// adsafe.js // 2012-05-09 // Public Domain. // NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK. // SUBJECT TO CHANGE WITHOUT NOTICE. // Original url: http://www.ADsafe.org/adsafe.js // This file implements the core ADSAFE runtime. A site may add additional // methods understanding that those methods will be made available to guest // code. // This code should be minified before deployment. // See http://javascript.crockford.com/jsmin.html // USE YOUR OWN COPY. IT IS EXTREMELY UNWISE TO LOAD CODE FROM SERVERS YOU DO // NOT CONTROL. /*global window*/ /*jslint browser: true, devel: true, forin: true, nomen: true */ /*properties '', '#', '&', '*', '+', '.', '/', ':blur', ':checked', ':disabled', ':enabled', ':even', ':focus', ':hidden', ':odd', ':tag', ':text', ':trim', ':unchecked', ':visible', '>', '[', '[!=', '[$=', '[*=', '[=', '[^=', '[|=', '[~=', _, '___ on ___', '___adsafe root___', ___nodes___, ___star___, __defineGetter__, '_adsafe mark_', _intercept, a, abbr, acronym, addEventListener, address, altKey, append, appendChild, apply, area, arguments, autocomplete, b, bdo, big, blockquote, blur, br, bubble, button, call, callee, caller, cancelBubble, canvas, caption, center, change, charAt, charCode, check, checked, childNodes, cite, class, className, clientX, clientY, clone, cloneNode, code, col, colgroup, combine, concat, console, constructor, count, create, createDocumentFragment, createElement, createRange, createTextNode, createTextRange, cssFloat, ctrlKey, currentStyle, dd, defaultView, del, dfn, dir, disabled, div, dl, dt, each, em, empty, enable, ephemeral, eval, exec, expand, explode, fieldset, fire, firstChild, focus, font, form, fragment, fromCharCode, get, getCheck, getChecks, getClass, getClasses, getComputedStyle, getElementById, getElementsByTagName, getMark, getMarks, getName, getNames, getOffsetHeight, getOffsetHeights, getOffsetWidth, getOffsetWidths, getParent, getSelection, getStyle, getStyles, getTagName, getTagNames, getTitle, getTitles, getValue, getValues, go, h1, h2, h3, h4, h5, h6, has, hasOwnProperty, hr, i, id, img, inRange, indexOf, input, ins, insertBefore, isArray, kbd, key, keyCode, keys, klass, label, later, legend, length, li, lib, log, map, mark, menu, message, name, nextSibling, nodeName, nodeValue, object, off, offsetHeight, offsetWidth, ol, on, onclick, ondblclick, onfocusin, onfocusout, onkeypress, onmousedown, onmousemove, onmouseout, onmouseover, onmouseup, op, optgroup, option, p, parent, parentNode, postError, pre, prepend, preventDefault, protect, prototype, push, q, remove, removeChild, removeElement, replace, replaceChild, returnValue, row, samp, select, selection, selectionEnd, selectionStart, set, shiftKey, slice, small, span, srcElement, stack, stopPropagation, strong, style, styleFloat, sub, sup, table, tag, tagName, target, tbody, td, test, text, textarea, tfoot, th, that, thead, title, toLowerCase, toString, toUpperCase, tr, tt, type, u, ul, unwatch, value, valueOf, var, visibility, watch, window, writeln, x, y */ var ADSAFE = (function () { "use strict"; var adsafe_id, // The id of the current widget adsafe_lib, // The script libraries loaded by the current widget // These member names are banned from guest scripts. The ADSAFE.get and // ADSAFE.put methods will not allow access to these properties. banned = { 'arguments' : true, callee : true, caller : true, constructor : true, 'eval' : true, prototype : true, stack : true, unwatch : true, valueOf : true, watch : true }, cache_style_object, cache_style_node, defaultView = document.defaultView, ephemeral, flipflop, // Used in :even/:odd processing has_focus, hunter, // Set of hunter patterns interceptors = [], makeableTagName = { // This is the whitelist of elements that may be created with the .tag(tagName) // method. a : true, abbr : true, acronym : true, address : true, area : true, b : true, bdo : true, big : true, blockquote: true, br : true, button : true, canvas : true, caption : true, center : true, cite : true, code : true, col : true, colgroup : true, dd : true, del : true, dfn : true, dir : true, div : true, dl : true, dt : true, em : true, fieldset : true, font : true, form : true, h1 : true, h2 : true, h3 : true, h4 : true, h5 : true, h6 : true, hr : true, i : true, img : true, input : true, ins : true, kbd : true, label : true, legend : true, li : true, map : true, menu : true, object : true, ol : true, optgroup : true, option : true, p : true, pre : true, q : true, samp : true, select : true, small : true, span : true, strong : true, sub : true, sup : true, table : true, tbody : true, td : true, textarea : true, tfoot : true, th : true, thead : true, tr : true, tt : true, u : true, ul : true, 'var' : true }, name, pecker, // set of pecker patterns result, star, the_range, value; // The error function is called if there is a violation or confusion. // It throws an exception. function error(message) { ADSAFE.log("ADsafe error: " + (message || "ADsafe violation.")); throw { name: "ADsafe", message: message || "ADsafe violation." }; } // Some of JavaScript's implicit string conversions can grant extraordinary // powers to untrusted code. So we use the string_check function to prevent // such abuses. function string_check(string) { if (typeof string !