@birdapi/velinstyle 0.8.0 → 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.de.md +135 -246
- package/README.md +134 -245
- package/cli/blueprints/onboarding.html +2 -2
- package/cli/cli-manifest.json +97 -0
- package/cli/docgen/extract-a11y.js +89 -0
- package/cli/docgen/extract-attributes.js +95 -0
- package/cli/docgen/extract-cli.js +50 -0
- package/cli/docgen/extract-components.js +175 -0
- package/cli/docgen/extract-meta.js +32 -0
- package/cli/docgen/extract-rules.js +76 -0
- package/cli/docgen/extract-tokens.js +79 -0
- package/cli/docgen/extract-utilities.js +75 -0
- package/cli/docgen/markdown.js +43 -0
- package/cli/docs-generate.js +196 -0
- package/cli/index.js +121 -5
- package/cli/meta.js +97 -0
- package/cli/perf-audit.js +174 -0
- package/cli/pii-scanner.js +134 -0
- package/cli/scanner-rules-data.js +62 -0
- package/cli/scanner.js +68 -1
- package/cli/search-index.js +163 -0
- package/cli/tokens-build.js +21 -1
- package/cli/tokens-validate.js +69 -0
- package/components/a11y-entry.js +42 -0
- package/components/a11y-utils.js +71 -0
- package/components/focus-manager.js +45 -8
- package/components/index.js +22 -12
- package/components/runtime/component-loaders.js +43 -0
- package/components/runtime/index.js +77 -0
- package/components/runtime-entry.js +10 -0
- package/components/sanitize.js +135 -54
- package/components/velin-accordion.js +12 -0
- package/components/velin-bottom-nav.js +19 -0
- package/components/velin-carousel.js +2 -2
- package/components/velin-code-block.js +142 -0
- package/components/velin-command.js +15 -0
- package/components/velin-copy.js +18 -5
- package/components/velin-counter.js +3 -0
- package/components/velin-dialog.js +9 -1
- package/components/velin-email.js +94 -0
- package/components/velin-icon.js +65 -22
- package/components/velin-lightbox.js +8 -3
- package/components/velin-live-dot.js +5 -0
- package/components/velin-modal.js +6 -3
- package/components/velin-popover.js +34 -2
- package/components/velin-reveal.js +7 -65
- package/components/velin-scroll-top.js +1 -1
- package/components/velin-search.js +267 -0
- package/components/velin-secure-field.js +99 -0
- package/components/velin-sparkline.js +27 -7
- package/components/{velin-stepper-wc.js → velin-stepper.js} +37 -8
- package/components/velin-theme-toggle.js +12 -5
- package/components/velin-toast.js +4 -0
- package/components/{velin-tooltip-wc.js → velin-tooltip.js} +22 -3
- package/core/a11y/component-contracts.json +221 -0
- package/core/attributes/index.js +6 -0
- package/core/attributes/registry.js +268 -0
- package/core/highlight/highlight.js +114 -0
- package/core/highlight/index.js +29 -0
- package/core/highlight/languages/_utils.js +52 -0
- package/core/highlight/languages/blade.js +16 -0
- package/core/highlight/languages/css.js +26 -0
- package/core/highlight/languages/html.js +17 -0
- package/core/highlight/languages/js.js +58 -0
- package/core/highlight/languages/json.js +14 -0
- package/core/highlight/languages/markdown.js +16 -0
- package/core/highlight/languages/php.js +39 -0
- package/core/highlight/languages/plain.js +7 -0
- package/core/highlight/languages/shell.js +33 -0
- package/core/highlight/languages/sql.js +20 -0
- package/core/highlight/languages/typescript.js +28 -0
- package/core/highlight/observe.js +53 -0
- package/core/highlight/registry.js +107 -0
- package/core/highlight/render.js +35 -0
- package/core/highlight/types.js +28 -0
- package/core/meta/build.js +293 -0
- package/core/meta/index.js +17 -0
- package/core/meta/schema.js +49 -0
- package/core/motion/effects.js +54 -0
- package/core/motion/index.js +76 -0
- package/core/motion/scheduler.js +72 -0
- package/core/motion/scroll.js +32 -0
- package/core/motion/stagger.js +24 -0
- package/core/search/docs-url.js +96 -0
- package/core/search/engine.js +139 -0
- package/core/search/highlight.js +48 -0
- package/core/search/index.js +126 -0
- package/core/search/providers.js +36 -0
- package/core/search/types.js +61 -0
- package/core/search/worker-client.js +56 -0
- package/core/search/worker.js +20 -0
- package/dist/chunks/a11y-utils-IRC7LOPF.js +16 -0
- package/dist/chunks/attributes-3BZLI7XF.js +364 -0
- package/dist/chunks/attributes-4N5JP4CG.js +364 -0
- package/dist/chunks/attributes-5Q2WXGRC.js +374 -0
- package/dist/chunks/attributes-AIR7SVLK.js +364 -0
- package/dist/chunks/attributes-BGRN5XZO.js +364 -0
- package/dist/chunks/attributes-BVSQAYLR.js +364 -0
- package/dist/chunks/attributes-CDYFUY7Y.js +364 -0
- package/dist/chunks/attributes-JMYJZBPE.js +364 -0
- package/dist/chunks/attributes-R5JY3X4O.js +374 -0
- package/dist/chunks/attributes-STYCS3O5.js +391 -0
- package/dist/chunks/attributes-TNSPQTHX.js +374 -0
- package/dist/chunks/attributes-TPANLMLF.js +391 -0
- package/dist/chunks/blade-LIQLVKZQ.js +19 -0
- package/dist/chunks/browser-MRKYZPEH.js +1149 -0
- package/dist/chunks/chunk-2354NEBP.js +109 -0
- package/dist/chunks/chunk-2VNA7G7S.js +109 -0
- package/dist/chunks/chunk-42VVPW6N.js +132 -0
- package/dist/chunks/chunk-7FFAMRFV.js +44 -0
- package/dist/chunks/chunk-7MCGPHVC.js +69 -0
- package/dist/chunks/chunk-AQLRJSGG.js +109 -0
- package/dist/chunks/chunk-EWPSDMQT.js +109 -0
- package/dist/chunks/chunk-F7OLHTGX.js +22 -0
- package/dist/chunks/chunk-J472ERN2.js +242 -0
- package/dist/chunks/chunk-LA7264K4.js +85 -0
- package/dist/chunks/chunk-M5CHQVP6.js +61 -0
- package/dist/chunks/chunk-MKZP2TBH.js +89 -0
- package/dist/chunks/chunk-QTJJ3DPO.js +109 -0
- package/dist/chunks/chunk-RDE3QE7Z.js +89 -0
- package/dist/chunks/chunk-RSMRR27R.js +109 -0
- package/dist/chunks/chunk-RZQVWFHW.js +109 -0
- package/dist/chunks/chunk-SRL6EWHP.js +109 -0
- package/dist/chunks/chunk-U4XHMZ7D.js +109 -0
- package/dist/chunks/chunk-V5YIUA6G.js +109 -0
- package/dist/chunks/chunk-XIET2VSZ.js +109 -0
- package/dist/chunks/chunk-XYLJ2GCB.js +205 -0
- package/dist/chunks/chunk-Z4JYQ2XX.js +51 -0
- package/dist/chunks/chunk-ZPSPKUYD.js +109 -0
- package/dist/chunks/css-MQ5YU77P.js +28 -0
- package/dist/chunks/highlight-GJHHV4KM.js +37 -0
- package/dist/chunks/highlight-XTHRKBA3.js +37 -0
- package/dist/chunks/html-ZODC4DLQ.js +20 -0
- package/dist/chunks/js-MNSNYTJU.js +7 -0
- package/dist/chunks/json-VEM2HFH3.js +17 -0
- package/dist/chunks/markdown-E7OPGS3S.js +19 -0
- package/dist/chunks/php-MLL7T3LT.js +41 -0
- package/dist/chunks/plain-LJJDC5TN.js +8 -0
- package/dist/chunks/runtime-entry.js +14 -0
- package/dist/chunks/shell-QTRK4U4E.js +35 -0
- package/dist/chunks/sql-PPWLHGJ2.js +23 -0
- package/dist/chunks/typescript-JT3CCYWL.js +30 -0
- package/dist/chunks/velin-accordion-FBIPAEXG.js +105 -0
- package/dist/chunks/velin-accordion-QAQO7BI7.js +117 -0
- package/dist/chunks/velin-announcer-PVTXXCWR.js +33 -0
- package/dist/chunks/velin-bottom-nav-2N2TYWOF.js +86 -0
- package/dist/chunks/velin-bottom-nav-7GEMPIM6.js +86 -0
- package/dist/chunks/velin-bottom-nav-CTU6FFZV.js +101 -0
- package/dist/chunks/velin-bottom-nav-N3DFQR66.js +86 -0
- package/dist/chunks/velin-carousel-Y5VCOABZ.js +213 -0
- package/dist/chunks/velin-carousel-ZTBANFQQ.js +213 -0
- package/dist/chunks/velin-code-block-ASUBTAQV.js +119 -0
- package/dist/chunks/velin-code-block-CIAURDRJ.js +132 -0
- package/dist/chunks/velin-code-block-TSUKPY4C.js +123 -0
- package/dist/chunks/velin-code-block-Y6CM726Q.js +119 -0
- package/dist/chunks/velin-collapse-5XYBUIID.js +80 -0
- package/dist/chunks/velin-combobox-2KDTCQ7N.js +155 -0
- package/dist/chunks/velin-combobox-NXS4QB4R.js +155 -0
- package/dist/chunks/velin-combobox-UGA56HP3.js +155 -0
- package/dist/chunks/velin-command-CKDNO4BW.js +148 -0
- package/dist/chunks/velin-command-M7RNHUPR.js +136 -0
- package/dist/chunks/velin-command-ONKO2A3J.js +136 -0
- package/dist/chunks/velin-command-TMLSRGIU.js +136 -0
- package/dist/chunks/velin-copy-G2TZ5YBB.js +81 -0
- package/dist/chunks/velin-copy-NYDBOKXT.js +81 -0
- package/dist/chunks/velin-copy-T5KDTDXP.js +81 -0
- package/dist/chunks/velin-countdown-4ZVDGK4R.js +101 -0
- package/dist/chunks/velin-countdown-5XSTN3BH.js +101 -0
- package/dist/chunks/velin-countdown-7AIY66CU.js +101 -0
- package/dist/chunks/velin-counter-ISCTEAHI.js +118 -0
- package/dist/chunks/velin-counter-L5FYJF7A.js +121 -0
- package/dist/chunks/velin-dialog-D2GUHSCD.js +144 -0
- package/dist/chunks/velin-dialog-ELFOZIXZ.js +152 -0
- package/dist/chunks/velin-dialog-GTTZI564.js +147 -0
- package/dist/chunks/velin-dialog-IJLFDXAJ.js +144 -0
- package/dist/chunks/velin-dialog-TNS3WXMB.js +144 -0
- package/dist/chunks/velin-drawer-BE6TYN3H.js +130 -0
- package/dist/chunks/velin-drawer-DLL2GLT6.js +130 -0
- package/dist/chunks/velin-drawer-MJS6WCF7.js +130 -0
- package/dist/chunks/velin-dropdown-PLUIFA5M.js +172 -0
- package/dist/chunks/velin-email-N5B5ZYTE.js +90 -0
- package/dist/chunks/velin-email-NTM6DG3V.js +90 -0
- package/dist/chunks/velin-email-RBX6ZR4S.js +90 -0
- package/dist/chunks/velin-haptic-4QQTM3RK.js +50 -0
- package/dist/chunks/velin-icon-7M76DOPB.js +164 -0
- package/dist/chunks/velin-icon-KZO3IEHG.js +164 -0
- package/dist/chunks/velin-icon-WTFPG2DD.js +191 -0
- package/dist/chunks/velin-icon-ZTSKUOVN.js +193 -0
- package/dist/chunks/velin-lightbox-6E7CAATP.js +149 -0
- package/dist/chunks/velin-lightbox-I75U6JF4.js +140 -0
- package/dist/chunks/velin-lightbox-QOTB4PRL.js +140 -0
- package/dist/chunks/velin-lightbox-UCD6N7HF.js +140 -0
- package/dist/chunks/velin-live-dot-RJHX2DGY.js +74 -0
- package/dist/chunks/velin-live-dot-XHUZCIDZ.js +67 -0
- package/dist/chunks/velin-menubar-I426AED2.js +86 -0
- package/dist/chunks/velin-menubar-J66JXRWW.js +86 -0
- package/dist/chunks/velin-menubar-SFEXJE56.js +86 -0
