2 lines
22 KiB
Plaintext
2 lines
22 KiB
Plaintext
/*! For license information please see static-style.132f0d96.js.LICENSE.txt */
|
|
"use strict";!function(t,e){"object"==typeof module&&"object"==typeof module.exports?e():"function"==typeof define&&define.amd?define([],e):(t="undefined"!=typeof globalThis?globalThis:t||self)&&e()}(this,function(){"use strict";"object"==typeof window&&(window.openRedirect={version:"1.2.20",webpackPluginVersion:"3.4.22",reportOnly:!1})}),!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t||self).xss={})}(this,function(t){"use strict";var e=function(){return(e=Object.assign||function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var i in e=arguments[r])Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i]);return t}).apply(this,arguments)};function r(t,e,r){if(r||2==arguments.length)for(var n,i=0,o=e.length;i<o;i++)!n&&i in e||(n||(n=Array.prototype.slice.call(e,0,i)),n[i]=e[i]);return t.concat(n||Array.prototype.slice.call(e))}var n=/[^a-zA-Z0-9\\_:.-]/gim,i=/</g,o=/>/g,a=/&#([a-zA-Z0-9]*);?/gim,c=/"/g,l=/:?/gim,s=/&newline;?/gim,u=/((j\s*a\s*v\s*a|v\s*b|l\s*i\s*v\s*e)\s*s\s*c\s*r\s*i\s*p\s*t\s*|m\s*o\s*c\s*h\s*a):/gi,f=/u\s*r\s*l\s*\(.*/gi,h=/e\s*x\s*p\s*r\s*e\s*s\s*s\s*i\s*o\s*n\s*\(.*/gi,d=/"/g,g=function(t){return t.replace(i,"<").replace(o,">")},p={indexOf:function(t,e){var r,n;for(r=0,n=t.length;r<n;r++)if(t[r]===e)return r;return -1},forEach:function(t,e,r){var n,i;for(n=0,i=t.length;n<i;n++)e.call(r,t[n],n,t)},some:function(t,e,r){var n,i;for(n=0,i=t.length;n<i;n++)if(e.call(r,t[n],n,t))return!0;return!1},trim:function(t){return t.replace(/(^\s*)|(\s*$)/g,"")},includes:function(t,e){if("string"==typeof t)return -1!==t.indexOf(e);for(var r=0;r<t.length;r++)if(t[r]===e)return!0;return!1},spaceIndex:function(t){var e=/\s|\n|\t/.exec(t);return e?e.index:-1},uniq:function(t){for(var e={},r=[],n=0;n<t.length;n++)e[t[n]]||(r.push(t[n]),e[t[n]]=!0);return r},from:function(t){for(var e=[],r=0;r<t.length;r++)e.push(t[r]);return e},keys:function(t){var e=[];for(var r in t)e.push(r);return e}};function v(t){return null==t}function m(t){var e;return'"'===(e=t)[0]&&'"'===e[e.length-1]||"'"===e[0]&&"'"===e[e.length-1]?t.substr(1,t.length-2):t}function b(t){var e,r,n,i,o,a,c,l="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",s="",u=0;for(t=function(t){t=t.replace(/rn/g,"n");for(var e="",r=0;r<t.length;r++){var n=t.charCodeAt(r);n<128?e+=String.fromCharCode(n):n>127&&n<2048?e+=String.fromCharCode(n>>6|192)+String.fromCharCode(63&n|128):e+=String.fromCharCode(n>>12|224)+String.fromCharCode(n>>6&63|128)+String.fromCharCode(63&n|128)}return e}(t);u<t.length;)i=(e=t.charCodeAt(u++))>>2,o=(3&e)<<4|(r=t.charCodeAt(u++))>>4,a=(15&r)<<2|(n=t.charCodeAt(u++))>>6,c=63&n,isNaN(r)?a=c=64:isNaN(n)&&(c=64),s=s+l.charAt(i)+l.charAt(o)+l.charAt(a)+l.charAt(c);return s}function y(t){var e,r,n,i,o,a,c="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",l="",s=0;for(t=t.replace(/[^A-Za-z0-9+/=]/g,"");s<t.length;)e=c.indexOf(t.charAt(s++))<<2|(i=c.indexOf(t.charAt(s++)))>>4,r=(15&i)<<4|(o=c.indexOf(t.charAt(s++)))>>2,n=(3&o)<<6|(a=c.indexOf(t.charAt(s++))),l+=String.fromCharCode(e),64!