== 'string') { error("ADsafe string violation."); } return string; } // The object.hasOwnProperty method has a number of hazards. So we wrap it in // the owns function. function owns(object, string) { return object && typeof object === 'object' && Object.prototype.hasOwnProperty.call(object, string_check(string)); } // The reject functions enforce the restriction on property names. // reject_property allows access only to objects and arrays. It does not allow // use of the banned names, or names that are not strings and not numbers, // or strings that start or end with _. function reject_name(name) { return typeof name !== 'number' && (typeof name !== 'string' || banned[name] || name.charAt(0) === '_' || name.slice(-1) === '_'); } function reject_property(object, name) { return typeof object !== 'object' || reject_name(name); } function reject_global(that) { if (that.window) { error(); } } function getStyleObject(node) { // The getStyleObject function returns the computed style object for a node. if (node === cache_style_node) { return cache_style_object; } cache_style_node = node; cache_style_object = node.currentStyle || defaultView.getComputedStyle(node, ''); return cache_style_object; } function walkTheDOM(node, func, skip) { // Recursively traverse the DOM tree, starting with the node, in document // source order, calling the func on each node visisted. if (!skip) { func(node); } node = node.firstChild; while (node) { walkTheDOM(node, func); node = node.nextSibling; } } function purge_event_handlers(node) { // We attach all event handlers to an '___ on ___' property. The property name // contains spaces to insure that there is no collision with HTML attribues. // Keeping the handlers in a single property makes it easy to remove them // all at once. Removal is required to avoid memory leakage on IE6 and IE7. walkTheDOM(node, function (node) { if (node.tagName) { node['___ on ___'] = node.change = null; } }); } function parse_query(text, id) { // Convert a query string into an array of op/name/value selectors. // A query string is a sequence of triples wrapped in brackets; or names, // possibly prefixed by # . & > _, or :option, or * or /. A triple is a name, // and operator (one of [=, [!=, [*=, [~=, [|=, [$=, or [^=) and a value. // If the id parameter is supplied, then the name following # must have the // id as a prefix and must match the ADsafe rule for id: being all uppercase // letters and digits with one underbar. // A name must be all lower case and may contain digits, -, or _. var match, // A match array query = [], // The resulting query array selector, qx = id ? /^\s*(?:([\*\/])|\[\s*([a-z][0-9a-z_\-]*)\s*(?:([!*~|$\^]?\=)\s*([0-9A-Za-z_\-*%&;.\/:!]+)\s*)?\]|#\s*([A-Z]+_[A-Z0-9]+)|:\s*([a-z]+)|([.&_>\+]?)\s*([a-z][0-9a-z\-]*))\s*/ : /^\s*(?:([\*\/])|\[\s*([a-z][0-9a-z_\-]*)\s*(?:([!*~|$\^]?\=)\s*([0-9A-Za-z_\-*%&;.\/:!]+)\s*)?\]|#\s*([\-A-Za-z0-9_]+)|:\s*([a-z]+)|([.&_>\+]?)\s*([a-z][0-9a-z\-]*))\s*/; // Loop over all of the selectors in the text. do { // The qx teases the components of one selector out of the text, ignoring // whitespace. // match[0] the whole selector // match[1] * / // match[2] attribute name // match[3] = != *= ~= |= $= ^= // match[4] attribute value // match[5] # id // match[6] : option // match[7] . & _ > + // match[8] name match = qx.exec(string_check(text)); if (!match) { error("ADsafe: Bad query:" + text); } // Make a selector object and stuff it in the query. if (match[1]) { // The selector is * or / selector = { op: match[1] }; } else if (match[2]) { // The selector is in brackets. selector = match[3] ? { op: '[' + match[3], name: match[2], value: match[4] } : { op: '[', name: match[2] }; } else if (match[5]) { // The selector is an id. if (query.length > 0 || match[5].length <= id.length || match[5].slice(0, id.length) !== id) { error("ADsafe: Bad query: " + text); } selector = { op: '#', name: match[5] }; // The selector is a colon. } else if (match[6]) { selector = { op: ':' + match[6] }; // The selector is one of > + . & _ or a naked tag name } else { selector = { op: match[7], name: match[8] }; } // Add the selector to the query. query.push(selector); // Remove the selector from the text. If there is more text, have another go. text = text.slice(match[0].length); } while (text); return query; } hunter = { // These functions implement the hunter behaviors. '': function (node) { var array, nodelist = node.getElementsByTagName(name), i, length; // getElementsByTagName produces a nodeList, which is one of the world's most // inefficient data structures. It is so slow that JavaScript's pseudo arrays // look