You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
118 lines
6.9 KiB
118 lines
6.9 KiB
"use strict";
|
|
/*---------------------------------------------------------------------------------------------
|
|
* Copyright (c) Microsoft Corporation. All rights reserved.
|
|
* Licensed under the MIT License. See License.txt in the project root for license information.
|
|
*--------------------------------------------------------------------------------------------*/
|
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
const vscode = require("vscode");
|
|
const path = require("path");
|
|
const nls = require("vscode-nls");
|
|
const localize = nls.loadMessageBundle();
|
|
const security_1 = require("../security");
|
|
const cheerio = require("cheerio");
|
|
/**
|
|
* Strings used inside the html preview.
|
|
*
|
|
* Stored here and then injected in the preview so that they
|
|
* can be localized using our normal localization process.
|
|
*/
|
|
const previewStrings = {
|
|
cspAlertMessageText: localize('preview.securityMessage.text', 'Some content has been disabled in this document'),
|
|
cspAlertMessageTitle: localize('preview.securityMessage.title', 'Potentially unsafe or insecure content has been disabled in the html preview. Change the HTML preview security setting to allow insecure content or enable scripts'),
|
|
cspAlertMessageLabel: localize('preview.securityMessage.label', 'Content Disabled Security Warning')
|
|
};
|
|
class HTMLContentProvider {
|
|
constructor(context, cspArbiter, logger) {
|
|
this.context = context;
|
|
this.cspArbiter = cspArbiter;
|
|
this.logger = logger;
|
|
this.TAG_RegEx = /^\s*?\<(p|h[1-6]|img|code|div|blockquote|li)((\s+.*?)(class="(.*?)")(.*?\>)|\>|\>|\/\>|\s+.*?\>)/;
|
|
}
|
|
provideTextDocumentContent(htmlDocument, previewConfigurations, initialLine = undefined, state) {
|
|
const sourceUri = htmlDocument.uri;
|
|
const config = previewConfigurations.loadAndCacheConfiguration(sourceUri);
|
|
const initialData = {
|
|
source: sourceUri.toString(),
|
|
line: initialLine,
|
|
lineCount: htmlDocument.lineCount,
|
|
scrollPreviewWithEditor: config.scrollPreviewWithEditor,
|
|
scrollEditorWithPreview: config.scrollEditorWithPreview,
|
|
doubleClickToSwitchToEditor: config.doubleClickToSwitchToEditor,
|
|
disableSecurityWarnings: this.cspArbiter.shouldDisableSecurityWarnings()
|
|
};
|
|
this.logger.log('provideTextDocumentContent', initialData);
|
|
// Content Security Policy
|
|
const nonce = new Date().getTime() + '' + new Date().getMilliseconds();
|
|
const csp = this.getCspForResource(sourceUri, nonce);
|
|
const parsedDoc = htmlDocument.getText().split(/\r?\n/).map((l, i) => l.replace(this.TAG_RegEx, (match, p1, p2, p3, p4, p5, p6, offset) => typeof p5 !== "string" ?
