Brunobkr/llama.cpp_AlgMor24_github

1import type { TrustedTypePolicy } from 'trusted-types/lib/index.js';2 3/**4 * Configuration to control DOMPurify behavior.5 */6export interface Config {7  /**8   * Extend the existing array of allowed attributes.9   * Can be an array of attribute names, or a function that receives10   * the attribute name and tag name to determine if the attribute is allowed.11   */12  ADD_ATTR?:13    | string[]14    | ((attributeName: string, tagName: string) => boolean)15    | undefined;16 17  /**18   * Extend the existing array of elements that can use Data URIs.19   */20  ADD_DATA_URI_TAGS?: string[] | undefined;21 22  /**23   * Extend the existing array of allowed tags.24   * Can be an array of tag names, or a function that receives25   * the tag name to determine if the tag is allowed.26   */27  ADD_TAGS?: string[] | ((tagName: string) => boolean) | undefined;28 29  /**30   * Extend the existing array of elements that are safe for URI-like values (be careful, XSS risk).31   */32  ADD_URI_SAFE_ATTR?: string[] | undefined;33 34  /**35   * Allow ARIA attributes, leave other safe HTML as is (default is true).36   */37  ALLOW_ARIA_ATTR?: boolean | undefined;38 39  /**40   * Allow HTML5 data attributes, leave other safe HTML as is (default is true).41   */42  ALLOW_DATA_ATTR?: boolean | undefined;43 44  /**45   * Allow external protocol handlers in URL attributes (default is false, be careful, XSS risk).46   * By default only `http`, `https`, `ftp`, `ftps`, `tel`, `mailto`, `callto`, `sms`, `cid` and `xmpp` are allowed.47   */48  ALLOW_UNKNOWN_PROTOCOLS?: boolean | undefined;49 50  /**51   * Decide if self-closing tags in attributes are allowed.52   * Usually removed due to a mXSS issue in jQuery 3.0.53   */54  ALLOW_SELF_CLOSE_IN_ATTR?: boolean | undefined;55 56  /**57   * Allow only specific attributes.58   */59  ALLOWED_ATTR?: string[] | undefined;60 61  /**62   * Allow only specific elements.63   */64  ALLOWED_TAGS?: string[] | undefined;65 66  /**67   * Allow only specific namespaces. Defaults to:68   *  - `http://www.w3.org/1999/xhtml`69   *  - `http://www.w3.org/2000/svg`70   *  - `http://www.w3.org/1998/Math/MathML`71   */72  ALLOWED_NAMESPACES?: string[] | undefined;73 74  /**75   * Allow specific protocols handlers in URL attributes via regex (be careful, XSS risk).76   * Default RegExp:77   * ```78   * /^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i;79   * ```80   */81  ALLOWED_URI_REGEXP?: RegExp | undefined;82 83  /**84   * Define how custom elements are handled.85   */86  CUSTOM_ELEMENT_HANDLING?: {87    /**88     * Regular expression or function to match to allowed elements.89     * Default is null (disallow any custom elements).90     */91    tagNameCheck?: RegExp | ((tagName: string) => boolean) | null | undefined;92 93    /**94     * Regular expression or function to match to allowed attributes.95     * Default is null (disallow any attributes not on the allow list).96     */97    attributeNameCheck?:98      | RegExp99      | ((attributeName: string, tagName?: string) => boolean)100      | null101      | undefined;102 103    /**104     * Allow custom elements derived from built-ins if they pass `tagNameCheck`. Default is false.105     */106    allowCustomizedBuiltInElements?: boolean | undefined;107  };108 109  /**110   * Add attributes to block-list.111   */112  FORBID_ATTR?: string[] | undefined;113 114  /**115   * Add child elements to be removed when their parent is removed.116   */117  FORBID_CONTENTS?: string[] | undefined;118 119  /**120   * Extend the existing or default array of forbidden content elements.121   */122  ADD_FORBID_CONTENTS?: string[] | undefined;123 124  /**125   * Add elements to block-list.126   */127  FORBID_TAGS?: string[] | undefined;128 129  /**130   * Glue elements like style, script or others to `document.body` and prevent unintuitive browser behavior in several