terrifically swift by comparison. So we do the conversion. This is // easily done on some browsers, less easily on others. try { array = Array.prototype.slice.call(nodelist, 0); result = result.length ? result.concat(array) : array; } catch (ie) { length = nodelist.length; for (i = 0; i < length; i += 1) { result.push(nodelist[i]); } } }, '+': function (node) { node = node.nextSibling; name = name.toUpperCase(); while (node && !node.tagName) { node = node.nextSibling; } if (node && node.tagName === name) { result.push(node); } }, '>': function (node) { node = node.firstChild; name = name.toUpperCase(); while (node) { if (node.tagName === name) { result.push(node); } node = node.nextSibling; } }, '#': function () { var n = document.getElementById(name); if (n.tagName) { result.push(n); } }, '/': function (node) { var nodes = node.childNodes, i, length = nodes.length; for (i = 0; i < length; i += 1) { result.push(nodes[i]); } }, '*': function (node) { star = true; walkTheDOM(node, function (node) { result.push(node); }, true); } }; pecker = { '.': function (node) { return (' ' + node.className + ' ').indexOf(' ' + name + ' ') >= 0; }, '&': function (node) { return node.name === name; }, '_': function (node) { return node.type === name; }, '[': function (node) { return typeof node[name] === 'string'; }, '[=': function (node) { var member = node[name]; return typeof member === 'string' && member === value; }, '[!=': function (node) { var member = node[name]; return typeof member === 'string' && member !== value; }, '[^=': function (node) { var member = node[name]; return typeof member === 'string' && member.slice(0, member.length) === value; }, '[$=': function (node) { var member = node[name]; return typeof member === 'string' && member.slice(-member.length) === value; }, '[*=': function (node) { var member = node[name]; return typeof member === 'string' && member.indexOf(value) >= 0; }, '[~=': function (node) { var member = node[name]; return typeof member === 'string' && (' ' + member + ' ').indexOf(' ' + value + ' ') >= 0; }, '[|=': function (node) { var member = node[name]; return typeof member === 'string' && ('-' + member + '-').indexOf('-' + value + '-') >= 0; }, ':blur': function (node) { return node !== has_focus; }, ':checked': function (node) { return node.checked; }, ':disabled': function (node) { return node.tagName && node.disabled; }, ':enabled': function (node) { return node.tagName && !node.disabled; }, ':even': function (node) { var f; if (node.tagName) { f = flipflop; flipflop = !flipflop; return f; } return false; }, ':focus': function (node) { return node === has_focus; }, ':hidden': function (node) { return node.tagName && getStyleObject(node).visibility !== 'visible'; }, ':odd': function (node) { if (node.tagName) { flipflop = !flipflop; return flipflop; } return false; }, ':tag': function (node) { return node.tagName; }, ':text': function (node) { return node.nodeName === '#text'; }, ':trim': function (node) { return node.nodeName !== '#text' || /\W/.test(node.nodeValue); }, ':unchecked': function (node) { return node.tagName && !node.checked; }, ':visible': function (node) { return node.tagName && getStyleObject(node).visibility === 'visible'; } }; function quest(query, nodes) { var selector, func, i, j; // Step through each selector. for (i = 0; i < query.length; i += 1) { selector = query[i]; name = selector.name; func = hunter[selector.op]; // There are two kinds of selectors: hunters and peckers. If this is a hunter, // loop through the the nodes, passing each node to the hunter function. // Accumulate all the nodes it finds. if (typeof func === 'function') { if (star) { error("ADsafe: Query violation: *" + selector.op + (selector.name || '')); } result = []; for (j = 0; j < nodes.length; j += 1) { func(nodes[j]); } } else { // If this is a pecker, get its function. There is a special case for // the :first and :rest selectors because they are so simple. value = selector.value; flipflop = false; func = pecker[selector.op]; if (typeof func !== 'function') { switch (selector.op) { case ':first': result = nodes.slice(0, 1); break; case ':rest': result = nodes.slice(1); break; default: error('ADsafe: Query violation: :' + selector.op); } } else { // For the other selectors, make an array of nodes that are filtered by // the pecker function. result = []; for (j = 0; j < nodes.length; j += 1) { if (func(nodes[j])) { result.push(nodes[j]); } } } } nodes = result; } return result; } function make_root(root, id) { if (id) { if (root.tagName !== 'DIV') { error('ADsafe: Bad node.'); } } else { if (root.tagName !== 'BODY') { error('ADsafe: Bad node.'); } } // A Bunch is a container that holds zero or more dom nodes. // It has many useful methods. function Bunch(nodes) { this.___nodes___ = nodes; this.