|
|
`<${p1} class="code-line" data-line="${i + 1}" ${p2}` :
|
|
`<${p1} ${p3} class="${p5} code-line" data-line="${i + 1}" ${p6}`)).join("\n");
|
|
const $ = cheerio.load(parsedDoc);
|
|
$("head").prepend(`<meta http-equiv="Content-type" content="text/html;charset=UTF-8">
|
|
${csp}
|
|
<meta id="vscode-html-preview-data"
|
|
data-settings="${JSON.stringify(initialData).replace(/"/g, '"')}"
|
|
data-strings="${JSON.stringify(previewStrings).replace(/"/g, '"')}"
|
|
data-state="${JSON.stringify(state || {}).replace(/"/g, '"')}">
|
|
<script src="${this.extensionResourcePath('pre.js')}" nonce="${nonce}"></script>
|
|
<script src="${this.extensionResourcePath('index.js')}" nonce="${nonce}"></script>
|
|
${this.getStyles(sourceUri, config)}
|
|
<base href="${htmlDocument.uri.with({ scheme: 'vscode-resource' }).toString(true)}">`);
|
|
$("body").addClass(`vscode-body ${config.markEditorSelection ? 'showEditorSelection' : ''}`);
|
|
return $.html();
|
|
}
|
|
extensionResourcePath(mediaFile) {
|
|
return vscode.Uri.file(this.context.asAbsolutePath(path.join('media', mediaFile)))
|
|
.with({ scheme: 'vscode-resource' })
|
|
.toString();
|
|
}
|
|
fixHref(resource, href) {
|
|
if (!href) {
|
|
return href;
|
|
}
|
|
// Use href if it is already an URL
|
|
const hrefUri = vscode.Uri.parse(href);
|
|
if (['http', 'https'].indexOf(hrefUri.scheme) >= 0) {
|
|
return hrefUri.toString();
|
|
}
|
|
// Use href as file URI if it is absolute
|
|
if (path.isAbsolute(href) || hrefUri.scheme === 'file') {
|
|
return vscode.Uri.file(href)
|
|
.with({ scheme: 'vscode-resource' })
|
|
.toString();
|
|
}
|
|
// Use a workspace relative path if there is a workspace
|
|
let root = vscode.workspace.getWorkspaceFolder(resource);
|
|
if (root) {
|
|
return vscode.Uri.file(path.join(root.uri.fsPath, href))
|
|
.with({ scheme: 'vscode-resource' })
|
|
.toString();
|
|
}
|
|
// Otherwise look relative to the html file
|
|
return vscode.Uri.file(path.join(path.dirname(resource.fsPath), href))
|
|
.with({ scheme: 'vscode-resource' })
|
|
.toString();
|
|
}
|
|
getStyles(resource, config) {
|
|
if (Array.isArray(config.styles)) {
|
|
return config.styles.map(style => {
|
|
return `<link rel="stylesheet" class="code-user-style" data-source="${style.replace(/"/g, '"')}" href="${this.fixHref(resource, style)}" type="text/css" media="screen">`;
|
|
}).join('\n');
|
|
}
|
|
return '';
|
|
}
|
|
getCspForResource(resource, nonce) {
|
|
switch (this.cspArbiter.getSecurityLevelForResource(resource)) {
|
|
case security_1.HTMLPreviewSecurityLevel.AllowInsecureContent:
|
|
return `<meta http-equiv="Content-Security-Policy" content="default-src 'none'; img-src vscode-resource: http: https: data:; media-src vscode-resource: http: https: data:; script-src https: vscode-resource:; style-src vscode-resource: 'unsafe-inline' http: https: data:; font-src vscode-resource: http: https: data:;">`;
|
|
case security_1.HTMLPreviewSecurityLevel.AllowInsecureLocalContent:
|
|
return `<meta http-equiv="Content-Security-Policy" content="default-src 'none'; img-src vscode-resource: https: data: http://localhost:* http://127.0.0.1:*; media-src vscode-resource: https: data: http://localhost:* http://127.0.0.1:*; script-src https: vscode-resource:; style-src vscode-resource: 'unsafe-inline' https: data: http://localhost:* http://127.0.0.1:*; font-src vscode-resource: https: data: http://localhost:* http://127.0.0.1:*;">`;
|
|
case security_1.HTMLPreviewSecurityLevel.AllowScriptsAndAllContent:
|
|
return '';
|
|
case security_1.HTMLPreviewSecurityLevel.Strict:
|
|
default:
|
|
return `<meta http-equiv="Content-Security-Policy" content="default-src 'none'; img-src vscode-resource: https: data:; media-src vscode-resource: https: data:; script-src https: vscode-resource:; style-src vscode-resource: 'unsafe-inline' https: data:; font-src vscode-resource: https: data:;">`;
|
|
}
|
|
}
|
|
}
|
|
exports.HTMLContentProvider = HTMLContentProvider;
|