edge-cases (default is false).131   */132  FORCE_BODY?: boolean | undefined;133 134  /**135   * Map of non-standard HTML element names to support. Map to true to enable support. For example:136   *137   * ```138   * HTML_INTEGRATION_POINTS: { foreignobject: true }139   * ```140   */141  HTML_INTEGRATION_POINTS?: Record<string, boolean> | undefined;142 143  /**144   * Sanitize a node "in place", which is much faster depending on how you use DOMPurify.145   */146  IN_PLACE?: boolean | undefined;147 148  /**149   * Keep an element's content when the element is removed (default is true).150   */151  KEEP_CONTENT?: boolean | undefined;152 153  /**154   * Map of MathML element names to support. Map to true to enable support. For example:155   *156   * ```157   * MATHML_TEXT_INTEGRATION_POINTS: { mtext: true }158   * ```159   */160  MATHML_TEXT_INTEGRATION_POINTS?: Record<string, boolean> | undefined;161 162  /**163   * Change the default namespace from HTML to something different.164   */165  NAMESPACE?: string | undefined;166 167  /**168   * Change the parser type so sanitized data is treated as XML and not as HTML, which is the default.169   */170  PARSER_MEDIA_TYPE?: DOMParserSupportedType | undefined;171 172  /**173   * Return a DOM `DocumentFragment` instead of an HTML string (default is false).174   */175  RETURN_DOM_FRAGMENT?: boolean | undefined;176 177  /**178   * Return a DOM `HTMLBodyElement` instead of an HTML string (default is false).179   */180  RETURN_DOM?: boolean | undefined;181 182  /**183   * Return a TrustedHTML object instead of a string if possible.184   */185  RETURN_TRUSTED_TYPE?: boolean | undefined;186 187  /**188   * Strip `{{ ... }}`, `${ ... }` and `<% ... %>` to make output safe for template systems.189   * Be careful please, this mode is not recommended for production usage.190   * Allowing template parsing in user-controlled HTML is not advised at all.191   * Only use this mode if there is really no alternative.192   */193  SAFE_FOR_TEMPLATES?: boolean | undefined;194 195  /**196   * Change how e.g. comments containing risky HTML characters are treated.197   * Be very careful, this setting should only be set to `false` if you really only handle198   * HTML and nothing else, no SVG, MathML or the like.199   * Otherwise, changing from `true` to `false` will lead to XSS in this or some other way.200   */201  SAFE_FOR_XML?: boolean | undefined;202 203  /**204   * Use DOM Clobbering protection on output (default is true, handle with care, minor XSS risks here).205   */206  SANITIZE_DOM?: boolean | undefined;207 208  /**209   * Enforce strict DOM Clobbering protection via namespace isolation (default is false).210   * When enabled, isolates the namespace of named properties (i.e., `id` and `name` attributes)211   * from JS variables by prefixing them with the string `user-content-`212   */213  SANITIZE_NAMED_PROPS?: boolean | undefined;214 215  /**216   * Supplied policy must define `createHTML` and `createScriptURL`.217   */218  TRUSTED_TYPES_POLICY?: TrustedTypePolicy | null | undefined;219 220  /**221   * Controls categories of allowed elements.222   *223   * Note that the `USE_PROFILES` setting will override the `ALLOWED_TAGS` setting224   * so don't use them together.225   */226  USE_PROFILES?: false | UseProfilesConfig | undefined;227 228  /**229   * Return entire document including <html> tags (default is false).230   */231  WHOLE_DOCUMENT?: boolean | undefined;232}233 234/**235 * Defines categories of allowed elements.236 */237export interface UseProfilesConfig {238  /**239   * Allow all safe MathML elements.240   */241  mathMl?: boolean | undefined;242 243  /**244   * Allow all safe SVG elements.245   */246  svg?: boolean | undefined;247 248  /**249   * Allow all safe SVG Filters.250   */251  svgFilters?: boolean | undefined;252 253  /**254   * Allow all safe HTML elements.255   */256  html?: boolean | undefined;257}258