==o&&(l+=String.fromCharCode(r)),64!==a&&(l+=String.fromCharCode(n));return function(t){for(var e="",r=0,n=0,i=0,o=0;r<t.length;)(n=t.charCodeAt(r))<128?(e+=String.fromCharCode(n),r++):n>191&&n<224?(e+=String.fromCharCode((31&n)<<6|63&(o=t.charCodeAt(r+1))),r+=2):(o=t.charCodeAt(r+1),e+=String.fromCharCode((15&n)<<12|(63&o)<<6|63&(i=t.charCodeAt(r+2))),r+=3);return e}(l)}function x(t,e,r){var n="",i=0,o=!1,a=!1,c=0,l=t.length,s="",u="";t:for(c=0;c<l;c++){var f=t.charAt(c);if(!1===o){if("<"===f){o=c;continue}}else if(!1===a){if("<"===f){n+=r(t.slice(i,c)),o=c,i=c;continue}if(">"===f||c===l-1){n+=r(t.slice(i,o)),s=function(t){var e,r=p.spaceIndex(t);return e=-1===r?t.slice(1,-1):t.slice(1,r+1),"/"===(e=p.trim(e).toLowerCase()).slice(0,1)&&(e=e.slice(1)),"/"===e.slice(-1)&&(e=e.slice(0,-1)),e}(u=t.slice(o,c+1)),n+=e(o,n.length,s,u,"</"===u.slice(0,2)),i=c+1,o=!1;continue}if('"'===f||"'"===f)for(var h=1,d=t.charAt(c-h);""===d.trim()||"="===d;){if("="===d){a=f;continue t}d=t.charAt(c-++h)}}else if(f===a){a=!1;continue}}return i<l&&(n+=r(t.substr(i))),n}function w(t,e){var r=0,i=0,o=[],a=!1,c=t.length;function l(t,r){if(!((t=(t=p.trim(t)).replace(n,"").toLowerCase()).length<1)){var i=e(t,r||"");i&&o.push(i)}}for(var s=0;s<c;s++){var u=t.charAt(s),f=void 0;if(!1!==a||"="!==u){if(!1===a||s!==i){if(/\s|\n|\t/.test(u)){if(t=t.replace(/\s|\n|\t/g," "),!1===a){if(-1===(f=function(t,e){for(;e<t.length;e++){var r=t[e];if(" "!==r)return"="===r?e:-1}return -1}(t,s))){l(p.trim(t.slice(r,s))),a=!1,r=s+1;continue}s=f-1;continue}if(-1===(f=function(t,e){for(;e>0;e--){var r=t[e];if(" "!==r)return"="===r?e:-1}return -1}(t,s-1))){l(a,m(p.trim(t.slice(r,s)))),a=!1,r=s+1;continue}}}else{if(-1===(f=t.indexOf(u,s+1)))break;l(a,p.trim(t.slice(i+1,f))),a=!1,r=(s=f)+1}}else a=t.slice(r,s),r=s+1,i='"'===t.charAt(r)||"'"===t.charAt(r)?r:function(t,e){for(;e<t.length;e++){var r=t[e];if(" "!==r)return"'"===r||'"'===r?e:-1}return -1}(t,s+1)}return r<t.length&&(!1===a?l(t.slice(r)):l(a,m(p.trim(t.slice(r))))),p.trim(o.join(" "))}function k(t,e,r){if(r=function(t){return t=function(t){for(var e="",r=0,n=t.length;r<n;r++)e+=32>t.charCodeAt(r)?" ":t.charAt(r);return p.trim(e)}(t=(t=(t=t.replace(c,'"')).replace(a,function(t,e){return"x"===e[0]||"X"===e[0]?String.fromCharCode(parseInt(e.substr(1),16)):String.fromCharCode(parseInt(e,10))})).replace(l,":").replace(s," "))}(r),"href"===e||"src"===e){if("#"===(r=p.trim(r)))return"#";if("http://"!==r.substr(0,7)&&"https://"!