/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

#include "mozilla/dom/CSPViolationData.h"

#include <utility>

#include "mozilla/Utf16.h"
#include "mozilla/dom/Element.h"
#include "mozilla/dom/nsCSPContext.h"
#include "nsCharTraits.h"
#include "nsContentUtils.h"

namespace mozilla::dom {

/* static */
const nsDependentSubstring CSPViolationData::MaybeTruncateSample(
    const nsAString& aSample) {
  uint32_t length = aSample.Length();
  uint32_t maybeTruncatedLength = nsCSPContext::ScriptSampleMaxLength();
  if (length > maybeTruncatedLength) {
    // Don't cut off right before a low surrogate. Just include it.
    // TODO(bug 1935996): Should we also count previous surrogate pairs as
    // single characters?
    if (mozilla::IsLowSurrogate(aSample[maybeTruncatedLength])) {
      maybeTruncatedLength++;
    }
  }
  return Substring(aSample, 0, maybeTruncatedLength);
}

static const nsString MaybeTruncateSampleWithEllipsis(
    const nsAString& aSample) {
  const nsDependentSubstring sample =
      CSPViolationData::MaybeTruncateSample(aSample);
  return sample.Length() < aSample.Length()
             ? sample + nsContentUtils::GetLocalizedEllipsis()
             : nsString(aSample);
}

CSPViolationData::CSPViolationData(uint32_t aViolatedPolicyIndex,
                                   Resource&& aResource,
                                   const CSPDirective aEffectiveDirective,
                                   const nsACString& aSourceFile,
                                   uint32_t aLineNumber, uint32_t aColumnNumber,
                                   Element* aElement, const nsAString& aSample,
                                   const nsACString& aHashSHA256)
    : mViolatedPolicyIndex{aViolatedPolicyIndex},
      mResource{std::move(aResource)},
      mEffectiveDirective{aEffectiveDirective},
      mSourceFile{aSourceFile},
      mLineNumber{aLineNumber},
      mColumnNumber{aColumnNumber},
      mElement{aElement},
      // For TrustedTypesSink/TrustedTypesPolicy, sample is already truncated
      // and formatted in ReportSinkTypeMismatch/PolicyCreationViolations.
      // TODO(bug 1935996): The specifications do not mention adding an
      // ellipsis.
      mSample{(BlockedContentSourceOrUnknown() ==
                   BlockedContentSource::TrustedTypesSink ||
               BlockedContentSourceOrUnknown() ==
                   BlockedContentSource::TrustedTypesPolicy)
                  ? nsString(aSample)
                  : MaybeTruncateSampleWithEllipsis(aSample)},
      mHashSHA256{aHashSHA256} {}

// Required for `mElement`, since its destructor requires a definition of
// `Element`.
CSPViolationData::~CSPViolationData() = default;

auto CSPViolationData::BlockedContentSourceOrUnknown() const
    -> BlockedContentSource {
  return mResource.is<CSPViolationData::BlockedContentSource>()
             ? mResource.as<CSPViolationData::BlockedContentSource>()
             : CSPViolationData::BlockedContentSource::Unknown;
}
}  // namespace mozilla::dom