|
1
|
|
|
import Handlebars from 'handlebars' |
|
2
|
|
|
import abeEngine from './abeEngine' |
|
3
|
|
|
import xss from 'xss' |
|
4
|
|
|
|
|
5
|
|
|
import { |
|
6
|
|
|
config |
|
7
|
|
|
} from '../../../' |
|
8
|
|
|
|
|
9
|
|
|
/** |
|
10
|
|
|
* Abe handlebar helper, that retrieve text to add to handlebars templating engine |
|
11
|
|
|
* @return {String} the string to replace {{ handlebars_key }} |
|
12
|
|
|
*/ |
|
13
|
|
|
export default function compileAbe(){ |
|
14
|
|
|
var content = abeEngine.instance.content |
|
15
|
|
|
if(typeof arguments[0].hash['key'] === 'undefined' || arguments[0].hash['key'] === null) return '' |
|
|
|
|
|
|
16
|
|
|
var key |
|
17
|
|
|
var hash |
|
18
|
|
|
var value |
|
19
|
|
|
var testXSS |
|
20
|
|
|
|
|
21
|
|
|
if(arguments[0].hash['key'].indexOf('}-') > 0){ |
|
22
|
|
|
key = arguments[0].hash['key'].split('-') |
|
23
|
|
|
key = key[key.length - 1] |
|
24
|
|
|
hash = arguments[0].hash |
|
25
|
|
|
hash.key = hash.key.replace(/\{\{@index\}\}/, '[{{@index}}]') |
|
26
|
|
|
try{ |
|
27
|
|
|
value = content ? content[hash['dictionnary']][arguments[0].data.index][key] : hash.key |
|
28
|
|
|
} |
|
29
|
|
|
catch(e){ |
|
30
|
|
|
value = '' |
|
31
|
|
|
} |
|
32
|
|
|
if(typeof value === 'undefined' || typeof value === 'function' || value === null) { |
|
33
|
|
|
value = '' |
|
34
|
|
|
} |
|
35
|
|
|
if(typeof hash.type !== 'undefined' && hash.type !== null && hash.type === 'rich'){ |
|
36
|
|
|
testXSS = xss(value.replace(/"/g, '"'), { |
|
37
|
|
|
'whiteList': config.htmlWhiteList, |
|
38
|
|
|
stripIgnoreTag: true |
|
39
|
|
|
}) |
|
40
|
|
|
return new Handlebars.SafeString(testXSS) |
|
41
|
|
|
} |
|
42
|
|
|
return value.replace(/%27/, '\'') |
|
43
|
|
|
} |
|
44
|
|
|
|
|
45
|
|
|
key = arguments[0].hash['key'].replace('.', '-') |
|
46
|
|
|
|
|
47
|
|
|
hash = arguments[0].hash |
|
48
|
|
|
value = ((content) ? content[hash.key.replace('.', '-')] : hash.key) |
|
49
|
|
|
if(typeof value === 'undefined' || typeof value === 'function' || value === null) { |
|
50
|
|
|
value = '' |
|
51
|
|
|
} |
|
52
|
|
|
|
|
53
|
|
|
if(typeof hash.type !== 'undefined' && hash.type !== null && hash.type === 'rich'){ |
|
54
|
|
|
testXSS = xss(value.replace(/"/g, '"'), { |
|
55
|
|
|
'whiteList': config.htmlWhiteList, |
|
56
|
|
|
stripIgnoreTag: true |
|
57
|
|
|
}) |
|
58
|
|
|
return new Handlebars.SafeString(testXSS) |
|
59
|
|
|
} |
|
60
|
|
|
return value.replace(/%27/, '\'') |
|
61
|
|
|
} |
|
62
|
|
|
|
AdFabConnect /
abejs
Consider adding curly braces around all statements when they are executed conditionally. This is optional if there is only one statement, but leaving them out can lead to unexpected behaviour if another statement is added later.
Consider:
If you or someone else later decides to put another statement in, only the first statement will be executed.
In this case the statement
b = 42will always be executed, while the logging statement will be executed conditionally.ensures that the proper code will be executed conditionally no matter how many statements are added or removed.