third_party/blink/renderer/modules/sanitizer_api/sanitizer.h

// Copyright 2020 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef THIRD_PARTY_BLINK_RENDERER_MODULES_SANITIZER_API_SANITIZER_H_
#define THIRD_PARTY_BLINK_RENDERER_MODULES_SANITIZER_API_SANITIZER_H_

#include "third_party/blink/renderer/modules/modules_export.h"
#include "third_party/blink/renderer/platform/bindings/script_wrappable.h"
#include "third_party/blink/renderer/platform/wtf/text/wtf_string.h"

namespace blink {

class DocumentFragment;
class ExceptionState;
class SanitizerConfig;
class ScriptState;

class MODULES_EXPORT Sanitizer final : public ScriptWrappable {
  DEFINE_WRAPPERTYPEINFO();

 public:
  static Sanitizer* Create(const SanitizerConfig*, ExceptionState&);
  explicit Sanitizer(const SanitizerConfig*);
  ~Sanitizer() override;

  String sanitizeToString(ScriptState*, const String&, ExceptionState&);
  DocumentFragment* sanitize(ScriptState*, const String&, ExceptionState&);

  void Trace(Visitor*) const override;

 private:
  // TODO(lyf): Make config_ read-only. The creationOptions getter which
  // asks for the pointer is forbidened by a read-only variable.
  // TODO(lyf): This could be optimized by dropping config_ and adding
  // Vector<QualifiedName> for drop_elements.
  Member<SanitizerConfig> config_ = {};
  Vector<AtomicString> drop_attributes_ = {};
  const Vector<String> default_drop_elements_ = {"SCRIPT",    "ANNOTATION-XML",
                                                 "AUDIO",     "COLGROUP",
                                                 "DESC",      "FOREIGNOBJECT",
                                                 "HEAD",      "IFRAME",
                                                 "MATH",      "MI",
                                                 "MN",        "MO",
                                                 "MS",        "MTEXT",
                                                 "NOEMBED",   "NOFRAMES",
                                                 "PLAINTEXT", "STYLE",
                                                 "SVG",       "TEMPLATE",
                                                 "THEAD",     "TITLE",
                                                 "VIDEO",     "XMP"};
  const Vector<AtomicString> default_drop_attributes_ = {"onclick", "onsubmit"};
};

}  // namespace blink

#endif  // THIRD_PARTY_BLINK_RENDERER_MODULES_SANITIZER_API_SANITIZER_H_