {
            if (ic === "=") {
              quoteStart = c;
              continue chariterator;
            }
            ic = html.charAt(currentPos - ++i);
          }
        }
      } else {
        if (c === quoteStart) {
          quoteStart = false;
          continue;
        }
      }
    }
  }
  if (lastPos < html.length) {
    rethtml += escapeHtml(html.substr(lastPos));
  }

  return rethtml;
}

var REGEXP_ILLEGAL_ATTR_NAME = /[^a-zA-Z0-9_:.-]/gim;

/**
 * parse input attributes and returns processed attributes
 *
 * @param {String} html e.g. `href="#" target="_blank"`
 * @param {Function} onAttr e.g. `function (name, value)`
 * @return {String}
 */
function parseAttr(html, onAttr) {
  "use strict";

  var lastPos = 0;
  var retAttrs = [];
  var tmpName = false;
  var len = html.length;

  function addAttr(name, value) {
    name = _.trim(name);
    name = name.replace(REGEXP_ILLEGAL_ATTR_NAME, "").toLowerCase();
    if (name.length < 1) return;
    var ret = onAttr(name, value || "");
    if (ret) retAttrs.push(ret);
  }

  // 逐个分析字符
  for (var i = 0; i < len; i++) {
    var c = html.charAt(i);
    var v, j;
    if (tmpName === false && c === "=") {
      tmpName = html.slice(lastPos, i);
      lastPos = i + 1;
      continue;
    }
    if (tmpName !== false) {
      if (
        i === lastPos &&
        (c === '"' || c === "'") &&
        html.charAt(i - 1) === "="
      ) {
        j = html.indexOf(c, i + 1);
        if (j === -1) {
          break;
        } else {
          v = _.trim(html.slice(lastPos + 1, j));
          addAttr(tmpName, v);
          tmpName = false;
          i = j;
          lastPos = i + 1;
          continue;
        }
      }
    }
    if (/\s|\n|\t/.test(c)) {
      html = html.replace(/\s|\n|\t/g, " ");
      if (tmpName === false) {
        j = findNextEqual(html, i);
        if (j === -1) {
          v = _.trim(html.slice(lastPos, i));
          addAttr(v);
          tmpName = false;
          lastPos = i + 1;
          continue;
        } else {
          i = j - 1;
          continue;
        }
      } else {
        j = findBeforeEqual(html, i - 1);
        if (j === -1) {
          v = _.trim(html.slice(lastPos, i));
          v = stripQuoteWrap(v);
          addAttr(tmpName, v);
          tmpName = false;
          lastPos = i + 1;
          continue;
        } else {
          continue;
        }
      }
    }
  }

  if (lastPos < html.length) {
    if (tmpName === false) {
      addAttr(html.slice(lastPos));
    } else {
      addAttr(tmpName, stripQuoteWrap(_.trim(html.slice(lastPos))));
    }
  }

  return _.trim(retAttrs.join(" "));
}

function findNextEqual(str, i) {
  for (; i < str.length; i++) {
    var c = str[i];
    if (c === " ") continue;
    if (c === "=") return i;
    return -1;
  }
}

function findBeforeEqual(str, i) {
  for (; i > 0; i--) {
    var c = str[i];
    if (c === " ") continue;
    if (c === "=") return i;
    return -1;
  }
}

function isQuoteWrapString(text) {
  if (
    (text[0] === '"' && text[text.length - 1] === '"') ||
    (text[0] === "'" && text[text.length - 1] === "'")
  ) {
    return true;
  } else {
    return false;
  }
}

function stripQuoteWrap(text) {
  if (isQuoteWrapString(text)) {
    return text.substr(1, text.length - 2);
  } else {
    return text;
  }
}

exports.parseTag = parseTag;
exports.parseAttr = parseAttr;

