planetazuzu
5d7a6500fe
- ✅ Ticket 1.1: Estructura Clean Architecture en backend - ✅ Ticket 1.2: Schemas Zod compartidos - ✅ Ticket 1.3: Refactorización drugs.ts (1362 → 8 archivos modulares) - ✅ Ticket 1.4: Refactorización procedures.ts (3583 → 6 archivos modulares) - ✅ Ticket 1.5: Eliminación de duplicidades (~50 líneas) Cambios principales: - Creada estructura Clean Architecture en backend/src/ - Schemas Zod compartidos en backend/src/shared/schemas/ - Refactorización modular de drugs y procedures - Utilidades genéricas en src/utils/ (filter, validation) - Eliminados scripts obsoletos y documentación antigua - Corregidos errores: QueryClient, import test-error-handling - Build verificado y funcionando correctamente
66 lines
2.7 KiB
JavaScript
66 lines
2.7 KiB
JavaScript
import BrowserNavigationCrossOriginPolicyEnum from '../enums/BrowserNavigationCrossOriginPolicyEnum.js';
|
|
import DetachedBrowserFrame from '../detached-browser/DetachedBrowserFrame.js';
|
|
import * as PropertySymbol from '../../PropertySymbol.js';
|
|
/**
|
|
* Browser frame validator.
|
|
*/
|
|
export default class BrowserFrameValidator {
|
|
/**
|
|
* Returns true if the frame navigation complies with the cross origin policy.
|
|
*
|
|
* @param frame Frame.
|
|
* @param toURL URL.
|
|
* @returns True if the frame navigation complies with the cross origin policy.
|
|
*/
|
|
static validateCrossOriginPolicy(frame, toURL) {
|
|
const settings = frame.page.context.browser.settings;
|
|
let fromURL = frame.page.mainFrame.window.location;
|
|
if (frame[PropertySymbol.openerFrame]) {
|
|
fromURL = frame[PropertySymbol.openerFrame].window.location;
|
|
}
|
|
else if (frame.parentFrame) {
|
|
fromURL = frame.parentFrame.window.location;
|
|
}
|
|
if (settings.navigation.crossOriginPolicy === BrowserNavigationCrossOriginPolicyEnum.sameOrigin &&
|
|
fromURL.protocol !== 'about:' &&
|
|
toURL.protocol !== 'about:' &&
|
|
toURL.protocol !== 'javascript:' &&
|
|
fromURL.origin !== toURL.origin) {
|
|
return false;
|
|
}
|
|
if (settings.navigation.crossOriginPolicy ===
|
|
BrowserNavigationCrossOriginPolicyEnum.strictOrigin &&
|
|
fromURL.protocol === 'https:' &&
|
|
toURL.protocol === 'http:') {
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
/**
|
|
* Returns true if navigation is allowed for the frame.
|
|
*
|
|
* @param frame Frame.
|
|
* @returns True if navigation is allowed for the frame.
|
|
*/
|
|
static validateFrameNavigation(frame) {
|
|
const settings = frame.page.context.browser.settings;
|
|
// When using the Window instance directly and not via the Browser API we should not navigate the browser frame.
|
|
if (frame instanceof DetachedBrowserFrame &&
|
|
frame.page.context === frame.page.context.browser.defaultContext &&
|
|
frame.page.context.pages[0] === frame.page &&
|
|
frame.page.mainFrame === frame) {
|
|
return false;
|
|
}
|
|
if (settings.navigation.disableMainFrameNavigation && frame.page.mainFrame === frame) {
|
|
return false;
|
|
}
|
|
if (settings.navigation.disableChildFrameNavigation && frame.page.mainFrame !== frame) {
|
|
return false;
|
|
}
|
|
if (settings.navigation.disableChildPageNavigation && !!frame[PropertySymbol.openerFrame]) {
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
}
|
|
//# sourceMappingURL=BrowserFrameValidator.js.map
|