fix: Avoid elements created through the create element ns api from escaping the sandbox

packages/browser-vm/src/dynamicNode/index.ts

@@ -114,7 +114,8 @@ export function makeElInjector(sandboxConfig: SandboxOptions) {
 
   if (typeof window.Element === 'function') {
     // iframe can read html container this can't point to proxyDocument has Illegal invocation error
-    if (sandboxConfig.fixBaseUrl) safeWrapper(() => handleOwnerDocument());
+    if (sandboxConfig.fixBaseUrl || sandboxConfig.fixOwnerDocument)
+      safeWrapper(() => handleOwnerDocument());
     const rewrite = (
       methods: Array<string>,
       builder: typeof injector | typeof injectorRemoveChild,

packages/browser-vm/src/pluginify.ts

@@ -130,11 +130,13 @@ function createOptions(Garfish: interfaces.Garfish) {
           fixStaticResourceBaseUrl: Boolean(
             appInfo.sandbox?.fixStaticResourceBaseUrl,
           ),
+          fixOwnerDocument: Boolean(appInfo.sandbox?.fixOwnerDocument),
           disableWith: Boolean(appInfo.sandbox?.disableWith),
           disableElementtiming: Boolean(appInfo.sandbox?.disableElementtiming),
           strictIsolation: Boolean(appInfo.sandbox?.strictIsolation),
           // 缓存模式，不收集副作用
-          disableCollect: appInfo.cache === undefined ? true : Boolean(appInfo.cache),
+          disableCollect:
+            appInfo.cache === undefined ? true : Boolean(appInfo.cache),
           el: () => appInstance.htmlNode,
           styleScopeId: () => appInstance.appContainer.id,
           protectVariable: () => appInfo.protectVariable || [],

packages/browser-vm/src/proxyInterceptor/document.ts

@@ -65,6 +65,12 @@ export function createGetter(sandbox: Sandbox) {
           const el = value.call(document, tagName, options);
           return setSandboxRef(el);
         };
+      }
+      if (p === 'createElementNS') {
+        return function (...args) {
+          const el = value.call(document, ...args);
+          return setSandboxRef(el);
+        };
       } else if (p === 'createTextNode') {
         return function (data) {
           const el = value.call(document, data);

packages/browser-vm/src/types.ts

@@ -22,6 +22,7 @@ export interface SandboxOptions {
   namespace: string;
   baseUrl?: string;
   fixBaseUrl?: boolean;
+  fixOwnerDocument?: boolean;
   fixStaticResourceBaseUrl?: boolean;
   disableWith?: boolean;
   strictIsolation?: boolean;

packages/core/src/config.ts

@@ -114,6 +114,7 @@ export const createDefaultOptions = () => {
       disableWith: false,
       strictIsolation: false,
       disableElementtiming: false,
+      fixOwnerDocument: false,
     },
     // global hooks
     beforeLoad: () => {},

packages/core/src/interface.ts

@@ -81,6 +81,7 @@ export namespace interfaces {
     disableWith?: boolean;
     strictIsolation?: boolean;
     disableElementtiming?: boolean;
+    fixOwnerDocument?: boolean;
   }
 
   export interface Config {