refactor(vscode-ide-companion): 重构 WebViewProvider 组件

2025-12-21 01:07:46 +00:00 · 2025-11-20 11:37:28 +08:00
parent dcc10eb0a9
commit 06a8580361
8 changed files with 1209 additions and 883 deletions
--- a/packages/vscode-ide-companion/src/webview/WebViewContent.ts
+++ b/packages/vscode-ide-companion/src/webview/WebViewContent.ts
@@ -0,0 +1,50 @@
+/**
+ * @license
+ * Copyright 2025 Qwen Team
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import * as vscode from 'vscode';
+import { escapeHtml } from '../utils/webviewUtils.js';
+
+/**
+ * WebView HTML 内容生成器
+ * 负责生成 WebView 的 HTML 内容
+ */
+export class WebViewContent {
+  /**
+   * 生成 WebView 的 HTML 内容
+   * @param panel WebView Panel
+   * @param extensionUri 扩展的 URI
+   * @returns HTML 字符串
+   */
+  static generate(
+    panel: vscode.WebviewPanel,
+    extensionUri: vscode.Uri,
+  ): string {
+    const scriptUri = panel.webview.asWebviewUri(
+      vscode.Uri.joinPath(extensionUri, 'dist', 'webview.js'),
+    );
+
+    // Convert extension URI for webview access - this allows frontend to construct resource paths
+    const extensionUriForWebview = panel.webview.asWebviewUri(extensionUri);
+
+    // 对 URI 进行 HTML 转义以防止潜在的注入攻击
+    const safeExtensionUri = escapeHtml(extensionUriForWebview.toString());
+    const safeScriptUri = escapeHtml(scriptUri.toString());
+
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <meta http-equiv="Content-Security-Policy" content="default-src 'none'; img-src ${panel.webview.cspSource}; script-src ${panel.webview.cspSource}; style-src ${panel.webview.cspSource} 'unsafe-inline';">
+  <title>Qwen Code Chat</title>
+</head>
+<body data-extension-uri="${safeExtensionUri}">
+  <div id="root"></div>
+  <script src="${safeScriptUri}"></script>
+</body>
+</html>`;
+  }
+}