1	/**
2	* Simple HTML Parser
3	*
4	* @author Zongmin Lei<leizongmin@gmail.com>
5	*/
6
7	var _ = require("./util");	1✔
8
9	/**
10	* get tag name
11	*
12	* @param {String} html e.g. '<a hef="#">'
13	* @return {String}
14	*/
15	function getTagName(html) {
16	let i = _.spaceIndex(html);	249✔
17	let tagName;
18	if (i === -1) {	249✔
19	tagName = html.slice(1, -1);	138✔
20	} else {
21	tagName = html.slice(1, i + 1);	111✔
22	}
23	tagName = _.trim(tagName).toLowerCase();	249✔
24	if (tagName.slice(0, 1) === "/") tagName = tagName.slice(1);	249✔
25	if (tagName.slice(-1) === "/") tagName = tagName.slice(0, -1);	249✔
26	return tagName;	249✔
27	}
28
29	/**
30	* is close tag?
31	*
32	* @param {String} html 如：'<a hef="#">'
33	* @return {Boolean}
34	*/
35	function isClosing(html) {
36	return html.slice(0, 2) === "</";	249✔
37	}
38
39	/**
40	* parse input html and returns processed html
41	*
42	* @param {String} html
43	* @param {Function} onTag e.g. function (sourcePosition, position, tag, html, isClosing)
44	* @param {Function} escapeHtml
45	* @return {String}
46	*/
47	function parseTag(html, onTag, escapeHtml) {
48	"use strict";
49
50	var rethtml = "";	147✔
51	var lastPos = 0;	147✔
52	var tagStart = false;	147✔
53	var quoteStart = false;	147✔
54	var currentPos = 0;	147✔
55	var len = html.length;	147✔
56	var currentTagName = "";	147✔
57	var currentHtml = "";	147✔
58
59	chariterator: for (currentPos = 0; currentPos < len; currentPos++) {	147✔
60	var c = html.charAt(currentPos);	4,905✔
61	if (tagStart === false) {	4,905✔
62	if (c === "<") {	621✔
63	tagStart = currentPos;	252✔
64	continue;	252✔
65	}
66	} else {
67	if (quoteStart === false) {	4,284✔
68	if (c === "<") {	3,001✔
69	rethtml += escapeHtml(html.slice(lastPos, currentPos));	7✔
70	tagStart = currentPos;	7✔
71	lastPos = currentPos;	7✔
72	continue;	7✔
73	}
74	if (c === ">") {	2,994✔
75	rethtml += escapeHtml(html.slice(lastPos, tagStart));	249✔
76	currentHtml = html.slice(tagStart, currentPos + 1);	249✔
77	currentTagName = getTagName(currentHtml);	249✔
78	rethtml += onTag(	249✔
79	tagStart,
80	rethtml.length,
81	currentTagName,
82	currentHtml,
83	isClosing(currentHtml)
84	);
85	lastPos = currentPos + 1;	249✔
86	tagStart = false;	249✔
87	continue;	249✔
88	}
89	if (c === '"' \|\| c === "'") {	2,745✔
90	var i = 1;	135✔
91	var ic = html.charAt(currentPos - i);	135✔
92
93	while (ic.trim() === "" \|\| ic === "=") {	135✔
94	if (ic === "=") {	126✔
95	quoteStart = c;	111✔
96	continue chariterator;	111✔
97	}
98	ic = html.charAt(currentPos - ++i);	15✔
99	}
100	}
101	} else {
102	if (c === quoteStart) {	1,283✔
103	quoteStart = false;	111✔
104	continue;	111✔
105	}
106	}
107	}
108	}
109	if (lastPos < html.length) {	147✔
110	rethtml += escapeHtml(html.substr(lastPos));	23✔
111	}
112
113	return rethtml;	147✔
114	}
115
116	var REGEXP_ILLEGAL_ATTR_NAME = /[^a-zA-Z0-9_:.-]/gim;	1✔
117
118	/**
119	* parse input attributes and returns processed attributes
120	*
121	* @param {String} html e.g. `href="#" target="_blank"`
122	* @param {Function} onAttr e.g. `function (name, value)`