==r.substr(0,8)&&"mailto:"!==r.substr(0,7)&&"tel:"!==r.substr(0,4)&&"data:image/"!==r.substr(0,11)&&"ftp://"!==r.substr(0,6)&&"./"!==r.substr(0,2)&&"../"!==r.substr(0,3)&&"#"!==r[0]&&"/"!==r[0])return""}else if("background"===e){if(u.lastIndex=0,u.test(r))return""}else if("style"===e&&(h.lastIndex=0,h.test(r)||(f.lastIndex=0,f.test(r)&&(u.lastIndex=0,u.test(r)))))return"";return r=function(t){return t=g(t=t.replace(d,"""))}(r)}var L=function(t){return"string"==typeof t?t.replace(/'/g,'"').replace('=""',"").replace(/\s+/g,"").toLowerCase():""},A=function(){function t(t){var e=function(t){var e={};for(var r in t)e[r]=t[r];return e}(t||{});e.stripIgnoreTag&&(e.onIgnoreTag,e.onIgnoreTag=function(){return""}),e.whiteList={},e.onTag=function(){},e.onTagAttr=function(){},e.onIgnoreTag=function(){},e.onIgnoreTagAttr=function(){},e.safeAttrValue=k,e.escapeHtml=g,this.options=Object.assign(e,t)}return t.prototype.process=function(t){if(!(t=(t=t||"").toString()))return"";var e,r,n,i,o,a,c=this.options,l=c.whiteList,s=c.onTag,u=c.onIgnoreTag,f=c.onTagAttr,h=c.onIgnoreTagAttr,d=c.safeAttrValue,g=c.escapeHtml;c.stripBlankChar&&(t=(e=(e=t.split("")).filter(function(t){var e=t.charCodeAt(0);return!(127===e||e<=31&&10!==e&&13!==e)})).join("")),c.allowCommentTag||(t=function(t){for(var e="",r=0;r<t.length;){var n=t.indexOf("\x3c!--",r);if(-1===n){e+=t.slice(r);break}e+=t.slice(r,n);var i=t.indexOf("--\x3e",n);if(-1===i)break;r=i+3}return e}(t));var v=!1;c.stripIgnoreTagBody&&(r=c.stripIgnoreTagBody,"function"!=typeof(n=u)&&(n=function(){}),i=!Array.isArray(r),o=[],a=!1,u=(v={onIgnoreTag:function(t,e,c){var l;if(l=t,i||-1!==p.indexOf(r,l)){if(c.isClosing){var s="[/removed]",u=c.position+s.length;return o.push([!1!==a?a:c.position,u]),a=!1,s}return a||(a=c.position),"[removed]"}return n(t,e,c)},remove:function(t){var e="",r=0;return p.forEach(o,function(n){e+=t.slice(r,n[0]),r=n[1]}),e+=t.slice(r)}}).onIgnoreTag);var m=x(t,function(t,e,r,n,i){var o={sourcePosition:t,position:e,isClosing:i,isWhite:Object.prototype.hasOwnProperty.call(l,r)},a=s(r,n,o);if(null!=a)return a;if(o.isWhite){if(o.isClosing)return"</".concat(r,">");var c=function(t){var e=p.spaceIndex(t);if(-1===e)return{html:"",closing:"/"===t[t.length-2]};var r="/"===(t=p.trim(t.slice(e+1,-1)))[t.length-1];return r&&(t=p.trim(t.slice(0,-1))),{html:t,closing:r}}(n),v=l[r],m=w(c.html,function(t,e){var n=-1!==p.indexOf(v,t),i=f(r,t,e,n);return null==i?n?