- package/dist/chunks/velin-modal-2HOBXE6F.js +176 -0
- package/dist/chunks/velin-modal-5HYNNNUI.js +176 -0
- package/dist/chunks/velin-modal-AEOTZ67O.js +177 -0
- package/dist/chunks/velin-modal-GLI2XZZB.js +176 -0
- package/dist/chunks/velin-persist-DFPL3QP4.js +110 -0
- package/dist/chunks/velin-popover-EXINRIGJ.js +145 -0
- package/dist/chunks/velin-popover-HQW6Q2Y6.js +172 -0
- package/dist/chunks/velin-popover-OXX7MRZ6.js +145 -0
- package/dist/chunks/velin-popover-T72HK3DF.js +151 -0
- package/dist/chunks/velin-popover-YKCCROJG.js +145 -0
- package/dist/chunks/velin-progress-ring-E4YRLZHH.js +66 -0
- package/dist/chunks/velin-rating-6CDBI6DG.js +91 -0
- package/dist/chunks/velin-rating-N4DI2XNL.js +91 -0
- package/dist/chunks/velin-rating-XRQJV4LO.js +91 -0
- package/dist/chunks/velin-scroll-top-F2FCZNYD.js +58 -0
- package/dist/chunks/velin-scroll-top-OHYVVHHY.js +58 -0
- package/dist/chunks/velin-scrollspy-OKCT4FDV.js +50 -0
- package/dist/chunks/velin-search-2XRQFBCS.js +556 -0
- package/dist/chunks/velin-search-4YHJWYSS.js +556 -0
- package/dist/chunks/velin-search-7B4KJ6TX.js +557 -0
- package/dist/chunks/velin-search-LWHY23Q5.js +474 -0
- package/dist/chunks/velin-secure-field-6PV7RZDJ.js +95 -0
- package/dist/chunks/velin-secure-field-H7FSBUJW.js +95 -0
- package/dist/chunks/velin-secure-field-OFNAXCDP.js +95 -0
- package/dist/chunks/velin-segmented-control-EKL4E3BL.js +109 -0
- package/dist/chunks/velin-segmented-control-GYD5BIXQ.js +109 -0
- package/dist/chunks/velin-segmented-control-PQX6LKOJ.js +109 -0
- package/dist/chunks/velin-sheet-3OGI4HD7.js +119 -0
- package/dist/chunks/velin-sheet-OUK6572T.js +119 -0
- package/dist/chunks/velin-sheet-R2Y67X6H.js +119 -0
- package/dist/chunks/velin-sparkline-GVEANJVW.js +184 -0
- package/dist/chunks/velin-sparkline-KDA3GQAN.js +162 -0
- package/dist/chunks/velin-sparkline-XVTFC6GE.js +181 -0
- package/dist/chunks/velin-stepper-2ZIHLKGM.js +141 -0
- package/dist/chunks/velin-stepper-7ECRUYHD.js +148 -0
- package/dist/chunks/velin-stepper-FYEUEWE6.js +141 -0
- package/dist/chunks/velin-stepper-X54WGHDG.js +141 -0
- package/dist/chunks/velin-stepper-wc-QU3KRVQR.js +133 -0
- package/dist/chunks/velin-tabs-5UQ5ZVMV.js +138 -0
- package/dist/chunks/velin-theme-toggle-32J2CBNC.js +291 -0
- package/dist/chunks/velin-theme-toggle-BNNS7WLV.js +285 -0
- package/dist/chunks/velin-theme-toggle-NO7V4TWI.js +285 -0
- package/dist/chunks/velin-theme-toggle-QELCJM2Q.js +291 -0
- package/dist/chunks/velin-toast-OMMOA2DK.js +109 -0
- package/dist/chunks/velin-toast-RCZ4CSUC.js +109 -0
- package/dist/chunks/velin-toast-RSF2IHT3.js +113 -0
- package/dist/chunks/velin-toast-WEUBTJG6.js +109 -0
- package/dist/chunks/velin-tooltip-664IOHZA.js +112 -0
- package/dist/chunks/velin-tooltip-BDHGRTQB.js +112 -0
- package/dist/chunks/velin-tooltip-HVUOKNVX.js +112 -0
- package/dist/chunks/velin-tooltip-wc-LXDVT6DE.js +103 -0
- package/dist/chunks/worker-client-R6DBYPFT.js +46 -0
- package/dist/llms.test.txt +40 -0
- package/dist/llms.txt +40 -0
- package/dist/search-index.json +1773 -0
- package/dist/search-index.test.json +1773 -0
- package/dist/themes/brutalist.min.css +1 -1
- package/dist/themes/midnight.min.css +1 -1
- package/dist/themes/pastel.min.css +1 -1
- package/dist/themes/retro.min.css +1 -1
- package/dist/themes/sunset.min.css +1 -1
- package/dist/velin-agent.json +684 -0
- package/dist/velin-agent.test.json +684 -0
- package/dist/velinstyle-components.iife.js +7715 -3515
- package/dist/velinstyle-components.js +7087 -2859
- package/dist/velinstyle-components.min.js +196 -109
- package/dist/velinstyle.css +604 -65
- package/dist/velinstyle.d.ts +54 -0
- package/dist/velinstyle.min.css +1 -1
- package/examples/search-index.schema.json +33 -0
- package/package.json +56 -10
- package/src/a11y/authentication.css +37 -0
- package/src/a11y/consistent-help.css +22 -0
- package/src/a11y/dragging-alternatives.css +30 -0
- package/src/a11y/focus-appearance.css +20 -0
- package/src/a11y/high-contrast-aaa.css +16 -26
- package/src/a11y/skip-link.css +3 -1
- package/src/a11y/sr-only.css +1 -1
- package/src/base/reset.css +0 -36
- package/src/base/wc-placeholder.css +102 -0
- package/src/components/attributes.css +42 -0
- package/src/components/highlight.css +182 -0
- package/src/components/input-group.css +1 -2
- package/src/components/nav.css +2 -3
- package/src/components/search.css +95 -0
- package/src/components/stepper.css +2 -4
- package/src/components/timeline.css +1 -2
- package/src/components/tooltip.css +2 -4
- package/src/layout/container.css +5 -5
- package/src/layout/grid.css +8 -8
- package/src/layout/patterns.css +5 -5
- package/src/themes/brutalist.css +2 -11
- package/src/themes/corporate.css +0 -9
- package/src/themes/earth.css +0 -9
- package/src/themes/forest.css +0 -9
- package/src/themes/midnight.css +1 -10
- package/src/themes/neon.css +0 -9
- package/src/themes/nordic.css +0 -9
- package/src/themes/ocean.css +0 -9
- package/src/themes/pastel.css +1 -10
- package/src/themes/retro.css +2 -11
- package/src/themes/sharp.css +0 -7
- package/src/themes/soft.css +0 -7
- package/src/themes/sunset.css +1 -10
- package/src/tokens/color.css +45 -46
- package/src/tokens/fonts.css +10 -0
- package/src/tokens/typography.css +4 -5
- package/src/utilities/animation.css +2 -2
- package/src/utilities/display.css +3 -3
- package/src/utilities/divide.css +2 -6
- package/src/utilities/responsive.css +4 -4
- package/src/utilities/safe-area.css +1 -1
- package/src/utilities/scroll-animation.css +34 -0
- package/src/utilities/spacing.css +17 -8
- package/src/utilities/text.css +4 -1
- package/src/velinstyle.css +9 -0
|
@@ -0,0 +1,1149 @@
|
|
|
1
|
+
// node_modules/dompurify/dist/purify.es.mjs
|
|
2
|
+
function _arrayLikeToArray(r, a) {
|
|
3
|
+
(null == a || a > r.length) && (a = r.length);
|
|
4
|
+
for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e];
|
|
5
|
+
return n;
|
|
6
|
+
}
|
|
7
|
+
function _arrayWithHoles(r) {
|
|
8
|
+
if (Array.isArray(r)) return r;
|
|
9
|
+
}
|
|
10
|
+
function _iterableToArrayLimit(r, l) {
|
|
11
|
+
var t = null == r ? null : "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"];
|
|
12
|
+
if (null != t) {
|
|
13
|
+
var e, n, i, u, a = [], f = true, o = false;
|
|
14
|
+
try {
|
|
15
|
+
if (i = (t = t.call(r)).next, 0 === l) ;
|
|
16
|
+
else for (; !(f = (e = i.call(t)).done) && (a.push(e.value), a.length !== l); f = true) ;
|
|
17
|
+
} catch (r2) {
|
|
18
|
+
o = true, n = r2;
|
|
19
|
+
} finally {
|
|
20
|
+
try {
|
|
21
|
+
if (!f && null != t.return && (u = t.return(), Object(u) !== u)) return;
|
|
22
|
+
} finally {
|
|
23
|
+
if (o) throw n;
|
|
24
|
+
}
|
|
25
|
+
}
|
|
26
|
+
return a;
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
function _nonIterableRest() {
|
|
30
|
+
throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
|
|
31
|
+
}
|
|
32
|
+
function _slicedToArray(r, e) {
|
|
33
|
+
return _arrayWithHoles(r) || _iterableToArrayLimit(r, e) || _unsupportedIterableToArray(r, e) || _nonIterableRest();
|
|
34
|
+
}
|
|
35
|
+
function _unsupportedIterableToArray(r, a) {
|
|
36
|
+
if (r) {
|
|
37
|
+
if ("string" == typeof r) return _arrayLikeToArray(r, a);
|
|
38
|
+
var t = {}.toString.call(r).slice(8, -1);
|
|
39
|
+
return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0;
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
var entries = Object.entries;
|
|
43
|
+
var setPrototypeOf = Object.setPrototypeOf;
|
|
44
|
+
var isFrozen = Object.isFrozen;
|
|
45
|
+
var getPrototypeOf = Object.getPrototypeOf;
|
|
46
|
+
var getOwnPropertyDescriptor = Object.getOwnPropertyDescriptor;
|
|
47
|
+
var freeze = Object.freeze;
|
|
48
|
+
var seal = Object.seal;
|
|
49
|
+
var create = Object.create;
|
|
50
|
+
var _ref = typeof Reflect !== "undefined" && Reflect;
|
|
51
|
+
var apply = _ref.apply;
|
|
52
|
+
var construct = _ref.construct;
|
|
53
|
+
if (!freeze) {
|
|
54
|
+
freeze = function freeze2(x) {
|
|
55
|
+
return x;
|
|
56
|
+
};
|
|
57
|
+
}
|
|
58
|
+
if (!seal) {
|
|
59
|
+
seal = function seal2(x) {
|
|
60
|
+
return x;
|
|
61
|
+
};
|
|
62
|
+
}
|
|
63
|
+
if (!apply) {
|
|
64
|
+
apply = function apply2(func, thisArg) {
|
|
65
|
+
for (var _len = arguments.length, args = new Array(_len > 2 ? _len - 2 : 0), _key = 2; _key < _len; _key++) {
|
|
66
|
+
args[_key - 2] = arguments[_key];
|
|
67
|
+
}
|
|
68
|
+
return func.apply(thisArg, args);
|
|
69
|
+
};
|
|
70
|
+
}
|
|
71
|
+
if (!construct) {
|
|
72
|
+
construct = function construct2(Func) {
|
|
73
|
+
for (var _len2 = arguments.length, args = new Array(_len2 > 1 ? _len2 - 1 : 0), _key2 = 1; _key2 < _len2; _key2++) {
|
|
74
|
+
args[_key2 - 1] = arguments[_key2];
|
|
75
|
+
}
|
|
76
|
+
return new Func(...args);
|
|
77
|
+
};
|
|
78
|
+
}
|
|
79
|
+
var arrayForEach = unapply(Array.prototype.forEach);
|
|
80
|
+
var arrayLastIndexOf = unapply(Array.prototype.lastIndexOf);
|
|
81
|
+
var arrayPop = unapply(Array.prototype.pop);
|
|
82
|
+
var arrayPush = unapply(Array.prototype.push);
|
|
83
|
+
var arraySplice = unapply(Array.prototype.splice);
|
|
84
|
+
var arrayIsArray = Array.isArray;
|
|
85
|
+
var stringToLowerCase = unapply(String.prototype.toLowerCase);
|
|
86
|
+
var stringToString = unapply(String.prototype.toString);
|
|
87
|
+
var stringMatch = unapply(String.prototype.match);
|
|
88
|
+
var stringReplace = unapply(String.prototype.replace);
|
|
89
|
+
var stringIndexOf = unapply(String.prototype.indexOf);
|
|
90
|
+
var stringTrim = unapply(String.prototype.trim);
|
|
91
|
+
var numberToString = unapply(Number.prototype.toString);
|
|
92
|
+
var booleanToString = unapply(Boolean.prototype.toString);
