11244670421

Committed 08 Oct 2024 10:22PM UTC coverage: 31.666% (+0.02%) from 31.644%

Build # 11244670421

Build Type

Pull #9781

github

Committed by

s-cheng

Commit Message

Merge branch 'master' into fix-linkpost-out-bug

Pull Request Pull Request #9781: fix bug with linkpost out link

Run Details

5063 of 41804 branches covered (12.11%)

Branch coverage included in aggregate %.

0 of 3 new or added lines in 1 file covered. (0.0%)

86 existing lines in 2 files now uncovered.

29584 of 67611 relevant lines covered (43.76%)

181.06 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

40.11

/packages/lesswrong/lib/vulcan-lib/utils.ts

/*

Utilities

*/

import get from 'lodash/get';
import isFunction from 'lodash/isFunction';
import getSlug from 'speakingurl';
import urlObject from 'url';
import { siteUrlSetting } from '../instanceSettings';
import { DatabasePublicSetting } from '../publicSettings';
import type { ToCData } from '../../lib/tableOfContents';
import sanitizeHtml from 'sanitize-html';
import { containsKana, fromKana } from "hepburn";

export const logoUrlSetting = new DatabasePublicSetting<string | null>('logoUrl', null)

interface UtilsType {
  // In server/vulcan-lib/mutators.ts
  createMutator: CreateMutator
  updateMutator: UpdateMutator
  deleteMutator: DeleteMutator
  
  // In server/vulcan-lib/utils.ts
  performCheck: <T extends DbObject>(operation: (user: DbUser|null, obj: T, context: any) => Promise<boolean>, user: DbUser|null, checkedObject: T, context: any, documentId: string, operationName: string, collectionName: CollectionNameString) => Promise<void>
}

export const Utils: UtilsType = ({} as UtilsType);

// @summary Convert a camelCase string to a space-separated capitalized string
// See http://stackoverflow.com/questions/4149276/javascript-camelcase-to-regular-form
export const camelToSpaces = function (str: string): string {
  return str.replace(/([A-Z])/g, ' $1').replace(/^./, function(str){ return str.toUpperCase(); });
};

// Convert a dash separated string to camelCase.
export const dashToCamel = function (str: string): string {
  return str.replace(/(-[a-z])/g, function($1){return $1.toUpperCase().replace('-','');});
};

// Convert a string to camelCase and remove spaces.
export const camelCaseify = function(str: string): string {
  str = dashToCamel(str.replace(' ', '-'));
  str = str.slice(0,1).toLowerCase() + str.slice(1);
  return str;
};

// Capitalize a string.
export const capitalize = function(str: string): string {
  return str.charAt(0).toUpperCase() + str.slice(1);
};

//////////////////////////
// URL Helper Functions //
//////////////////////////

/**
 * @summary Returns the user defined site URL or Meteor.absoluteUrl. Add trailing '/' if missing
 */
export const getSiteUrl = function (): string {
  let url = siteUrlSetting.get();
  if (url.slice(-1) !== '/') {
    url += '/';
  }
  return url;
};

export const makeAbsolute = function (url: string): string {
  const baseUrl = getSiteUrl();
  if (url.startsWith("/"))
    return baseUrl+url.substr(1);
  else
    return baseUrl+url;
}

const tryToFixUrl = (oldUrl: string, newUrl: string) => {
  try {
    // Only return the edited version if this actually fixed the problem
    new URL(newUrl);
    return newUrl;
  } catch (e) {
    return oldUrl;
  }
}

// NOTE: validateUrl and tryToFixUrl are duplicates of the code in public/lesswrong-editor/src/url-validator-plugin.js,
// which can't be imported directly because it is part of the editor bundle
export const validateUrl = (url: string) => {
  try {
    // This will validate the URL - importantly, it will fail if the
    // protocol is missing
    new URL(url);
  } catch (e) {
    if (url.search(/[^@]+@[^.]+\.[^\n\r\f]+$/) === 0) {
      // Add mailto: to email addresses
      return tryToFixUrl(url, `mailto:${url}`);
    } else if (url.search(/\/.*/) === 0) {
      // This is probably _meant_ to be relative. We could prepend the
      // siteUrl from instanceSettings, but this seems unnecessarily
      // risky - let's just do nothing.
    } else if (url.search(/(https?:)?\/\//) !== 0) {
      // Add https:// to anything else
      return tryToFixUrl(url, `https://${url}`);
    }
  }

  return url;
}

/**
 * @summary The global namespace for Vulcan utils.
 * @param {String} url - the URL to redirect
 * @param {String} foreignId - the optional ID of the foreign crosspost where this link is defined
 */
export const getOutgoingUrl = function (url: string, foreignId?: string): string {
  // If no protocol is specified, guess that it is https://
  const cleanedUrl = validateUrl(url);

  const result = getSiteUrl() + 'out?url=' + encodeURIComponent(cleanedUrl);
  return foreignId ? `${result}&foreignId=${encodeURIComponent(foreignId)}` : result;
};

export const slugify = function (s: string): string {
  if (containsKana(s)) {
    s = fromKana(s);
  }

  var slug = getSlug(s, {
    truncate: 60
  });