(e=d(r,t,e,null))?"".concat(t,'="').concat(e,'"'):t:null==(i=h(r,t,e,n))?void 0:i:i});return n="<".concat(r),m&&(n+=" ".concat(m)),c.closing&&(n+=" /"),n+=">"}return null==(a=u(r,n,o))?g(n):a},g);return v&&(m=v.remove(m)),m},t}(),C=Function("\nvar _checkXSS = function (it) {\n return it && it.Math == Math && it;\n};\nreturn _checkXSS(typeof globalThis === 'object' && globalThis) ||\n_checkXSS(typeof window === 'object' && window) ||\n_checkXSS(typeof self === 'object' && self) ||\n_checkXSS(typeof global === 'object' && global) ||\nFunction('return this')();\n")(),S=new(function(){function t(){var t=this;this.batchData=[],this.uniqKeys=new Set,this.timeout=2e3,this.lock=!1,this.getSlardarBid=function(){var e,r,n="douyin_web";if(!p.includes(n,"bid"))return n;if(t.config&&t.config.bid)return t.config.bid;if(C&&C._xssBid)return C._xssBid;if(C&&C.slardar&&"function"==typeof C.slardar.config){var i=(C.slardar.config()||{}).bid;if(i)return i}if(C&&C.Slardar&&"function"==typeof C.Slardar.config){var o=(C.Slardar.config()||{}).bid;if(o)return o}return(null===(r=null===(e=null==C?void 0:C.Slardar)||void 0===e?void 0:e._baseParams)||void 0===r?void 0:r.bid)||"argus"},this.getConfigRegion=function(){var e;return p.includes("cn","region")?t.config&&t.config.region?t.config.region:((null===(e=null==C?void 0:C.gfdatav1)||void 0===e?void 0:e.region)||"cn").toLowerCase():"cn"},this.gerReportUrl=function(){var e={cn:y("aHR0cHM6Ly9tb24uemlqaWVhcGkuY29tL21vbml0b3JfYnJvd3Nlci9jb2xsZWN0L2JhdGNoL3NlY3VyaXR5Lz9iaWQ9"),boe:y("aHR0cHM6Ly9tb24uemlqaWVhcGkuY29tL21vbml0b3JfYnJvd3Nlci9jb2xsZWN0L2JhdGNoL3NlY3VyaXR5Lz9iaWQ9"),ttp:y("aHR0cHM6Ly9tb24udXMudGlrdG9rdi5jb20vbW9uaXRvcl9icm93c2VyL2NvbGxlY3QvYmF0Y2gvc2VjdXJpdHkvP2JpZD0="),va:y("aHR0cHM6Ly9tb24tdmEuYnl0ZW92ZXJzZWEuY29tL21vbml0b3JfYnJvd3Nlci9jb2xsZWN0L2JhdGNoL3NlY3VyaXR5Lz9iaWQ9"),maliva:y("aHR0cHM6Ly9tb24tdmEuYnl0ZW92ZXJzZWEuY29tL21vbml0b3JfYnJvd3Nlci9jb2xsZWN0L2JhdGNoL3NlY3VyaXR5Lz9iaWQ9"),sg:y("aHR0cHM6Ly9tb24tdmEuYnl0ZW92ZXJzZWEuY29tL21vbml0b3JfYnJvd3Nlci9jb2xsZWN0L2JhdGNoL3NlY3VyaXR5Lz9iaWQ9"),boei18n:y("aHR0cHM6Ly9tb24tdmEuYnl0ZW92ZXJzZWEuY29tL21vbml0b3JfYnJvd3Nlci9jb2xsZWN0L2JhdGNoL3NlY3VyaXR5Lz9iaWQ9")}[t.getConfigRegion()];if(e)return e+t.getSlardarBid()}}return t.prototype.setConfig=function(t){this.config=t},t.prototype.upload=function(){var t=this,e=this.gerReportUrl();!this.lock&&e&&0!==this.batchData.length&&(this.lock=!0,setTimeout(function(){var r=t.batchData.slice(0,100);t.batchData=t.batchData.slice(100),C.fetch(e,{method:"post",body:JSON.stringify(r),headers:{"Content-Type":"application/json"}}).catch(function(t){}),t.lock=!1,t.upload()},this.timeout))},t.prototype.generateKey=function(t){return t.collectKey?[t.collectMode,t.collectKey].join("___"):""},t.prototype.push=function(t){this.batchData.push(t),this.upload()},t.prototype.report=function(t){var e=this.generateKey(t);if(C.fetch&&t.collectKey){var r="object"==typeof window?window.location.href:"SSR";t.documentUrl=r;var n={age:Math.floor(Date.now()),type:"xss",url:r,body:t,"user-agent":""};"enforce"===t.disposition&&"SSR"!