webnn-graph 0.3.0

Simple DSL for WebNN graphs
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

use crate::ast::GraphJson;

const HTML_TEMPLATE: &str = include_str!("html_template.html");

/// Emit a standalone HTML visualizer for the graph
pub fn emit_html(graph: &GraphJson) -> String {
    let graph_json = serde_json::to_string(graph).unwrap();

    // Escape closing script tags to prevent injection
    let escaped = graph_json.replace("</script>", "<\\/script>");

    HTML_TEMPLATE.replace("{{GRAPH_DATA}}", &escaped)
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::ast::{new_graph_json, to_dimension_vector, DataType, OperandDesc};

    #[test]
    fn test_emit_html_basic_graph() {
        let mut g = new_graph_json();
        g.name = Some("test".to_string());
        g.inputs.insert(
            "x".to_string(),
            OperandDesc {
                data_type: DataType::Float32,
                shape: to_dimension_vector(&[1, 10]),
            },
        );

        let html = emit_html(&g);

        assert!(html.contains("<!DOCTYPE html>"));
        assert!(html.contains("WebNN Graph Visualizer"));
        assert!(html.contains("const GRAPH_DATA = "));
        assert!(html.contains("\"name\":\"test\""));
    }

    #[test]
    fn test_html_contains_dagre() {
        let g = new_graph_json();
        let html = emit_html(&g);
        assert!(html.contains("dagre"));
    }

    #[test]
    fn test_json_escaping() {
        let mut g = new_graph_json();
        g.name = Some("test</script><script>alert('xss')".to_string());
        let html = emit_html(&g);

        // Should not contain unescaped closing script tag
        assert!(!html.contains("</script><script>alert"));
        // Should contain escaped version
        assert!(html.contains("<\\/script>"));
    }
}