Improve sanitation of CSS pseudo-classes (#4230)

85f38542b6722307187ce2714b80cd626a5167a2

Cohee <18619528+Cohee1207@users.noreply.github.com>

Signed

Parents: a68d31b1b9f858e4b18f52ccae4ea3df3479f72d

public/scripts/chats.js+31 -8 Viewed

             for (let i = 0; i < rule.selectors.length; i++) {
                 const selector = rule.selectors[i];
                 if (selector) {
 -                    const selectors = (selector.split(' ') ?? []).map((v) => {
 +                    rule.selectors[i] = prefix + sanitizeSelector(selector);
 -                        if (v.startsWith('.')) {
 -                            return '.custom-' + v.substring(1);
 -                        }
 -                        return v;
 -                    }).join(' ');
+-
 -                    rule.selectors[i] = prefix + selectors;
+                }
+            }
+        }

+        }
+    }
 +    function sanitizeSelector(selector) {
 +        // Handle pseudo-classes that can contain nested selectors
 +        const pseudoClasses = ['has', 'not', 'where', 'is', 'matches', 'any'];
 +        const pseudoRegex = new RegExp(`:(${pseudoClasses.join('|')})\\(([^)]+)\\)`, 'g');
++
 +        // First, sanitize any nested selectors within pseudo-classes
 +        selector = selector.replace(pseudoRegex, (match, pseudoClass, content) => {
 +            // Recursively sanitize the content within the pseudo-class
 +            const sanitizedContent = sanitizeSimpleSelector(content);
 +            return `:${pseudoClass}(${sanitizedContent})`;
 +        });
++
 +        // Then sanitize the main selector parts
 +        return sanitizeSimpleSelector(selector);
 +    }
++
 +    function sanitizeSimpleSelector(selector) {
 +        // Split by spaces but preserve complex selectors
 +        return selector.split(/\s+/).map((part) => {
 +            // Handle class selectors, but preserve pseudo-classes and other complex parts
 +            return part.replace(/\.([\w-]+)/g, (match, className) => {
 +                // Don't modify if it's already prefixed with 'custom-'
 +                if (className.startsWith('custom-')) {
 +                    return match;
 +                }
 +                return `.custom-${className}`;
 +            });
 +        }).join(' ');
 +    }
++
     function sanitizeRuleSet(ruleSet) {
         if (Array.isArray(ruleSet.selectors) || Array.isArray(ruleSet.declarations)) {
             sanitizeRule(ruleSet);