==r||(n.url=e),"SSR"===r&&(n.url="SSR___".concat(n.url),n.body.ssr=!0),this.push(n)}},t}()),N=function(t){for(var e=0,r=function(r){Array.isArray(t[r])?0===t[r].length?delete t[r]:(t[r]=p.from(p.uniq(t[r])),e+=t[r].length):0===p.keys(t[r]).length?delete t[r]:p.keys(t[r]).forEach(function(n){t[r][n]=p.from(p.uniq(t[r][n])),e+=t[r][n].length})},n=0,i=p.keys(t);n<i.length;n++)r(i[n]);return{count:e,ret:t}};function j(t,e){return S.setConfig(e),new A(e).process(t)}function T(t){var e,r=(e=/\s|\n|\t/.exec(t))?e.index:-1;if(-1===r)return{html:"",closing:"/"===t[t.length-2]};var n="/"===(t=t.slice(r+1,-1).trim())[t.length-1];return n&&(t=t.slice(0,-1).trim()),{html:t,closing:n}}var O=function(t){return -1===(t=(t=(t=(t=t.replace(/:/gi,":")).replace(/&tab;/gi,"")).replace(/&newline;/gi,"")).replace(/(\t|\n|\r)/g,"")).indexOf("&#")?t.trim().toLowerCase():t.trim().replace(/&#(?:(x)([0-9a-f]+)|([0-9]+));?/gi,function(t,e,r,n){return String.fromCharCode(e?parseInt(r,16):parseInt(n))}).replace(/(\t|\n|\r)/g,"").toLowerCase()};function R(t,e){if(void 0===t&&(t=""),"string"!=typeof t)return!0;if(t=O(t),p.includes(t,"base64")&&!function(t){if(""===t||""===t.trim())return!0;try{return!p.includes(t,"data:text/html;base64")}catch(t){return!0}}(t))return e&&e("data:text/html;base64"),!1;var r=["expression(","behavior:","view-source:"];if(p.some(r,function(e){return -1!==t.indexOf(e)}))return p.forEach(r,function(r){-1!==t.indexOf(r)&&e&&e(r)}),!1;var n=["data:application","data:javascript","data:text/html","data:texthtml"];if(p.some(n,function(e){return -1!==t.indexOf(e)}))return p.forEach(n,function(r){-1!==t.indexOf(r)&&e&&e(r)}),!1;if(t.indexOf("javascript:")>0)return e&&e("javascript:"),!1;if(/^javascript:/i.test(t)){var i=t.slice(11).replace(/\s/g,"").trim();return!!p.some(["void","void(0)","void0","false","undefined",";"],function(t){return t===i})||(e&&e("javascript:"),!1)}return!0}var W=function(t,e){var r,n,i="<%= isSaveValidUrl =>";if("string"!=typeof t||(n=Number("<%= urlLimit =>"),void 0!==r&&(n=r),"NaN"!==t.toString()&&-1!==n&&t.length>=n)||R(t,e))return t;try{if(!0===(i=JSON.parse(i))||"true"===i){var o=new URL(t);return o.origin+o.pathname}}catch(t){}return"#"};function _(t,e,n){if(void 0===t&&(t=""),void 0===e&&(e=[]),"string"!=typeof t)return!0;if(!R(t=O(t)))return!1;var i,o={url:(i=t.match(/^(?:([A-Za-z]+):)?(\/{0,3})([0-9.\-A-Za-z]+)(?::(\d+))?(?:\/([^?#]*))?(?:\?([^#]*))?(?:#(.*))?$/)||[])[0],scheme:i[1],slash:i[2],host:i[3],port:i[4],path:i[5],query:i[6],hash:i[7]},a=o.scheme,c=o.host;return n?!!n(t):!(!a||!c)&&(!p.includes(["http","https","file"],a)||("object"==typeof window&&window&&(e=r(r([],e,!0),[location.host],!1)),p.some(e,function(t){return!!