Class SecurityUtils

安全工具类

Index

Constructors

Methods

getCurrentDomainInfo getTargetDomainInfo generateAdaptiveAllowedOrigins validateOriginAdaptive validateOrigin validateMessageStructure isDevToolsMessage validateMessageStructureDetailed generateSignature validateSignature sanitizeMessage getSecureTargetOriginAdaptive getSecureTargetOrigin

Constructors

constructor

new SecurityUtils(): SecurityUtils
Returns SecurityUtils

Methods

`Static`getCurrentDomainInfo

getCurrentDomainInfo(): {
    origin: string;
    hostname: string;
    protocol: string;
    port: string;
    isLocalhost: boolean;
    isSecure: boolean;
    accessible: boolean;
}
获取当前页面的域名信息

Returns {
    origin: string;
    hostname: string;
    protocol: string;
    port: string;
    isLocalhost: boolean;
    isSecure: boolean;
    accessible: boolean;
}
当前域名信息
- Defined in src/SecurityUtils.ts:9

`Static`getTargetDomainInfo

getTargetDomainInfo(
    targetWindow: Window,
): {
    origin: string;
    hostname: string;
    protocol: string;
    port: string;
    isLocalhost: boolean;
    isSecure: boolean;
    accessible: boolean;
}
获取目标窗口的域名信息
Parameters
- targetWindow: Window
  目标窗口
Returns {
    origin: string;
    hostname: string;
    protocol: string;
    port: string;
    isLocalhost: boolean;
    isSecure: boolean;
    accessible: boolean;
}
目标域名信息
- Defined in src/SecurityUtils.ts:31

`Static`generateAdaptiveAllowedOrigins

generateAdaptiveAllowedOrigins(
    currentWindow: Window,
    targetWindow: Window,
    allowedOrigins?: string[],
): string[]
生成自适应的允许域名列表
Parameters
- currentWindow: Window
  当前窗口
- targetWindow: Window
  目标窗口
- allowedOrigins: string[] = []
  配置的允许域名列表
Returns string[]
自适应的允许域名列表
- Defined in src/SecurityUtils.ts:68

`Static`validateOriginAdaptive

validateOriginAdaptive(
    origin: string,
    currentWindow: Window,
    targetWindow: Window,
    strictMode?: boolean,
): boolean
验证消息来源是否安全（自适应策略）
Parameters
- origin: string
  消息来源
- currentWindow: Window
  当前窗口
- targetWindow: Window
  目标窗口
- strictMode: boolean = false
  是否启用严格模式
Returns boolean
是否安全
- Defined in src/SecurityUtils.ts:164

`Static`validateOrigin

validateOrigin(
    origin: string,
    allowedOrigins?: string[],
    strictMode?: boolean,
): boolean
验证消息来源是否安全
Parameters
- origin: string
  消息来源
- allowedOrigins: string[] = []
  允许的域名列表
- strictMode: boolean = false
  是否启用严格模式
Returns boolean
是否安全
- Defined in src/SecurityUtils.ts:191

`Static`validateMessageStructure

validateMessageStructure(message: any): boolean
验证消息结构是否合法
Parameters
- message: any
  消息对象
Returns boolean
是否合法
- Defined in src/SecurityUtils.ts:227

`Static`isDevToolsMessage

isDevToolsMessage(message: any): boolean
检测消息是否来自 devtools
Parameters
- message: any
  消息对象
Returns boolean
是否来自 devtools
- Defined in src/SecurityUtils.ts:275

`Static`validateMessageStructureDetailed

validateMessageStructureDetailed(
message: any,
): { valid: boolean; reason?: string; details?: any }
验证消息结构是否合法，并返回详细的验证结果
Parameters
- message: any
  消息对象
Returns { valid: boolean; reason?: string; details?: any }
验证结果对象
- Defined in src/SecurityUtils.ts:311

`Static`generateSignature

generateSignature(message: any, key: string): string
生成消息签名
Parameters
- message: any
  消息对象
- key: string
  签名密钥
Returns string
签名
- Defined in src/SecurityUtils.ts:402

`Static`validateSignature

validateSignature(message: any, key: string): boolean
验证消息签名
Parameters
- message: any
  消息对象
- key: string
  签名密钥
Returns boolean
是否有效
- Defined in src/SecurityUtils.ts:431

`Static`sanitizeMessage

sanitizeMessage(message: any): any
清理消息对象，移除敏感信息
Parameters
- message: any
  消息对象
Returns any
清理后的消息
- Defined in src/SecurityUtils.ts:445

`Static`getSecureTargetOriginAdaptive

getSecureTargetOriginAdaptive(
    targetWindow: Window,
    strictMode?: boolean,
    allowedOrigins?: string[],
): string
获取安全的 targetOrigin（自适应策略）
Parameters
- targetWindow: Window
  目标窗口
- strictMode: boolean = false
  是否启用严格模式
- allowedOrigins: string[] = []
  配置的允许域名列表
Returns string
安全的 targetOrigin
- Defined in src/SecurityUtils.ts:457

`Static`getSecureTargetOrigin

getSecureTargetOrigin(
    targetWindow: Window,
    allowedOrigins?: string[],
    strictMode?: boolean,
): string
获取安全的 targetOrigin
Parameters
- targetWindow: Window
  目标窗口
- allowedOrigins: string[] = []
  允许的域名列表
- strictMode: boolean = false
  是否启用严格模式
Returns string
安全的 targetOrigin
- Defined in src/SecurityUtils.ts:507

Class SecurityUtils

Index

Constructors

Methods

Constructors

constructor

Returns SecurityUtils

Methods

StaticgetCurrentDomainInfo

Returns { origin: string; hostname: string; protocol: string; port: string; isLocalhost: boolean; isSecure: boolean; accessible: boolean;}

StaticgetTargetDomainInfo

Parameters

Returns { origin: string; hostname: string; protocol: string; port: string; isLocalhost: boolean; isSecure: boolean; accessible: boolean;}

StaticgenerateAdaptiveAllowedOrigins

Parameters

Returns string[]

StaticvalidateOriginAdaptive

Parameters

Returns boolean

StaticvalidateOrigin

Parameters

Returns boolean

StaticvalidateMessageStructure

Parameters

Returns boolean

StaticisDevToolsMessage

Parameters

Returns boolean

StaticvalidateMessageStructureDetailed

Parameters

Returns { valid: boolean; reason?: string; details?: any }

StaticgenerateSignature

Parameters

Returns string

StaticvalidateSignature

Parameters

Returns boolean

StaticsanitizeMessage

Parameters

Returns any

StaticgetSecureTargetOriginAdaptive

Parameters

Returns string

StaticgetSecureTargetOrigin

Parameters

Returns string

Settings

On This Page

`Static`getCurrentDomainInfo

Returns {
origin: string;
hostname: string;
protocol: string;
port: string;
isLocalhost: boolean;
isSecure: boolean;
accessible: boolean;
}

`Static`getTargetDomainInfo

Returns {
origin: string;
hostname: string;
protocol: string;
port: string;
isLocalhost: boolean;
isSecure: boolean;
accessible: boolean;
}

`Static`generateAdaptiveAllowedOrigins

`Static`validateOriginAdaptive

`Static`validateOrigin

`Static`validateMessageStructure

`Static`isDevToolsMessage

`Static`validateMessageStructureDetailed

`Static`generateSignature

`Static`validateSignature

`Static`sanitizeMessage

`Static`getSecureTargetOriginAdaptive

`Static`getSecureTargetOrigin