|
|
93
|
+
var bigintToString = typeof BigInt === "undefined" ? null : unapply(BigInt.prototype.toString);
|
|
94
|
+
var symbolToString = typeof Symbol === "undefined" ? null : unapply(Symbol.prototype.toString);
|
|
95
|
+
var objectHasOwnProperty = unapply(Object.prototype.hasOwnProperty);
|
|
96
|
+
var objectToString = unapply(Object.prototype.toString);
|
|
97
|
+
var regExpTest = unapply(RegExp.prototype.test);
|
|
98
|
+
var typeErrorCreate = unconstruct(TypeError);
|
|
99
|
+
function unapply(func) {
|
|
100
|
+
return function(thisArg) {
|
|
101
|
+
if (thisArg instanceof RegExp) {
|
|
102
|
+
thisArg.lastIndex = 0;
|
|
103
|
+
}
|
|
104
|
+
for (var _len3 = arguments.length, args = new Array(_len3 > 1 ? _len3 - 1 : 0), _key3 = 1; _key3 < _len3; _key3++) {
|
|
105
|
+
args[_key3 - 1] = arguments[_key3];
|
|
106
|
+
}
|
|
107
|
+
return apply(func, thisArg, args);
|
|
108
|
+
};
|
|
109
|
+
}
|
|
110
|
+
function unconstruct(Func) {
|
|
111
|
+
return function() {
|
|
112
|
+
for (var _len4 = arguments.length, args = new Array(_len4), _key4 = 0; _key4 < _len4; _key4++) {
|
|
113
|
+
args[_key4] = arguments[_key4];
|
|
114
|
+
}
|
|
115
|
+
return construct(Func, args);
|
|
116
|
+
};
|
|
117
|
+
}
|
|
118
|
+
function addToSet(set, array) {
|
|
119
|
+
let transformCaseFunc = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : stringToLowerCase;
|
|
120
|
+
if (setPrototypeOf) {
|
|
121
|
+
setPrototypeOf(set, null);
|
|
122
|
+
}
|
|
123
|
+
if (!arrayIsArray(array)) {
|
|
124
|
+
return set;
|
|
125
|
+
}
|
|
126
|
+
let l = array.length;
|
|
127
|
+
while (l--) {
|
|
128
|
+
let element = array[l];
|
|
129
|
+
if (typeof element === "string") {
|
|
130
|
+
const lcElement = transformCaseFunc(element);
|
|
131
|
+
if (lcElement !== element) {
|
|
132
|
+
if (!isFrozen(array)) {
|
|
133
|
+
array[l] = lcElement;
|
|
134
|
+
}
|
|
135
|
+
element = lcElement;
|
|
136
|
+
}
|
|
137
|
+
}
|
|
138
|
+
set[element] = true;
|
|
139
|
+
}
|
|
140
|
+
return set;
|
|
141
|
+
}
|
|
142
|
+
function cleanArray(array) {
|
|
143
|
+
for (let index = 0; index < array.length; index++) {
|
|
144
|
+
const isPropertyExist = objectHasOwnProperty(array, index);
|
|
145
|
+
if (!isPropertyExist) {
|
|
146
|
+
array[index] = null;
|
|
147
|
+
}
|
|
148
|
+
}
|
|
149
|
+
return array;
|
|
150
|
+
}
|
|
151
|
+
function clone(object) {
|
|
152
|
+
const newObject = create(null);
|
|
153
|
+
for (const _ref2 of entries(object)) {
|
|
154
|
+
var _ref3 = _slicedToArray(_ref2, 2);
|
|
155
|
+
const property = _ref3[0];
|
|
156
|
+
const value = _ref3[1];
|
|
157
|
+
const isPropertyExist = objectHasOwnProperty(object, property);
|
|
158
|
+
if (isPropertyExist) {
|
|
159
|
+
if (arrayIsArray(value)) {
|
|
160
|
+
newObject[property] = cleanArray(value);
|
|
161
|
+
} else if (value && typeof value === "object" && value.constructor === Object) {
|
|
162
|
+
newObject[property] = clone(value);
|
|
163
|
+
} else {
|
|
164
|
+
newObject[property] = value;
|
|
165
|
+
}
|
|
166
|
+
}
|
|
167
|
+
}
|
|
168
|
+
return newObject;
|
|
169
|
+
}
|
|
170
|
+
function stringifyValue(value) {
|
|
171
|
+
switch (typeof value) {
|
|
172
|
+
case "string": {
|
|
173
|
+
return value;
|
|
174
|
+
}
|
|
175
|
+
case "number": {
|
|
176
|
+
return numberToString(value);
|
|
177
|
+
}
|
|
178
|
+
case "boolean": {
|
|
179
|
+
return booleanToString(value);
|
|
180
|
+
}
|
|
181
|
+
case "bigint": {
|
|
182
|
+
return bigintToString ? bigintToString(value) : "0";
|
|
183
|
+
}
|
|
184
|
+
case "symbol": {
|
|
185
|
+
return symbolToString ? symbolToString(value) : "Symbol()";
|
|
186
|
+
}
|
|
187
|
+
case "undefined": {
|
|
188
|
+
return objectToString(value);
|
|
189
|
+
}
|
|
190
|
+
case "function":
|
|
191
|
+
case "object": {
|
|
192
|
+
if (value === null) {
|
|
193
|
+
return objectToString(value);
|
|
194
|
+
}
|
|
195
|
+
const valueAsRecord = value;
|
|
196
|
+
const valueToString = lookupGetter(valueAsRecord, "toString");
|
|
197
|
+
if (typeof valueToString === "function") {
|
|
198
|
+
const stringified = valueToString(valueAsRecord);
|
|
199
|
+
return typeof stringified === "string" ? stringified : objectToString(stringified);
|
|
200
|
+
}
|
|
201
|
+
return objectToString(value);
|
|
202
|
+
}
|
|
203
|
+
default: {
|
|
204
|
+
return objectToString(value);
|
|
205
|
+
}
|
|
206
|
+
}
|
|
207
|
+
}
|
|
208
|
+
function lookupGetter(object, prop) {
|
|
209
|
+
while (object !== null) {
|
|
210
|
+
const desc = getOwnPropertyDescriptor(object, prop);
|
|
211
|
+
if (desc) {
|
|
212
|
+
if (desc.get) {
|
|
213
|
+
return unapply(desc.get);
|
|
214
|
+
}
|
|
215
|
+
if (typeof desc.value === "function") {
|
|
216
|
+
return unapply(desc.value);
|
|
217
|
+
}
|
|
218
|
+
}
|
|
219
|
+
object = getPrototypeOf(object);
|
|
220
|
+
}
|
|
221
|
+
function fallbackValue() {
|
|
222
|
+
return null;
|
|
223
|
+
}
|
|
224
|
+
return fallbackValue;
|
|
225
|
+
}
|
|
226
|
+
function isRegex(value) {
|
|
227
|
+
try {
|
|
228
|
+
regExpTest(value, "");
|
|
229
|
+
return true;
|
|
230
|
+
} catch (_unused) {
|
|
231
|
+
return false;
|
|
232
|
+
}
|
|
233
|
+
}
|
|
234
|
+
var html$1 = freeze(["a", "abbr", "acronym", "address", "area", "article", "aside", "audio", "b", "bdi", "bdo", "big", "blink", "blockquote", "body", "br", "button", "canvas", "caption", "center", "cite", "code", "col", "colgroup", "content", "data", "datalist", "dd", "decorator", "del", "details", "dfn", "dialog", "dir", "div", "dl", "dt", "element", "em", "fieldset", "figcaption", "figure", "font", "footer", "form", "h1", "h2", "h3", "h4", "h5", "h6", "head", "header", "hgroup", "hr", "html", "i", "img", "input", "ins", "kbd", "label", "legend", "li", "main", "map", "mark", "marquee", "menu", "menuitem", "meter", "nav", "nobr", "ol", "optgroup", "option", "output", "p", "picture", "pre", "progress", "q", "rp", "rt", "ruby", "s", "samp", "search", "section", "select", "shadow", "slot", "small", "source", "spacer", "span", "strike", "strong", "style", "sub", "summary", "sup", "table", "tbody", "td", "template", "textarea", "tfoot", "th", "thead", "time", "tr", "track", "tt", "u", "ul", "var", "video", "wbr"]);
|
|
235
|
+
var svg$1 = freeze(["svg", "a", "altglyph", "altglyphdef", "altglyphitem", "animatecolor", "animatemotion", "animatetransform", "circle", "clippath", "defs", "desc", "ellipse", "enterkeyhint", "exportparts", "filter", "font", "g", "glyph", "glyphref", "hkern", "image", "inputmode", "line", "lineargradient", "marker", "mask", "metadata", "mpath", "part", "path", "pattern", "polygon", "polyline", "radialgradient", "rect", "stop", "style", "switch", "symbol", "text", "textpath", "title", "tref", "tspan", "view", "vkern"]);
|
|
236
|
+
var svgFilters = freeze(["feBlend", "feColorMatrix", "feComponentTransfer", "feComposite", "feConvolveMatrix", "feDiffuseLighting", "feDisplacementMap", "feDistantLight", "feDropShadow", "feFlood", "feFuncA", "feFuncB", "feFuncG", "feFuncR", "feGaussianBlur", "feImage", "feMerge", "feMergeNode", "feMorphology", "feOffset", "fePointLight", "feSpecularLighting", "feSpotLight", "feTile", "feTurbulence"]);
|
|
237
|
+
var svgDisallowed = freeze(["animate", "color-profile", "cursor", "discard", "font-face", "font-face-format", "font-face-name", "font-face-src", "font-face-uri", "foreignobject", "hatch", "hatchpath", "mesh", "meshgradient", "meshpatch", "meshrow", "missing-glyph", "script", "set", "solidcolor", "unknown", "use"]);
|
|
238
|
+
var mathMl$1 = freeze(["math", "menclose", "merror", "mfenced", "mfrac", "mglyph", "mi", "mlabeledtr", "mmultiscripts", "mn", "mo", "mover", "mpadded", "mphantom", "mroot", "mrow", "ms", "mspace", "msqrt", "mstyle", "msub", "msup", "msubsup", "mtable", "mtd", "mtext", "mtr", "munder", "munderover", "mprescripts"]);
|
|
239
|
+
var mathMlDisallowed = freeze(["maction", "maligngroup", "malignmark", "mlongdiv", "mscarries", "mscarry", "msgroup", "mstack", "msline", "msrow", "semantics", "annotation", "annotation-xml", "mprescripts", "none"]);
|
|
240
|
+
var text = freeze(["#text"]);
|
|
241
|
+
var html = freeze(["accept", "action", "align", "alt", "autocapitalize", "autocomplete", "autopictureinpicture", "autoplay", "background", "bgcolor", "border", "capture", "cellpadding", "cellspacing", "checked", "cite", "class", "clear", "color", "cols", "colspan", "command", "commandfor", "controls", "controlslist", "coords", "crossorigin", "datetime", "decoding", "default", "dir", "disabled", "disablepictureinpicture", "disableremoteplayback", "download", "draggable", "enctype", "enterkeyhint", "exportparts", "face", "for", "headers", "height", "hidden", "high", "href", "hreflang", "id", "inert", "inputmode", "integrity", "ismap", "kind", "label", "lang", "list", "loading", "loop", "low", "max", "maxlength", "media", "method", "min", "minlength", "multiple", "muted", "name", "nonce", "noshade", "novalidate", "nowrap", "open", "optimum", "part", "pattern", "placeholder", "playsinline", "popover", "popovertarget", "popovertargetaction", "poster", "preload", "pubdate", "radiogroup", "readonly", "rel", "required", "rev", "reversed", "role", "rows", "rowspan", "spellcheck", "scope", "selected", "shape", "size", "sizes", "slot", "span", "srclang", "start", "src", "srcset", "step", "style", "summary", "tabindex", "title", "translate", "type", "usemap", "valign", "value", "width", "wrap", "xmlns"]);
|
|
242
|
+