(t instanceof RegExp&&t.test(c))||t===c})))}var J={a:["target","title","spellcheck","rel"],canvas:[],abbr:["title"],address:[],area:["shape","coords","alt"],article:[],aside:[],audio:["autoplay","controls","loop","preload"],b:[],bdi:["dir"],bdo:["dir"],big:[],blockquote:["cite"],br:[],caption:[],center:[],cite:[],code:[],col:["align","valign","span","width"],colgroup:["align","valign","span","width"],dd:[],del:["datetime"],details:["open"],div:["dir"],dl:[],dt:[],em:[],font:["color","size","face"],footer:[],h1:[],h2:[],h3:[],h4:[],h5:[],h6:[],header:[],hr:[],i:[],img:["alt","title","width","height","decoding"],ins:["datetime"],li:[],mark:[],nav:[],ol:["start"],p:[],pre:[],s:[],section:[],small:[],span:[],sub:[],sup:[],delete:[],form:[],strong:[],mask:["maskunits","x","y","width","height","fill"],table:["width","border","align","valign"],tbody:["align","valign"],td:["width","rowspan","colspan","align","valign"],tfoot:["align","valign"],th:["width","rowspan","colspan","align","valign"],thead:["align","valign"],tr:["rowspan","align","valign"],tt:[],u:[],ul:[],wbr:[],video:["autoplay","controls","loop","preload","height","width"],svg:["viewBox","version","xmlns","fill","width","height","stroke","stroke-width","style"],path:["d","fill","opacity","stroke","p-id","fill-rule","clip-rule","stroke-width","stroke-linecap","stroke-linejoin","fill-opacity","mask"],rect:["x","y","width","height","fill","stroke","rx"],g:[]},P={collect:null,initCollect:function(){this.collect={whiteList:{},filterProtocol:[]}},removeCollect:function(){var t=N(this.collect),e=t.count,r=t.ret;return this.collect=null,{collectKey:0===e?null:JSON.stringify(r),collectMode:"white"}},onIgnoreTagAttr:function(t,e,n){return t&&p.indexOf(["href","src"],e)>-1?P.domainWhiteList&&Array.isArray(P.domainWhiteList)&&P.domainWhiteList.length>0&&!_(n,r([],P.domainWhiteList,!0))?"":"".concat(e,'="').concat(W(n,function(t){var e;null===(e=P.collect)||void 0===e||e.filterProtocol.push(t)}),'"'):t&&(p.indexOf(["style","class","id"],e)>-1||e.indexOf("data-")>-1)?"".concat(e,'="').concat(n,'"'):(P.collect.whiteList[t]=P.collect.whiteList[t]||[],void P.collect.whiteList[t].push(e))},onIgnoreTag:function(t,e){if("style"===t)return e;x(e,function(t,e,r,n){w(T(n).html.replace("/",""),function(t){P.collect.whiteList[r]=P.collect.whiteList[r]||[],P.collect.whiteList[r].push(t)})},g)},whiteList:J,mergeWhiteList:function(t){for(var e,r={},n=0,i=p.keys(J);n<i.length;n++)r[e=i[n]]=p.from(J[e]);for(var o=0,a=p.keys(t);o<a.length;o++)r[e=a[o]]=e in J?J[e].concat(t[e]):p.from(t[e]);return r},setWhiteList:function(t){for(var e=0,r=p.keys(t);e<r.length;e++){var n=r[e];this.whiteList[n]=n in J?J[n].concat(t[n]):p.from(t[n])}}};try{var X={},I="merge";p.includes(I,"override")&&(P.whiteList=X.whiteList),p.includes(I,"merge")&&P.setWhiteList(X.whiteList)}catch(t){}var E=function(t,e){for(var r={},n=0,i=p.keys(t);n<i.length;n++){var o=i[n];Array.isArray(t[o])?r[o]=p.from(t[o]):r[o]=E({},t[o])}for(var a=0,c=p.keys(e);a<c.length;a++)(o=c[a])in