___star___ = star && nodes.length > 1; star = false; } var allow_focus = true, dom, dom_event = function (e) { var key, target, that, the_event, the_target, the_actual_event = e || event, type = the_actual_event.type; // Get the target node and wrap it in a bunch. the_target = the_actual_event.target || the_actual_event.srcElement; target = new Bunch([the_target]); that = target; // Use the PPK hack to make focus bubbly on IE. // When a widget has focus, it can use the focus method. switch (type) { case 'mousedown': allow_focus = true; if (document.selection) { the_range = document.selection.createRange(); } break; case 'focus': case 'focusin': allow_focus = true; has_focus = the_target; the_actual_event.cancelBubble = false; type = 'focus'; break; case 'blur': case 'focusout': allow_focus = false; has_focus = null; type = 'blur'; break; case 'keypress': allow_focus = true; has_focus = the_target; key = String.fromCharCode(the_actual_event.charCode || the_actual_event.keyCode); switch (key) { case '\u000d': case '\u000a': type = 'enterkey'; break; case '\u001b': type = 'escapekey'; break; } break; // This is a workaround for Safari. case 'click': allow_focus = true; break; } if (the_actual_event.cancelBubble && the_actual_event.stopPropagation) { the_actual_event.stopPropagation(); } // Make the event object. the_event = { altKey: the_actual_event.altKey, ctrlKey: the_actual_event.ctrlKey, bubble: function () { // Bubble up. Get the parent of that node. It becomes the new that. // getParent throws when bubbling is not possible. try { var parent = that.getParent(), b = parent.___nodes___[0]; that = parent; the_event.that = that; // If that node has an event handler, fire it. Otherwise, bubble up. if (b['___ on ___'] && b['___ on ___'][type]) { that.fire(the_event); } else { the_event.bubble(); } } catch (e) { error(e); } }, key: key, preventDefault: function () { if (the_actual_event.preventDefault) { the_actual_event.preventDefault(); } the_actual_event.returnValue = false; }, shiftKey: the_actual_event.shiftKey, target: target, that: that, type: type, x: the_actual_event.clientX, y: the_actual_event.clientY }; // If the target has event handlers, then fire them. Otherwise, bubble up. if (the_target['___ on ___'] && the_target['___ on ___'][the_event.type]) { target.fire(the_event); } else { for (;;) { the_target = the_target.parentNode; if (!the_target) { break; } if (the_target['___ on ___'] && the_target['___ on ___'][the_event.type]) { that = new Bunch([the_target]); the_event.that = that; that.fire(the_event); break; } if (the_target['___adsafe root___']) { break; } } } if (the_event.type === 'escapekey') { if (ephemeral) { ephemeral.remove(); } ephemeral = null; } that = the_target = the_event = the_actual_event = null; return; }; // Mark the node as a root. This prevents event bubbling from propagating // past it. root['___adsafe root___'] = '___adsafe root___'; Bunch.prototype = { append: function (appendage) { reject_global(this); var b = this.___nodes___, flag = false, i, j, node, rep; if (b.length === 0 || !appendage) { return this; } if (appendage instanceof Array) { if (appendage.length !== b.length) { error('ADsafe: Array length: ' + b.length + '-' + value.length); } for (i = 0; i < b.length; i += 1) { rep = appendage[i].___nodes___; for (j = 0; j < rep.length; j += 1) { b[i].appendChild(rep[j]); } } } else { rep = appendage.___nodes___; for (i = 0; i < b.length; i += 1) { node = b[i]; for (j = 0; j < rep.length; j += 1) { node.appendChild(flag ? rep[j].cloneNode(true) : rep[j]); } flag = true; } } return this; }, blur: function () { reject_global(this); var b = this.___nodes___, i, node; has_focus = null; for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.blur) { node.blur(); } } return this; }, check: function (value) { reject_global(this); var b = this.___nodes___, i, node; if (value instanceof Array) { if (value.length !== b.length) { error('ADsafe: Array length: ' + b.length + '-' + value.length); } for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { node.checked = !!value[i]; } } } else { for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { node.checked = !!value; } } } return this; }, 'class': function (value) { reject_global(this); var b = this.___nodes___, i, node; if (value instanceof Array) { if (value.length !== b.length) { error('ADsafe: Array length: ' + b.length + '-' + value.length); } for (i = 0; i < b.length; i += 1) { if (/url/i.test(string_check(value[i]))) { error('ADsafe error.'); } node = b[i]; if (node.tagName) { node.className = value[i]; } } } else { if (/url/i.test(string_check(value))) { error('ADsafe error.'); } for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { node.className = value; } } } return this; }, clone: function (deep, n) { var a = [], b = this.___nodes___, c, i, j, k = n || 1; for (i = 0; i < k; i += 1) { c = []; for (j = 0; j < b.length; j += 1) { c.push(b[j].cloneNode(deep)); } a.push(new Bunch(c)); } return n ? a : a[0]; }, count: function () { reject_global(this); return this.___nodes___.length; }, each: function (func) { reject_global(this); var b = this.