feat: implement event attribute facade to mask internal ZP backing attributes in NamedNodeMap

Author: lemon-mint

test/e2e/proxy.test.js

@@ -3170,6 +3170,7 @@ test('browser traffic uses internal SOCKS5 mode and covers proxied runtime integ
     const button = document.createElement('button');
     button.setAttribute('onclick', 'window.__eventHandlerLocation = location.href');
     document.body.appendChild(button);
+    out.eventHandlerExpectedLocation = __zp_get(globalThis, 'location').href;
     button.click();
     out.eventHandlerLocation = window.__eventHandlerLocation || '';
     button.remove();
@@ -3209,7 +3210,7 @@ test('browser traffic uses internal SOCKS5 mode and covers proxied runtime integ
   assert.notEqual(escapeMatrix.dataWorker, 'ran');
   assert.ok(
     escapeMatrix.eventHandlerLocation === '' ||
-      escapeMatrix.eventHandlerLocation === `http://${targetHost}:${targetPort}/#compound-tail`,
+      escapeMatrix.eventHandlerLocation === escapeMatrix.eventHandlerExpectedLocation,
     `event handler location: ${escapeMatrix.eventHandlerLocation}`,
   );
   assert.equal(

test/js/membrane-invariants.test.js

@@ -348,6 +348,70 @@ test('membrane: hiddenGlobalKey predicate classifies ZP globals vs app globals',
   );
 });
 
+function loadFilteredNamedNodeMap() {
+  const src = readRuntime();
+  const code = [
+    'function attrLocalName(key) { const s = String(key || "").toLowerCase(); const i = s.indexOf(":"); return i >= 0 ? s.slice(i + 1) : s; }',
+    extractFunction(src, 'eventAttrName'),
+    extractFunction(src, 'eventDataAttrName'),
+    extractFunction(src, 'eventAttributeFacade'),
+    extractFunction(src, 'filteredNamedNodeMap'),
+    extractFunction(src, 'filteredCollection'),
+    'function isZPAttrName(name) { return String(name || "").toLowerCase().startsWith("data-zp-"); }',
+    'function setEventAttribute(owner, name, value) { owner.lastEventSet = { name, value }; }',
+    'function setNamedAttributeNode() { return null; }',
+    'function removeNamedAttributeNode() { return null; }',
+    'module.exports = { filteredNamedNodeMap };',
+  ].join('\n\n');
+  const sandbox = { module: { exports: {} }, Object, Proxy, String, Number, Symbol };
+  vm.createContext(sandbox);
+  vm.runInContext(code, sandbox);
+  return sandbox.module.exports.filteredNamedNodeMap;
+}
+
+test('membrane: NamedNodeMap named lookup exposes masked event attrs without ZP backing attrs', () => {
+  const filteredNamedNodeMap = loadFilteredNamedNodeMap();
+  const owner = {};
+  const backing = { name: 'data-zp-event-onsubmit', value: 'rewritten-internal-code' };
+  const href = { name: 'href', value: '/home' };
+  const raw = [backing, href];
+  raw.length = 2;
+  raw.getNamedItem = (name) =>
+    raw.find((attr) => String(attr.name).toLowerCase() === String(name).toLowerCase()) || null;
+
+  const filtered = filteredNamedNodeMap(raw, owner);
+  const eventAttr = filtered.onsubmit;
+
+  assert.equal(filtered.length, 1, 'hidden ZP backing attr must not count as visible');
+  assert.equal(filtered.href, href, 'ordinary named attributes must remain reachable');
+  assert.equal(
+    filtered['data-zp-event-onsubmit'],
+    undefined,
+    'ZP event backing attr must stay hidden',
+  );
+  assert.equal(
+    filtered.getNamedItem('onsubmit').name,
+    'onsubmit',
+    'property and getNamedItem agree',
+  );
+  assert.equal(eventAttr.name, 'onsubmit');
+  assert.equal(
+    eventAttr.value,
+    '',
+    'rewritten event handler source must not leak through Attr.value',
+  );
+  assert.equal(eventAttr.ownerElement, owner);
+  assert.equal(
+    'onsubmit' in filtered,
+    true,
+    'named event attr must participate in property existence',
+  );
+
+  eventAttr.value = 'next-source';
+  assert.equal(owner.lastEventSet.name, 'onsubmit');
+  assert.equal(owner.lastEventSet.value, 'next-source');
+});
+
 // DOM-enumeration filter: selectorTargetsZP is the pure gate that makes
 // querySelector / querySelectorAll / matches / closest refuse ZP-artifact
 // selectors. Extract and exercise it directly.

