mirror of
https://github.com/cypress-io/cypress.git
synced 2026-01-31 20:09:01 -06:00
* Add winPropAccessor to security.js, remove other replacers
* Add start of Cypress.resolveWindowReference
* Add regexes for dot and bracket access
* Some security_spec tests pass with new injection
* Add resolveWindowReference unit tests
* Old security_spec now passes with resolveWindowReference
* Inject stub resolveWindowReference so proxy still works outside of Cypress
* wip: rewrite HTML + JS with tokenizer
* Move to using esprima + hyntax to rewrite JS + HTML
* remove comment; oneLine makes the whole thing commented
* Fix tests, apple.com edge case
* wip: add getOrSet
* Revert "wip: add getOrSet"
This reverts commit a5c647c00f.
* release 3.5.0 [skip ci]
* use recast to replace window property accesses
* replace assignments to top properly
* fix yarn.lock
* bump deps
* update integration tests
* remove old security ts?
* fix integration spec
* always ignore js interception failure
* use globalThis instead of window
* add experimentalSourceRewriting flag
* restore regex-writer spec
* fix types
* update config_spec
* add source rewriting spec
* cleanup
* simplify rewriting logic, move rules into rewriter package
* create threaded rewriting tool for non-streaming use
* update @packages/rewriter to use threads for async
* use async rewriting where convenient
* add worker-shim.js
* add performance info to debug logs
* properly handle +=, -=, ...
* add proxy, rewriter to unit-tests stage
* cleanup
* use parse5 to rewrite HTML, strip SRI
* update tests
* reorganization, cleanup
* rewrite ALL parent, top identifiers except in a few cases
* handle many JS edge cases
* ensure parse5@5.1.1 is installed
* update yarn.lock
* update tests
* add debugging, add tests
* add attempted repro for .href issue
* implement source maps + extending inline source maps
* update opts passing in proxy layer
* fix sourcemap naming structure
* update tests to account for sourcemaps
* sourcemap tests
* remote source maps work
* comment
* update rewriter tests
* clean up TODOs in resolveWindowReference
* remove @types/nock
* clean up todos in deferred-source-map-cache
* fix rewriter build script
* fix concatStream import
* bump expectedresultcount
* clean up js-rules
* threading improvements, workaround for Electron segfault
* no visit_spec for now
* fix 6_visit_spec
* update MAX_WORKER_THREADS
* add repro for #3975
* cleanup
* cleanup
* make better use of namedTypes and builders
* get rid of the horrific closureDetectionTernary
ast-types keeps track of scope, so it is unneeded
* fix #3975, #3994
* add x-sourcemap, sourcemap header support
* snap-shot-it 7.9.3
* add deferred-source-map-cache-spec
* add tests
* Throw error in driver if AST rewriting fails
* Fix "location = 'relative-url'"
* fix max recursion depth
* slim down some fixtures
* fix window.location usage
* don't mess with `frames` at all
* no integration tests
* skip testing apple.com for now
* update wording: regex-based vs. ast-based
* skip real-world tests for now
* add some padding to process.exit workaround
* fix resolvers_spec
* fix html-spec
* cleanup
* Update packages/rewriter/lib/js-rules.ts
* Update packages/driver/src/cypress/resolvers.ts
* just import find by itself
* privatize typedefs for Cypress.state, remove .gitignore, remove dead code
Co-authored-by: Ben Kucera <14625260+Bkucera@users.noreply.github.com>
56 lines
1.6 KiB
TypeScript
56 lines
1.6 KiB
TypeScript
import find from 'lodash/find'
|
|
import RewritingStream from 'parse5-html-rewriting-stream'
|
|
import * as js from './js'
|
|
|
|
export function install (url: string, rewriter: RewritingStream, deferSourceMapRewrite?: js.DeferSourceMapRewriteFn) {
|
|
let currentlyInsideJsScriptTag = false
|
|
let inlineJsIndex = 0
|
|
|
|
rewriter.on('startTag', (startTag, raw) => {
|
|
if (startTag.tagName !== 'script') {
|
|
currentlyInsideJsScriptTag = false
|
|
|
|
return rewriter.emitRaw(raw)
|
|
}
|
|
|
|
const typeAttr = find(startTag.attrs, { name: 'type' })
|
|
|
|
if (typeAttr && typeAttr.value !== 'text/javascript' && typeAttr.value !== 'module') {
|
|
// we don't care about intercepting non-JS <script> tags
|
|
currentlyInsideJsScriptTag = false
|
|
|
|
return rewriter.emitRaw(raw)
|
|
}
|
|
|
|
currentlyInsideJsScriptTag = true
|
|
|
|
// rename subresource integrity attr since cypress's rewriting will invalidate SRI hashes
|
|
// @see https://github.com/cypress-io/cypress/issues/2393
|
|
const sriAttr = find(startTag.attrs, { name: 'integrity' })
|
|
|
|
if (sriAttr) {
|
|
sriAttr.name = 'cypress:stripped-integrity'
|
|
}
|
|
|
|
return rewriter.emitStartTag(startTag)
|
|
})
|
|
|
|
rewriter.on('endTag', (_endTag, raw) => {
|
|
currentlyInsideJsScriptTag = false
|
|
|
|
return rewriter.emitRaw(raw)
|
|
})
|
|
|
|
rewriter.on('text', (_textToken, raw) => {
|
|
if (!currentlyInsideJsScriptTag) {
|
|
return rewriter.emitRaw(raw)
|
|
}
|
|
|
|
// rewrite inline JS in <script> tags
|
|
// create a unique filename per inline script
|
|
const fakeJsUrl = [url, inlineJsIndex++].join(':')
|
|
|
|
return rewriter.emitRaw(js.rewriteJs(fakeJsUrl, raw, deferSourceMapRewrite))
|
|
})
|
|
}
|