/** * Copyright (c) 2013-present, Facebook, Inc. * All rights reserved. * * This source code is licensed under the BSD-style license found in the * LICENSE file in the root directory of this source tree. An additional grant * of patent rights can be found in the PATENTS file in the same directory. * * @providesModule getSafeBodyFromHTML * @format * */ 'use strict'; var UserAgent = require('fbjs/lib/UserAgent'); var invariant = require('fbjs/lib/invariant'); var isOldIE = UserAgent.isBrowser('IE <= 9'); // Provides a dom node that will not execute scripts // https://developer.mozilla.org/en-US/docs/Web/API/DOMImplementation.createHTMLDocument // https://developer.mozilla.org/en-US/Add-ons/Code_snippets/HTML_to_DOM function getSafeBodyFromHTML(html) { var doc; var root = null; // Provides a safe context if (!isOldIE && document.implementation && document.implementation.createHTMLDocument) { doc = document.implementation.createHTMLDocument('foo'); !doc.documentElement ? process.env.NODE_ENV !== 'production' ? invariant(false, 'Missing doc.documentElement') : invariant(false) : void 0; doc.documentElement.innerHTML = html; root = doc.getElementsByTagName('body')[0]; } return root; } module.exports = getSafeBodyFromHTML;