  // can't have posts with an "edit" slug
  if (slug === 'edit') {
    slug = 'edit-1';
  }

  // If there is nothing in the string that can be slugified, just call it unicode
  if (slug === "") {
    slug = "unicode"
  }

  return slug;
};

export const getDomain = function(url: string | null): string|null {
  if (!url) return null;
  try {
    const hostname = urlObject.parse(url).hostname
    return hostname!.replace('www.', '');
  } catch (error) {
    return null;
  }
};

// add http: if missing
export const addHttp = function (url: string): string|null {
  try {
    if (url.substring(0, 5) !== 'http:' && url.substring(0, 6) !== 'https:') {
      url = 'http:'+url;
    }
    return url;
  } catch (error) {
    return null;
  }
};

// https://stackoverflow.com/questions/16301503/can-i-use-requirepath-join-to-safely-concatenate-urls
// for searching: url-join
/** Combine urls without extra /s at the join */
export const combineUrls = (baseUrl: string, path: string) => {
  return path
    ? baseUrl.replace(/\/+$/, '') + '/' + path.replace(/^\/+/, '')
    : baseUrl;
}

// Remove query and anchor tags from path
export const getBasePath = (path: string) => {
  return path.split(/[?#]/)[0]
}

/////////////////////////////
// String Helper Functions //
/////////////////////////////

// http://stackoverflow.com/questions/2631001/javascript-test-for-existence-of-nested-object-key
export const checkNested: any = function(obj: AnyBecauseTodo /*, level1, level2, ... levelN*/) {
  var args = Array.prototype.slice.call(arguments);
  obj = args.shift();

  for (var i = 0; i < args.length; i++) {
    if (!obj.hasOwnProperty(args[i])) {
      return false;
    }
    obj = obj[args[i]];
  }
  return true;
};

// see http://stackoverflow.com/questions/8051975/access-object-child-properties-using-a-dot-notation-string
export const getNestedProperty = function (obj: any, desc: string) {
  var arr = desc.split('.');
  while(arr.length && (obj = obj[arr.shift()!]));
  return obj;
};

export const getLogoUrl = (): string|undefined => {
  const logoUrl = logoUrlSetting.get()
  if (logoUrl) {
    const prefix = getSiteUrl().slice(0,-1);
    // the logo may be hosted on another website
    return logoUrl.indexOf('://') > -1 ? logoUrl : prefix + logoUrl;
  }
};

export const encodeIntlError = (error: AnyBecauseTodo) => typeof error !== 'object' ? error : JSON.stringify(error);

export const decodeIntlError = (error: AnyBecauseTodo, options = {stripped: false}) => {
  try {
    // do we get the error as a string or as an error object?
    let strippedError = typeof error === 'string' ? error : error.message;

    // if the error hasn't been cleaned before (ex: it's not an error from a form)
    if (!options.stripped) {
      // strip the "GraphQL Error: message [error_code]" given by Apollo if present
      const graphqlPrefixIsPresent = strippedError.match(/GraphQL error: (.*)/);
      if (graphqlPrefixIsPresent) {
        strippedError = graphqlPrefixIsPresent[1];
      }

      // strip the error code if present
      const errorCodeIsPresent = strippedError.match(/(.*)\[(.*)\]/);
      if (errorCodeIsPresent) {
        strippedError = errorCodeIsPresent[1];
      }
    }

    // the error is an object internationalizable
    const parsedError = JSON.parse(strippedError);

    // check if the error has at least an 'id' expected by react-intl
    if (!parsedError.id) {
      console.error('[Undecodable error]', error); // eslint-disable-line
      return {id: 'app.something_bad_happened', value: '[undecodable error]'};
    }

    // return the parsed error
    return parsedError;
  } catch(__) {
    // the error is not internationalizable
    return error;
  }
};

export const isPromise = (value: any): value is Promise<any> => isFunction(get(value, 'then'));

export const removeProperty = (obj: any, propertyName: string): void => {
  for(const prop in obj) {
    if (prop === propertyName){
      delete obj[prop];
    } else if (typeof obj[prop] === 'object') {
      removeProperty(obj[prop], propertyName);
    }
  }
};

