mirror of
https://github.com/LadybirdBrowser/ladybird.git
synced 2025-12-07 21:59:54 +00:00
82bd3d3891
Prevents observably calling Trusted Types, which can run arbitrary JS, cause crashes due to use of MUST and allow arbitrary JS to modify internal elements.
90 lines
3.6 KiB
C++
90 lines
3.6 KiB
C++
/*
|
|
* Copyright (c) 2022, the SerenityOS developers.
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#include <LibJS/Runtime/ValueInlines.h>
|
|
#include <LibWeb/Bindings/ExceptionOrUtils.h>
|
|
#include <LibWeb/Bindings/HTMLOptionElementPrototype.h>
|
|
#include <LibWeb/Bindings/OptionConstructor.h>
|
|
#include <LibWeb/DOM/ElementFactory.h>
|
|
#include <LibWeb/DOM/Text.h>
|
|
#include <LibWeb/HTML/HTMLOptionElement.h>
|
|
#include <LibWeb/HTML/Scripting/Environments.h>
|
|
#include <LibWeb/HTML/Window.h>
|
|
#include <LibWeb/Namespace.h>
|
|
|
|
namespace Web::Bindings {
|
|
|
|
GC_DEFINE_ALLOCATOR(OptionConstructor);
|
|
|
|
OptionConstructor::OptionConstructor(JS::Realm& realm)
|
|
: NativeFunction(realm.intrinsics().function_prototype())
|
|
{
|
|
}
|
|
|
|
void OptionConstructor::initialize(JS::Realm& realm)
|
|
{
|
|
auto& vm = this->vm();
|
|
Base::initialize(realm);
|
|
|
|
define_direct_property(vm.names.length, JS::Value(0), JS::Attribute::Configurable);
|
|
define_direct_property(vm.names.name, JS::PrimitiveString::create(vm, "Option"_string), JS::Attribute::Configurable);
|
|
define_direct_property(vm.names.prototype, &ensure_web_prototype<Bindings::HTMLOptionElementPrototype>(realm, "HTMLOptionElement"_fly_string), 0);
|
|
}
|
|
|
|
JS::ThrowCompletionOr<JS::Value> OptionConstructor::call()
|
|
{
|
|
return vm().throw_completion<JS::TypeError>(JS::ErrorType::ConstructorWithoutNew, "Option");
|
|
}
|
|
|
|
// https://html.spec.whatwg.org/multipage/form-elements.html#dom-option
|
|
// https://whatpr.org/html/9893/form-elements.html#dom-option
|
|
JS::ThrowCompletionOr<GC::Ref<JS::Object>> OptionConstructor::construct(FunctionObject&)
|
|
{
|
|
auto& vm = this->vm();
|
|
auto& realm = *vm.current_realm();
|
|
|
|
// NOTE: This implements the default value for the `text` parameter (the empty string "").
|
|
auto text_value = vm.argument(0);
|
|
if (text_value.is_undefined())
|
|
text_value = &vm.empty_string();
|
|
|
|
// 1. Let document be the current principal global object's associated Document.
|
|
auto& window = as<HTML::Window>(HTML::current_principal_global_object());
|
|
auto& document = window.associated_document();
|
|
|
|
// 2. Let option be the result of creating an element given document, "option", and the HTML namespace.
|
|
auto element = TRY(Bindings::throw_dom_exception_if_needed(vm, [&]() { return DOM::create_element(document, HTML::TagNames::option, Namespace::HTML); }));
|
|
GC::Ref<HTML::HTMLOptionElement> option_element = as<HTML::HTMLOptionElement>(*element);
|
|
|
|
// 3. If text is not the empty string, then append to option a new Text node whose data is text.
|
|
auto text = TRY(text_value.to_utf16_string(vm));
|
|
if (!text.is_empty()) {
|
|
auto new_text_node = realm.create<DOM::Text>(document, move(text));
|
|
MUST(option_element->append_child(*new_text_node));
|
|
}
|
|
|
|
// 4. If value is given, then set an attribute value for option using "value" and value.
|
|
if (!vm.argument(1).is_undefined()) {
|
|
auto value = TRY(vm.argument(1).to_string(vm));
|
|
option_element->set_attribute_value(HTML::AttributeNames::value, value);
|
|
}
|
|
|
|
// 5. If defaultSelected is true, then set an attribute value for option using "selected" and the empty string.
|
|
if (vm.argument_count() > 2) {
|
|
auto default_selected = vm.argument(2).to_boolean();
|
|
if (default_selected) {
|
|
option_element->set_attribute_value(HTML::AttributeNames::selected, String {});
|
|
}
|
|
}
|
|
|
|
// 6. If selected is true, then set option's selectedness to true; otherwise set its selectedness to false (even if defaultSelected is true).
|
|
option_element->set_selected_internal(vm.argument(3).to_boolean());
|
|
|
|
// 7. Return option.
|
|
return option_element;
|
|
}
|
|
|
|
}
|