mirror of
https://github.com/hanzoai/frames.git
synced 2026-09-24 00:08:03 +00:00
zooqueenandHanzo Dev
70b41673a3
Forked from HyperFrames (Apache-2.0), full history preserved. Hosts are mapped explicitly and BEFORE the identifier rename, because hyperframes.heygen.com is not decoration: 175 of its occurrences are $schema identifiers that a validator dereferences. A blind rename would have left them naming a host that never serves them. The schema files are in this repo under docs/schema, so the mapped host is one we can actually serve -- that is the condition that makes the rewrite safe, and serving them is a deploy task, not an edit. docs/schema/hyperframes.json is renamed to frames.json to match the identifier it is now published under. api.heygen.com and the CLI auth against heygen.com are left UNRENAMED on purpose. They are a dependency on HeyGen's SaaS, not a name of ours to take, and the right move is to remove that integration rather than rebrand it. LICENSE and CREDITS.md are untouched; NOTICE records the lineage. Co-authored-by: Hanzo Dev <[email protected]>
103 lines
3.1 KiB
TypeScript
103 lines
3.1 KiB
TypeScript
function assert(condition: unknown, message: string): void {
|
|
if (!condition) {
|
|
throw new Error(message);
|
|
}
|
|
}
|
|
|
|
const ALLOWED_HOSTS = new Set(["runtime.example.com"]);
|
|
const ALLOWED_PATH_PREFIX = "/static/frames-runtime/";
|
|
|
|
function isAllowedRuntimeUrl(candidate: string): boolean {
|
|
try {
|
|
const parsed = new URL(candidate);
|
|
return (
|
|
parsed.protocol === "https:" &&
|
|
ALLOWED_HOSTS.has(parsed.hostname.toLowerCase()) &&
|
|
parsed.pathname.startsWith(ALLOWED_PATH_PREFIX) &&
|
|
parsed.pathname.endsWith(".js")
|
|
);
|
|
} catch {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
function isGuardedPreviewMessage(data: unknown): boolean {
|
|
if (!data || typeof data !== "object") {
|
|
return false;
|
|
}
|
|
const record = data as { source?: unknown; type?: unknown };
|
|
const source = typeof record.source === "string" ? record.source : null;
|
|
const type = typeof record.type === "string" ? record.type : null;
|
|
const guardedTypes = new Set([
|
|
"state",
|
|
"timeline",
|
|
"element-picked",
|
|
"element-picked-many",
|
|
"element-pick-candidates",
|
|
"pick-mode-cancelled",
|
|
]);
|
|
if (!type || !guardedTypes.has(type)) {
|
|
return false;
|
|
}
|
|
return source === "hf-preview";
|
|
}
|
|
|
|
const allowedRuntimeFixtures = [
|
|
"https://runtime.example.com/static/frames-runtime/hyperframe.runtime.iife.js",
|
|
"https://runtime.example.com/static/frames-runtime/v2026.02.20/hyperframe.runtime.iife.js",
|
|
];
|
|
|
|
const blockedRuntimeFixtures = [
|
|
"http://runtime.example.com/static/frames-runtime/hyperframe.runtime.iife.js",
|
|
"javascript:alert(1)",
|
|
"data:text/javascript,alert(1)",
|
|
"https://evil.example/static/frames-runtime/hyperframe.runtime.iife.js",
|
|
"https://runtime.example.com/static/other/hyperframe.runtime.iife.js",
|
|
"https://runtime.example.com/static/frames-runtime/hyperframe.runtime.iife.css",
|
|
];
|
|
|
|
for (const fixture of allowedRuntimeFixtures) {
|
|
assert(isAllowedRuntimeUrl(fixture), `Expected runtime URL to be allowed: ${fixture}`);
|
|
}
|
|
|
|
for (const fixture of blockedRuntimeFixtures) {
|
|
assert(!isAllowedRuntimeUrl(fixture), `Expected runtime URL to be blocked: ${fixture}`);
|
|
}
|
|
|
|
const allowedMessages = [
|
|
{ type: "state", source: "hf-preview" },
|
|
{ type: "timeline", source: "hf-preview" },
|
|
{ type: "element-picked", source: "hf-preview" },
|
|
];
|
|
const blockedMessages = [
|
|
{ type: "state", source: "hf-parent" },
|
|
{ type: "timeline", source: "evil-origin" },
|
|
{ type: "element-picked", source: "hf-parent" },
|
|
{ type: "pick-mode-cancelled", source: null },
|
|
{ type: "unknown-type", source: "hf-preview" },
|
|
];
|
|
|
|
for (const fixture of allowedMessages) {
|
|
assert(
|
|
isGuardedPreviewMessage(fixture),
|
|
`Expected message fixture to pass guard: ${JSON.stringify(fixture)}`,
|
|
);
|
|
}
|
|
|
|
for (const fixture of blockedMessages) {
|
|
assert(
|
|
!isGuardedPreviewMessage(fixture),
|
|
`Expected message fixture to fail guard: ${JSON.stringify(fixture)}`,
|
|
);
|
|
}
|
|
|
|
console.log(
|
|
JSON.stringify({
|
|
event: "hyperframe_runtime_security_fixtures_verified",
|
|
allowedRuntimeFixtures: allowedRuntimeFixtures.length,
|
|
blockedRuntimeFixtures: blockedRuntimeFixtures.length,
|
|
allowedMessages: allowedMessages.length,
|
|
blockedMessages: blockedMessages.length,
|
|
}),
|
|
);
|