/**
 * Given a mongodb-style selector, if it contains `documentId`, replace that
 * with `_id`. This is a silly thing to do and a terrible hack; it's
 * particularly terrible since `documentId` is an actual field name on some
 * collections, corresponding to a foreign-key relation, eg on Votes it's the
 * voted-on object. The reason this is here is because Vulcan did it (in
 * `Connectors`, under the function name `convertUniqueSelector`), in a place
 * where it leaks into the external API, where it might be used by GreaterWrong
 * and other API users. So in order to remove this feature safely we need to
 * remove it in two steps, first logging if any selectors are actually
 * converted this way.
 *
 * If the change that got rid of `Connectors` has been deployed for awhile,
 * and the console-log warning from this function isn't appearing in logs, then
 * this function is a no-op and is safe to remove.
 */
export const convertDocumentIdToIdInSelector = (selector: any) => {
  if (selector.documentId) {
    //eslint-disable-next-line no-console
    console.log("Warning: Performed documentId-to-_id replacement");
    const result = {...selector, _id: selector.documentId};
    delete result.documentId;
    return result;
  }
  return selector;
};

/**
 * Sanitizing html
 */
export const sanitizeAllowedTags = [
  'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'blockquote', 'p', 'a', 'ul',
  'ol', 'nl', 'li', 'b', 'i', 'u', 'strong', 'em', 'strike', 's',
  'code', 'hr', 'br', 'div', 'table', 'thead', 'caption',
  'tbody', 'tr', 'th', 'td', 'pre', 'img', 'figure', 'figcaption',
  'section', 'span', 'sub', 'sup', 'ins', 'del', 'iframe', 'audio',
  'details', 'summary',
  
  //MathML elements (https://developer.mozilla.org/en-US/docs/Web/MathML/Element)
  "math", "mi", "mn", "mo", "ms", "mspace", "mtext", "merror",
  "mfrac", "mpadded", "mphantom", "mroot", "mrow", "msqrt", "mstyle",
  "mmultiscripts", "mover", "mprescripts", "msub", "msubsup", "msup", "munder",
  "munderover", "mtable", "mtd", "mtr",
]

const cssSizeRegex = /^(?:\d|\.)+(?:px|em|%)$/;

const allowedTableStyles = {
  'background-color': [/^.*$/],
  'border-bottom': [/^.*$/],
  'border-left': [/^.*$/],
  'border-right': [/^.*$/],
  'border-top': [/^.*$/],
  'border': [/^.*$/],
  'border-color': [/^.*$/],
  'border-style': [/^.*$/],
  'width': [cssSizeRegex],
  'height': [cssSizeRegex],
  'text-align': [/^.*$/],
  'vertical-align': [/^.*$/],
  'padding': [/^.*$/],
};

const allowedMathMLGlobalAttributes = ['mathvariant', 'dir', 'displaystyle', 'scriptlevel'];
const footnoteAttributes = [
  'data-footnote-content',
  'data-footnote-id',
  'data-footnote-index',
  'data-footnote-item',
  'data-footnote-reference',
  'data-footnote-section',
  'data-footnote-back-link',
  'data-footnote-back-link-href',
]

export const sanitize = function(s: string): string {
  return sanitizeHtml(s, {
    allowedTags: sanitizeAllowedTags,
    allowedAttributes:  {
      ...sanitizeHtml.defaults.allowedAttributes,
      '*': [...footnoteAttributes, 'data-internal-id'],
      audio: [ 'controls', 'src', 'style' ],
      img: [ 'src' , 'srcset', 'alt', 'style'],
      figure: ['style', 'class'],
      table: ['style'],
      tbody: ['style'],
      tr: ['style'],
      td: ['rowspan', 'colspan', 'style'],
      th: ['rowspan', 'colspan', 'style'],
      ol: ['start', 'reversed', 'type', 'role'],
      span: ['style', 'id', 'role'],
      div: ['class', 'data-oembed-url', 'data-elicit-id', 'data-metaculus-id', 'data-manifold-slug', 'data-metaforecast-slug', 'data-owid-slug', 'data-viewpoints-slug'],
      a: ['class', 'href', 'name', 'target', 'rel', 'data-href'],
      iframe: ['src', 'allowfullscreen', 'allow'],
      li: ['id', 'role'],

      // Attributes for dialogues
      section: ['class', 'message-id', 'user-id', 'user-order', 'submitted-date', 'display-name'],
      
      // Attributes for collapsible sections
      details: ['class'],
      summary: ['class'],
      
