AST-Elementknoten-Bereinigung für Template-Injektionen im Compiler

import { compile } from 'vue/compiler-sfc';
 
function sanitizeAstNode(node) {
  if (node.type === 1) {
    node.props = node.props.filter(prop => {
      if (prop.type === 6 && prop.name.startsWith('on')) {
        return !/^on\w+/i.test(prop.name);
      }
      return true;
    });
    node.children.forEach(sanitizeAstNode);
  }
}
 
export function compileSecureTemplate(template) {
  return compile(template, {
    nodeTransforms: [
      (node) => {
        sanitizeAstNode(node);
      }
    ]
  });
}