___nodes___, i; if (typeof func === 'function') { for (i = 0; i < b.length; i += 1) { func(new Bunch([b[i]])); } return this; } error(); }, empty: function () { reject_global(this); var b = this.___nodes___, i, node; if (value instanceof Array) { if (value.length !== b.length) { error('ADsafe: Array length: ' + b.length + '-' + value.length); } for (i = 0; i < b.length; i += 1) { node = b[i]; while (node.firstChild) { purge_event_handlers(node); node.removeChild(node.firstChild); } } } else { for (i = 0; i < b.length; i += 1) { node = b[i]; while (node.firstChild) { purge_event_handlers(node); node.removeChild(node.firstChild); } } } return this; }, enable: function (enable) { reject_global(this); var b = this.___nodes___, i, node; if (enable instanceof Array) { if (enable.length !== b.length) { error('ADsafe: Array length: ' + b.length + '-' + enable.length); } for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { node.disabled = !enable[i]; } } } else { for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { node.disabled = !enable; } } } return this; }, ephemeral: function () { reject_global(this); if (ephemeral) { ephemeral.remove(); } ephemeral = this; return this; }, explode: function () { reject_global(this); var a = [], b = this.___nodes___, i; for (i = 0; i < b.length; i += 1) { a[i] = new Bunch([b[i]]); } return a; }, fire: function (event) { // Fire an event on an object. The event can be either // a string containing the name of the event, or an // object containing a type property containing the // name of the event. Handlers registered by the 'on' // method that match the event name will be invoked. reject_global(this); var array, b, i, j, n, node, on, type; if (typeof event === 'string') { type = event; event = {type: type}; } else if (typeof event === 'object') { type = event.type; } else { error(); } b = this.___nodes___; n = b.length; for (i = 0; i < n; i += 1) { node = b[i]; on = node['___ on ___']; // If an array of handlers exist for this event, then // loop through it and execute the handlers in order. if (owns(on, type)) { array = on[type]; for (j = 0; j < array.length; j += 1) { // Invoke a handler. Pass the event object. array[j].call(this, event); } } } return this; }, focus: function () { reject_global(this); var b = this.___nodes___; if (b.length > 0 && allow_focus) { has_focus = b[0].focus(); return this; } error(); }, fragment: function () { reject_global(this); return new Bunch([document.createDocumentFragment()]); }, getCheck: function () { return this.getChecks()[0]; }, getChecks: function () { reject_global(this); var a = [], b = this.___nodes___, i; for (i = 0; i < b.length; i += 1) { a[i] = b[i].checked; } return a; }, getClass: function () { return this.getClasses()[0]; }, getClasses: function () { reject_global(this); var a = [], b = this.___nodes___, i; for (i = 0; i < b.length; i += 1) { a[i] = b[i].className; } return a; }, getMark: function () { return this.getMarks()[0]; }, getMarks: function () { reject_global(this); var a = [], b = this.___nodes___, i; for (i = 0; i < b.length; i += 1) { a[i] = b[i]['_adsafe mark_']; } return a; }, getName: function () { return this.getNames()[0]; }, getNames: function () { reject_global(this); var a = [], b = this.___nodes___, i; for (i = 0; i < b.length; i += 1) { a[i] = b[i].name; } return a; }, getOffsetHeight: function () { return this.getOffsetHeights()[0]; }, getOffsetHeights: function () { reject_global(this); var a = [], b = this.___nodes___, i; for (i = 0; i < b.length; i += 1) { a[i] = b[i].offsetHeight; } return a; }, getOffsetWidth: function () { return this.getOffsetWidths()[0]; }, getOffsetWidths: function () { reject_global(this); var a = [], b = this.___nodes___, i; for (i = 0; i < b.length; i += 1) { a[i] = b[i].offsetWidth; } return a; }, getParent: function () { reject_global(this); var a = [], b = this.___nodes___, i, n; for (i = 0; i < b.length; i += 1) { n = b[i].parentNode; if (n['___adsafe root___']) { error('ADsafe parent violation.'); } a[i] = n; } return new Bunch(a); }, getSelection: function () { reject_global(this); var b = this.___nodes___, end, node, start, range; if (b.length === 1 && allow_focus) { node = b[0]; if (typeof node.selectionStart === 'number') { start = node.selectionStart; end = node.selectionEnd; return node.value.slice(start, end); } range = node.createTextRange(); range.expand('textedit'); if (range.inRange(the_range)) { return the_range.text; } } return null; }, getStyle: function (name) { return this.getStyles(name)[0]; }, getStyles: function (name) { reject_global(this); if (reject_name(name)) { error("ADsafe style violation."); } var a = [], b = this.___nodes___, i, node, s; for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { s = name !== 'float' ? getStyleObject(node)[name] : getStyleObject(node).cssFloat || getStyleObject(node).styleFloat; if (typeof s === 'string') { a[i] = s; } } } return a; }, getTagName: function () { return this.getTagNames()[0]; }, getTagNames: function () { reject_global(this); var a = [], b = this.