Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

core(crawlable-anchors): ignore event listeners, validate url #13105

Merged
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions lighthouse-cli/test/fixtures/seo/seo-tester.html
Original file line number Diff line number Diff line change
Expand Up @@ -72,13 +72,13 @@ <h6>2</h6>
<!-- PASS(crawlable-anchors): Link with a relative path -->
<a href="/pass">Some link</a>

<!-- PASS(crawlable-anchors): Link with a click event listener -->
<!-- FAIL(crawlable-anchors): Link with a click event listener -->
<a class="some-link">Some link</a>
<script>
document.querySelector('.some-link').addEventListener('click', () => {});
</script>

<!-- PASS(crawlable-anchors): Link with an onclick which won't match the audit regex -->
<!-- FAIL(crawlable-anchors): Link with an onclick which won't match the audit regex -->
<a onclick="window.Location = '';">Some link</a>
</body>
</html>
Original file line number Diff line number Diff line change
Expand Up @@ -235,7 +235,12 @@ const passing = {
},
},
'crawlable-anchors': {
score: 1,
score: 0,
details: {
items: {
length: 2,
},
},
},
'link-text': {
score: 1,
Expand Down
22 changes: 10 additions & 12 deletions lighthouse-core/audits/seo/crawlable-anchors.js
Original file line number Diff line number Diff line change
Expand Up @@ -31,23 +31,20 @@ class CrawlableAnchors extends Audit {
title: str_(UIStrings.title),
failureTitle: str_(UIStrings.failureTitle),
description: str_(UIStrings.description),
requiredArtifacts: ['AnchorElements'],
requiredArtifacts: ['AnchorElements', 'URL'],
};
}

/**
* @param {LH.Artifacts} artifacts
* @return {LH.Audit.Product}
*/
static audit({AnchorElements: anchorElements}) {
static audit({AnchorElements: anchorElements, URL: url}) {
const failingAnchors = anchorElements.filter(({
rawHref,
listeners = [],
onclick = '',
name = '',
role = '',
}) => {
onclick = onclick.replace( /\s/g, '');
rawHref = rawHref.replace( /\s/g, '');
name = name.trim();
role = role.trim();
Expand All @@ -56,19 +53,20 @@ class CrawlableAnchors extends Audit {
// Ignore mailto links even if they use one of the failing patterns. See https://github.com/GoogleChrome/lighthouse/issues/11443#issuecomment-694898412
if (rawHref.startsWith('mailto:')) return;

const windowLocationRegExp = /window\.location=/;
const windowOpenRegExp = /window\.open\(/;
const javaScriptVoidRegExp = /javascript:void(\(|)0(\)|)/;

if (rawHref.startsWith('file:')) return true;
if (windowLocationRegExp.test(onclick)) return true;
if (windowOpenRegExp.test(onclick)) return true;

const hasClickHandler = listeners.some(({type}) => type === 'click');
if (hasClickHandler || name.length > 0) return;
if (name.length > 0) return;

if (rawHref === '') return true;
if (javaScriptVoidRegExp.test(rawHref)) return true;

// checking if rawHref is a valid
try {
new URL(rawHref, url.finalUrl);
} catch (e) {
return true;
}
});

/** @type {LH.Audit.Details.Table['headings']} */
Expand Down
53 changes: 17 additions & 36 deletions lighthouse-core/test/audits/seo/crawlable-anchors-test.js
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,9 @@ function runAudit({
role,
node,
}],
URL: {
finalUrl: 'http://example.com',
},
});

return score;
Expand All @@ -54,6 +57,8 @@ describe('SEO: Crawlable anchors audit', () => {
assert.equal(runAudit({
rawHref: '?query=string',
}), 1, 'relative link which specifies a query string');

assert.equal(runAudit({rawHref: 'ftp://'}), 0, 'invalid FTP links fails');
});

it('allows anchors which use a name attribute', () => {
Expand All @@ -71,27 +76,22 @@ describe('SEO: Crawlable anchors audit', () => {
});

it('handles anchor elements which use event listeners', () => {
const auditResultClickPresent = runAudit({
listeners: [{type: 'click'}],
const auditResultMixtureOfListeners = runAudit({
rawHref: '/validPath',
listeners: [{type: 'nope'}, {type: 'another'}, {type: 'click'}],
});
assert.equal(auditResultClickPresent, 1, 'presence of a click handler is a pass');
assert.equal(auditResultMixtureOfListeners, 1, 'valid href with any event listener is a pass');

const auditResultJavaScriptURI = runAudit({
const auditResultWithInvalidHref = runAudit({
rawHref: 'javascript:void(0)',
listeners: [{type: 'click'}],
listeners: [{type: 'nope'}, {type: 'another'}, {type: 'click'}],
});
const assertionMessage = 'hyperlink with a `javascript:` URI and a click handler';
assert.equal(auditResultJavaScriptURI, 1, assertionMessage);
assert.equal(auditResultWithInvalidHref, 0, 'invalid href with any event listener is a faile');

const auditResultNonClickListener = runAudit({
listeners: [{type: 'nope'}],
const auditResultNoListener = runAudit({
rawHref: '/validPath',
});
assert.equal(auditResultNonClickListener, 0, 'no click event is a fail');

const auditResultMixtureOfListeners = runAudit({
listeners: [{type: 'nope'}, {type: 'another'}, {type: 'click'}],
});
assert.equal(auditResultMixtureOfListeners, 1, 'at least one click listener is a pass');
assert.equal(auditResultNoListener, 1, 'valid href with no event listener is a pass');
});

it('disallows uncrawlable anchors', () => {
Expand Down Expand Up @@ -119,44 +119,25 @@ describe('SEO: Crawlable anchors audit', () => {
const auditResult = runAudit({rawHref: javaScriptVoidVariation});
assert.equal(auditResult, 0, `'${javaScriptVoidVariation}' should fail the audit`);
}

const expectedAuditPasses = [
'javascript:void',
'javascript:void()',
'javascript:0',
];

for (const javaScriptVoidVariation of expectedAuditPasses) {
const auditResult = runAudit({rawHref: javaScriptVoidVariation});
assert.equal(auditResult, 1, `'${javaScriptVoidVariation}' should pass the audit`);
}
});

it('handles window.location and window.open assignments in an onclick attribute', () => {
const expectedAuditFailures = [
const expectedAuditPasses = [
'window.location=',
'window.location =',
'window.open()',
`window.open('')`,
'window.open(`http://example.com`)',
'window.open ( )',
`window.open('foo', 'name', 'resizable)`,
];

for (const onclickVariation of expectedAuditFailures) {
const auditResult = runAudit({onclick: onclickVariation});
assert.equal(auditResult, 0, `'${onclickVariation}' should fail the audit`);
}

const expectedAuditPasses = [
'windowAlocation',
'window.location.href',
'window.Location =',
'windowLopen()',
];

for (const onclickVariation of expectedAuditPasses) {
const auditResult = runAudit({onclick: onclickVariation});
const auditResult = runAudit({rawHref: '/validPath', onclick: onclickVariation});
assert.equal(auditResult, 1, `'${onclickVariation}' should pass the audit`);
}
});
Expand Down