123	* @return {String}
124	*/
125	function parseAttr(html, onAttr) {
126	"use strict";
127
128	var lastPos = 0;	120✔
129	var retAttrs = [];	120✔
130	var tmpName = false;	120✔
131	var len = html.length;	120✔
132
133	function addAttr(name, value) {
134	name = _.trim(name);	205✔
135	name = name.replace(REGEXP_ILLEGAL_ATTR_NAME, "").toLowerCase();	205✔
136	if (name.length < 1) return;	205✔
137	var ret = onAttr(name, value \|\| "");	153✔
138	if (ret) retAttrs.push(ret);	153✔
139	}
140
141	// 逐个分析字符
142	for (var i = 0; i < len; i++) {	120✔
143	var c = html.charAt(i);	1,815✔
144	var v, j;
145	if (tmpName === false && c === "=") {	1,815✔
146	tmpName = html.slice(lastPos, i);	137✔
147	lastPos = i + 1;	137✔
148	continue;	137✔
149	}
150	if (tmpName !== false) {	1,678✔
151	if (	909✔
152	i === lastPos &&	1,187✔
153	(c === '"' \|\| c === "'") &&
154	html.charAt(i - 1) === "="
155	) {
156	j = html.indexOf(c, i + 1);	88✔
157	if (j === -1) {	88!
158	break;	×
159	} else {
160	v = _.trim(html.slice(lastPos + 1, j));	88✔
161	addAttr(tmpName, v);	88✔
162	tmpName = false;	88✔
163	i = j;	88✔
164	lastPos = i + 1;	88✔
165	continue;	88✔
166	}
167	}
168	}
169	if (/\s\|\n\|\t/.test(c)) {	1,590✔
170	html = html.replace(/\s\|\n\|\t/g, " ");	134✔
171	if (tmpName === false) {	134✔
172	j = findNextEqual(html, i);	81✔
173	if (j === -1) {	81✔
174	v = _.trim(html.slice(lastPos, i));	58✔
175	addAttr(v);	58✔
176	tmpName = false;	58✔
177	lastPos = i + 1;	58✔
178	continue;	58✔
179	} else {
180	i = j - 1;	23✔
181	continue;	23✔
182	}
183	} else {
184	j = findBeforeEqual(html, i - 1);	53✔
185	if (j === -1) {	53✔
186	v = _.trim(html.slice(lastPos, i));	30✔
187	v = stripQuoteWrap(v);	30✔
188	addAttr(tmpName, v);	30✔
189	tmpName = false;	30✔
190	lastPos = i + 1;	30✔
191	continue;	30✔
192	} else {
193	continue;	23✔
194	}
195	}
196	}
197	}
198
199	if (lastPos < html.length) {	120✔
200	if (tmpName === false) {	29✔
201	addAttr(html.slice(lastPos));	10✔
202	} else {
203	addAttr(tmpName, stripQuoteWrap(_.trim(html.slice(lastPos))));	19✔
204	}
205	}
206
207	return _.trim(retAttrs.join(" "));	120✔
208	}
209
210	function findNextEqual(str, i) {
211	for (; i < str.length; i++) {	81✔
212	var c = str[i];	228✔
213	if (c === " ") continue;	228✔
214	if (c === "=") return i;	81✔
215	return -1;	58✔
216	}
217	}
218
219	function findBeforeEqual(str, i) {
220	for (; i > 0; i--) {	53✔
221	var c = str[i];	55✔
222	if (c === " ") continue;	55✔
223	if (c === "=") return i;	53✔
224	return -1;	30✔
225	}
226	}
227
228	function isQuoteWrapString(text) {
229	if (	49✔
230	(text[0] === '"' && text[text.length - 1] === '"') \|\|	100✔
231	(text[0] === "'" && text[text.length - 1] === "'")
232	) {
233	return true;	9✔
234	} else {
235	return false;	40✔
236	}
237	}
238
239	function stripQuoteWrap(text) {
240	if (isQuoteWrapString(text)) {	49✔
241	return text.substr(1, text.length - 2);	9✔
242	} else {
243	return text;	40✔
244	}
245	}
246
247	exports.parseTag = parseTag;	1✔
248	exports.parseAttr = parseAttr;	1✔

leizongmin / js-xss / #52

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous