Function transform

packages/remix/src/config/vite.ts:118–172

(code, id)

    },

    transform(code, id) {
      if (!routeManifestJson) {
        return null;
      }

      const isClientEntry =
        /entry[.-]client\.[jt]sx?$/.test(id) ||
        // Also handle Remix's default entry.client location
        id.includes('/entry.client.') ||
        id.includes('/entry-client.');

      const isServerEntry =
        /entry[.-]server\.[jt]sx?$/.test(id) ||
        // Also handle Remix's default entry.server location
        id.includes('/entry.server.') ||
        id.includes('/entry-server.') ||
        // Also handle Hydrogen/Cloudflare Workers server files
        /(^|\/)server\.[jt]sx?$/.test(id);

      if (isClientEntry) {
        // XSS Prevention: Escape HTML-dangerous sequences in addition to JSON escaping
        const safeJsonValue = escapeJsonForHtml(JSON.stringify(routeManifestJson));
        const injectedCode = `
// Sentry Remix Route Manifest - Auto-injected
if (typeof window !== 'undefined') {
  window.${MANIFEST_GLOBAL_KEY} = window.${MANIFEST_GLOBAL_KEY} || ${safeJsonValue};
}
${code}`;

        return {
          code: injectedCode,
          map: null,
        };
      }

      if (isServerEntry) {
        // Inject into server entry for server-side transaction naming
        // Use globalThis for Cloudflare Workers/Hydrogen compatibility
        // XSS Prevention: Escape HTML-dangerous sequences (important if server renders this)
        const safeJsonValue = escapeJsonForHtml(JSON.stringify(routeManifestJson));
        const injectedCode = `
// Sentry Remix Route Manifest - Auto-injected
if (typeof globalThis !== 'undefined') {
  globalThis.${MANIFEST_GLOBAL_KEY} = globalThis.${MANIFEST_GLOBAL_KEY} || ${safeJsonValue};
}
${code}`;

        return {
          code: injectedCode,
          map: null,
        };
      }

      return null;
    },
  };
}