var svg = freeze(["accent-height", "accumulate", "additive", "alignment-baseline", "amplitude", "ascent", "attributename", "attributetype", "azimuth", "basefrequency", "baseline-shift", "begin", "bias", "by", "class", "clip", "clippathunits", "clip-path", "clip-rule", "color", "color-interpolation", "color-interpolation-filters", "color-profile", "color-rendering", "cx", "cy", "d", "dx", "dy", "diffuseconstant", "direction", "display", "divisor", "dur", "edgemode", "elevation", "end", "exponent", "fill", "fill-opacity", "fill-rule", "filter", "filterunits", "flood-color", "flood-opacity", "font-family", "font-size", "font-size-adjust", "font-stretch", "font-style", "font-variant", "font-weight", "fx", "fy", "g1", "g2", "glyph-name", "glyphref", "gradientunits", "gradienttransform", "height", "href", "id", "image-rendering", "in", "in2", "intercept", "k", "k1", "k2", "k3", "k4", "kerning", "keypoints", "keysplines", "keytimes", "lang", "lengthadjust", "letter-spacing", "kernelmatrix", "kernelunitlength", "lighting-color", "local", "marker-end", "marker-mid", "marker-start", "markerheight", "markerunits", "markerwidth", "maskcontentunits", "maskunits", "max", "mask", "mask-type", "media", "method", "mode", "min", "name", "numoctaves", "offset", "operator", "opacity", "order", "orient", "orientation", "origin", "overflow", "paint-order", "path", "pathlength", "patterncontentunits", "patterntransform", "patternunits", "points", "preservealpha", "preserveaspectratio", "primitiveunits", "r", "rx", "ry", "radius", "refx", "refy", "repeatcount", "repeatdur", "restart", "result", "rotate", "scale", "seed", "shape-rendering", "slope", "specularconstant", "specularexponent", "spreadmethod", "startoffset", "stddeviation", "stitchtiles", "stop-color", "stop-opacity", "stroke-dasharray", "stroke-dashoffset", "stroke-linecap", "stroke-linejoin", "stroke-miterlimit", "stroke-opacity", "stroke", "stroke-width", "style", "surfacescale", "systemlanguage", "tabindex", "tablevalues", "targetx", "targety", "transform", "transform-origin", "text-anchor", "text-decoration", "text-rendering", "textlength", "type", "u1", "u2", "unicode", "values", "viewbox", "visibility", "version", "vert-adv-y", "vert-origin-x", "vert-origin-y", "width", "word-spacing", "wrap", "writing-mode", "xchannelselector", "ychannelselector", "x", "x1", "x2", "xmlns", "y", "y1", "y2", "z", "zoomandpan"]);
|
|
243
|
+
var mathMl = freeze(["accent", "accentunder", "align", "bevelled", "close", "columnalign", "columnlines", "columnspacing", "columnspan", "denomalign", "depth", "dir", "display", "displaystyle", "encoding", "fence", "frame", "height", "href", "id", "largeop", "length", "linethickness", "lquote", "lspace", "mathbackground", "mathcolor", "mathsize", "mathvariant", "maxsize", "minsize", "movablelimits", "notation", "numalign", "open", "rowalign", "rowlines", "rowspacing", "rowspan", "rspace", "rquote", "scriptlevel", "scriptminsize", "scriptsizemultiplier", "selection", "separator", "separators", "stretchy", "subscriptshift", "supscriptshift", "symmetric", "voffset", "width", "xmlns"]);
|
|
244
|
+
var xml = freeze(["xlink:href", "xml:id", "xlink:title", "xml:space", "xmlns:xlink"]);
|
|
245
|
+
var MUSTACHE_EXPR = seal(/{{[\w\W]*|^[\w\W]*}}/g);
|
|
246
|
+
var ERB_EXPR = seal(/<%[\w\W]*|^[\w\W]*%>/g);
|
|
247
|
+
var TMPLIT_EXPR = seal(/\${[\w\W]*/g);
|
|
248
|
+
var DATA_ATTR = seal(/^data-[\-\w.\u00B7-\uFFFF]+$/);
|
|
249
|
+
var ARIA_ATTR = seal(/^aria-[\-\w]+$/);
|
|
250
|
+
var IS_ALLOWED_URI = seal(
|
|
251
|
+
/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp|matrix):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i
|
|
252
|
+
// eslint-disable-line no-useless-escape
|
|
253
|
+
);
|
|
254
|
+
var IS_SCRIPT_OR_DATA = seal(/^(?:\w+script|data):/i);
|
|
255
|
+
var ATTR_WHITESPACE = seal(
|
|
256
|
+
/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g
|
|
257
|
+
// eslint-disable-line no-control-regex
|
|
258
|
+
);
|
|
259
|
+
var DOCTYPE_NAME = seal(/^html$/i);
|
|
260
|
+
var CUSTOM_ELEMENT = seal(/^[a-z][.\w]*(-[.\w]+)+$/i);
|
|
261
|
+
var NODE_TYPE = {
|
|
262
|
+
element: 1,
|
|
263
|
+
text: 3,
|
|
264
|
+
// Deprecated
|
|
265
|
+
progressingInstruction: 7,
|
|
266
|
+
comment: 8,
|
|
267
|
+
document: 9
|
|
268
|
+
};
|
|
269
|
+
var getGlobal = function getGlobal2() {
|
|
270
|
+
return typeof window === "undefined" ? null : window;
|
|
271
|
+
};
|
|
272
|
+
var _createTrustedTypesPolicy = function _createTrustedTypesPolicy2(trustedTypes, purifyHostElement) {
|
|
273
|
+
if (typeof trustedTypes !== "object" || typeof trustedTypes.createPolicy !== "function") {
|
|
274
|
+
return null;
|
|
275
|
+
}
|
|
276
|
+
let suffix = null;
|
|
277
|
+
const ATTR_NAME = "data-tt-policy-suffix";
|
|
278
|
+
if (purifyHostElement && purifyHostElement.hasAttribute(ATTR_NAME)) {
|
|
279
|
+
suffix = purifyHostElement.getAttribute(ATTR_NAME);
|
|
280
|
+
}
|
|
281
|
+
const policyName = "dompurify" + (suffix ? "#" + suffix : "");
|
|
282
|
+
try {
|
|
283
|
+
return trustedTypes.createPolicy(policyName, {
|
|
284
|
+
createHTML(html2) {
|
|
285
|
+
return html2;
|
|
286
|
+
},
|
|
287
|
+
createScriptURL(scriptUrl) {
|
|
288
|
+
return scriptUrl;
|
|
289
|
+
}
|
|
290
|
+
});
|
|
291
|
+
} catch (_) {
|
|
292
|
+
console.warn("TrustedTypes policy " + policyName + " could not be created.");
|
|
293
|
+
return null;
|
|
294
|
+
}
|
|
295
|
+
};
|
|
296
|
+
var _createHooksMap = function _createHooksMap2() {
|
|
297
|
+
return {
|
|
298
|
+
afterSanitizeAttributes: [],
|
|
299
|
+
afterSanitizeElements: [],
|
|
300
|
+
afterSanitizeShadowDOM: [],
|
|
301
|
+
beforeSanitizeAttributes: [],
|
|
302
|
+
beforeSanitizeElements: [],
|
|
303
|
+
beforeSanitizeShadowDOM: [],
|
|
304
|
+
uponSanitizeAttribute: [],
|
|
305
|
+
uponSanitizeElement: [],
|
|
306
|
+
uponSanitizeShadowNode: []
|
|
307
|
+
};
|
|
308
|
+
};
|
|
309
|
+
function createDOMPurify() {
|
|
310
|
+
let window2 = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : getGlobal();
|
|
311
|
+
const DOMPurify = (root) => createDOMPurify(root);
|
|
312
|
+
DOMPurify.version = "3.4.5";
|
|
313
|
+
DOMPurify.removed = [];
|
|
314
|
+
if (!window2 || !window2.document || window2.document.nodeType !== NODE_TYPE.document || !window2.Element) {
|
|
315
|
+
DOMPurify.isSupported = false;
|
|
316
|
+
return DOMPurify;
|
|
317
|
+
}
|
|
318
|
+
let document = window2.document;
|
|
319
|
+
const originalDocument = document;
|
|
320
|
+
const currentScript = originalDocument.currentScript;
|
|
321
|
+
const DocumentFragment = window2.DocumentFragment, HTMLTemplateElement = window2.HTMLTemplateElement, Node = window2.Node, Element = window2.Element, NodeFilter = window2.NodeFilter, _window$NamedNodeMap = window2.NamedNodeMap, NamedNodeMap = _window$NamedNodeMap === void 0 ? window2.NamedNodeMap || window2.MozNamedAttrMap : _window$NamedNodeMap, HTMLFormElement = window2.HTMLFormElement, DOMParser = window2.DOMParser, trustedTypes = window2.trustedTypes;
|
|
322
|
+
const ElementPrototype = Element.prototype;
|
|
323
|
+
const cloneNode = lookupGetter(ElementPrototype, "cloneNode");
|
|
324
|
+
const remove = lookupGetter(ElementPrototype, "remove");
|
|
325
|
+
const getNextSibling = lookupGetter(ElementPrototype, "nextSibling");
|
|
326
|
+
const getChildNodes = lookupGetter(ElementPrototype, "childNodes");
|
|
327
|
+
const getParentNode = lookupGetter(ElementPrototype, "parentNode");
|
|
328
|
+
const getNodeType = Node && Node.prototype ? lookupGetter(Node.prototype, "nodeType") : null;
|
|
329
|
+
if (typeof HTMLTemplateElement === "function") {
|
|
330
|
+
const template = document.createElement("template");
|
|
331
|
+
if (template.content && template.content.ownerDocument) {
|
|
332
|
+
document = template.content.ownerDocument;
|
|
333
|
+
}
|
|
334
|
+
}
|
|
335
|
+
let trustedTypesPolicy;
|
|
336
|
+
let emptyHTML = "";
|
|
337
|
+
const _document = document, implementation = _document.implementation, createNodeIterator = _document.createNodeIterator, createDocumentFragment = _document.createDocumentFragment, getElementsByTagName = _document.getElementsByTagName;
|
|
338
|
+
const importNode = originalDocument.importNode;
|
|
339
|
+
let hooks = _createHooksMap();
|
|
340
|
+
DOMPurify.isSupported = typeof entries === "function" && typeof getParentNode === "function" && implementation && implementation.createHTMLDocument !== void 0;
|
|
341
|
+
const MUSTACHE_EXPR$1 = MUSTACHE_EXPR, ERB_EXPR$1 = ERB_EXPR, TMPLIT_EXPR$1 = TMPLIT_EXPR, DATA_ATTR$1 = DATA_ATTR, ARIA_ATTR$1 = ARIA_ATTR, IS_SCRIPT_OR_DATA$1 = IS_SCRIPT_OR_DATA, ATTR_WHITESPACE$1 = ATTR_WHITESPACE, CUSTOM_ELEMENT$1 = CUSTOM_ELEMENT;
|
|
342
|
+
let IS_ALLOWED_URI$1 = IS_ALLOWED_URI;
|
|
343
|
+
let ALLOWED_TAGS = null;
|
|
344
|
+
const DEFAULT_ALLOWED_TAGS = addToSet({}, [...html$1, ...svg$1, ...svgFilters, ...mathMl$1, ...text]);
|
|
345
|
+
let ALLOWED_ATTR = null;
|
|
346
|
+
const DEFAULT_ALLOWED_ATTR = addToSet({}, [...html, ...svg, ...mathMl, ...xml]);
|
|
347
|
+
let CUSTOM_ELEMENT_HANDLING = Object.seal(create(null, {
|
|
348
|
+
tagNameCheck: {
|
|
349
|
+
writable: true,
|
|
350
|
+
configurable: false,
|
|
351
|
+
enumerable: true,
|
|
352
|
+
value: null
|
|
353
|
+
},
|
|
354
|
+
attributeNameCheck: {
|
|
355
|
+
writable: true,
|
|
356
|
+
configurable: false,
|
|
357
|
+
enumerable: true,
|
|
358
|
+
value: null
|
|
359
|
+
},
|
|
360
|
+
allowCustomizedBuiltInElements: {
|
|
361
|
+
writable: true,
|
|
362
|
+
configurable: false,
|
|
363
|
+
enumerable: true,
|
|
364
|
+
value: false
|
|
365
|
+
}
|
|
366
|
+
}));
|
|
367
|
+
let FORBID_TAGS = null;
|
|
368
|
+
let FORBID_ATTR = null;
|
|
369
|
+
const EXTRA_ELEMENT_HANDLING = Object.seal(create(null, {
|
|
370
|
+
tagCheck: {
|
|
371
|
+
writable: true,
|
|
372
|
+
configurable: false,
|
|
373
|
+
enumerable: true,
|
|
374
|