t?Array.isArray(t[o])?r[o]=t[o].concat(e[o]):r[o]=E(t[o],e[o]):Array.isArray(e[o])?r[o]=p.from(e[o]):r[o]=E({},e[o]);return r},Y={blackList:{a:["folder"],meta:["content"],iframe:["srcdoc"],input:["pattern"],vmlframe:["xmlns"]},blackTags:["script","xml","embed","isindex","object","base","set","handler","animate","payload","import"],blackAttrs:["charset","ns","namespace","formaction","xlink:href","xmlns:xlink","handler","repeat","repeat-start","repeat-end"],blackAttrRegExps:[/^on/],filterList:{param:["value"],video:["poster"],form:["action"]},filterAttrs:["href","src","background","style","dynsrc","lowsrc","content"]};try{var Z={};Z.blackAttrRegExps&&(Z.blackAttrRegExps=Z.blackAttrRegExps.map(function(t){return new RegExp(t.toString().slice(1,t.toString().length-1))}));var M="merge";p.includes(M,"override")&&(Y=Z),p.includes(M,"merge")&&(Y=E(Y,Z))}catch(t){}var z={mode:"black",whiteList:{},blackConfig:Y,collect:null,initCollect:function(){z.collect={blackList:{},blackTags:[],blackAttrs:[],blackAttrRegExps:[],filterAttrs:[],filterList:{},filterProtocol:[]}},removeCollect:function(){var t=N(z.collect),e=t.count,r=t.ret;return z.collect=null,{collectKey:0===e?null:JSON.stringify(r),collectMode:"black"}},onIgnoreTag:function(t,e){var r;if(!p.includes(Y.blackTags,t))return x(e,function(t,e,r,n,i){if(-1!==r.indexOf("/"))return g(n);if(i)return"</".concat(r,">");var o=T(n),a=w(o.html,function(t,e){var n,i=0;if(Y.blackList[r]&&p.includes(Y.blackList[r],t)&&(z.collect.blackList[r]=z.collect.blackList[r]||[],z.collect.blackList[r].push(t),i++),Y.blackAttrRegExps.length&&Y.blackAttrRegExps.some(function(e){return e.test(t)})&&p.forEach(Y.blackAttrRegExps,function(e){e.test(t)&&(z.collect.blackAttrRegExps.push("".concat(e.toString(),"->").concat(t)),i++)}),Y.blackAttrs.length&&p.includes(Y.blackAttrs,t)&&(Y.blackAttrs.push(t),i++),!i){if(Y.filterList&&Y.filterList[r]&&p.includes(Y.filterList[r],t)){var o=W(e,function(t){var e;null===(e=z.collect)||void 0===e||e.filterProtocol.push(t)});return o!==e&&(z.collect.filterList[r]=z.collect.filterList[r]||[],z.collect.filterList[r].push(t)),e?"".concat(t,"='").concat(o,"'"):t}return Y.filterAttrs&&p.includes(Y.filterAttrs,t)?((o=W(e,function(t){var e;null===(e=z.collect)||void 0===e||e.filterProtocol.push(t)}))!==e&&(null===(n=z.collect)||void 0===n||n.filterAttrs.push(t)),e?"".concat(t,"='").concat(o,"'"):t):e?"".concat(t,"='").concat(e,"'"):t}});return n="<".concat(r),a&&(n+=" ".concat(a)),o.closing&&(n+=" /"),n+=">"},g);null===(r=z.collect)||void 0===r||r.blackTags.push(t)}},H=function(t){var e=t.reportOnly,r=void 0===e||e,n=t.block;return r&&"all"===r?"report":("string"==typeof r&&("true"===r&&(r=!0),"false"===r&&(r=!1)),n?"enforce":r?"report":"enforce")},V=function(t){return function(r,n,i){if(!r||"string"!