858f2bdf5
 Boyan Georgiev
fixes
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
"use strict";
/* eslint-disable no-new-func */
const acorn = require("acorn");
const findGlobals = require("acorn-globals");
const escodegen = require("escodegen");
// We can't use the default browserify vm shim because it doesn't work in a web worker.
// From ES spec table of contents. Also, don't forget the Annex B additions.
// If someone feels ambitious maybe make this into an npm package.
const builtInConsts = ["Infinity", "NaN", "undefined"];
const otherBuiltIns = [
"isFinite", "isNaN", "parseFloat", "parseInt", "decodeURI", "decodeURIComponent",
"encodeURI", "encodeURIComponent", "Array", "ArrayBuffer", "Boolean", "DataView", "Date", "Error", "EvalError",
"Float32Array", "Float64Array", "Function", "Int8Array", "Int16Array", "Int32Array", "Map", "Number", "Object",
"Proxy", "Promise", "RangeError", "ReferenceError", "RegExp", "Set", "String", "Symbol", "SyntaxError", "TypeError",
"Uint8Array", "Uint8ClampedArray", "Uint16Array", "Uint32Array", "URIError", "WeakMap", "WeakSet", "JSON", "Math",
"Reflect", "escape", "unescape"
];
exports.createContext = function (sandbox) {
Object.defineProperty(sandbox, "__isVMShimContext", {
value: true,
writable: true,
configurable: true,
enumerable: false
});
for (const builtIn of builtInConsts) {
Object.defineProperty(sandbox, builtIn, {
value: global[builtIn],
writable: false,
configurable: false,
enumerable: false
});
}
for (const builtIn of otherBuiltIns) {
Object.defineProperty(sandbox, builtIn, {
value: global[builtIn],
writable: true,
configurable: true,
enumerable: false
});
}
Object.defineProperty(sandbox, "eval", {
value(code) {
return exports.runInContext(code, sandbox);
},
writable: true,
configurable: true,
enumerable: false
});
};
exports.isContext = function (sandbox) {
return sandbox.__isVMShimContext;
};
exports.runInContext = function (code, contextifiedSandbox, options) {
if (code === "this") {
// Special case for during window creation.
return contextifiedSandbox;
}
if (options === undefined) {
options = {};
}
const comments = [];
const tokens = [];
const ast = acorn.parse(code, {
allowReturnOutsideFunction: true,
ranges: true,
// collect comments in Esprima's format
onComment: comments,
// collect token ranges
onToken: tokens
});
// make sure we keep comments
escodegen.attachComments(ast, comments, tokens);
const globals = findGlobals(ast);
for (let i = 0; i < globals.length; ++i) {
if (globals[i].name === "window" || globals[i].name === "this") {
continue;
}
const { nodes } = globals[i];
for (let j = 0; j < nodes.length; ++j) {
const { type, name } = nodes[j];
nodes[j].type = "MemberExpression";
nodes[j].property = { name, type };
nodes[j].computed = false;
nodes[j].object = {
name: "window",
type: "Identifier"
};
}
}
const lastNode = ast.body[ast.body.length - 1];
if (lastNode.type === "ExpressionStatement") {
lastNode.type = "ReturnStatement";
lastNode.argument = lastNode.expression;
delete lastNode.expression;
}
const rewrittenCode = escodegen.generate(ast, { comment: true });
const suffix = options.filename !== undefined ? "
//# sourceURL=" + options.filename : "";
return Function("window", rewrittenCode + suffix).bind(contextifiedSandbox)(contextifiedSandbox);
};
exports.Script = class VMShimScript {
constructor(code, options) {
this._code = code;
this._options = options;
}
runInContext(sandbox, options) {
return exports.runInContext(this._code, sandbox, Object.assign({}, this._options, options));
}
};
|