      // Attributes for MathML elements
      math: [...allowedMathMLGlobalAttributes, 'display'],
      mi: allowedMathMLGlobalAttributes,
      mn: allowedMathMLGlobalAttributes,
      mtext: allowedMathMLGlobalAttributes,
      merror: allowedMathMLGlobalAttributes,
      mfrac: [...allowedMathMLGlobalAttributes, 'linethickness'],
      mmultiscripts: allowedMathMLGlobalAttributes,
      mo: [...allowedMathMLGlobalAttributes, 'fence', 'largeop', 'lspace', 'maxsize', 'minsize', 'movablelimits', 'rspace', 'separator', 'stretchy', 'symmetric'],
      mover: [...allowedMathMLGlobalAttributes, 'accent'],
      mpadded: [...allowedMathMLGlobalAttributes, 'depth','height','lspace','voffset','width'],
      mphantom: allowedMathMLGlobalAttributes,
      mprescripts: allowedMathMLGlobalAttributes,
      mroot: allowedMathMLGlobalAttributes,
      mrow: allowedMathMLGlobalAttributes,
      ms: [...allowedMathMLGlobalAttributes, 'lquote','rquote'],
      mspace: [...allowedMathMLGlobalAttributes, 'depth','height','width'],
      msqrt: allowedMathMLGlobalAttributes,
      mstyle: allowedMathMLGlobalAttributes,
      msub: allowedMathMLGlobalAttributes,
      msubsup: allowedMathMLGlobalAttributes,
      msup: allowedMathMLGlobalAttributes,
      mtable: allowedMathMLGlobalAttributes,
      mtd: [...allowedMathMLGlobalAttributes, 'columnspan','rowspan'],
      mtr: allowedMathMLGlobalAttributes,
      munder: [...allowedMathMLGlobalAttributes, 'accentunder'],
      munderover: [...allowedMathMLGlobalAttributes, 'accent','accentunder'],
    },
    allowedIframeHostnames: [
      'www.youtube.com', 'youtube.com',
      'd3s0w6fek99l5b.cloudfront.net', // Metaculus CDN that provides the iframes
      'metaculus.com',
      'manifold.markets',
      'metaforecast.org',
      'app.thoughtsaver.com',
      'ourworldindata.org',
      'strawpoll.com',
      'estimaker.app',
      'viewpoints.xyz',
      'calendly.com',
      'neuronpedia.org'
    ],
    allowedClasses: {
      span: [ 'footnote-reference', 'footnote-label', 'footnote-back-link', "math-tex" ],
      div: [
        'spoilers',
        'footnote-content',
        'footnote-item',
        'footnote-label',
        'footnote-reference',
        'metaculus-preview',
        'manifold-preview',
        'neuronpedia-preview',
        'metaforecast-preview',
        'owid-preview',
        'elicit-binary-prediction',
        'thoughtSaverFrameWrapper',
        'strawpoll-embed',
        'estimaker-preview',
        'viewpoints-preview',
        'ck-cta-button',
        'ck-cta-button-centered',
        'detailsBlockContent',
        'calendly-preview',
      ],
      iframe: [ 'thoughtSaverFrame' ],
      ol: [ 'footnotes', 'footnote-section' ],
      li: [ 'footnote-item' ],
      details: ['detailsBlock'],
      summary: ['detailsBlockTitle'],
    },
    allowedStyles: {
      figure: {
        'width': [cssSizeRegex],
        'height': [cssSizeRegex],
        'padding': [/^.*$/],
      },
      img: {
        'width': [cssSizeRegex],
        'height': [cssSizeRegex],
        'max-width': [cssSizeRegex],
        'max-height': [cssSizeRegex],
        'padding': [/^.*$/],
      },
      table: {
        ...allowedTableStyles,
      },
      td: {
        ...allowedTableStyles,
      },
      th: {
        ...allowedTableStyles,
      },
      span: {
        // From: https://gist.github.com/olmokramer/82ccce673f86db7cda5e#gistcomment-3119899
        color: [/([a-z]+|#([\da-f]{3}){1,2}|(rgb|hsl)a\((\d{1,3}%?,\s?){3}(1|0?\.\d+)\)|(rgb|hsl)\(\d{1,3}%?(,\s?\d{1,3}%?){2}\))/]
      },
    }
  });
};