+
value: null
|
|
375
|
+
},
|
|
376
|
+
attributeCheck: {
|
|
377
|
+
writable: true,
|
|
378
|
+
configurable: false,
|
|
379
|
+
enumerable: true,
|
|
380
|
+
value: null
|
|
381
|
+
}
|
|
382
|
+
}));
|
|
383
|
+
let ALLOW_ARIA_ATTR = true;
|
|
384
|
+
let ALLOW_DATA_ATTR = true;
|
|
385
|
+
let ALLOW_UNKNOWN_PROTOCOLS = false;
|
|
386
|
+
let ALLOW_SELF_CLOSE_IN_ATTR = true;
|
|
387
|
+
let SAFE_FOR_TEMPLATES = false;
|
|
388
|
+
let SAFE_FOR_XML = true;
|
|
389
|
+
let WHOLE_DOCUMENT = false;
|
|
390
|
+
let SET_CONFIG = false;
|
|
391
|
+
let FORCE_BODY = false;
|
|
392
|
+
let RETURN_DOM = false;
|
|
393
|
+
let RETURN_DOM_FRAGMENT = false;
|
|
394
|
+
let RETURN_TRUSTED_TYPE = false;
|
|
395
|
+
let SANITIZE_DOM = true;
|
|
396
|
+
let SANITIZE_NAMED_PROPS = false;
|
|
397
|
+
const SANITIZE_NAMED_PROPS_PREFIX = "user-content-";
|
|
398
|
+
let KEEP_CONTENT = true;
|
|
399
|
+
let IN_PLACE = false;
|
|
400
|
+
let USE_PROFILES = {};
|
|
401
|
+
let FORBID_CONTENTS = null;
|
|
402
|
+
const DEFAULT_FORBID_CONTENTS = addToSet({}, ["annotation-xml", "audio", "colgroup", "desc", "foreignobject", "head", "iframe", "math", "mi", "mn", "mo", "ms", "mtext", "noembed", "noframes", "noscript", "plaintext", "script", "style", "svg", "template", "thead", "title", "video", "xmp"]);
|
|
403
|
+
let DATA_URI_TAGS = null;
|
|
404
|
+
const DEFAULT_DATA_URI_TAGS = addToSet({}, ["audio", "video", "img", "source", "image", "track"]);
|
|
405
|
+
let URI_SAFE_ATTRIBUTES = null;
|
|
406
|
+
const DEFAULT_URI_SAFE_ATTRIBUTES = addToSet({}, ["alt", "class", "for", "id", "label", "name", "pattern", "placeholder", "role", "summary", "title", "value", "style", "xmlns"]);
|
|
407
|
+
const MATHML_NAMESPACE = "http://www.w3.org/1998/Math/MathML";
|
|
408
|
+
const SVG_NAMESPACE = "http://www.w3.org/2000/svg";
|
|
409
|
+
const HTML_NAMESPACE = "http://www.w3.org/1999/xhtml";
|
|
410
|
+
let NAMESPACE = HTML_NAMESPACE;
|
|
411
|
+
let IS_EMPTY_INPUT = false;
|
|
412
|
+
let ALLOWED_NAMESPACES = null;
|
|
413
|
+
const DEFAULT_ALLOWED_NAMESPACES = addToSet({}, [MATHML_NAMESPACE, SVG_NAMESPACE, HTML_NAMESPACE], stringToString);
|
|
414
|
+
let MATHML_TEXT_INTEGRATION_POINTS = addToSet({}, ["mi", "mo", "mn", "ms", "mtext"]);
|
|
415
|
+
let HTML_INTEGRATION_POINTS = addToSet({}, ["annotation-xml"]);
|
|
416
|
+
const COMMON_SVG_AND_HTML_ELEMENTS = addToSet({}, ["title", "style", "font", "a", "script"]);
|
|
417
|
+
let PARSER_MEDIA_TYPE = null;
|
|
418
|
+
const SUPPORTED_PARSER_MEDIA_TYPES = ["application/xhtml+xml", "text/html"];
|
|
419
|
+
const DEFAULT_PARSER_MEDIA_TYPE = "text/html";
|
|
420
|
+
let transformCaseFunc = null;
|
|
421
|
+
let CONFIG = null;
|
|
422
|
+
const formElement = document.createElement("form");
|
|
423
|
+
const isRegexOrFunction = function isRegexOrFunction2(testValue) {
|
|
424
|
+
return testValue instanceof RegExp || testValue instanceof Function;
|
|
425
|
+
};
|
|
426
|
+
const _parseConfig = function _parseConfig2() {
|
|
427
|
+
let cfg = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
|
|
428
|
+
if (CONFIG && CONFIG === cfg) {
|
|
429
|
+
return;
|
|
430
|
+
}
|
|
431
|
+
if (!cfg || typeof cfg !== "object") {
|
|
432
|
+
cfg = {};
|
|
433
|
+
}
|
|
434
|
+
cfg = clone(cfg);
|
|
435
|
+
PARSER_MEDIA_TYPE = // eslint-disable-next-line unicorn/prefer-includes
|
|
436
|
+
SUPPORTED_PARSER_MEDIA_TYPES.indexOf(cfg.PARSER_MEDIA_TYPE) === -1 ? DEFAULT_PARSER_MEDIA_TYPE : cfg.PARSER_MEDIA_TYPE;
|
|
437
|
+
transformCaseFunc = PARSER_MEDIA_TYPE === "application/xhtml+xml" ? stringToString : stringToLowerCase;
|
|
438
|
+
ALLOWED_TAGS = objectHasOwnProperty(cfg, "ALLOWED_TAGS") && arrayIsArray(cfg.ALLOWED_TAGS) ? addToSet({}, cfg.ALLOWED_TAGS, transformCaseFunc) : DEFAULT_ALLOWED_TAGS;
|
|
439
|
+
ALLOWED_ATTR = objectHasOwnProperty(cfg, "ALLOWED_ATTR") && arrayIsArray(cfg.ALLOWED_ATTR) ? addToSet({}, cfg.ALLOWED_ATTR, transformCaseFunc) : DEFAULT_ALLOWED_ATTR;
|
|
440
|
+
ALLOWED_NAMESPACES = objectHasOwnProperty(cfg, "ALLOWED_NAMESPACES") && arrayIsArray(cfg.ALLOWED_NAMESPACES) ? addToSet({}, cfg.ALLOWED_NAMESPACES, stringToString) : DEFAULT_ALLOWED_NAMESPACES;
|
|
441
|
+
URI_SAFE_ATTRIBUTES = objectHasOwnProperty(cfg, "ADD_URI_SAFE_ATTR") && arrayIsArray(cfg.ADD_URI_SAFE_ATTR) ? addToSet(clone(DEFAULT_URI_SAFE_ATTRIBUTES), cfg.ADD_URI_SAFE_ATTR, transformCaseFunc) : DEFAULT_URI_SAFE_ATTRIBUTES;
|
|
442
|
+
DATA_URI_TAGS = objectHasOwnProperty(cfg, "ADD_DATA_URI_TAGS") && arrayIsArray(cfg.ADD_DATA_URI_TAGS) ? addToSet(clone(DEFAULT_DATA_URI_TAGS), cfg.ADD_DATA_URI_TAGS, transformCaseFunc) : DEFAULT_DATA_URI_TAGS;
|
|
443
|
+
FORBID_CONTENTS = objectHasOwnProperty(cfg, "FORBID_CONTENTS") && arrayIsArray(cfg.FORBID_CONTENTS) ? addToSet({}, cfg.FORBID_CONTENTS, transformCaseFunc) : DEFAULT_FORBID_CONTENTS;
|
|
444
|
+
FORBID_TAGS = objectHasOwnProperty(cfg, "FORBID_TAGS") && arrayIsArray(cfg.FORBID_TAGS) ? addToSet({}, cfg.FORBID_TAGS, transformCaseFunc) : clone({});
|
|
445
|
+
FORBID_ATTR = objectHasOwnProperty(cfg, "FORBID_ATTR") && arrayIsArray(cfg.FORBID_ATTR) ? addToSet({}, cfg.FORBID_ATTR, transformCaseFunc) : clone({});
|
|
446
|
+
USE_PROFILES = objectHasOwnProperty(cfg, "USE_PROFILES") ? cfg.USE_PROFILES && typeof cfg.USE_PROFILES === "object" ? clone(cfg.USE_PROFILES) : cfg.USE_PROFILES : false;
|
|
447
|
+
ALLOW_ARIA_ATTR = cfg.ALLOW_ARIA_ATTR !== false;
|
|
448
|
+
ALLOW_DATA_ATTR = cfg.ALLOW_DATA_ATTR !== false;
|
|
449
|
+
ALLOW_UNKNOWN_PROTOCOLS = cfg.ALLOW_UNKNOWN_PROTOCOLS || false;
|
|
450
|
+
ALLOW_SELF_CLOSE_IN_ATTR = cfg.ALLOW_SELF_CLOSE_IN_ATTR !== false;
|
|
451
|
+
SAFE_FOR_TEMPLATES = cfg.SAFE_FOR_TEMPLATES || false;
|
|
452
|
+
SAFE_FOR_XML = cfg.SAFE_FOR_XML !== false;
|
|
453
|
+
WHOLE_DOCUMENT = cfg.WHOLE_DOCUMENT || false;
|
|
454
|
+
RETURN_DOM = cfg.RETURN_DOM || false;
|
|
455
|
+
RETURN_DOM_FRAGMENT = cfg.RETURN_DOM_FRAGMENT || false;
|
|
456
|
+
RETURN_TRUSTED_TYPE = cfg.RETURN_TRUSTED_TYPE || false;
|
|
457
|
+
FORCE_BODY = cfg.FORCE_BODY || false;
|
|
458
|
+
SANITIZE_DOM = cfg.SANITIZE_DOM !== false;
|
|
459
|
+
SANITIZE_NAMED_PROPS = cfg.SANITIZE_NAMED_PROPS || false;
|
|
460
|
+
KEEP_CONTENT = cfg.KEEP_CONTENT !== false;
|
|
461
|
+
IN_PLACE = cfg.IN_PLACE || false;
|
|
462
|
+
IS_ALLOWED_URI$1 = isRegex(cfg.ALLOWED_URI_REGEXP) ? cfg.ALLOWED_URI_REGEXP : IS_ALLOWED_URI;
|
|
463
|
+
NAMESPACE = typeof cfg.NAMESPACE === "string" ? cfg.NAMESPACE : HTML_NAMESPACE;
|
|
464
|
+
MATHML_TEXT_INTEGRATION_POINTS = objectHasOwnProperty(cfg, "MATHML_TEXT_INTEGRATION_POINTS") && cfg.MATHML_TEXT_INTEGRATION_POINTS && typeof cfg.MATHML_TEXT_INTEGRATION_POINTS === "object" ? clone(cfg.MATHML_TEXT_INTEGRATION_POINTS) : addToSet({}, ["mi", "mo", "mn", "ms", "mtext"]);
|
|
465
|
+
HTML_INTEGRATION_POINTS = objectHasOwnProperty(cfg, "HTML_INTEGRATION_POINTS") && cfg.HTML_INTEGRATION_POINTS && typeof cfg.HTML_INTEGRATION_POINTS === "object" ? clone(cfg.HTML_INTEGRATION_POINTS) : addToSet({}, ["annotation-xml"]);
|
|
466
|
+
const customElementHandling = objectHasOwnProperty(cfg, "CUSTOM_ELEMENT_HANDLING") && cfg.CUSTOM_ELEMENT_HANDLING && typeof cfg.CUSTOM_ELEMENT_HANDLING === "object" ? clone(cfg.CUSTOM_ELEMENT_HANDLING) : create(null);
|
|
467
|
+
CUSTOM_ELEMENT_HANDLING = create(null);
|
|
468
|
+
if (objectHasOwnProperty(customElementHandling, "tagNameCheck") && isRegexOrFunction(customElementHandling.tagNameCheck)) {
|
|
469
|
+
CUSTOM_ELEMENT_HANDLING.tagNameCheck = customElementHandling.tagNameCheck;
|
|
470
|
+
}
|
|
471
|
+
if (objectHasOwnProperty(customElementHandling, "attributeNameCheck") && isRegexOrFunction(customElementHandling.attributeNameCheck)) {
|
|
472
|
+
CUSTOM_ELEMENT_HANDLING.attributeNameCheck = customElementHandling.attributeNameCheck;
|
|
473
|
+
}
|
|
474
|
+
if (objectHasOwnProperty(customElementHandling, "allowCustomizedBuiltInElements") && typeof customElementHandling.allowCustomizedBuiltInElements === "boolean") {
|
|
475
|
+
CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements = customElementHandling.allowCustomizedBuiltInElements;
|
|
476
|
+
}
|
|
477
|
+
if (SAFE_FOR_TEMPLATES) {
|
|
478
|
+
ALLOW_DATA_ATTR = false;
|
|
479
|
+
}
|
|
480
|
+
if (RETURN_DOM_FRAGMENT) {
|
|
481
|
+
RETURN_DOM = true;
|
|
482
|
+
}
|
|
483
|
+
if (USE_PROFILES) {
|
|
484
|
+
ALLOWED_TAGS = addToSet({}, text);
|
|
485
|
+
ALLOWED_ATTR = create(null);
|
|
486
|
+
if (USE_PROFILES.html === true) {
|
|
487
|
+
addToSet(ALLOWED_TAGS, html$1);
|
|
488
|
+
addToSet(ALLOWED_ATTR, html);
|
|
489
|
+
}
|
|
490
|
+
if (USE_PROFILES.svg === true) {
|
|
491
|
+
addToSet(ALLOWED_TAGS, svg$1);
|
|
492
|
+
addToSet(ALLOWED_ATTR, svg);
|
|
493
|
+
addToSet(ALLOWED_ATTR, xml);
|
|
494
|
+
}
|
|
495
|
+
if (USE_PROFILES.svgFilters === true) {
|
|
496
|
+
addToSet(ALLOWED_TAGS, svgFilters);
|
|
497
|
+
addToSet(ALLOWED_ATTR, svg);
|
|
498
|
+
addToSet(ALLOWED_ATTR, xml);
|
|
499
|
+
}
|
|
500
|
+
if (USE_PROFILES.mathMl === true) {
|
|
501
|
+
addToSet(ALLOWED_TAGS, mathMl$1);
|
|
502
|
+
addToSet(ALLOWED_ATTR, mathMl);
|
|
503
|
+
addToSet(ALLOWED_ATTR, xml);
|
|
504
|
+
}
|
|
505
|
+
}
|
|
506
|
+
EXTRA_ELEMENT_HANDLING.tagCheck = null;
|
|
507
|
+
EXTRA_ELEMENT_HANDLING.attributeCheck = null;
|
|
508
|
+
if (objectHasOwnProperty(cfg, "ADD_TAGS")) {
|
|
509
|
+
if (typeof cfg.ADD_TAGS === "function") {
|
|
510
|
+
EXTRA_ELEMENT_HANDLING.tagCheck = cfg.ADD_TAGS;
|
|
511
|
+
} else if (arrayIsArray(cfg.ADD_TAGS)) {
|
|
512
|
+
if (ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {
|
|
513
|
+
ALLOWED_TAGS = clone(ALLOWED_TAGS);
|
|
514
|
+
}
|
|
515
|
+
addToSet(ALLOWED_TAGS, cfg.ADD_TAGS, transformCaseFunc);
|
|
516
|
+
}
|
|
517
|
+
}
|
|
518
|
+
if (objectHasOwnProperty(cfg, "ADD_ATTR")) {
|
|
519
|
+
if (typeof cfg.ADD_ATTR === "function") {
|
|
520
|
+
EXTRA_ELEMENT_HANDLING.attributeCheck = cfg.ADD_ATTR;
|
|
521
|
+
} else if (arrayIsArray(cfg.ADD_ATTR)) {
|
|
522
|
+
if (ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {
|
|
523
|
+
ALLOWED_ATTR = clone(ALLOWED_ATTR);
|
|
524
|
+
}
|
|
525
|
+
addToSet(ALLOWED_ATTR, cfg.ADD_ATTR, transformCaseFunc);
|
|
526
|
+
}
|
|
527
|
+
}
|
|
528
|
+
if (objectHasOwnProperty(cfg, "ADD_URI_SAFE_ATTR") && arrayIsArray(cfg.ADD_URI_SAFE_ATTR)) {
|
|
529
|
+
addToSet(URI_SAFE_ATTRIBUTES, cfg.ADD_URI_SAFE_ATTR, transformCaseFunc);
|
|
530
|
+
}
|
|
531
|
+
if (objectHasOwnProperty(cfg, "FORBID_CONTENTS") && arrayIsArray(cfg.FORBID_CONTENTS)) {
|
|
532
|
+
if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {
|
|
533
|
+
FORBID_CONTENTS = clone(FORBID_CONTENTS);
|
|
534
|
+
}
|
|
535
|
+
addToSet(FORBID_CONTENTS, cfg.FORBID_CONTENTS, transformCaseFunc);
|
|
536
|
+
}
|
|
537
|
+
if (objectHasOwnProperty(cfg, "ADD_FORBID_CONTENTS") && arrayIsArray(cfg.ADD_FORBID_CONTENTS)) {
|
|
538
|
+
if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {
|
|
539
|
+
FORBID_CONTENTS = clone(FORBID_CONTENTS);
|
|
540
|
+
}
|
|
541
|
+
addToSet(FORBID_CONTENTS, cfg.ADD_FORBID_CONTENTS, transformCaseFunc);
|
|
542
|
+
}
|
|
543
|
+
if (KEEP_CONTENT) {
|
|
544
|
+
ALLOWED_TAGS["#text"] = true;
|
|
545
|
+
}
|
|
546
|
+
if (WHOLE_DOCUMENT) {
|
|
547
|
+
addToSet(ALLOWED_TAGS, ["html", "head", "body"]);
|
|
548
|
+
}
|
|
549
|
+
if (ALLOWED_TAGS.table) {
|
|
550
|
+
addToSet(ALLOWED_TAGS, ["tbody"]);
|
|
551
|
+
delete FORBID_TAGS.tbody;
|
|
552
|
+
}
|
|
553
|
+
if (cfg.TRUSTED_TYPES_POLICY) {
|
|
554
|
+
if (typeof cfg.TRUSTED_TYPES_POLICY.createHTML !== "function") {
|
|
555
|
+
throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a "createHTML" hook.');
|
|
556
|
+
}
|
|
557
|
+
if (typeof cfg.TRUSTED_TYPES_POLICY.createScriptURL !== "function") {
|
|
558
|
+
throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a "createScriptURL" hook.');
|
|
559
|
+
}
|
|
560
|
+
trustedTypesPolicy = cfg.TRUSTED_TYPES_POLICY;
|
|
561
|
+
emptyHTML = trustedTypesPolicy.createHTML("");
|
|
562
|
+
} else {
|
|
563
|
+
if (trustedTypesPolicy === void 0) {
|
|
564
|
+
trustedTypesPolicy = _createTrustedTypesPolicy(trustedTypes, currentScript);
|
|
565
|
+
}
|
|
566
|
+
if (trustedTypesPolicy !== null && typeof emptyHTML === "string") {
|
|
567
|
+
emptyHTML = trustedTypesPolicy.createHTML("");
|
|
568
|
+
}
|
|
569
|
+
}
|
|
570
|
+
if (freeze) {
|
|
571
|
+
freeze(cfg);
|
|
572
|
+
}
|
|
573
|
+
CONFIG = cfg;
|
|
574
|
+
};
|
|
575
|
+
const ALL_SVG_TAGS = addToSet({}, [...svg$1, ...svgFilters, ...svgDisallowed]);
|
|
576
|
+
const ALL_MATHML_TAGS = addToSet({}, [...mathMl$1, ...mathMlDisallowed]);
|
|
577
|
+
const _checkValidNamespace = function _checkValidNamespace2(element) {
|
|
578
|
+
let parent = getParentNode(element);
|
|
579
|
+
if (!parent || !parent.tagName) {
|
|
580
|
+
parent = {
|
|
581
|
+
namespaceURI: NAMESPACE,
|
|
582
|
+
tagName: "template"
|
|
583
|
+
};
|
|
584
|
+
}
|
|
585
|
+
const tagName = stringToLowerCase(element.tagName);
|
|
586
|
+
const parentTagName = stringToLowerCase(parent.tagName);
|
|
587
|
+
if (!ALLOWED_NAMESPACES[element.namespaceURI]) {
|
|
588
|
+
return false;
|
|
589
|
+
}
|
|
590
|
+
if (element.namespaceURI === SVG_NAMESPACE) {
|
|
591
|
+
if (parent.namespaceURI === HTML_NAMESPACE) {
|
|
592
|
+
return tagName === "svg";
|
|
593
|
+
}
|
|
594
|
+
if (parent.namespaceURI === MATHML_NAMESPACE) {
|
|
595
|
+
return tagName === "svg" && (parentTagName === "annotation-xml" || MATHML_TEXT_INTEGRATION_POINTS[parentTagName]);
|
|
596
|
+
}
|
|
597
|
+
return Boolean(ALL_SVG_TAGS[tagName]);
|
|
598
|
+
}
|
|
599
|
+
if (element.namespaceURI === MATHML_NAMESPACE) {
|
|
600
|
+
if (parent.namespaceURI === HTML_NAMESPACE) {
|
|
601
|
+
return tagName === "math";
|
|
602
|
+
}
|
|
603
|
+
if (parent.namespaceURI === SVG_NAMESPACE) {
|
|
604
|
+
return tagName === "math" && HTML_INTEGRATION_POINTS[parentTagName];
|
|
605
|
+
}
|
|
606
|
+
return Boolean(ALL_MATHML_TAGS[tagName]);
|
|
607
|
+
}
|
|
608
|
+
if (element.namespaceURI === HTML_NAMESPACE) {
|
|
609
|
+
if (parent.namespaceURI === SVG_NAMESPACE && !HTML_INTEGRATION_POINTS[parentTagName]) {
|
|
610
|
+
return false;
|
|
611
|
+
}
|
|
612
|
+
if (parent.namespaceURI === MATHML_NAMESPACE && !MATHML_TEXT_INTEGRATION_POINTS[parentTagName]) {
|
|
613
|
+
return false;
|
|
614
|
+
}
|
|
615
|
+
return !ALL_MATHML_TAGS[tagName] && (COMMON_SVG_AND_HTML_ELEMENTS[tagName] || !ALL_SVG_TAGS[tagName]);
|
|
616
|
+
}
|
|
617
|
+
if (PARSER_MEDIA_TYPE === "application/xhtml+xml" && ALLOWED_NAMESPACES[element.namespaceURI]) {
|
|
618
|
+
return true;
|
|
619
|
+
}
|
|
620
|
+
return false;
|
|
621
|
+
};
|
|
622
|
+
const _forceRemove = function _forceRemove2(node) {
|
|
623
|
+
arrayPush(DOMPurify.removed, {
|
|
624
|
+
element: node
|
|
625
|
+
});
|
|
626
|
+
try {
|
|
627
|
+
getParentNode(node).removeChild(node);
|
|
628
|
+
} catch (_) {
|
|
629
|
+
remove(node);
|
|
630
|
+
}
|
|
631
|
+
};
|
|
632
|
+
const _removeAttribute = function _removeAttribute2(name, element) {
|
|
633
|
+
try {
|
|
634
|
+
arrayPush(DOMPurify.removed, {
|
|
635
|
+
attribute: element.getAttributeNode(name),
|
|
636
|
+
from: element
|
|
637
|
+
});
|
|
638
|
+
} catch (_) {
|
|
639
|
+
arrayPush(DOMPurify.removed, {
|
|
640
|
+
attribute: null,
|
|
641
|
+
from: element
|
|
642
|
+
});
|
|
643
|
+
}
|
|
644
|
+
element.removeAttribute(name);
|
|
645
|
+
if (name === "is") {
|
|
646
|
+
if (RETURN_DOM || RETURN_DOM_FRAGMENT) {
|
|
647
|
+
try {
|
|
648
|
+
_forceRemove(element);
|
|
649
|
+
} catch (_) {
|
|
650
|
+
}
|
|
651
|
+
} else {
|
|
652
|
+
try {
|
|
653
|
+
element.setAttribute(name, "");
|
|
654
|
+
} catch (_) {
|
|
655
|
+
}
|
|
656
|
+
}
|
|
657
|
+
}
|
|
658
|
+
};
|
|
659
|
+
const _initDocument = function _initDocument2(dirty) {
|
|
660
|
+
let doc = null;
|
|
661
|
+
let leadingWhitespace = null;
|
|
662
|
+
if (FORCE_BODY) {
|
|
663
|
+
dirty = "<remove></remove>" + dirty;
|
|
664
|
+
} else {
|
|
665
|
+
const matches = stringMatch(dirty, /^[\r\n\t ]+/);
|
|
666
|
+
leadingWhitespace = matches && matches[0];
|
|
667
|
+
}
|
|
668
|
+
if (PARSER_MEDIA_TYPE === "application/xhtml+xml" && NAMESPACE === HTML_NAMESPACE) {
|
|
669
|
+
dirty = '<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>' + dirty + "</body></html>";
|
|
670
|
+
}
|
|
671
|
+
const dirtyPayload = trustedTypesPolicy ? trustedTypesPolicy.createHTML(dirty) : dirty;
|
|
672
|
+
if (NAMESPACE === HTML_NAMESPACE) {
|
|
673
|
+
try {
|
|
674
|
+
doc = new DOMParser().parseFromString(dirtyPayload, PARSER_MEDIA_TYPE);
|
|
675
|
+
} catch (_) {
|
|
676
|
+
}
|
|
677
|
+
}
|
|
678
|
+
if (!doc || !doc.documentElement) {
|
|
679
|
+
doc = implementation.createDocument(NAMESPACE, "template", null);
|
|
680
|
+
try {
|
|
681
|
+
doc.documentElement.innerHTML = IS_EMPTY_INPUT ? emptyHTML : dirtyPayload;
|
|
682
|
+
} catch (_) {
|
|
683
|
+
}
|
|
684
|
+
}
|
|
685
|
+
const body = doc.body || doc.documentElement;
|
|
686
|
+
if (dirty && leadingWhitespace) {
|
|
687
|
+
body.insertBefore(document.createTextNode(leadingWhitespace), body.childNodes[0] || null);
|
|
688
|
+
}
|
|
689
|
+
if (NAMESPACE === HTML_NAMESPACE) {
|
|
690
|
+
return getElementsByTagName.call(doc, WHOLE_DOCUMENT ? "html" : "body")[0];
|
|
691
|
+
}
|
|
692
|
+
return WHOLE_DOCUMENT ? doc.documentElement : body;
|
|
693
|
+
};
|
|
694
|
+
const _createNodeIterator = function _createNodeIterator2(root) {
|
|
695
|
+
return createNodeIterator.call(
|
|
696
|
+
root.ownerDocument || root,
|
|
697
|
+
root,
|
|
698
|
+
// eslint-disable-next-line no-bitwise
|
|
699
|
+
NodeFilter.SHOW_ELEMENT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_TEXT | NodeFilter.SHOW_PROCESSING_INSTRUCTION | NodeFilter.SHOW_CDATA_SECTION,
|
|
700
|
+
null
|
|
701
|
+
);
|
|
702
|
+
};
|
|
703
|
+
const _scrubTemplateExpressions = function _scrubTemplateExpressions2(node) {
|
|
704
|
+
node.normalize();
|
|
705
|
+
const walker = createNodeIterator.call(
|
|
706
|
+
node.ownerDocument || node,
|
|
707
|
+
node,
|
|
708
|
+
// eslint-disable-next-line no-bitwise
|
|
709
|
+
NodeFilter.SHOW_TEXT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_CDATA_SECTION | NodeFilter.SHOW_PROCESSING_INSTRUCTION,
|
|
710
|
+
null
|
|
711
|
+
);
|
|
712
|
+
let currentNode = walker.nextNode();
|
|
713
|
+
while (currentNode) {
|
|
714
|
+
let data = currentNode.data;
|
|
715
|
+
arrayForEach([MUSTACHE_EXPR$1, ERB_EXPR$1, TMPLIT_EXPR$1], (expr) => {
|
|
716
|
+
data = stringReplace(data, expr, " ");
|
|
717
|
+
});
|
|
718
|
+
currentNode.data = data;
|
|
719
|
+
currentNode = walker.nextNode();
|
|
720
|
+
}
|
|
721
|
+
};
|
|
722
|
+
const _isClobbered = function _isClobbered2(element) {
|
|
723
|
+
return element instanceof HTMLFormElement && (typeof element.nodeName !== "string" || typeof element.textContent !== "string" || typeof element.removeChild !== "function" || !(element.attributes instanceof NamedNodeMap) || typeof element.removeAttribute !== "function" || typeof element.setAttribute !== "function" || typeof element.namespaceURI !== "string" || typeof element.insertBefore !== "function" || typeof element.hasChildNodes !== "function");
|
|
724
|
+
};
|
|
725
|
+
const _isNode = function _isNode2(value) {
|
|
726
|
+
if (!getNodeType || typeof value !== "object" || value === null) {
|
|
727
|
+
return false;
|
|
728
|
+
}
|
|
729
|
+
try {
|
|
730
|
+
return typeof getNodeType(value) === "number";
|
|
731
|
+
} catch (_) {
|
|
732
|
+
return false;
|
|
733
|
+
}
|
|
734
|
+
};
|
|
735
|
+
function _executeHooks(hooks2, currentNode, data) {
|
|
736
|
+
arrayForEach(hooks2, (hook) => {
|
|
737
|
+
hook.call(DOMPurify, currentNode, data, CONFIG);
|
|
738
|
+
});
|
|
739
|
+
}
|
|
740
|
+
const _sanitizeElements = function _sanitizeElements2(currentNode) {
|
|
741
|
+
let content = null;
|
|
742
|
+
_executeHooks(hooks.beforeSanitizeElements, currentNode, null);
|
|
743
|
+
if (_isClobbered(currentNode)) {
|
|
744
|
+
_forceRemove(currentNode);
|
|
745
|
+
return true;
|
|
746
|
+
}
|
|
747
|
+
const tagName = transformCaseFunc(currentNode.nodeName);
|
|
748
|
+
_executeHooks(hooks.uponSanitizeElement, currentNode, {
|
|
749
|
+
tagName,
|
|
750
|
+
allowedTags: ALLOWED_TAGS
|
|
751
|
+
});
|
|
752
|
+
if (SAFE_FOR_XML && currentNode.hasChildNodes() && !_isNode(currentNode.firstElementChild) && regExpTest(/<[/\w!]/g, currentNode.innerHTML) && regExpTest(/<[/\w!]/g, currentNode.textContent)) {
|
|
753
|
+
_forceRemove(currentNode);
|
|
754
|
+
return true;
|
|
755
|
+
}
|
|
756
|
+
if (SAFE_FOR_XML && currentNode.namespaceURI === HTML_NAMESPACE && tagName === "style" && _isNode(currentNode.firstElementChild)) {
|
|
757
|
+
_forceRemove(currentNode);
|
|
758
|
+
return true;
|
|
759
|
+
}
|
|
760
|
+
if (currentNode.nodeType === NODE_TYPE.progressingInstruction) {
|
|
761
|
+
_forceRemove(currentNode);
|
|
762
|
+
return true;
|
|
763
|
+
}
|
|
764
|
+
if (SAFE_FOR_XML && currentNode.nodeType === NODE_TYPE.comment && regExpTest(/<[/\w]/g, currentNode.data)) {
|
|
765
|
+
_forceRemove(currentNode);
|
|
766
|
+
return true;
|
|
767
|
+
}
|
|
768
|
+
if (FORBID_TAGS[tagName] || !(EXTRA_ELEMENT_HANDLING.tagCheck instanceof Function && EXTRA_ELEMENT_HANDLING.tagCheck(tagName)) && !ALLOWED_TAGS[tagName]) {
|
|
769
|
+
if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) {
|
|
770
|
+
if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)) {
|
|
771
|
+
return false;
|
|
772
|
+
}
|
|
773
|
+
if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(tagName)) {
|
|
774
|
+
return false;
|
|
775
|
+
}
|
|
776
|
+
}
|
|
777
|
+
if (KEEP_CONTENT && !FORBID_CONTENTS[tagName]) {
|
|
778
|
+
const parentNode = getParentNode(currentNode) || currentNode.parentNode;
|
|
779
|
+
const childNodes = getChildNodes(currentNode) || currentNode.childNodes;
|
|
780
|
+
if (childNodes && parentNode) {
|
|
781
|
+
const childCount = childNodes.length;
|
|
782
|
+
for (let i = childCount - 1; i >= 0; --i) {
|
|
783
|
+
const childClone = cloneNode(childNodes[i], true);
|
|
784
|
+
parentNode.insertBefore(childClone, getNextSibling(currentNode));
|
|
785
|
+
}
|
|
786
|
+
}
|
|
787
|
+
}
|
|
788
|
+
_forceRemove(currentNode);
|
|
789
|
+
return true;
|
|
790
|
+
}
|
|
791
|
+
if (currentNode instanceof Element && !_checkValidNamespace(currentNode)) {
|
|
792
|
+
_forceRemove(currentNode);
|
|
793
|
+
return true;
|
|
794
|
+
}
|
|
795
|
+
if ((tagName === "noscript" || tagName === "noembed" || tagName === "noframes") && regExpTest(/<\/no(script|embed|frames)/i, currentNode.innerHTML)) {
|
|
796
|
+
_forceRemove(currentNode);
|
|
797
|
+
return true;
|
|
798
|
+
}
|
|
799
|
+
if (SAFE_FOR_TEMPLATES && currentNode.nodeType === NODE_TYPE.text) {
|
|
800
|
+
content = currentNode.textContent;
|
|
801
|
+
arrayForEach([MUSTACHE_EXPR$1, ERB_EXPR$1, TMPLIT_EXPR$1], (expr) => {
|
|
802
|
+
content = stringReplace(content, expr, " ");
|
|
803
|
+
});
|
|
804
|
+
if (currentNode.textContent !== content) {
|
|
805
|
+
arrayPush(DOMPurify.removed, {
|
|
806
|
+
element: currentNode.cloneNode()
|
|
807
|
+
});
|
|
808
|
+
currentNode.textContent = content;
|
|
809
|
+
}
|
|
810
|
+
}
|
|
811
|
+
_executeHooks(hooks.afterSanitizeElements, currentNode, null);
|
|
812
|
+
return false;
|
|
813
|
+
};
|
|
814
|
+
const _isValidAttribute = function _isValidAttribute2(lcTag, lcName, value) {
|
|
815
|
+
if (FORBID_ATTR[lcName]) {
|
|
816
|
+
return false;
|
|
817
|
+
}
|
|
818
|
+
if (SANITIZE_DOM && (lcName === "id" || lcName === "name") && (value in document || value in formElement)) {
|
|
819
|
+
return false;
|
|
820
|
+
}
|
|
821
|
+
const nameIsPermitted = ALLOWED_ATTR[lcName] || EXTRA_ELEMENT_HANDLING.attributeCheck instanceof Function && EXTRA_ELEMENT_HANDLING.attributeCheck(lcName, lcTag);
|
|
822
|
+
if (ALLOW_DATA_ATTR && !FORBID_ATTR[lcName] && regExpTest(DATA_ATTR$1, lcName)) ;
|
|
823
|
+
else if (ALLOW_ARIA_ATTR && regExpTest(ARIA_ATTR$1, lcName)) ;
|
|
824
|
+
else if (!nameIsPermitted || FORBID_ATTR[lcName]) {
|
|
825
|
+
if (
|
|
826
|
+
// First condition does a very basic check if a) it's basically a valid custom element tagname AND
|
|
827
|
+
// b) if the tagName passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
|
|
828
|
+
// and c) if the attribute name passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.attributeNameCheck
|
|
829
|
+
_isBasicCustomElement(lcTag) && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, lcTag) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(lcTag)) && (CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.attributeNameCheck, lcName) || CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.attributeNameCheck(lcName, lcTag)) || // Alternative, second condition checks if it's an `is`-attribute, AND
|
|
830
|
+
// the value passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
|
|
831
|
+
lcName === "is" && CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, value) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(value))
|
|
832
|
+
) ;
|
|
833
|
+
else {
|
|
834
|
+
return false;
|
|
835
|
+
}
|
|
836
|
+
} else if (URI_SAFE_ATTRIBUTES[lcName]) ;
|
|
837
|
+
else if (regExpTest(IS_ALLOWED_URI$1, stringReplace(value, ATTR_WHITESPACE$1, ""))) ;
|
|
838
|
+
else if ((lcName === "src" || lcName === "xlink:href" || lcName === "href") && lcTag !== "script" && stringIndexOf(value, "data:") === 0 && DATA_URI_TAGS[lcTag]) ;
|
|
839
|
+
else if (ALLOW_UNKNOWN_PROTOCOLS && !regExpTest(IS_SCRIPT_OR_DATA$1, stringReplace(value, ATTR_WHITESPACE$1, ""))) ;
|
|
840
|
+
else if (value) {
|
|
841
|
+
return false;
|
|
842
|
+
} else ;
|
|
843
|
+
return true;
|
|
844
|
+
};
|
|
845
|
+
const RESERVED_CUSTOM_ELEMENT_NAMES = addToSet({}, ["annotation-xml", "color-profile", "font-face", "font-face-format", "font-face-name", "font-face-src", "font-face-uri", "missing-glyph"]);
|
|
846
|
+
const _isBasicCustomElement = function _isBasicCustomElement2(tagName) {
|
|
847
|
+
return !RESERVED_CUSTOM_ELEMENT_NAMES[stringToLowerCase(tagName)] && regExpTest(CUSTOM_ELEMENT$1, tagName);
|
|
848
|
+
};
|
|
849
|
+
const _sanitizeAttributes = function _sanitizeAttributes2(currentNode) {
|
|
850
|
+
_executeHooks(hooks.beforeSanitizeAttributes, currentNode, null);
|
|
851
|
+
const attributes = currentNode.attributes;
|
|
852
|
+
if (!attributes || _isClobbered(currentNode)) {
|
|
853
|
+
return;
|
|
854
|
+
}
|
|
855
|
+
const hookEvent = {
|
|
856
|
+
attrName: "",
|
|
857
|
+
attrValue: "",
|
|
858
|
+
keepAttr: true,
|
|
859
|
+
allowedAttributes: ALLOWED_ATTR,
|
|
860
|
+
forceKeepAttr: void 0
|
|
861
|
+
};
|
|
862
|
+
let l = attributes.length;
|
|
863
|
+
while (l--) {
|
|
864
|
+
const attr = attributes[l];
|
|
865
|
+
const name = attr.name, namespaceURI = attr.namespaceURI, attrValue = attr.value;
|
|
866
|
+
const lcName = transformCaseFunc(name);
|
|
867
|
+
const initValue = attrValue;
|
|
868
|
+
let value = name === "value" ? initValue : stringTrim(initValue);
|
|
869
|
+
hookEvent.attrName = lcName;
|
|
870
|
+
hookEvent.attrValue = value;
|
|
871
|
+
hookEvent.keepAttr = true;
|
|
872
|
+
hookEvent.forceKeepAttr = void 0;
|
|
873
|
+
_executeHooks(hooks.uponSanitizeAttribute, currentNode, hookEvent);
|
|
874
|
+
value = hookEvent.attrValue;
|
|
875
|
+
if (SANITIZE_NAMED_PROPS && (lcName === "id" || lcName === "name") && stringIndexOf(value, SANITIZE_NAMED_PROPS_PREFIX) !== 0) {
|
|
876
|
+
_removeAttribute(name, currentNode);
|
|
877
|
+
value = SANITIZE_NAMED_PROPS_PREFIX + value;
|
|
878
|
+
}
|
|
879
|
+
if (SAFE_FOR_XML && regExpTest(/((--!?|])>)|<\/(style|script|title|xmp|textarea|noscript|iframe|noembed|noframes)/i, value)) {
|
|
880
|
+
_removeAttribute(name, currentNode);
|
|
881
|
+
continue;
|
|
882
|
+
}
|
|
883
|
+
if (lcName === "attributename" && stringMatch(value, "href")) {
|
|
884
|
+
_removeAttribute(name, currentNode);
|
|
885
|
+
continue;
|
|
886
|
+
}
|
|
887
|
+
if (hookEvent.forceKeepAttr) {
|
|
888
|
+
continue;
|
|
889
|
+
}
|
|
890
|
+
if (!hookEvent.keepAttr) {
|
|
891
|
+
_removeAttribute(name, currentNode);
|
|
892
|
+
continue;
|
|
893
|
+
}
|
|
894
|
+
if (!ALLOW_SELF_CLOSE_IN_ATTR && regExpTest(/\/>/i, value)) {
|
|
895
|
+
_removeAttribute(name, currentNode);
|
|
896
|
+
continue;
|
|
897
|
+
}
|
|
898
|
+
if (SAFE_FOR_TEMPLATES) {
|
|
899
|
+
arrayForEach([MUSTACHE_EXPR$1, ERB_EXPR$1, TMPLIT_EXPR$1], (expr) => {
|
|
900
|
+
value = stringReplace(value, expr, " ");
|
|
901
|
+
});
|
|
902
|
+
}
|
|
903
|
+
const lcTag = transformCaseFunc(currentNode.nodeName);
|
|
904
|
+
if (!_isValidAttribute(lcTag, lcName, value)) {
|
|
905
|
+
_removeAttribute(name, currentNode);
|
|
906
|
+
continue;
|
|
907
|
+
}
|
|
908
|
+
if (trustedTypesPolicy && typeof trustedTypes === "object" && typeof trustedTypes.getAttributeType === "function") {
|
|
909
|
+
if (namespaceURI) ;
|
|
910
|
+
else {
|
|
911
|
+
switch (trustedTypes.getAttributeType(lcTag, lcName)) {
|
|
912
|
+
case "TrustedHTML": {
|
|
913
|
+
value = trustedTypesPolicy.createHTML(value);
|
|
914
|
+
break;
|
|
915
|
+
}
|
|
