123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261 |
- // Copyright 2006 The Closure Library Authors. All Rights Reserved.
- //
- // Licensed under the Apache License, Version 2.0 (the "License");
- // you may not use this file except in compliance with the License.
- // You may obtain a copy of the License at
- //
- // http://www.apache.org/licenses/LICENSE-2.0
- //
- // Unless required by applicable law or agreed to in writing, software
- // distributed under the License is distributed on an "AS-IS" BASIS,
- // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- // See the License for the specific language governing permissions and
- // limitations under the License.
- /**
- * @fileoverview
- * XML utilities.
- *
- */
- goog.provide('goog.dom.xml');
- goog.require('goog.dom');
- goog.require('goog.dom.NodeType');
- goog.require('goog.userAgent');
- /**
- * Max XML size for MSXML2. Used to prevent potential DoS attacks.
- * @type {number}
- */
- goog.dom.xml.MAX_XML_SIZE_KB = 2 * 1024; // In kB
- /**
- * Max XML size for MSXML2. Used to prevent potential DoS attacks.
- * @type {number}
- */
- goog.dom.xml.MAX_ELEMENT_DEPTH = 256; // Same default as MSXML6.
- /**
- * Check for ActiveXObject support by the browser.
- * @return {boolean} true if browser has ActiveXObject support.
- * @private
- */
- goog.dom.xml.hasActiveXObjectSupport_ = function() {
- if (!goog.userAgent.IE) {
- // Avoid raising useless exception in case code is not compiled
- // and browser is not MSIE.
- return false;
- }
- try {
- // Due to lot of changes in IE 9, 10 & 11 behaviour and ActiveX being
- // totally disableable using MSIE's security level, trying to create the
- // ActiveXOjbect is a lot more reliable than testing for the existence of
- // window.ActiveXObject
- new ActiveXObject('MSXML2.DOMDocument');
- return true;
- } catch (e) {
- return false;
- }
- };
- /**
- * True if browser has ActiveXObject support.
- * Possible override if this test become wrong in coming IE versions.
- * @type {boolean}
- */
- goog.dom.xml.ACTIVEX_SUPPORT =
- goog.userAgent.IE && goog.dom.xml.hasActiveXObjectSupport_();
- /**
- * Creates an XML document appropriate for the current JS runtime
- * @param {string=} opt_rootTagName The root tag name.
- * @param {string=} opt_namespaceUri Namespace URI of the document element.
- * @param {boolean=} opt_preferActiveX Whether to default to ActiveXObject to
- * create Document in IE. Use this if you need xpath support in IE (e.g.,
- * selectSingleNode or selectNodes), but be aware that the ActiveXObject does
- * not support various DOM-specific Document methods and attributes.
- * @return {Document} The new document.
- * @throws {Error} if browser does not support creating new documents or
- * namespace is provided without a root tag name.
- */
- goog.dom.xml.createDocument = function(
- opt_rootTagName, opt_namespaceUri, opt_preferActiveX) {
- if (opt_namespaceUri && !opt_rootTagName) {
- throw Error("Can't create document with namespace and no root tag");
- }
- // If document.implementation.createDocument is available and they haven't
- // explicitly opted to use ActiveXObject when possible.
- if (document.implementation && document.implementation.createDocument &&
- !(goog.dom.xml.ACTIVEX_SUPPORT && opt_preferActiveX)) {
- return document.implementation.createDocument(
- opt_namespaceUri || '', opt_rootTagName || '', null);
- } else if (goog.dom.xml.ACTIVEX_SUPPORT) {
- var doc = goog.dom.xml.createMsXmlDocument_();
- if (doc) {
- if (opt_rootTagName) {
- doc.appendChild(
- doc.createNode(
- goog.dom.NodeType.ELEMENT, opt_rootTagName,
- opt_namespaceUri || ''));
- }
- return doc;
- }
- }
- throw Error('Your browser does not support creating new documents');
- };
- /**
- * Creates an XML document from a string
- * @param {string} xml The text.
- * @param {boolean=} opt_preferActiveX Whether to default to ActiveXObject to
- * create Document in IE. Use this if you need xpath support in IE (e.g.,
- * selectSingleNode or selectNodes), but be aware that the ActiveXObject does
- * not support various DOM-specific Document methods and attributes.
- * @return {Document} XML document from the text.
- * @throws {Error} if browser does not support loading XML documents.
- */
- goog.dom.xml.loadXml = function(xml, opt_preferActiveX) {
- if (typeof DOMParser != 'undefined' &&
- !(goog.dom.xml.ACTIVEX_SUPPORT && opt_preferActiveX)) {
- return new DOMParser().parseFromString(xml, 'application/xml');
- } else if (goog.dom.xml.ACTIVEX_SUPPORT) {
- var doc = goog.dom.xml.createMsXmlDocument_();
- doc.loadXML(xml);
- return doc;
- }
- throw Error('Your browser does not support loading xml documents');
- };
- /**
- * Serializes an XML document or subtree to string.
- * @param {Document|Element} xml The document or the root node of the subtree.
- * @return {string} The serialized XML.
- * @throws {Error} if browser does not support XML serialization.
- */
- goog.dom.xml.serialize = function(xml) {
- // Compatible with IE/ActiveXObject.
- var text = xml.xml;
- if (text) {
- return text;
- }
- // Compatible with Firefox, Opera and WebKit.
- if (typeof XMLSerializer != 'undefined') {
- return new XMLSerializer().serializeToString(xml);
- }
- throw Error('Your browser does not support serializing XML documents');
- };
- /**
- * Selects a single node using an Xpath expression and a root node
- * @param {Node} node The root node.
- * @param {string} path Xpath selector.
- * @return {Node} The selected node, or null if no matching node.
- */
- goog.dom.xml.selectSingleNode = function(node, path) {
- if (typeof node.selectSingleNode != 'undefined') {
- var doc = goog.dom.getOwnerDocument(node);
- if (typeof doc.setProperty != 'undefined') {
- doc.setProperty('SelectionLanguage', 'XPath');
- }
- return node.selectSingleNode(path);
- } else if (document.implementation.hasFeature('XPath', '3.0')) {
- var doc = goog.dom.getOwnerDocument(node);
- var resolver = doc.createNSResolver(doc.documentElement);
- var result = doc.evaluate(
- path, node, resolver, XPathResult.FIRST_ORDERED_NODE_TYPE, null);
- return result.singleNodeValue;
- }
- // This browser does not support xpath for the given node. If IE, ensure XML
- // Document was created using ActiveXObject
- // TODO(joeltine): This should throw instead of return null.
- return null;
- };
- /**
- * Selects multiple nodes using an Xpath expression and a root node
- * @param {Node} node The root node.
- * @param {string} path Xpath selector.
- * @return {(!NodeList<!Node>|!Array<!Node>)} The selected nodes, or empty array
- * if no matching nodes.
- */
- goog.dom.xml.selectNodes = function(node, path) {
- if (typeof node.selectNodes != 'undefined') {
- var doc = goog.dom.getOwnerDocument(node);
- if (typeof doc.setProperty != 'undefined') {
- doc.setProperty('SelectionLanguage', 'XPath');
- }
- return node.selectNodes(path);
- } else if (document.implementation.hasFeature('XPath', '3.0')) {
- var doc = goog.dom.getOwnerDocument(node);
- var resolver = doc.createNSResolver(doc.documentElement);
- var nodes = doc.evaluate(
- path, node, resolver, XPathResult.ORDERED_NODE_SNAPSHOT_TYPE, null);
- var results = [];
- var count = nodes.snapshotLength;
- for (var i = 0; i < count; i++) {
- results.push(nodes.snapshotItem(i));
- }
- return results;
- } else {
- // This browser does not support xpath for the given node. If IE, ensure XML
- // Document was created using ActiveXObject.
- // TODO(joeltine): This should throw instead of return empty array.
- return [];
- }
- };
- /**
- * Sets multiple attributes on an element. Differs from goog.dom.setProperties
- * in that it exclusively uses the element's setAttributes method. Use this
- * when you need to ensure that the exact property is available as an attribute
- * and can be read later by the native getAttribute method.
- * @param {!Element} element XML or DOM element to set attributes on.
- * @param {!Object<string, string>} attributes Map of property:value pairs.
- */
- goog.dom.xml.setAttributes = function(element, attributes) {
- for (var key in attributes) {
- if (attributes.hasOwnProperty(key)) {
- element.setAttribute(key, attributes[key]);
- }
- }
- };
- /**
- * Creates an instance of the MSXML2.DOMDocument.
- * @return {Document} The new document.
- * @private
- */
- goog.dom.xml.createMsXmlDocument_ = function() {
- var doc = new ActiveXObject('MSXML2.DOMDocument');
- if (doc) {
- // Prevent potential vulnerabilities exposed by MSXML2, see
- // http://b/1707300 and http://wiki/Main/ISETeamXMLAttacks for details.
- doc.resolveExternals = false;
- doc.validateOnParse = false;
- // Add a try catch block because accessing these properties will throw an
- // error on unsupported MSXML versions. This affects Windows machines
- // running IE6 or IE7 that are on XP SP2 or earlier without MSXML updates.
- // See http://msdn.microsoft.com/en-us/library/ms766391(VS.85).aspx for
- // specific details on which MSXML versions support these properties.
- try {
- doc.setProperty('ProhibitDTD', true);
- doc.setProperty('MaxXMLSize', goog.dom.xml.MAX_XML_SIZE_KB);
- doc.setProperty('MaxElementDepth', goog.dom.xml.MAX_ELEMENT_DEPTH);
- } catch (e) {
- // No-op.
- }
- }
- return doc;
- };
|