1	/*	19,330✔
2
3	Utilities
4
5	*/
6
7	import get from 'lodash/get';	46✔
8	import isFunction from 'lodash/isFunction';	46✔
9	import getSlug from 'speakingurl';	46✔
10	import urlObject from 'url';	46✔
11	import { siteUrlSetting } from '../instanceSettings';	46✔
12	import { DatabasePublicSetting } from '../publicSettings';	46✔
13	import type { ToCData } from '../../lib/tableOfContents';
14	import sanitizeHtml from 'sanitize-html';	46✔
15	import { containsKana, fromKana } from "hepburn";	46✔
16
17	export const logoUrlSetting = new DatabasePublicSetting<string \| null>('logoUrl', null)	46✔
18
19	interface UtilsType {
20	// In server/vulcan-lib/mutators.ts
21	createMutator: CreateMutator
22	updateMutator: UpdateMutator
23	deleteMutator: DeleteMutator
24
25	// In server/vulcan-lib/utils.ts
26	performCheck: <T extends DbObject>(operation: (user: DbUser\|null, obj: T, context: any) => Promise<boolean>, user: DbUser\|null, checkedObject: T, context: any, documentId: string, operationName: string, collectionName: CollectionNameString) => Promise<void>
27	}
28
29	export const Utils: UtilsType = ({} as UtilsType);	46✔
30
31	// @summary Convert a camelCase string to a space-separated capitalized string
32	// See http://stackoverflow.com/questions/4149276/javascript-camelcase-to-regular-form
33	export const camelToSpaces = function (str: string): string {	46✔
34	return str.replace(/([A-Z])/g, ' $1').replace(/^./, function(str){ return str.toUpperCase(); });	×
35	};
36
37	// Convert a dash separated string to camelCase.
38	export const dashToCamel = function (str: string): string {	46✔
39	return str.replace(/(-[a-z])/g, function($1){return $1.toUpperCase().replace('-','');});	4,934✔
40	};
41
42	// Convert a string to camelCase and remove spaces.
43	export const camelCaseify = function(str: string): string {	46✔
44	str = dashToCamel(str.replace(' ', '-'));	4,934✔
45	str = str.slice(0,1).toLowerCase() + str.slice(1);	4,934✔
46	return str;	4,934✔
47	};
48
49	// Capitalize a string.
50	export const capitalize = function(str: string): string {	46✔
51	return str.charAt(0).toUpperCase() + str.slice(1);	5✔
52	};
53
54	//////////////////////////
55	// URL Helper Functions //
56	//////////////////////////
57
58	/**
59	* @summary Returns the user defined site URL or Meteor.absoluteUrl. Add trailing '/' if missing
60	*/
61	export const getSiteUrl = function (): string {	46✔
62	let url = siteUrlSetting.get();	1✔
63	if (url.slice(-1) !== '/') {	1!
64	url += '/';	1✔
65	}
66	return url;	1✔
67	};
68
69	export const makeAbsolute = function (url: string): string {	46✔
70	const baseUrl = getSiteUrl();	×
71	if (url.startsWith("/"))	×
72	return baseUrl+url.substr(1);	×
73	else
74	return baseUrl+url;	×
75	}
76
77	const tryToFixUrl = (oldUrl: string, newUrl: string) => {	46✔
78	try {	×
79	// Only return the edited version if this actually fixed the problem
80	new URL(newUrl);	×
81	return newUrl;	×
82	} catch (e) {
83	return oldUrl;	×
84	}
85	}
86
87	// NOTE: validateUrl and tryToFixUrl are duplicates of the code in public/lesswrong-editor/src/url-validator-plugin.js,
88	// which can't be imported directly because it is part of the editor bundle
89	export const validateUrl = (url: string) => {	46✔
90	try {	×
91	// This will validate the URL - importantly, it will fail if the
92	// protocol is missing
93	new URL(url);	×
94	} catch (e) {
95	if (url.search(/[^@]+@[^.]+\.[^\n\r\f]+$/) === 0) {	×
96	// Add mailto: to email addresses
97	return tryToFixUrl(url, `mailto:${url}`);	×
98	} else if (url.search(/\/.*/) === 0) {	×
99	// This is probably _meant_ to be relative. We could prepend the
100	// siteUrl from instanceSettings, but this seems unnecessarily
101	// risky - let's just do nothing.
102	} else if (url.search(/(https?:)?\/\//) !== 0) {	×
103	// Add https:// to anything else
104	return tryToFixUrl(url, `https://${url}`);	×
105	}
106	}
107
108	return url;	×
109	}
110
111	/**
112	* @summary The global namespace for Vulcan utils.
113	* @param {String} url - the URL to redirect
114	* @param {String} foreignId - the optional ID of the foreign crosspost where this link is defined
115	*/
116	export const getOutgoingUrl = function (url: string, foreignId?: string): string {	46✔
117	// If no protocol is specified, guess that it is https://
