אבטחת TypeScript: תבניות טיפוס לניקוי קלט עבור יישומים חזקים

            \nfunction escapeHtml(str: string): string {\n  const map: { [key: string]: string } = {\n    '&': '&',\n    '<': '<',\n    '>': '>',\n    "\"": '"',\n    "'": '''\n  };\n\n  return str.replace(/[&<>\"']/g, (m) => map[m]);\n}\n\nconst userInput: string = '';\nconst sanitizedInput: string = escapeHtml(userInput);\nconsole.log(sanitizedInput); // Output: <script>alert("XSS");</script>\n
            

              
                Copy
              
            
          

            \nfunction isValidEmail(email: string): boolean {\n  const emailRegex: RegExp = /^\\w-\\.]+@([\\w-]+\\.)+[\\w-]{2,4}$/;\n  return emailRegex.test(email);\n}\n\nconst email1: string = 'test@example.com';\nconst email2: string = 'invalid-email';\n\nconsole.log(isValidEmail(email1)); // Output: true\nconsole.log(isValidEmail(email2)); // Output: false\n
            

              
                Copy
              
            
          

            \ntype Email = string & { readonly __email: unique symbol };\n\nfunction createEmail(input: string): Email {\n  if (!isValidEmail(input)) {\n    throw new Error('Invalid email format');\n  }\n  return input as Email;\n}\n\ntry {\n  const validEmail: Email = createEmail('test@example.com');\n  console.log(validEmail); // Output: test@example.com (with type Email)\n\n  const invalidEmail = createEmail('invalid-email'); //Throws error\n} catch (error) {\n  console.error(error);\n}\n\n
            

              
                Copy
              
            
          

            \nfunction validateAge(age: number): number {\n  if (age < 0 || age > 120) {\n    throw new Error('Invalid age: Age must be between 0 and 120.');\n  }\n  return age;\n}\n\ntry {\n  const validAge: number = validateAge(30);\n  console.log(validAge); // Output: 30\n\n  const invalidAge: number = validateAge(150); // Throws error\n\n} catch (error) {\n  console.error(error);\n}\n\n
            

              
                Copy
              
            
          

            \nfunction isNumber(value: any): value is number {\n  return typeof value === 'number' && isFinite(value);\n}\n\nfunction processNumber(value: any): number {\n  if (!isNumber(value)) {\n    throw new Error('Invalid input: Input must be a number.');\n  }\n  return value;\n}\n\ntry {\n  const validNumber: number = processNumber(42);\n  console.log(validNumber); // Output: 42\n\n  const invalidNumber: number = processNumber('not a number'); // Throws error\n} catch (error) {\n  console.error(error);\n}\n
            

              
                Copy
              
            
          

            \nfunction isValidDate(dateString: string): boolean {\n  const dateRegex: RegExp = /^\\d{4}-\\d{2}-\\d{2}$/;\n  if (!dateRegex.test(dateString)) {\n    return false;\n  }\n\n  const date: Date = new Date(dateString);\n  return !isNaN(date.getTime());\n}\n\nfunction parseDate(dateString: string): Date {\n  if (!isValidDate(dateString)) {\n    throw new Error('Invalid date format: Date must be in YYYY-MM-DD format.');\n  }\n  return new Date(dateString);\n}\n\ntry {\n  const validDate: Date = parseDate('2023-10-27');\n  console.log(validDate); // Output: Fri Oct 27 2023 00:00:00 GMT+0000 (Coordinated Universal Time)\n\n  const invalidDate: Date = parseDate('2023/10/27'); // Throws error\n} catch (error) {\n  console.error(error);\n}\n
            

              
                Copy
              
            
          

            \nfunction isDateWithinRange(date: Date, startDate: Date, endDate: Date): boolean {\n  return date >= startDate && date <= endDate;\n}\n\nfunction validateDateRange(dateString: string, startDateString: string, endDateString: string): Date {\n  const date: Date = parseDate(dateString);\n  const startDate: Date = parseDate(startDateString);\n  const endDate: Date = parseDate(endDateString);\n\n  if (!isDateWithinRange(date, startDate, endDate)) {\n    throw new Error('Invalid date: Date must be between the start and end dates.');\n  }\n  return date;\n}\n\ntry {
  const validDate: Date = validateDateRange('2023-10-27', '2023-01-01', '2023-12-31');\n  console.log(validDate); // Output: Fri Oct 27 2023 00:00:00 GMT+0000 (Coordinated Universal Time)\n\n  const invalidDate: Date = validateDateRange('2024-01-01', '2023-01-01', '2023-12-31'); // Throws error\n} catch (error) {\n  console.error(error);\n}\n
            

              
                Copy
              
            
          

            \nfunction isStringArray(arr: any[]): arr is string[] {\n  return arr.every((item) => typeof item === 'string');\n}\n\nfunction processStringArray(arr: any[]): string[] {\n  if (!isStringArray(arr)) {\n    throw new Error('Invalid input: Array must contain only strings.');\n  }\n  return arr;\n}\n\ntry {\n  const validArray: string[] = processStringArray(['apple', 'banana', 'cherry']);\n  console.log(validArray); // Output: [ 'apple', 'banana', 'cherry' ]\n\n  const invalidArray: string[] = processStringArray(['apple', 123, 'cherry']); // Throws error\n} catch (error) {\n  console.error(error);\n}\n
            

              
                Copy
              
            
          

            \nfunction sanitizeStringArray(arr: string[]): string[] {\n  return arr.map(escapeHtml);\n}\n\nconst inputArray: string[] = ['', 'normal text'];\nconst sanitizedArray: string[] = sanitizeStringArray(inputArray);\nconsole.log(sanitizedArray);\n// Output: [ '<script>alert("XSS");</script>', 'normal text' ]\n
            

              
                Copy
              
            
          

            \ninterface User {\n  name: string;\n  age: number;\n  email: Email;\n}\n\nfunction validateUser(user: any): User {\n  if (typeof user.name !== 'string') {\n    throw new Error('Invalid user: Name must be a string.');\n  }\n  if (typeof user.age !== 'number') {\n    throw new Error('Invalid user: Age must be a number.');\n  }\n  if (typeof user.email !== 'string' || !isValidEmail(user.email)) {\n      throw new Error('Invalid user: Email must be a valid email address.');\n  }\n\n  return {\n    name: user.name,\n    age: user.age,\n    email: createEmail(user.email)\n  };\n}\n\ntry {\n  const validUser: User = validateUser({\n    name: 'John Doe',\n    age: 30,\n    email: 'john.doe@example.com',\n  });\n  console.log(validUser);\n  // Output: { name: 'John Doe', age: 30, email: [Email: john.doe@example.com] }\n\n  const invalidUser: User = validateUser({\n    name: 'John Doe',\n    age: '30',\n    email: 'invalid-email',\n  }); // Throws error\n} catch (error) {\n  console.error(error);\n}\n
            

              
                Copy
              
            
          

            \ninterface Product {\n  name: string;\n  description: string;\n  price: number;\n}\n\nfunction sanitizeProduct(product: Product): Product {\n  return {\n    name: escapeHtml(product.name),\n    description: escapeHtml(product.description),\n    price: product.price,\n  };\n}\n\nconst inputProduct: Product = {\n  name: '',\n  description: 'This is a product description with some HTML.',\n  price: 99.99,\n};\n\nconst sanitizedProduct: Product = sanitizeProduct(inputProduct);\nconsole.log(sanitizedProduct);\n// Output: { name: '<script>alert("XSS");</script>', description: 'This is a product description with some <b>HTML</b>.', price: 99.99 }\n
            

              
                Copy