916
|
+
case "TrustedScriptURL": {
|
|
917
|
+
value = trustedTypesPolicy.createScriptURL(value);
|
|
918
|
+
break;
|
|
919
|
+
}
|
|
920
|
+
}
|
|
921
|
+
}
|
|
922
|
+
}
|
|
923
|
+
if (value !== initValue) {
|
|
924
|
+
try {
|
|
925
|
+
if (namespaceURI) {
|
|
926
|
+
currentNode.setAttributeNS(namespaceURI, name, value);
|
|
927
|
+
} else {
|
|
928
|
+
currentNode.setAttribute(name, value);
|
|
929
|
+
}
|
|
930
|
+
if (_isClobbered(currentNode)) {
|
|
931
|
+
_forceRemove(currentNode);
|
|
932
|
+
} else {
|
|
933
|
+
arrayPop(DOMPurify.removed);
|
|
934
|
+
}
|
|
935
|
+
} catch (_) {
|
|
936
|
+
_removeAttribute(name, currentNode);
|
|
937
|
+
}
|
|
938
|
+
}
|
|
939
|
+
}
|
|
940
|
+
_executeHooks(hooks.afterSanitizeAttributes, currentNode, null);
|
|
941
|
+
};
|
|
942
|
+
const _sanitizeShadowDOM2 = function _sanitizeShadowDOM(fragment) {
|
|
943
|
+
let shadowNode = null;
|
|
944
|
+
const shadowIterator = _createNodeIterator(fragment);
|
|
945
|
+
_executeHooks(hooks.beforeSanitizeShadowDOM, fragment, null);
|
|
946
|
+
while (shadowNode = shadowIterator.nextNode()) {
|
|
947
|
+
_executeHooks(hooks.uponSanitizeShadowNode, shadowNode, null);
|
|
948
|
+
_sanitizeElements(shadowNode);
|
|
949
|
+
_sanitizeAttributes(shadowNode);
|
|
950
|
+
if (shadowNode.content instanceof DocumentFragment) {
|
|
951
|
+
_sanitizeShadowDOM2(shadowNode.content);
|
|
952
|
+
}
|
|
953
|
+
}
|
|
954
|
+
_executeHooks(hooks.afterSanitizeShadowDOM, fragment, null);
|
|
955
|
+
};
|
|
956
|
+
const _sanitizeAttachedShadowRoots2 = function _sanitizeAttachedShadowRoots(root) {
|
|
957
|
+
if (root.nodeType === NODE_TYPE.element && root.shadowRoot instanceof DocumentFragment) {
|
|
958
|
+
const sr = root.shadowRoot;
|
|
959
|
+
_sanitizeAttachedShadowRoots2(sr);
|
|
960
|
+
_sanitizeShadowDOM2(sr);
|
|
961
|
+
}
|
|
962
|
+
const childNodes = root.childNodes;
|
|
963
|
+
if (!childNodes) {
|
|
964
|
+
return;
|
|
965
|
+
}
|
|
966
|
+
const snapshot = [];
|
|
967
|
+
arrayForEach(childNodes, (child) => {
|
|
968
|
+
arrayPush(snapshot, child);
|
|
969
|
+
});
|
|
970
|
+
for (const child of snapshot) {
|
|
971
|
+
_sanitizeAttachedShadowRoots2(child);
|
|
972
|
+
}
|
|
973
|
+
};
|
|
974
|
+
DOMPurify.sanitize = function(dirty) {
|
|
975
|
+
let cfg = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {};
|
|
976
|
+
let body = null;
|
|
977
|
+
let importedNode = null;
|
|
978
|
+
let currentNode = null;
|
|
979
|
+
let returnNode = null;
|
|
980
|
+
IS_EMPTY_INPUT = !dirty;
|
|
981
|
+
if (IS_EMPTY_INPUT) {
|
|
982
|
+
dirty = "<!-->";
|
|
983
|
+
}
|
|
984
|
+
if (typeof dirty !== "string" && !_isNode(dirty)) {
|
|
985
|
+
dirty = stringifyValue(dirty);
|
|
986
|
+
if (typeof dirty !== "string") {
|
|
987
|
+
throw typeErrorCreate("dirty is not a string, aborting");
|
|
988
|
+
}
|
|
989
|
+
}
|
|
990
|
+
if (!DOMPurify.isSupported) {
|
|
991
|
+
return dirty;
|
|
992
|
+
}
|
|
993
|
+
if (!SET_CONFIG) {
|
|
994
|
+
_parseConfig(cfg);
|
|
995
|
+
}
|
|
996
|
+
DOMPurify.removed = [];
|
|
997
|
+
if (typeof dirty === "string") {
|
|
998
|
+
IN_PLACE = false;
|
|
999
|
+
}
|
|
1000
|
+
if (IN_PLACE) {
|
|
1001
|
+
const nn = dirty.nodeName;
|
|
1002
|
+
if (typeof nn === "string") {
|
|
1003
|
+
const tagName = transformCaseFunc(nn);
|
|
1004
|
+
if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {
|
|
1005
|
+
throw typeErrorCreate("root node is forbidden and cannot be sanitized in-place");
|
|
1006
|
+
}
|
|
1007
|
+
}
|
|
1008
|
+
_sanitizeAttachedShadowRoots2(dirty);
|
|
1009
|
+
} else if (_isNode(dirty)) {
|
|
1010
|
+
body = _initDocument("<!---->");
|
|
1011
|
+
importedNode = body.ownerDocument.importNode(dirty, true);
|
|
1012
|
+
if (importedNode.nodeType === NODE_TYPE.element && importedNode.nodeName === "BODY") {
|
|
1013
|
+
body = importedNode;
|
|
1014
|
+
} else if (importedNode.nodeName === "HTML") {
|
|
1015
|
+
body = importedNode;
|
|
1016
|
+
} else {
|
|
1017
|
+
body.appendChild(importedNode);
|
|
1018
|
+
}
|
|
1019
|
+
_sanitizeAttachedShadowRoots2(importedNode);
|
|
1020
|
+
} else {
|
|
1021
|
+
if (!RETURN_DOM && !SAFE_FOR_TEMPLATES && !WHOLE_DOCUMENT && // eslint-disable-next-line unicorn/prefer-includes
|
|
1022
|
+
dirty.indexOf("<") === -1) {
|
|
1023
|
+
return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? trustedTypesPolicy.createHTML(dirty) : dirty;
|
|
1024
|
+
}
|
|
1025
|
+
body = _initDocument(dirty);
|
|
1026
|
+
if (!body) {
|
|
1027
|
+
return RETURN_DOM ? null : RETURN_TRUSTED_TYPE ? emptyHTML : "";
|
|
1028
|
+
}
|
|
1029
|
+
}
|
|
1030
|
+
if (body && FORCE_BODY) {
|
|
1031
|
+
_forceRemove(body.firstChild);
|
|
1032
|
+
}
|
|
1033
|
+
const nodeIterator = _createNodeIterator(IN_PLACE ? dirty : body);
|
|
1034
|
+
while (currentNode = nodeIterator.nextNode()) {
|
|
1035
|
+
_sanitizeElements(currentNode);
|
|
1036
|
+
_sanitizeAttributes(currentNode);
|
|
1037
|
+
if (currentNode.content instanceof DocumentFragment) {
|
|
1038
|
+
_sanitizeShadowDOM2(currentNode.content);
|
|
1039
|
+
}
|
|
1040
|
+
}
|
|
1041
|
+
if (IN_PLACE) {
|
|
1042
|
+
if (SAFE_FOR_TEMPLATES) {
|
|
1043
|
+
_scrubTemplateExpressions(dirty);
|
|
1044
|
+
}
|
|
1045
|
+
return dirty;
|
|
1046
|
+
}
|
|
1047
|
+
if (RETURN_DOM) {
|
|
1048
|
+
if (SAFE_FOR_TEMPLATES) {
|
|
1049
|
+
_scrubTemplateExpressions(body);
|
|
1050
|
+
}
|
|
1051
|
+
if (RETURN_DOM_FRAGMENT) {
|
|
1052
|
+
returnNode = createDocumentFragment.call(body.ownerDocument);
|
|
1053
|
+
while (body.firstChild) {
|
|
1054
|
+
returnNode.appendChild(body.firstChild);
|
|
1055
|
+
}
|
|
1056
|
+
} else {
|
|
1057
|
+
returnNode = body;
|
|
1058
|
+
}
|
|
1059
|
+
if (ALLOWED_ATTR.shadowroot || ALLOWED_ATTR.shadowrootmode) {
|
|
1060
|
+
returnNode = importNode.call(originalDocument, returnNode, true);
|
|
1061
|
+
}
|
|
1062
|
+
return returnNode;
|
|
1063
|
+
}
|
|
1064
|
+
let serializedHTML = WHOLE_DOCUMENT ? body.outerHTML : body.innerHTML;
|
|
1065
|
+
if (WHOLE_DOCUMENT && ALLOWED_TAGS["!doctype"] && body.ownerDocument && body.ownerDocument.doctype && body.ownerDocument.doctype.name && regExpTest(DOCTYPE_NAME, body.ownerDocument.doctype.name)) {
|
|
1066
|
+
serializedHTML = "<!DOCTYPE " + body.ownerDocument.doctype.name + ">\n" + serializedHTML;
|
|
1067
|
+
}
|
|
1068
|
+
if (SAFE_FOR_TEMPLATES) {
|
|
1069
|
+
arrayForEach([MUSTACHE_EXPR$1, ERB_EXPR$1, TMPLIT_EXPR$1], (expr) => {
|
|
1070
|
+
serializedHTML = stringReplace(serializedHTML, expr, " ");
|
|
1071
|
+
});
|
|
1072
|
+
}
|
|
1073
|
+
return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? trustedTypesPolicy.createHTML(serializedHTML) : serializedHTML;
|
|
1074
|
+
};
|
|
1075
|
+
DOMPurify.setConfig = function() {
|
|
1076
|
+
let cfg = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
|
|
1077
|
+
_parseConfig(cfg);
|
|
1078
|
+
SET_CONFIG = true;
|
|
1079
|
+
};
|
|
1080
|
+
DOMPurify.clearConfig = function() {
|
|
1081
|
+
CONFIG = null;
|
|
1082
|
+
SET_CONFIG = false;
|
|
1083
|
+
};
|
|
1084
|
+
DOMPurify.isValidAttribute = function(tag, attr, value) {
|
|
1085
|
+
if (!CONFIG) {
|
|
1086
|
+
_parseConfig({});
|
|
1087
|
+
}
|
|
1088
|
+
const lcTag = transformCaseFunc(tag);
|
|
1089
|
+
const lcName = transformCaseFunc(attr);
|
|
1090
|
+
return _isValidAttribute(lcTag, lcName, value);
|
|
1091
|
+
};
|
|
1092
|
+
DOMPurify.addHook = function(entryPoint, hookFunction) {
|
|
1093
|
+
if (typeof hookFunction !== "function") {
|
|
1094
|
+
return;
|
|
1095
|
+
}
|
|
1096
|
+
arrayPush(hooks[entryPoint], hookFunction);
|
|
1097
|
+
};
|
|
1098
|
+
DOMPurify.removeHook = function(entryPoint, hookFunction) {
|
|
1099
|
+
if (hookFunction !== void 0) {
|
|
1100
|
+
const index = arrayLastIndexOf(hooks[entryPoint], hookFunction);
|
|
1101
|
+
return index === -1 ? void 0 : arraySplice(hooks[entryPoint], index, 1)[0];
|
|
1102
|
+
}
|
|
1103
|
+
return arrayPop(hooks[entryPoint]);
|
|
1104
|
+
};
|
|
1105
|
+
DOMPurify.removeHooks = function(entryPoint) {
|
|
1106
|
+
hooks[entryPoint] = [];
|
|
1107
|
+
};
|
|
1108
|
+
DOMPurify.removeAllHooks = function() {
|
|
1109
|
+
hooks = _createHooksMap();
|
|
1110
|
+
};
|
|
1111
|
+
return DOMPurify;
|
|
1112
|
+
}
|
|
1113
|
+
var purify = createDOMPurify();
|
|
1114
|
+
|
|
1115
|
+
// node_modules/isomorphic-dompurify/dist/browser.mjs
|
|
1116
|
+
var browser_default = purify;
|
|
1117
|
+
var sanitize = purify.sanitize.bind(purify);
|
|
1118
|
+
var isSupported = purify.isSupported;
|
|
1119
|
+
var addHook = purify.addHook.bind(purify);
|
|
1120
|
+
var removeHook = purify.removeHook.bind(purify);
|
|
1121
|
+
var removeHooks = purify.removeHooks.bind(purify);
|
|
1122
|
+
var removeAllHooks = purify.removeAllHooks.bind(purify);
|
|
1123
|
+
var setConfig = purify.setConfig.bind(purify);
|
|
1124
|
+
var clearConfig = purify.clearConfig.bind(purify);
|
|
1125
|
+
var isValidAttribute = purify.isValidAttribute.bind(purify);
|
|
1126
|
+
var version = purify.version;
|
|
1127
|
+
var removed = purify.removed;
|
|
1128
|
+
function clearWindow() {
|
|
1129
|
+
}
|
|
1130
|
+
export {
|
|
1131
|
+
addHook,
|
|
1132
|
+
clearConfig,
|
|
1133
|
+
clearWindow,
|
|
1134
|
+
browser_default as default,
|
|
1135
|
+
isSupported,
|
|
1136
|
+
isValidAttribute,
|
|
1137
|
+
removeAllHooks,
|
|
1138
|
+
removeHook,
|
|
1139
|
+
removeHooks,
|
|
1140
|
+
removed,
|
|
1141
|
+
sanitize,
|
|
1142
|
+
setConfig,
|
|
1143
|
+
version
|
|
1144
|
+
};
|
|
1145
|
+
/*! Bundled license information:
|
|
1146
|
+
|
|
1147
|
+
dompurify/dist/purify.es.mjs:
|
|
1148
|
+
(*! @license DOMPurify 3.4.5 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.5/LICENSE *)
|
|
1149
|
+
*/
|