UNCOV 118	const cleanedUrl = validateUrl(url);	×
119
120	const result = getSiteUrl() + 'out?url=' + encodeURIComponent(cleanedUrl);	×
UNCOV 121	return foreignId ? `${result}&foreignId=${encodeURIComponent(foreignId)}` : result;	×
122	};
123
124	export const slugify = function (s: string): string {	46✔
125	if (containsKana(s)) {	289✔
126	s = fromKana(s);	3✔
127	}
128
129	var slug = getSlug(s, {	289✔
130	truncate: 60
131	});
132
133	// can't have posts with an "edit" slug
134	if (slug === 'edit') {	289✔
135	slug = 'edit-1';	1✔
136	}
137
138	// If there is nothing in the string that can be slugified, just call it unicode
139	if (slug === "") {	289✔
140	slug = "unicode"	1✔
141	}
142
143	return slug;	289✔
144	};
145
146	export const getDomain = function(url: string \| null): string\|null {	46✔
147	if (!url) return null;	×
148	try {	×
UNCOV 149	const hostname = urlObject.parse(url).hostname	×
150	return hostname!.replace('www.', '');	×
151	} catch (error) {
UNCOV 152	return null;	×
153	}
154	};
155
156	// add http: if missing
157	export const addHttp = function (url: string): string\|null {	46✔
158	try {	×
UNCOV 159	if (url.substring(0, 5) !== 'http:' && url.substring(0, 6) !== 'https:') {	×
160	url = 'http:'+url;	×
161	}
162	return url;	×
163	} catch (error) {
UNCOV 164	return null;	×
165	}
166	};
167
168	// https://stackoverflow.com/questions/16301503/can-i-use-requirepath-join-to-safely-concatenate-urls
169	// for searching: url-join
170	/** Combine urls without extra /s at the join */
171	export const combineUrls = (baseUrl: string, path: string) => {	46✔
UNCOV 172	return path	×
173	? baseUrl.replace(/\/+$/, '') + '/' + path.replace(/^\/+/, '')	×
174	: baseUrl;
175	}
176
177	// Remove query and anchor tags from path
178	export const getBasePath = (path: string) => {	46✔
UNCOV 179	return path.split(/[?#]/)[0]	×
180	}
181
182	/////////////////////////////
183	// String Helper Functions //
184	/////////////////////////////
185
186	// http://stackoverflow.com/questions/2631001/javascript-test-for-existence-of-nested-object-key
187	export const checkNested: any = function(obj: AnyBecauseTodo /, level1, level2, ... levelN/) {	46✔
UNCOV 188	var args = Array.prototype.slice.call(arguments);	×
189	obj = args.shift();	×
190
191	for (var i = 0; i < args.length; i++) {	×
UNCOV 192	if (!obj.hasOwnProperty(args[i])) {	×
193	return false;	×
194	}
195	obj = obj[args[i]];	×
196	}
UNCOV 197	return true;	×
198	};
199
200	// see http://stackoverflow.com/questions/8051975/access-object-child-properties-using-a-dot-notation-string
201	export const getNestedProperty = function (obj: any, desc: string) {	46✔
202	var arr = desc.split('.');	2,352✔
203	while(arr.length && (obj = obj[arr.shift()!]));	2,352✔
204	return obj;	2,352✔
205	};
206
207	export const getLogoUrl = (): string\|undefined => {	46✔
208	const logoUrl = logoUrlSetting.get()	×
UNCOV 209	if (logoUrl) {	×
210	const prefix = getSiteUrl().slice(0,-1);	×
211	// the logo may be hosted on another website
UNCOV 212	return logoUrl.indexOf('://') > -1 ? logoUrl : prefix + logoUrl;	×
213	}
214	};
215
216	export const encodeIntlError = (error: AnyBecauseTodo) => typeof error !== 'object' ? error : JSON.stringify(error);	46!
217
218	export const decodeIntlError = (error: AnyBecauseTodo, options = {stripped: false}) => {	46!
219	try {	×
220	// do we get the error as a string or as an error object?
UNCOV 221	let strippedError = typeof error === 'string' ? error : error.message;	×
222
223	// if the error hasn't been cleaned before (ex: it's not an error from a form)
224	if (!options.stripped) {	×
225	// strip the "GraphQL Error: message [error_code]" given by Apollo if present
226	const graphqlPrefixIsPresent = strippedError.match(/GraphQL error: (.*)/);	×
UNCOV 227	if (graphqlPrefixIsPresent) {	×
UNCOV 228	strippedError = graphqlPrefixIsPresent[1];	×
229	}
230
231	// strip the error code if present
232	const errorCodeIsPresent = strippedError.match(/(.)\[(.)\]/);	×
UNCOV 233	if (errorCodeIsPresent) {	×
UNCOV 234	strippedError = errorCodeIsPresent[1];	×
235	}
236	}
237
238	// the error is an object internationalizable
UNCOV 239	const parsedError = JSON.parse(strippedError);	×
240
241	// check if the error has at least an 'id' expected by react-intl