test/js/static-policy.test.js

@@ -287,7 +287,10 @@ test('runtime keeps JavaScript rewriting fail-closed and canonicalizes module UR
   const start = rt.indexOf('function scriptProxyPath(target, kind)');
   const end = rt.indexOf('function setScriptSource', start);
   const body = rt.slice(start, end);
-  assert.ok(body.includes("if (kind !== 'module')"), 'module proxy URLs must keep referrer data out');
+  assert.ok(
+    body.includes("if (kind !== 'module')"),
+    'module proxy URLs must keep referrer data out',
+  );
   assert.ok(
     body.indexOf("params.set('tab'") < body.indexOf("if (kind !== 'module')"),
     'runtime tab token must be part of module graph identity',
@@ -304,12 +307,16 @@ test('runtime keeps JavaScript rewriting fail-closed and canonicalizes module UR
 
 test('filtered DOM collections expose numeric indexes to native slice', () => {
   const rt = readRuntimeSource();
-  assert.ok(
-    rt.includes("has(_target, prop) { return prop === 'length' || (/^(?:0|[1-9]\\d*)$/.test(String(prop)) && Number(prop) < length()); }"),
+  assert.match(
+    rt,
+    /has\(_target, prop\) \{[\s\S]*Number\(prop\) < length\(\)[\s\S]*\}/,
     'filtered collection HasProperty must recognize all numeric indexes',
   );
+  assert.ok(rt.includes("prop === 'length'"));
   assert.equal(
-    rt.includes("has(_target, prop) { return prop === 'length' || (/^(?:0|[1-9]\\\\d*)$/.test(String(prop)) && Number(prop) < length()); }"),
+    rt.includes(
+      "has(_target, prop) { return prop === 'length' || (/^(?:0|[1-9]\\\\d*)$/.test(String(prop)) && Number(prop) < length()); }",
+    ),
     false,
     'filtered collection HasProperty must not match a literal backslash-d',
   );

web/runtime-prelude.mjs

@@ -2066,6 +2066,27 @@ import { createWorkerFacades } from './runtime/workers/facades.mjs';
     if (owner) enforceAttributeNodeOwner(owner, attr);
     return ret;
   }
+  function eventAttributeFacade(owner, name, backing) {
+    return new Proxy(backing || {}, {
+      get(target, prop) {
+        if (prop === 'name' || prop === 'nodeName' || prop === 'localName') return name;
+        if (prop === 'value' || prop === 'nodeValue' || prop === 'textContent') return '';
+        if (prop === 'ownerElement') return owner || null;
+        if (prop === 'namespaceURI' || prop === 'prefix') return null;
+        if (prop === 'specified') return true;
+        const value = target && target[prop];
+        return typeof value === 'function' ? value.bind(target) : value;
+      },
+      set(target, prop, value) {
+        if (prop === 'value' || prop === 'nodeValue' || prop === 'textContent') {
+          if (owner) setEventAttribute(owner, name, value);
+          return true;
+        }
+        target[prop] = value;
+        return true;
+      }
+    });
+  }
   function removeNamedAttributeNode(owner, raw, name, ns) {
     const local = String(name || '').toLowerCase();
     if (isZPAttrName(local)) return null;
@@ -2112,6 +2133,10 @@ import { createWorkerFacades } from './runtime/workers/facades.mjs';
       const lower = String(name || '').toLowerCase();
       if (isZPAttrName(lower)) return null;
       for (let i = 0; raw && i < raw.length; i++) if (raw[i] && String(raw[i].name).toLowerCase() === lower && visible(raw[i])) return raw[i];
+      if (eventAttrName(lower)) {
+        const backed = raw && raw.getNamedItem ? raw.getNamedItem(eventDataAttrName(lower)) : null;
+        if (backed) return eventAttributeFacade(owner, lower, backed);
+      }
       return null;
     };
     const findNamedNS = (ns, name) => {
@@ -2164,10 +2189,17 @@ import { createWorkerFacades } from './runtime/workers/facades.mjs';
           const index = Number(prop);
           return index < length() ? nth(index) : undefined;
         }
+        if (typeof prop === 'string' && methods && typeof methods.getNamedItem === 'function') {
+          const named = methods.getNamedItem(prop);
+          if (named) return named;
+        }
         const value = raw && raw[prop];
         return typeof value === 'function' ? value.bind(raw) : value;
       },
-      has(_target, prop) { return prop === 'length' || (/^(?:0|[1-9]\d*)$/.test(String(prop)) && Number(prop) < length()); }
+      has(_target, prop) {
+        if (prop === 'length' || (/^(?:0|[1-9]\d*)$/.test(String(prop)) && Number(prop) < length())) return true;
+        return typeof prop === 'string' && methods && typeof methods.getNamedItem === 'function' && !!methods.getNamedItem(prop);
+      }
     });
   }
   function sanitizeSerializedHTML(html) {