___nodes___, i, name; for (i = 0; i < b.length; i += 1) { name = b[i].tagName; a[i] = typeof name === 'string' ? name.toLowerCase() : name; } return a; }, getTitle: function () { return this.getTitles()[0]; }, getTitles: function () { reject_global(this); var a = [], b = this.___nodes___, i; for (i = 0; i < b.length; i += 1) { a[i] = b[i].title; } return a; }, getValue: function () { return this.getValues()[0]; }, getValues: function () { reject_global(this); var a = [], b = this.___nodes___, i, node; for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.nodeName === '#text') { a[i] = node.nodeValue; } else if (node.tagName && node.type !== 'password') { a[i] = node.value; if (!a[i] && node.firstChild && node.firstChild.nodeName === '#text') { a[i] = node.firstChild.nodeValue; } } } return a; }, klass: function (value) { return this['class'](value); }, mark: function (value) { reject_global(this); var b = this.___nodes___, i, node; if (value instanceof Array) { if (value.length !== b.length) { error('ADsafe: Array length: ' + b.length + '-' + value.length); } for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { node['_adsafe mark_'] = String(value[i]); } } } else { for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { node['_adsafe mark_'] = String(value); } } } return this; }, off: function (type) { reject_global(this); var b = this.___nodes___, i, node; for (i = 0; i < b.length; i += 1) { node = b[i]; if (typeof type === 'string') { if (typeof node['___ on ___']) { node['___ on ___'][type] = null; } } else { node['___ on ___'] = null; } } return this; }, on: function (type, func) { reject_global(this); if (typeof type !== 'string' || typeof func !== 'function') { error(); } var b = this.___nodes___, i, node, on, ontype; for (i = 0; i < b.length; i += 1) { node = b[i]; // The change event does not propogate, so we must put the handler on the // instance. if (type === 'change') { ontype = 'on' + type; if (node[ontype] !== dom_event) { node[ontype] = dom_event; } } // Register an event. Put the function in a handler array, making one if it // doesn't yet exist for this type on this node. on = node['___ on ___']; if (!on) { on = {}; node['___ on ___'] = on; } if (owns(on, type)) { on[type].push(func); } else { on[type] = [func]; } } return this; }, protect: function () { reject_global(this); var b = this.___nodes___, i; for (i = 0; i < b.length; i += 1) { b[i]['___adsafe root___'] = '___adsafe root___'; } return this; }, q: function (text) { reject_global(this); star = this.___star___; return new Bunch(quest(parse_query(string_check(text), id), this.___nodes___)); }, remove: function () { reject_global(this); this.replace(); }, replace: function (replacement) { reject_global(this); var b = this.___nodes___, flag = false, i, j, newnode, node, parent, rep; if (b.length === 0) { return; } for (i = 0; i < b.length; i += 1) { purge_event_handlers(b[i]); } if (!replacement || replacement.length === 0 || (replacement.___nodes___ && replacement.___nodes___.length === 0)) { for (i = 0; i < b.length; i += 1) { node = b[i]; purge_event_handlers(node); if (node.parentNode) { node.parentNode.removeChild(node); } } } else if (replacement instanceof Array) { if (replacement.length !== b.length) { error('ADsafe: Array length: ' + b.length + '-' + value.length); } for (i = 0; i < b.length; i += 1) { node = b[i]; parent = node.parentNode; purge_event_handlers(node); if (parent) { rep = replacement[i].___nodes___; if (rep.length > 0) { newnode = rep[0]; parent.replaceChild(newnode, node); for (j = 1; j < rep.length; j += 1) { node = newnode; newnode = rep[j]; parent.insertBefore(newnode, node.nextSibling); } } else { parent.removeChild(node); } } } } else { rep = replacement.___nodes___; for (i = 0; i < b.length; i += 1) { node = b[i]; purge_event_handlers(node); parent = node.parentNode; if (parent) { newnode = flag ? rep[0].cloneNode(true) : rep[0]; parent.replaceChild(newnode, node); for (j = 1; j < rep.length; j += 1) { node = newnode; newnode = flag ? rep[j].clone(true) : rep[j]; parent.insertBefore(newnode, node.nextSibling); } flag = true; } } } return this; }, select: function () { reject_global(this); var b = this.___nodes___; if (b.length < 1 || !allow_focus) { error(); } b[0].focus(); b[0].select(); return this; }, selection: function (string) { reject_global(this); string_check(string); var b = this.___nodes___, end, node, old, start, range; if (b.length === 1 && allow_focus) { node = b[0]; if (typeof node.selectionStart === 'number') { start = node.selectionStart; end = node.selectionEnd; old = node.value; node.value = old.slice(0, start) + string + old.slice(end); node.selectionStart = node.selectionEnd = start + string.length; node.focus(); } else { range = node.createTextRange(); range.expand('textedit'); if (range.inRange(the_range)) { the_range.select(); the_range.text = string; the_range.select(); } } } return this; }, style: function (name, value) { reject_global(this); if (reject_name(name)) { error("ADsafe style violation."); } if (value === undefined || /url/i.test(string_check(value))) { error(); } var b = this.