242	if (!parsedError.id) {	×
UNCOV 243	console.error('[Undecodable error]', error); // eslint-disable-line	×
UNCOV 244	return {id: 'app.something_bad_happened', value: '[undecodable error]'};	×
245	}
246
247	// return the parsed error
UNCOV 248	return parsedError;	×
249	} catch(__) {
250	// the error is not internationalizable
UNCOV 251	return error;	×
252	}
253	};
254
255	export const isPromise = (value: any): value is Promise<any> => isFunction(get(value, 'then'));	11,285✔
256
257	export const removeProperty = (obj: any, propertyName: string): void => {	46✔
258	for(const prop in obj) {	×
259	if (prop === propertyName){	×
260	delete obj[prop];	×
UNCOV 261	} else if (typeof obj[prop] === 'object') {	×
UNCOV 262	removeProperty(obj[prop], propertyName);	×
263	}
264	}
265	};
266
267	/**
268	* Given a mongodb-style selector, if it contains `documentId`, replace that
269	* with `_id`. This is a silly thing to do and a terrible hack; it's
270	* particularly terrible since `documentId` is an actual field name on some
271	* collections, corresponding to a foreign-key relation, eg on Votes it's the
272	* voted-on object. The reason this is here is because Vulcan did it (in
273	* `Connectors`, under the function name `convertUniqueSelector`), in a place
274	* where it leaks into the external API, where it might be used by GreaterWrong
275	* and other API users. So in order to remove this feature safely we need to
276	* remove it in two steps, first logging if any selectors are actually
277	* converted this way.
278	*
279	* If the change that got rid of `Connectors` has been deployed for awhile,
280	* and the console-log warning from this function isn't appearing in logs, then
281	* this function is a no-op and is safe to remove.
282	*/
283	export const convertDocumentIdToIdInSelector = (selector: any) => {	46✔
284	if (selector.documentId) {	125!
285	//eslint-disable-next-line no-console
286	console.log("Warning: Performed documentId-to-_id replacement");	×
287	const result = {...selector, _id: selector.documentId};	×
UNCOV 288	delete result.documentId;	×
UNCOV 289	return result;	×
290	}
291	return selector;	125✔
292	};
293
294	/**
295	* Sanitizing html
296	*/
297	export const sanitizeAllowedTags = [	46✔
298	'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'blockquote', 'p', 'a', 'ul',
299	'ol', 'nl', 'li', 'b', 'i', 'u', 'strong', 'em', 'strike', 's',
300	'code', 'hr', 'br', 'div', 'table', 'thead', 'caption',
301	'tbody', 'tr', 'th', 'td', 'pre', 'img', 'figure', 'figcaption',
302	'section', 'span', 'sub', 'sup', 'ins', 'del', 'iframe', 'audio',
303	'details', 'summary',
304
305	//MathML elements (https://developer.mozilla.org/en-US/docs/Web/MathML/Element)
306	"math", "mi", "mn", "mo", "ms", "mspace", "mtext", "merror",
307	"mfrac", "mpadded", "mphantom", "mroot", "mrow", "msqrt", "mstyle",
308	"mmultiscripts", "mover", "mprescripts", "msub", "msubsup", "msup", "munder",
309	"munderover", "mtable", "mtd", "mtr",
310	]
311
312	const cssSizeRegex = /^(?:\d\|\.)+(?:px\|em\|%)$/;	46✔
313
314	const allowedTableStyles = {	46✔
315	'background-color': [/^.*$/],
316	'border-bottom': [/^.*$/],
317	'border-left': [/^.*$/],
318	'border-right': [/^.*$/],
319	'border-top': [/^.*$/],
320	'border': [/^.*$/],
321	'border-color': [/^.*$/],
322	'border-style': [/^.*$/],
323	'width': [cssSizeRegex],
324	'height': [cssSizeRegex],
325	'text-align': [/^.*$/],
326	'vertical-align': [/^.*$/],
327	'padding': [/^.*$/],
328	};
329
330	const allowedMathMLGlobalAttributes = ['mathvariant', 'dir', 'displaystyle', 'scriptlevel'];	46✔
331	const footnoteAttributes = [	46✔
332	'data-footnote-content',
333	'data-footnote-id',
334	'data-footnote-index',
335	'data-footnote-item',
336	'data-footnote-reference',
337	'data-footnote-section',
338	'data-footnote-back-link',
339	'data-footnote-back-link-href',
340	]
341
342	export const sanitize = function(s: string): string {	46✔
343	return sanitizeHtml(s, {	21✔
344	allowedTags: sanitizeAllowedTags,
345	allowedAttributes: {
346	...sanitizeHtml.defaults.allowedAttributes,
347	'*': [...footnoteAttributes, 'data-internal-id'],
348	audio: [ 'controls', 'src', 'style' ],
349	img: [ 'src' , 'srcset', 'alt', 'style'],
350	figure: ['style', 'class'],
