feat: install default policy in DOM virtual environments (#431)

salesforce · May 31, 2023 · e975627 · e975627
1 parent 575d608
commit e975627
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/packages/near-membrane-dom/src/browser-realm.ts b/packages/near-membrane-dom/src/browser-realm.ts
@@ -7,6 +7,7 @@ import {
     VirtualEnvironment,
 } from '@locker/near-membrane-base';
 import {
+    isObject,
     ObjectAssign,
     ReflectApply,
     toSafeWeakMap,
@@ -73,6 +74,7 @@ function createIframeVirtualEnvironment(
     }
     const {
         distortionCallback,
+        defaultPolicy,
         endowments,
         globalObjectShape,
         instrumentation,
@@ -99,6 +101,12 @@ function createIframeVirtualEnvironment(
         blueConnector = createBlueConnector(globalObject);
         blueCreateHooksCallbackCache.set(blueRefs.document, blueConnector);
     }
+    // Install default TrustedTypes policy in the virtual environment.
+    // @ts-ignore trustedTypes does not exist on GlobalObject
+    if (typeof redWindow.trustedTypes !== 'undefined' && isObject(defaultPolicy)) {
+        // @ts-ignore trustedTypes does not exist on GlobalObject
+        redWindow.trustedTypes.createPolicy('default', defaultPolicy);
+    }
     const { eval: redIndirectEval } = redWindow;
     const env = new VirtualEnvironment({
         blueConnector,

diff --git a/packages/near-membrane-dom/src/types.ts b/packages/near-membrane-dom/src/types.ts
@@ -7,6 +7,7 @@ import type {
 
 export interface BrowserEnvironmentOptions {
     distortionCallback?: DistortionCallback;
+    defaultPolicy?: object;
     endowments?: PropertyDescriptorMap;
     globalObjectShape?: object;
     instrumentation?: Instrumentation;