Source code
Revision control
Copy as Markdown
Other Tools
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
"use strict";
const {
Component,
} = require("resource://devtools/client/shared/vendor/react.mjs");
const PropTypes = require("resource://devtools/client/shared/vendor/react-prop-types.mjs");
/*
* Response preview component
* Display HTML content within a sandbox enabled iframe
*/
class HTMLPreview extends Component {
static get propTypes() {
return {
responseContent: PropTypes.object.isRequired,
responseHeaders: PropTypes.object,
url: PropTypes.string.isRequired,
};
}
componentDidMount() {
const { container } = this.refs;
const browser = container.ownerDocument.createXULElement("browser");
this.browser = browser;
browser.setAttribute("type", "content");
browser.setAttribute("remote", "true");
browser.setAttribute("maychangeremoteness", "true");
browser.setAttribute("disableglobalhistory", "true");
// we find a way to prevent navigation without preventing copy paste from it.
//
// browser.addEventListener("mousedown", e => e.preventDefault(), {
// capture: true,
// });
container.appendChild(browser);
// browsingContext attribute is only available after the browser
// is attached to the DOM Tree.
browser.browsingContext.allowJavascript = false;
this.#updatePreview();
}
componentDidUpdate() {
this.#updatePreview();
}
componentWillUnmount() {
this.browser.remove();
}
#updatePreview() {
const { responseContent, responseHeaders, url } = this.props;
const htmlBody = responseContent ? responseContent.content.text : "";
const uri = Services.io.newURI(
"data:text/html;charset=UTF-8," + encodeURIComponent(htmlBody)
);
let policyContainer;
const cspHeaders = responseHeaders?.headers.filter(
e => e.name.toLowerCase() === "content-security-policy"
);
if (cspHeaders?.length) {
// Merge multiple CSP headers with a comma.
const merged = cspHeaders.map(e => e.value).join(",");
const csp = ChromeUtils.createCSPFromHeader(
merged,
new URL(url).URI,
Services.scriptSecurityManager.createNullPrincipal({})
);
const PolicyContainer = Components.Constructor(
"@mozilla.org/policycontainer;1",
"nsIPolicyContainer",
"initFromCSP"
);
policyContainer = new PolicyContainer(csp);
}
const options = {
policyContainer,
triggeringPrincipal: Services.scriptSecurityManager.getSystemPrincipal(),
};
this.browser.loadURI(uri, options);
}
render() {
return dom.div({ className: "html-preview", ref: "container" });
}
}
module.exports = HTMLPreview;