=typeof r)return r;var o=n;t===j&&(o=P).initCollect();var a=t(r,o);if(L(a)===L(r))return r;if(!i)return a;var c=i.logType,l=H(i),s=o.removeCollect();return S.report(e(e({type:c,disposition:l},s),{sourceText:b(r),filterText:b(a)})),"enforce"===l?a:r}},q=V(function(t,e){return void 0===e&&(e={}),e&&e.whiteList||(e.whiteList={a:["target","href","title"],abbr:["title"],address:[],area:["shape","coords","href","alt"],article:[],aside:[],audio:["autoplay","controls","crossorigin","loop","muted","preload","src"],b:[],bdi:["dir"],bdo:["dir"],big:[],blockquote:["cite"],br:[],caption:[],center:[],cite:[],code:[],col:["align","valign","span","width"],colgroup:["align","valign","span","width"],dd:[],del:["datetime"],details:["open"],div:[],dl:[],dt:[],em:[],figcaption:[],figure:[],font:["color","size","face"],footer:[],h1:[],h2:[],h3:[],h4:[],h5:[],h6:[],header:[],hr:[],i:[],img:["src","alt","title","width","height"],ins:["datetime"],li:[],mark:[],nav:[],ol:[],p:[],pre:[],s:[],section:[],small:[],span:[],sub:[],summary:[],sup:[],strong:[],strike:[],table:["width","border","align","valign"],tbody:["align","valign"],td:["width","rowspan","colspan","align","valign"],tfoot:["align","valign"],th:["width","rowspan","colspan","align","valign"],thead:["align","valign"],tr:["rowspan","align","valign"],tt:[],u:[],ul:[],video:["autoplay","controls","crossorigin","loop","muted","playsinline","poster","preload","src","height","width"]}),new A(e).process(t)}),D=V(j),G=function(t,e,r){var n=[],i=W(t,function(t){n.push(t)});if(i===t)return t;n=p.from(p.uniq(n));var o=e||r||{};if(!o)return i;var a=o.logType,c=H(r);return S.report({type:a,disposition:c,collectKey:n.join("___"),collectData:JSON.stringify(n),collectMode:"black",sourceText:b(t),filterText:b(i)}),"enforce"===c?i:t},B=C._xssProject||{},K=C.xssNamespace||{},U="3.0.26",Q={FilterXSS:A,version:U,webpackPluginVersion:"<%= webpackPluginVersion =>",reportOnly:"<%= reportOnly =>",filterXSS:q,_filterXSS:D,filterUrl:G,Config:P,BlackConfig:z,project:B,setProjectName:function(t){B[t]=this,C._xssProjectName=t}};K.douyin_web=Q,C.xssNamespace=K,C.Math&&!C.Math.xssNamespace&&(C.Math.xssNamespace=K),B[U]=Q,C.globalThis=C,C.getFilterXss=function(){return void 0!==this._xssProjectName?this._xssProject[this._xssProjectName]:Q},C.xss=Q,C.isSafeUrl=_,C.isSafeDomain=_,C.isSafeProtocol=R,C._xssProject=B,C._xssProjectName&&(B[C._xssProjectName]=Q);var F=Q.setProjectName.bind(Q);t.BlackConfig=z,t.Config=P,t.FilterXSS=A,t._filterXSS=D,t.filterUrl=G,t.filterXSS=q,t.isSafeDomain=_,t.isSafeProtocol=R,t.isSafeUrl=_,t.project=B,t.setProjectName=F,t.setXssNamespace=function(t){var e=t.appId,r=t.bid,n=t.region;K[e]=Q;P.bid=r,P.region=n,P.enabled=!0},t.xssNamespace=K,Object.defineProperty(t,"__esModule",{value:!0})}),(self.webpackChunkdouyin_web=self.webpackChunkdouyin_web||[]).push([["78078"],{305620:function(){}}]); |