___nodes___, i, node, v; if (value instanceof Array) { if (value.length !== b.length) { error('ADsafe: Array length: ' + b.length + '-' + value.length); } for (i = 0; i < b.length; i += 1) { node = b[i]; v = string_check(value[i]); if (/url/i.test(v)) { error(); } if (node.tagName) { if (name !== 'float') { node.style[name] = v; } else { node.style.cssFloat = node.style.styleFloat = v; } } } } else { v = string_check(value); if (/url/i.test(v)) { error(); } for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { if (name !== 'float') { node.style[name] = v; } else { node.style.cssFloat = node.style.styleFloat = v; } } } } return this; }, tag: function (tag, type, name) { reject_global(this); var node; if (typeof tag !== 'string') { error(); } if (makeableTagName[tag] !== true) { error('ADsafe: Bad tag: ' + tag); } node = document.createElement(tag); if (name) { node.autocomplete = 'off'; node.name = string_check(name); } if (type) { node.type = string_check(type); } return new Bunch([node]); }, text: function (text) { reject_global(this); var a, i; if (text instanceof Array) { a = []; for (i = 0; i < text.length; i += 1) { a[i] = document.createTextNode(string_check(text[i])); } return new Bunch(a); } return new Bunch([document.createTextNode(string_check(text))]); }, title: function (value) { reject_global(this); var b = this.___nodes___, i, node; if (value instanceof Array) { if (value.length !== b.length) { error('ADsafe: Array length: ' + b.length + '-' + value.length); } for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { node.title = string_check(value[i]); } } } else { string_check(value); for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { node.title = value; } } } return this; }, value: function (value) { reject_global(this); if (value === undefined) { error(); } var b = this.___nodes___, i, node; if (value instanceof Array && b.length === value.length) { for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { if (node.type !== 'password') { if (typeof node.value === 'string') { node.value = value[i]; } else { while (node.firstChild) { purge_event_handlers(node.firstChild); node.removeChild(node.firstChild); } node.appendChild(document.createTextNode( String(value[i]) )); } } } else if (node.nodeName === '#text') { node.nodeValue = String(value[i]); } } } else { value = String(value); for (i = 0; i < b.length; i += 1) { node = b[i]; if (node.tagName) { if (node.tagName !== 'BUTTON' && typeof node.value === 'string') { node.value = value; } else { while (node.firstChild) { purge_event_handlers(node.firstChild); node.removeChild(node.firstChild); } node.appendChild(document.createTextNode(value)); } } else if (node.nodeName === '#text') { node.nodeValue = value; } } } return this; } }; // Return an ADsafe dom object. dom = { append: function (bunch) { var b = bunch.___nodes___, i, n; for (i = 0; i < b.length; i += 1) { n = b[i]; if (typeof n === 'string' || typeof n === 'number') { n = document.createTextNode(String(n)); } root.appendChild(n); } return dom; }, combine: function (array) { if (!array || !array.length) { error('ADsafe: Bad combination.'); } var b = array[0].___nodes___, i; for (i = 0; i < array.length; i += 1) { b = b.concat(array[i].___nodes___); } return new Bunch(b); }, count: function () { return 1; }, ephemeral: function (bunch) { if (ephemeral) { ephemeral.remove(); } ephemeral = bunch; return dom; }, fragment: function () { return new Bunch([document.createDocumentFragment()]); }, prepend: function (bunch) { var b = bunch.___nodes___, i; for (i = 0; i < b.length; i += 1) { root.insertBefore(b[i], root.firstChild); } return dom; }, q: function (text) { star = false; var query = parse_query(text, id); if (typeof hunter[query[0].op] !== 'function') { error('ADsafe: Bad query: ' + query[0]); } return new Bunch(quest(query, [root])); }, remove: function () { purge_event_handlers(root); root.parent.removeElement(root); root = null; }, row: function (values) { var tr = document.createElement('tr'), td, i; for (i = 0; i < values.length; i += 1) { td = document.createElement('td'); td.appendChild(document.createTextNode(String(values[i]))); tr.appendChild(td); } return new Bunch([tr]); }, tag: function (tag, type, name) { var node; if (typeof tag !== 'string') { error(); } if (makeableTagName[tag] !== true) { error('ADsafe: Bad tag: ' + tag); } node = document.createElement(tag); if (name) { node.autocomplete = 'off'; node.name = name; } if (type) { node.type = type; } return new Bunch([node]); }, text: function (text) { var a, i; if (text instanceof Array) { a = []; for (i = 0; i < text.length; i += 1) { a[i] = document.createTextNode(string_check(text[i])); } return new Bunch(a); } return new Bunch([document.createTextNode(string_check(text))]); } }; if (typeof root.addEventListener === 'function') { root.addEventListener('focus', dom_event, true); root.addEventListener('blur', dom_event, true); root.addEventListener('mouseover', dom_event, true); root.addEventListener('mouseout', dom_event, true); root.addEventListener('mouseup', dom_event, true); root.addEventListener('mousedown', dom_event, true); root.addEventListener('mousemove', dom_event, true); root.addEventListener('click', dom_event, true); root.addEventListener('dblclick', dom_event, true); root.addEventListener('keypress', dom_event, true); } else { root.onfocusin = root.onfocusout = root.onmouseout = root.onmousedown = root.onmousemove = root.onmouseup = root.onmouseover = root.onclick = root.ondblclick = root.onkeypress = dom_event; } return [dom, Bunch.prototype]; } function F() {} // Return the ADSAFE object. return { create: function (o) { reject_global(o); if (Object.hasOwnProperty('create')) { return Object.create(o); } F.prototype = typeof o === 'object' && o ? o : Object.prototype; return new F(); }, // ADSAFE.get retrieves a value from an object. get: function (object, name) { reject_global(object); if (arguments.length === 2 && !reject_property(object, name)) { return object[name]; } error(); }, // ADSAFE.go allows a guest widget to get access to a wrapped dom node and // approved ADsafe libraries. It is passed an id and a function. The function // will be passed the wrapped dom node and an object containing the libraries. go: function (id, f) { var dom, fun, root, i, scripts; // If ADSAFE.id was called, the id better match. if (adsafe_id && adsafe_id !== id) { error(); } // Get the dom node for the widget's div container. root = document.getElementById(id); if (root.tagName !== 'DIV') { error(); } adsafe_id = null; // Delete the scripts held in the div. They have all run, so we don't need // them any more. If the div had no scripts, then something is wrong. // This provides some protection against mishaps due to weakness in the // document.getElementById function. scripts = root.getElementsByTagName('script'); i = scripts.length - 1; if (i < 0) { error(); } do { root.removeChild(scripts[i]); i -= 1; } while (i >= 0); root = make_root(root, id); dom = root[0]; // If the page has registered interceptors, call then. for (i = 0; i < interceptors.length; i += 1) { fun = interceptors[i]; if (typeof fun === 'function') { try { fun(id, dom, adsafe_lib, root[1]); } catch (e1) { ADSAFE.log(e1); } } } // Call the supplied function. try { f(dom, adsafe_lib); } catch (e2) { ADSAFE.log(e2); } root = null; adsafe_lib = null; }, // ADSAFE.has returns true if the object contains an own property with the // given name. has: function (object, name) { return owns(object, name); }, // ADSAFE.id allows a guest widget to indicate that it wants to load // ADsafe approved libraries. id: function (id) { // Calls to ADSAFE.id must be balanced with calls to ADSAFE.go. // Only one id can be active at a time. if (adsafe_id) { error(); } adsafe_id = id; adsafe_lib = {}; }, // ADSAFE.isArray returns true if the operand is an array. isArray: Array.isArray || function (value) { return Object.prototype.toString.apply(value) === '[object Array]'; }, // ADSAFE.keys returns an array of keys. keys: Object.keys || function (object) { var key, result = []; for (key in object) { if (owns(object, key)) { result.push(key); } } return result; }, // ADSAFE.later calls a function at a later time. later: function (func, timeout) { if (typeof func === 'function') { setTimeout(func, timeout || 0); } else { error(); } }, // ADSAFE.lib allows an approved ADsafe library to make itself available // to a widget. The library provides a name and a function. The result of // calling that function will be made available to the widget via the name. lib: function (name, f) { if (!adsafe_id || reject_name(name)) { error("ADsafe lib violation."); } adsafe_lib[name] = f(adsafe_lib); }, // ADSAFE.log is a debugging aid that spams text to the browser's log. // Overwrite this function to send log matter somewhere else. log: function log(s) { if (window.console) { console.log(s); /* Firebug */ } else if (typeof Debug === 'object') { Debug.writeln(s); /* IE */ } else if (typeof opera === 'opera') { opera.postError(s); /* Opera */ } }, // ADSAFE.remove deletes a value from an object. remove: function (object, name) { if (arguments.length === 2 && !reject_property(object, name)) { delete object[name]; return; } error(); }, // ADSAFE.set stores a value in an object. set: function (object, name, value) { reject_global(object); if (arguments.length === 3 && !reject_property(object, name)) { object[name] = value; return; } error(); }, // ADSAFE._intercept allows the page to register a function that will // see the widget's capabilities. _intercept: function (f) { interceptors.push(f); } }; }());