351	table: ['style'],
352	tbody: ['style'],
353	tr: ['style'],
354	td: ['rowspan', 'colspan', 'style'],
355	th: ['rowspan', 'colspan', 'style'],
356	ol: ['start', 'reversed', 'type', 'role'],
357	span: ['style', 'id', 'role'],
358	div: ['class', 'data-oembed-url', 'data-elicit-id', 'data-metaculus-id', 'data-manifold-slug', 'data-metaforecast-slug', 'data-owid-slug', 'data-viewpoints-slug'],
359	a: ['class', 'href', 'name', 'target', 'rel', 'data-href'],
360	iframe: ['src', 'allowfullscreen', 'allow'],
361	li: ['id', 'role'],
362
363	// Attributes for dialogues
364	section: ['class', 'message-id', 'user-id', 'user-order', 'submitted-date', 'display-name'],
365
366	// Attributes for collapsible sections
367	details: ['class'],
368	summary: ['class'],
369
370	// Attributes for MathML elements
371	math: [...allowedMathMLGlobalAttributes, 'display'],
372	mi: allowedMathMLGlobalAttributes,
373	mn: allowedMathMLGlobalAttributes,
374	mtext: allowedMathMLGlobalAttributes,
375	merror: allowedMathMLGlobalAttributes,
376	mfrac: [...allowedMathMLGlobalAttributes, 'linethickness'],
377	mmultiscripts: allowedMathMLGlobalAttributes,
378	mo: [...allowedMathMLGlobalAttributes, 'fence', 'largeop', 'lspace', 'maxsize', 'minsize', 'movablelimits', 'rspace', 'separator', 'stretchy', 'symmetric'],
379	mover: [...allowedMathMLGlobalAttributes, 'accent'],
380	mpadded: [...allowedMathMLGlobalAttributes, 'depth','height','lspace','voffset','width'],
381	mphantom: allowedMathMLGlobalAttributes,
382	mprescripts: allowedMathMLGlobalAttributes,
383	mroot: allowedMathMLGlobalAttributes,
384	mrow: allowedMathMLGlobalAttributes,
385	ms: [...allowedMathMLGlobalAttributes, 'lquote','rquote'],
386	mspace: [...allowedMathMLGlobalAttributes, 'depth','height','width'],
387	msqrt: allowedMathMLGlobalAttributes,
388	mstyle: allowedMathMLGlobalAttributes,
389	msub: allowedMathMLGlobalAttributes,
390	msubsup: allowedMathMLGlobalAttributes,
391	msup: allowedMathMLGlobalAttributes,
392	mtable: allowedMathMLGlobalAttributes,
393	mtd: [...allowedMathMLGlobalAttributes, 'columnspan','rowspan'],
394	mtr: allowedMathMLGlobalAttributes,
395	munder: [...allowedMathMLGlobalAttributes, 'accentunder'],
396	munderover: [...allowedMathMLGlobalAttributes, 'accent','accentunder'],
397	},
398	allowedIframeHostnames: [
399	'www.youtube.com', 'youtube.com',
400	'd3s0w6fek99l5b.cloudfront.net', // Metaculus CDN that provides the iframes
401	'metaculus.com',
402	'manifold.markets',
403	'metaforecast.org',
404	'app.thoughtsaver.com',
405	'ourworldindata.org',
406	'strawpoll.com',
407	'estimaker.app',
408	'viewpoints.xyz',
409	'calendly.com',
410	'neuronpedia.org'
411	],
412	allowedClasses: {
413	span: [ 'footnote-reference', 'footnote-label', 'footnote-back-link', "math-tex" ],
414	div: [
415	'spoilers',
416	'footnote-content',
417	'footnote-item',
418	'footnote-label',
419	'footnote-reference',
420	'metaculus-preview',
421	'manifold-preview',
422	'neuronpedia-preview',
423	'metaforecast-preview',
424	'owid-preview',
425	'elicit-binary-prediction',
426	'thoughtSaverFrameWrapper',
427	'strawpoll-embed',
428	'estimaker-preview',
429	'viewpoints-preview',
430	'ck-cta-button',
431	'ck-cta-button-centered',
432	'detailsBlockContent',
433	'calendly-preview',
434	],
435	iframe: [ 'thoughtSaverFrame' ],
436	ol: [ 'footnotes', 'footnote-section' ],
437	li: [ 'footnote-item' ],
438	details: ['detailsBlock'],
439	summary: ['detailsBlockTitle'],
440	},
441	allowedStyles: {
442	figure: {
443	'width': [cssSizeRegex],
444	'height': [cssSizeRegex],
445	'padding': [/^.*$/],
446	},
447	img: {
448	'width': [cssSizeRegex],
449	'height': [cssSizeRegex],
450	'max-width': [cssSizeRegex],
451	'max-height': [cssSizeRegex],
452	'padding': [/^.*$/],
453	},
454	table: {
455	...allowedTableStyles,
456	},
457	td: {
458	...allowedTableStyles,
459	},
460	th: {
461	...allowedTableStyles,
462	},
463	span: {
464	// From: https://gist.github.com/olmokramer/82ccce673f86db7cda5e#gistcomment-3119899
465	color: [/([a-z]+\|#([\da-f]{3}){1,2}\|(rgb\|hsl)a\((\d{1,3}%?,\s?){3}(1\|0?\.\d+)\)\|(rgb\|hsl)\(\d{1,3}%?(,\s?\d{1,3}%?){2}\))/]
466	},
467	}
468	});
469	};

ForumMagnum / ForumMagnum / 11244670421

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous