@birdapi/velinstyle 1.1.0 → 1.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (328) hide show
  1. package/README.de.md +89 -161
  2. package/README.md +187 -119
  3. package/cli/blueprint.js +98 -5
  4. package/cli/blueprints/app-chrome.html +18 -0
  5. package/cli/blueprints/benefits-grid.html +9 -0
  6. package/cli/blueprints/bottom-nav-mobile.html +2 -1
  7. package/cli/blueprints/cookie-consent.html +1 -1
  8. package/cli/blueprints/cta-band.html +6 -0
  9. package/cli/blueprints/faq-section.html +18 -0
  10. package/cli/blueprints/filter-bar.html +4 -4
  11. package/cli/blueprints/form-contact.html +6 -5
  12. package/cli/blueprints/hero-section.html +3 -3
  13. package/cli/blueprints/notification-center.html +1 -1
  14. package/cli/blueprints/onboarding.html +2 -1
  15. package/cli/blueprints/ops-console.html +29 -0
  16. package/cli/blueprints/pricing-band.html +37 -0
  17. package/cli/blueprints/process-steps.html +10 -0
  18. package/cli/blueprints/services-grid.html +9 -0
  19. package/cli/blueprints/settings-panel.html +8 -6
  20. package/cli/blueprints/split-hero.html +25 -0
  21. package/cli/blueprints/testimonials.html +8 -0
  22. package/cli/blueprints/trust-bar.html +10 -0
  23. package/cli/cli-manifest.json +81 -17
  24. package/cli/contrast-utils.js +97 -0
  25. package/cli/create.js +370 -0
  26. package/cli/docgen/extract-attributes.js +128 -10
  27. package/cli/docgen/extract-cli.js +3 -2
  28. package/cli/docgen/extract-components.js +61 -2
  29. package/cli/docgen/extract-utilities.js +10 -10
  30. package/cli/doctor.js +119 -0
  31. package/cli/index.js +560 -44
  32. package/cli/meta.js +84 -1
  33. package/cli/perf-audit.js +15 -2
  34. package/cli/prompt-engine.js +243 -0
  35. package/cli/review.js +268 -0
  36. package/cli/scaffold.js +119 -4
  37. package/cli/scanner-rules-data.js +7 -0
  38. package/cli/scanner.js +357 -4
  39. package/cli/serve.js +81 -0
  40. package/cli/skills.js +223 -0
  41. package/cli/transparency.js +221 -0
  42. package/cli/wc-api.js +89 -0
  43. package/cli/workflow.js +42 -0
  44. package/components/index.js +2 -0
  45. package/components/runtime/component-loaders.js +2 -0
  46. package/components/velin-accordion.js +62 -13
  47. package/components/velin-bottom-nav.js +10 -0
  48. package/components/velin-calendar.js +212 -0
  49. package/components/velin-command.js +18 -2
  50. package/components/velin-data-table.js +78 -1
  51. package/components/velin-dialog.js +4 -1
  52. package/components/velin-drawer.js +2 -4
  53. package/components/velin-file-dropzone.js +162 -0
  54. package/components/velin-icon.js +22 -1
  55. package/components/velin-lightbox.js +5 -3
  56. package/components/velin-modal.js +2 -4
  57. package/components/velin-search.js +1 -1
  58. package/components/velin-sheet.js +2 -4
  59. package/core/a11y/component-contracts.json +20 -3
  60. package/core/attributes/registry.js +14 -0
  61. package/core/meta/build.js +125 -5
  62. package/core/meta/design-constraints/contact.json +9 -0
  63. package/core/meta/design-constraints/faq.json +9 -0
  64. package/core/meta/design-constraints/hero.json +13 -0
  65. package/core/meta/knowledge/components.json +622 -0
  66. package/core/meta/knowledge/tokens.json +282 -0
  67. package/core/meta/pages/registry.json +294 -0
  68. package/core/meta/schema.js +13 -1
  69. package/core/meta/sections/registry.json +185 -0
  70. package/core/transparency/attach.js +74 -0
  71. package/core/transparency/claims.js +97 -0
  72. package/core/transparency/doctor.js +142 -0
  73. package/core/transparency/engine.js +75 -0
  74. package/core/transparency/export.js +98 -0
  75. package/core/transparency/index.js +30 -0
  76. package/core/transparency/migrate.js +130 -0
  77. package/core/transparency/normalize.js +125 -0
  78. package/core/transparency/policy.js +105 -0
  79. package/core/transparency/providers.js +235 -0
  80. package/core/transparency/registry.js +104 -0
  81. package/core/transparency/renderer.js +111 -0
  82. package/core/transparency/reporter.js +113 -0
  83. package/core/transparency/validator.js +112 -0
  84. package/dist/chunks/attach-H2ZSEAE6.js +365 -0
  85. package/dist/chunks/{attributes-STYCS3O5.js → attributes-A423NX5J.js} +3 -3
  86. package/dist/chunks/attributes-DZCXX2RZ.js +404 -0
  87. package/dist/chunks/{attributes-353XDOAX.js → attributes-F6UPIEVP.js} +1 -1
  88. package/dist/chunks/{attributes-ADOKLKA7.js → attributes-GLYXGGAL.js} +3 -3
  89. package/dist/chunks/{attributes-TPANLMLF.js → attributes-UFTYOSAU.js} +3 -3
  90. package/dist/chunks/attributes-XGLXLR2T.js +391 -0
  91. package/dist/chunks/attributes-YF4NI2QS.js +391 -0
  92. package/dist/chunks/browser-AUABBYUK.js +1544 -0
  93. package/dist/chunks/{chunk-RSMRR27R.js → chunk-2LSKX57P.js} +12 -10
  94. package/dist/chunks/{chunk-IEHKRARD.js → chunk-2TGCVDUL.js} +11 -9
  95. package/dist/chunks/{chunk-SRL6EWHP.js → chunk-5JWGUAPC.js} +17 -13
  96. package/dist/chunks/chunk-7YSO2OQ2.js +113 -0
  97. package/dist/chunks/{chunk-QVHYL3R4.js → chunk-BHR3ZG6U.js} +6 -6
  98. package/dist/chunks/chunk-CQMTCEI6.js +113 -0
  99. package/dist/chunks/{chunk-J472ERN2.js → chunk-JMSIHEYX.js} +15 -4
  100. package/dist/chunks/{chunk-MKZP2TBH.js → chunk-L7ZGUU4D.js} +2 -2
  101. package/dist/chunks/chunk-TUGIPKW5.js +113 -0
  102. package/dist/chunks/{highlight-GJHHV4KM.js → highlight-M2ELQNYK.js} +1 -1
  103. package/dist/chunks/runtime-entry.js +1 -1
  104. package/dist/chunks/{velin-accordion-FBIPAEXG.js → velin-accordion-WSY6BMLA.js} +64 -10
  105. package/dist/chunks/{velin-bottom-nav-7GEMPIM6.js → velin-bottom-nav-5RVRNGIP.js} +25 -0
  106. package/dist/chunks/{velin-bottom-nav-N3DFQR66.js → velin-bottom-nav-N5F4UO2I.js} +26 -1
  107. package/dist/chunks/velin-calendar-OFE6THUD.js +210 -0
  108. package/dist/chunks/velin-calendar-PGVNJTXK.js +217 -0
  109. package/dist/chunks/velin-calendar-XC7JRDSH.js +217 -0
  110. package/dist/chunks/{velin-code-block-CIAURDRJ.js → velin-code-block-ZGWG7JI5.js} +1 -1
  111. package/dist/chunks/{velin-combobox-NXS4QB4R.js → velin-combobox-56V2ZWT5.js} +1 -1
  112. package/dist/chunks/{velin-command-ONKO2A3J.js → velin-command-2HO2EKR6.js} +29 -2
  113. package/dist/chunks/{velin-command-TMLSRGIU.js → velin-command-ZJSLPK7B.js} +30 -3
  114. package/dist/chunks/{velin-copy-NYDBOKXT.js → velin-copy-XDQSV2XU.js} +1 -1
  115. package/dist/chunks/{velin-countdown-4ZVDGK4R.js → velin-countdown-V4Z5MA63.js} +1 -1
  116. package/dist/chunks/velin-data-table-UVR42UUM.js +372 -0
  117. package/dist/chunks/{velin-dialog-GTTZI564.js → velin-dialog-3YK2RPRV.js} +9 -2
  118. package/dist/chunks/{velin-dialog-ELFOZIXZ.js → velin-dialog-S24KAP4S.js} +3 -1
  119. package/dist/chunks/{velin-drawer-BE6TYN3H.js → velin-drawer-5PNU624J.js} +2 -4
  120. package/dist/chunks/{velin-drawer-DLL2GLT6.js → velin-drawer-CCM6S25D.js} +3 -5
  121. package/dist/chunks/{velin-email-RBX6ZR4S.js → velin-email-TNFONXPW.js} +1 -1
  122. package/dist/chunks/velin-file-dropzone-QRGF2JNA.js +154 -0
  123. package/dist/chunks/velin-file-dropzone-XIZMJ3NB.js +154 -0
  124. package/dist/chunks/{velin-icon-7M76DOPB.js → velin-icon-A6NCXGUK.js} +59 -17
  125. package/dist/chunks/{velin-icon-ZTSKUOVN.js → velin-icon-EC4B5XCM.js} +18 -5
  126. package/dist/chunks/{velin-lightbox-6E7CAATP.js → velin-lightbox-FFK4TUUP.js} +7 -6
  127. package/dist/chunks/{velin-lightbox-NXA3U2FM.js → velin-lightbox-P725FLTY.js} +5 -4
  128. package/dist/chunks/{velin-menubar-J66JXRWW.js → velin-menubar-6I2LM5HL.js} +1 -1
  129. package/dist/chunks/{velin-modal-5HYNNNUI.js → velin-modal-ICTMGRSU.js} +7 -8
  130. package/dist/chunks/{velin-modal-AEOTZ67O.js → velin-modal-JBNODH7D.js} +2 -4
  131. package/dist/chunks/{velin-popover-T72HK3DF.js → velin-popover-WZG2GHBL.js} +25 -4
  132. package/dist/chunks/{velin-rating-N4DI2XNL.js → velin-rating-QBBYRRBU.js} +1 -1
  133. package/dist/chunks/{velin-search-7B4KJ6TX.js → velin-search-B3L6J2RP.js} +2 -2
  134. package/dist/chunks/{velin-search-2XRQFBCS.js → velin-search-L3UG6NDQ.js} +5 -4
  135. package/dist/chunks/{velin-secure-field-6PV7RZDJ.js → velin-secure-field-DGYMP7OK.js} +1 -1
  136. package/dist/chunks/{velin-segmented-control-GYD5BIXQ.js → velin-segmented-control-P74GJPAR.js} +1 -1
  137. package/dist/chunks/{velin-sheet-R2Y67X6H.js → velin-sheet-M5GZZD7G.js} +2 -4
  138. package/dist/chunks/{velin-sheet-OUK6572T.js → velin-sheet-X7RXIWKV.js} +3 -5
  139. package/dist/chunks/{velin-stepper-X54WGHDG.js → velin-stepper-4YQJUHPC.js} +12 -5
  140. package/dist/chunks/{velin-toast-OMMOA2DK.js → velin-toast-UG5LWTG2.js} +5 -1
  141. package/dist/chunks/{velin-tooltip-BDHGRTQB.js → velin-tooltip-ZDH5SDLU.js} +1 -1
  142. package/dist/llms.txt +31 -8
  143. package/dist/search-index.json +182 -10
  144. package/dist/velin-agent.json +3980 -31
  145. package/dist/velinstyle-components.iife.js +1622 -286
  146. package/dist/velinstyle-components.js +1624 -286
  147. package/dist/velinstyle-components.min.js +262 -114
  148. package/dist/velinstyle.css +412 -67
  149. package/dist/velinstyle.d.ts +2 -0
  150. package/dist/velinstyle.min.css +1 -1
  151. package/package.json +21 -6
  152. package/packages/skill-engine/README.md +24 -0
  153. package/packages/skill-engine/package.json +7 -0
  154. package/packages/skill-engine/src/catalog.js +29 -0
  155. package/packages/skill-engine/src/index.js +5 -0
  156. package/packages/skill-engine/src/install.js +69 -0
  157. package/packages/skill-engine/src/registry.js +27 -0
  158. package/packages/skill-engine/src/resolve.js +68 -0
  159. package/packages/skill-engine/src/validate.js +40 -0
  160. package/packages/velinstyle-skills/README.md +6 -0
  161. package/packages/velinstyle-skills/adapter.json +8 -0
  162. package/packages/velinstyle-skills/bundles/landing-starter.bundle.yaml +12 -0
  163. package/packages/velinstyle-skills/bundles/review-suite.bundle.yaml +11 -0
  164. package/packages/velinstyle-skills/catalog.json +1004 -0
  165. package/packages/velinstyle-skills/graphs/component-ship.graph.yaml +14 -0
  166. package/packages/velinstyle-skills/graphs/landingpage.graph.yaml +21 -0
  167. package/packages/velinstyle-skills/graphs/release-gate.graph.yaml +15 -0
  168. package/packages/velinstyle-skills/index.js +22 -0
  169. package/packages/velinstyle-skills/package.json +7 -0
  170. package/packages/velinstyle-skills/packs/accessibility.pack.yaml +9 -0
  171. package/packages/velinstyle-skills/packs/design.pack.yaml +10 -0
  172. package/packages/velinstyle-skills/packs/documentation.pack.yaml +8 -0
  173. package/packages/velinstyle-skills/packs/enterprise.pack.yaml +10 -0
  174. package/packages/velinstyle-skills/packs/frontend.pack.yaml +10 -0
  175. package/packages/velinstyle-skills/packs/review.pack.yaml +9 -0
  176. package/packages/velinstyle-skills/projects/admin-panel.project.yaml +12 -0
  177. package/packages/velinstyle-skills/projects/blog.project.yaml +11 -0
  178. package/packages/velinstyle-skills/projects/documentation-portal.project.yaml +13 -0
  179. package/packages/velinstyle-skills/projects/ecommerce-shop.project.yaml +12 -0
  180. package/packages/velinstyle-skills/projects/landing-page.project.yaml +12 -0
  181. package/packages/velinstyle-skills/projects/laravel-dashboard.project.yaml +12 -0
  182. package/packages/velinstyle-skills/projects/marketing-website.project.yaml +14 -0
  183. package/packages/velinstyle-skills/projects/portfolio.project.yaml +12 -0
  184. package/packages/velinstyle-skills/registry.json +142 -0
  185. package/packages/velinstyle-skills/scripts/generate-assets.mjs +163 -0
  186. package/packages/velinstyle-skills/skills/velin-a11y-focus-keyboard/SKILL.md +57 -0
  187. package/packages/velinstyle-skills/skills/velin-a11y-page-checklist/SKILL.md +57 -0
  188. package/packages/velinstyle-skills/skills/velin-a11y-scan-fix/SKILL.md +57 -0
  189. package/packages/velinstyle-skills/skills/velin-ai-agent-briefing/SKILL.md +57 -0
  190. package/packages/velinstyle-skills/skills/velin-ai-plan-scaffold-review/SKILL.md +57 -0
  191. package/packages/velinstyle-skills/skills/velin-ai-skill-authoring/SKILL.md +57 -0
  192. package/packages/velinstyle-skills/skills/velin-components-accessibility-map/SKILL.md +57 -0
  193. package/packages/velinstyle-skills/skills/velin-components-api-contract/SKILL.md +57 -0
  194. package/packages/velinstyle-skills/skills/velin-components-recipe/SKILL.md +57 -0
  195. package/packages/velinstyle-skills/skills/velin-components-select-compose/SKILL.md +57 -0
  196. package/packages/velinstyle-skills/skills/velin-design-hero-compose/SKILL.md +57 -0
  197. package/packages/velinstyle-skills/skills/velin-design-section-rhythm/SKILL.md +57 -0
  198. package/packages/velinstyle-skills/skills/velin-design-surface-roles/SKILL.md +57 -0
  199. package/packages/velinstyle-skills/skills/velin-dev-component-wire/SKILL.md +57 -0
  200. package/packages/velinstyle-skills/skills/velin-dev-page-scaffold/SKILL.md +57 -0
  201. package/packages/velinstyle-skills/skills/velin-dev-plan-first/SKILL.md +57 -0
  202. package/packages/velinstyle-skills/skills/velin-docs-component-guide/SKILL.md +57 -0
  203. package/packages/velinstyle-skills/skills/velin-docs-generate-api/SKILL.md +57 -0
  204. package/packages/velinstyle-skills/skills/velin-dx-doctor-setup/SKILL.md +57 -0
  205. package/packages/velinstyle-skills/skills/velin-dx-project-init/SKILL.md +57 -0
  206. package/packages/velinstyle-skills/skills/velin-migration-legacy-wc/SKILL.md +57 -0
  207. package/packages/velinstyle-skills/skills/velin-migration-prefix-classes/SKILL.md +57 -0
  208. package/packages/velinstyle-skills/skills/velin-motion-reduced-safe/SKILL.md +57 -0
  209. package/packages/velinstyle-skills/skills/velin-motion-reveal-feedback/SKILL.md +57 -0
  210. package/packages/velinstyle-skills/skills/velin-perf-audit-fix/SKILL.md +57 -0
  211. package/packages/velinstyle-skills/skills/velin-perf-runtime-tree-shake/SKILL.md +57 -0
  212. package/packages/velinstyle-skills/skills/velin-release-changelog-sync/SKILL.md +57 -0
  213. package/packages/velinstyle-skills/skills/velin-release-meta-rebuild/SKILL.md +57 -0
  214. package/packages/velinstyle-skills/skills/velin-review-conversion-hero/SKILL.md +57 -0
  215. package/packages/velinstyle-skills/skills/velin-review-page-gate/SKILL.md +57 -0
  216. package/packages/velinstyle-skills/skills/velin-review-seo-meta/SKILL.md +57 -0
  217. package/packages/velinstyle-skills/skills/velin-security-sanitize-html/SKILL.md +57 -0
  218. package/packages/velinstyle-skills/skills/velin-security-scan-pii/SKILL.md +57 -0
  219. package/packages/velinstyle-skills/skills/velin-testing-a11y-suite/SKILL.md +57 -0
  220. package/packages/velinstyle-skills/skills/velin-testing-visual-smoke/SKILL.md +57 -0
  221. package/packages/velinstyle-skills/skills/velin-themes-apply-token/SKILL.md +57 -0
  222. package/packages/velinstyle-skills/skills/velin-themes-contrast-check/SKILL.md +57 -0
  223. package/packages/velinstyle-skills/skills/velin-utilities-layout-apply/SKILL.md +57 -0
  224. package/packages/velinstyle-skills/skills/velin-utilities-prefix-fix/SKILL.md +57 -0
  225. package/packages/velinstyle-skills/skills/velin-utilities-token-map/SKILL.md +57 -0
  226. package/packages/velinstyle-skills/templates/admin-panel.template.yaml +12 -0
  227. package/packages/velinstyle-skills/templates/blog.template.yaml +12 -0
  228. package/packages/velinstyle-skills/templates/documentation-portal.template.yaml +12 -0
  229. package/packages/velinstyle-skills/templates/ecommerce-shop.template.yaml +13 -0
  230. package/packages/velinstyle-skills/templates/landing-page.template.yaml +12 -0
  231. package/packages/velinstyle-skills/templates/laravel-dashboard.template.yaml +11 -0
  232. package/packages/velinstyle-skills/templates/marketing-website.template.yaml +13 -0
  233. package/packages/velinstyle-skills/templates/portfolio.template.yaml +12 -0
  234. package/schemas/component-knowledge.schema.json +33 -0
  235. package/schemas/design-constraint.schema.json +15 -0
  236. package/schemas/design-intelligence.schema.json +19 -0
  237. package/schemas/design-rule.schema.json +19 -0
  238. package/schemas/page-template.schema.json +24 -0
  239. package/schemas/review-report.schema.json +36 -0
  240. package/schemas/section.schema.json +22 -0
  241. package/schemas/skill-bundle.schema.json +15 -0
  242. package/schemas/skill-graph.schema.json +25 -0
  243. package/schemas/skill-pack.schema.json +14 -0
  244. package/schemas/skill-project.schema.json +16 -0
  245. package/schemas/skill-record.schema.json +27 -0
  246. package/schemas/skill-registry.schema.json +17 -0
  247. package/schemas/skill-template.schema.json +17 -0
  248. package/schemas/token-graph.schema.json +27 -0
  249. package/schemas/utility.schema.json +166 -0
  250. package/src/components/alert.css +22 -1
  251. package/src/components/calendar-dropzone.css +5 -0
  252. package/src/components/transparency.css +138 -0
  253. package/src/layout/app-shell.css +33 -0
  254. package/src/tokens/shadow.css +13 -0
  255. package/src/utilities/border.css +2 -0
  256. package/src/utilities/display.css +1 -24
  257. package/src/utilities/responsive.css +16 -1
  258. package/src/utilities/spacing.css +32 -0
  259. package/src/velinstyle.css +3 -0
  260. package/dist/chunks/attributes-3BZLI7XF.js +0 -364
  261. package/dist/chunks/attributes-4N5JP4CG.js +0 -364
  262. package/dist/chunks/attributes-5Q2WXGRC.js +0 -374
  263. package/dist/chunks/attributes-AIR7SVLK.js +0 -364
  264. package/dist/chunks/attributes-BGRN5XZO.js +0 -364
  265. package/dist/chunks/attributes-BVSQAYLR.js +0 -364
  266. package/dist/chunks/attributes-CDYFUY7Y.js +0 -364
  267. package/dist/chunks/attributes-JMYJZBPE.js +0 -364
  268. package/dist/chunks/attributes-R5JY3X4O.js +0 -374
  269. package/dist/chunks/attributes-TNSPQTHX.js +0 -374
  270. package/dist/chunks/chunk-2354NEBP.js +0 -109
  271. package/dist/chunks/chunk-2VNA7G7S.js +0 -109
  272. package/dist/chunks/chunk-AQLRJSGG.js +0 -109
  273. package/dist/chunks/chunk-EWPSDMQT.js +0 -109
  274. package/dist/chunks/chunk-LA7264K4.js +0 -85
  275. package/dist/chunks/chunk-QTJJ3DPO.js +0 -109
  276. package/dist/chunks/chunk-RZQVWFHW.js +0 -109
  277. package/dist/chunks/chunk-U4XHMZ7D.js +0 -109
  278. package/dist/chunks/chunk-V5YIUA6G.js +0 -109
  279. package/dist/chunks/chunk-XIET2VSZ.js +0 -109
  280. package/dist/chunks/chunk-XYLJ2GCB.js +0 -205
  281. package/dist/chunks/chunk-ZPSPKUYD.js +0 -109
  282. package/dist/chunks/highlight-XTHRKBA3.js +0 -37
  283. package/dist/chunks/velin-bottom-nav-2N2TYWOF.js +0 -86
  284. package/dist/chunks/velin-carousel-Y5VCOABZ.js +0 -213
  285. package/dist/chunks/velin-code-block-ASUBTAQV.js +0 -119
  286. package/dist/chunks/velin-code-block-TSUKPY4C.js +0 -123
  287. package/dist/chunks/velin-code-block-Y6CM726Q.js +0 -119
  288. package/dist/chunks/velin-combobox-2KDTCQ7N.js +0 -155
  289. package/dist/chunks/velin-command-M7RNHUPR.js +0 -136
  290. package/dist/chunks/velin-copy-T5KDTDXP.js +0 -81
  291. package/dist/chunks/velin-countdown-5XSTN3BH.js +0 -101
  292. package/dist/chunks/velin-counter-ISCTEAHI.js +0 -118
  293. package/dist/chunks/velin-dialog-D2GUHSCD.js +0 -144
  294. package/dist/chunks/velin-dialog-IJLFDXAJ.js +0 -144
  295. package/dist/chunks/velin-dialog-TNS3WXMB.js +0 -144
  296. package/dist/chunks/velin-drawer-MJS6WCF7.js +0 -130
  297. package/dist/chunks/velin-email-N5B5ZYTE.js +0 -90
  298. package/dist/chunks/velin-icon-KZO3IEHG.js +0 -164
  299. package/dist/chunks/velin-lightbox-I75U6JF4.js +0 -140
  300. package/dist/chunks/velin-lightbox-QOTB4PRL.js +0 -140
  301. package/dist/chunks/velin-lightbox-UCD6N7HF.js +0 -140
  302. package/dist/chunks/velin-live-dot-XHUZCIDZ.js +0 -67
  303. package/dist/chunks/velin-menubar-SFEXJE56.js +0 -86
  304. package/dist/chunks/velin-modal-2HOBXE6F.js +0 -176
  305. package/dist/chunks/velin-modal-GLI2XZZB.js +0 -176
  306. package/dist/chunks/velin-popover-EXINRIGJ.js +0 -145
  307. package/dist/chunks/velin-popover-OXX7MRZ6.js +0 -145
  308. package/dist/chunks/velin-popover-YKCCROJG.js +0 -145
  309. package/dist/chunks/velin-rating-XRQJV4LO.js +0 -91
  310. package/dist/chunks/velin-scroll-top-F2FCZNYD.js +0 -58
  311. package/dist/chunks/velin-search-4YHJWYSS.js +0 -556
  312. package/dist/chunks/velin-search-LWHY23Q5.js +0 -474
  313. package/dist/chunks/velin-secure-field-H7FSBUJW.js +0 -95
  314. package/dist/chunks/velin-segmented-control-PQX6LKOJ.js +0 -109
  315. package/dist/chunks/velin-sheet-3OGI4HD7.js +0 -119
  316. package/dist/chunks/velin-sparkline-GVEANJVW.js +0 -184
  317. package/dist/chunks/velin-sparkline-KDA3GQAN.js +0 -162
  318. package/dist/chunks/velin-stepper-2ZIHLKGM.js +0 -141
  319. package/dist/chunks/velin-stepper-FYEUEWE6.js +0 -141
  320. package/dist/chunks/velin-stepper-wc-QU3KRVQR.js +0 -133
  321. package/dist/chunks/velin-theme-toggle-BNNS7WLV.js +0 -285
  322. package/dist/chunks/velin-theme-toggle-NO7V4TWI.js +0 -285
  323. package/dist/chunks/velin-theme-toggle-QELCJM2Q.js +0 -291
  324. package/dist/chunks/velin-toast-RCZ4CSUC.js +0 -109
  325. package/dist/chunks/velin-toast-WEUBTJG6.js +0 -109
  326. package/dist/chunks/velin-tooltip-664IOHZA.js +0 -112
  327. package/dist/chunks/velin-tooltip-wc-LXDVT6DE.js +0 -103
  328. package/dist/chunks/worker-client-R6DBYPFT.js +0 -46
@@ -0,0 +1,1544 @@
1
+ // node_modules/dompurify/dist/purify.es.mjs
2
+ function _arrayLikeToArray(r, a) {
3
+ (null == a || a > r.length) && (a = r.length);
4
+ for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e];
5
+ return n;
6
+ }
7
+ function _arrayWithHoles(r) {
8
+ if (Array.isArray(r)) return r;
9
+ }
10
+ function _iterableToArrayLimit(r, l) {
11
+ var t = null == r ? null : "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"];
12
+ if (null != t) {
13
+ var e, n, i, u, a = [], f = true, o = false;
14
+ try {
15
+ if (i = (t = t.call(r)).next, 0 === l) ;
16
+ else for (; !(f = (e = i.call(t)).done) && (a.push(e.value), a.length !== l); f = true) ;
17
+ } catch (r2) {
18
+ o = true, n = r2;
19
+ } finally {
20
+ try {
21
+ if (!f && null != t.return && (u = t.return(), Object(u) !== u)) return;
22
+ } finally {
23
+ if (o) throw n;
24
+ }
25
+ }
26
+ return a;
27
+ }
28
+ }
29
+ function _nonIterableRest() {
30
+ throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
31
+ }
32
+ function _slicedToArray(r, e) {
33
+ return _arrayWithHoles(r) || _iterableToArrayLimit(r, e) || _unsupportedIterableToArray(r, e) || _nonIterableRest();
34
+ }
35
+ function _unsupportedIterableToArray(r, a) {
36
+ if (r) {
37
+ if ("string" == typeof r) return _arrayLikeToArray(r, a);
38
+ var t = {}.toString.call(r).slice(8, -1);
39
+ return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0;
40
+ }
41
+ }
42
+ var entries = Object.entries;
43
+ var setPrototypeOf = Object.setPrototypeOf;
44
+ var isFrozen = Object.isFrozen;
45
+ var getPrototypeOf = Object.getPrototypeOf;
46
+ var getOwnPropertyDescriptor = Object.getOwnPropertyDescriptor;
47
+ var freeze = Object.freeze;
48
+ var seal = Object.seal;
49
+ var create = Object.create;
50
+ var _ref = typeof Reflect !== "undefined" && Reflect;
51
+ var apply = _ref.apply;
52
+ var construct = _ref.construct;
53
+ if (!freeze) {
54
+ freeze = function freeze2(x) {
55
+ return x;
56
+ };
57
+ }
58
+ if (!seal) {
59
+ seal = function seal2(x) {
60
+ return x;
61
+ };
62
+ }
63
+ if (!apply) {
64
+ apply = function apply2(func, thisArg) {
65
+ for (var _len = arguments.length, args = new Array(_len > 2 ? _len - 2 : 0), _key = 2; _key < _len; _key++) {
66
+ args[_key - 2] = arguments[_key];
67
+ }
68
+ return func.apply(thisArg, args);
69
+ };
70
+ }
71
+ if (!construct) {
72
+ construct = function construct2(Func) {
73
+ for (var _len2 = arguments.length, args = new Array(_len2 > 1 ? _len2 - 1 : 0), _key2 = 1; _key2 < _len2; _key2++) {
74
+ args[_key2 - 1] = arguments[_key2];
75
+ }
76
+ return new Func(...args);
77
+ };
78
+ }
79
+ var arrayForEach = unapply(Array.prototype.forEach);
80
+ var arrayLastIndexOf = unapply(Array.prototype.lastIndexOf);
81
+ var arrayPop = unapply(Array.prototype.pop);
82
+ var arrayPush = unapply(Array.prototype.push);
83
+ var arraySplice = unapply(Array.prototype.splice);
84
+ var arrayIsArray = Array.isArray;
85
+ var stringToLowerCase = unapply(String.prototype.toLowerCase);
86
+ var stringToString = unapply(String.prototype.toString);
87
+ var stringMatch = unapply(String.prototype.match);
88
+ var stringReplace = unapply(String.prototype.replace);
89
+ var stringIndexOf = unapply(String.prototype.indexOf);
90
+ var stringTrim = unapply(String.prototype.trim);
91
+ var numberToString = unapply(Number.prototype.toString);
92
+ var booleanToString = unapply(Boolean.prototype.toString);
93
+ var bigintToString = typeof BigInt === "undefined" ? null : unapply(BigInt.prototype.toString);
94
+ var symbolToString = typeof Symbol === "undefined" ? null : unapply(Symbol.prototype.toString);
95
+ var objectHasOwnProperty = unapply(Object.prototype.hasOwnProperty);
96
+ var objectToString = unapply(Object.prototype.toString);
97
+ var regExpTest = unapply(RegExp.prototype.test);
98
+ var typeErrorCreate = unconstruct(TypeError);
99
+ function unapply(func) {
100
+ return function(thisArg) {
101
+ if (thisArg instanceof RegExp) {
102
+ thisArg.lastIndex = 0;
103
+ }
104
+ for (var _len3 = arguments.length, args = new Array(_len3 > 1 ? _len3 - 1 : 0), _key3 = 1; _key3 < _len3; _key3++) {
105
+ args[_key3 - 1] = arguments[_key3];
106
+ }
107
+ return apply(func, thisArg, args);
108
+ };
109
+ }
110
+ function unconstruct(Func) {
111
+ return function() {
112
+ for (var _len4 = arguments.length, args = new Array(_len4), _key4 = 0; _key4 < _len4; _key4++) {
113
+ args[_key4] = arguments[_key4];
114
+ }
115
+ return construct(Func, args);
116
+ };
117
+ }
118
+ function addToSet(set, array) {
119
+ let transformCaseFunc = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : stringToLowerCase;
120
+ if (setPrototypeOf) {
121
+ setPrototypeOf(set, null);
122
+ }
123
+ if (!arrayIsArray(array)) {
124
+ return set;
125
+ }
126
+ let l = array.length;
127
+ while (l--) {
128
+ let element = array[l];
129
+ if (typeof element === "string") {
130
+ const lcElement = transformCaseFunc(element);
131
+ if (lcElement !== element) {
132
+ if (!isFrozen(array)) {
133
+ array[l] = lcElement;
134
+ }
135
+ element = lcElement;
136
+ }
137
+ }
138
+ set[element] = true;
139
+ }
140
+ return set;
141
+ }
142
+ function cleanArray(array) {
143
+ for (let index = 0; index < array.length; index++) {
144
+ const isPropertyExist = objectHasOwnProperty(array, index);
145
+ if (!isPropertyExist) {
146
+ array[index] = null;
147
+ }
148
+ }
149
+ return array;
150
+ }
151
+ function clone(object) {
152
+ const newObject = create(null);
153
+ for (const _ref2 of entries(object)) {
154
+ var _ref3 = _slicedToArray(_ref2, 2);
155
+ const property = _ref3[0];
156
+ const value = _ref3[1];
157
+ const isPropertyExist = objectHasOwnProperty(object, property);
158
+ if (isPropertyExist) {
159
+ if (arrayIsArray(value)) {
160
+ newObject[property] = cleanArray(value);
161
+ } else if (value && typeof value === "object" && value.constructor === Object) {
162
+ newObject[property] = clone(value);
163
+ } else {
164
+ newObject[property] = value;
165
+ }
166
+ }
167
+ }
168
+ return newObject;
169
+ }
170
+ function stringifyValue(value) {
171
+ switch (typeof value) {
172
+ case "string": {
173
+ return value;
174
+ }
175
+ case "number": {
176
+ return numberToString(value);
177
+ }
178
+ case "boolean": {
179
+ return booleanToString(value);
180
+ }
181
+ case "bigint": {
182
+ return bigintToString ? bigintToString(value) : "0";
183
+ }
184
+ case "symbol": {
185
+ return symbolToString ? symbolToString(value) : "Symbol()";
186
+ }
187
+ case "undefined": {
188
+ return objectToString(value);
189
+ }
190
+ case "function":
191
+ case "object": {
192
+ if (value === null) {
193
+ return objectToString(value);
194
+ }
195
+ const valueAsRecord = value;
196
+ const valueToString = lookupGetter(valueAsRecord, "toString");
197
+ if (typeof valueToString === "function") {
198
+ const stringified = valueToString(valueAsRecord);
199
+ return typeof stringified === "string" ? stringified : objectToString(stringified);
200
+ }
201
+ return objectToString(value);
202
+ }
203
+ default: {
204
+ return objectToString(value);
205
+ }
206
+ }
207
+ }
208
+ function lookupGetter(object, prop) {
209
+ while (object !== null) {
210
+ const desc = getOwnPropertyDescriptor(object, prop);
211
+ if (desc) {
212
+ if (desc.get) {
213
+ return unapply(desc.get);
214
+ }
215
+ if (typeof desc.value === "function") {
216
+ return unapply(desc.value);
217
+ }
218
+ }
219
+ object = getPrototypeOf(object);
220
+ }
221
+ function fallbackValue() {
222
+ return null;
223
+ }
224
+ return fallbackValue;
225
+ }
226
+ function isRegex(value) {
227
+ try {
228
+ regExpTest(value, "");
229
+ return true;
230
+ } catch (_unused) {
231
+ return false;
232
+ }
233
+ }
234
+ var html$1 = freeze(["a", "abbr", "acronym", "address", "area", "article", "aside", "audio", "b", "bdi", "bdo", "big", "blink", "blockquote", "body", "br", "button", "canvas", "caption", "center", "cite", "code", "col", "colgroup", "content", "data", "datalist", "dd", "decorator", "del", "details", "dfn", "dialog", "dir", "div", "dl", "dt", "element", "em", "fieldset", "figcaption", "figure", "font", "footer", "form", "h1", "h2", "h3", "h4", "h5", "h6", "head", "header", "hgroup", "hr", "html", "i", "img", "input", "ins", "kbd", "label", "legend", "li", "main", "map", "mark", "marquee", "menu", "menuitem", "meter", "nav", "nobr", "ol", "optgroup", "option", "output", "p", "picture", "pre", "progress", "q", "rp", "rt", "ruby", "s", "samp", "search", "section", "select", "shadow", "slot", "small", "source", "spacer", "span", "strike", "strong", "style", "sub", "summary", "sup", "table", "tbody", "td", "template", "textarea", "tfoot", "th", "thead", "time", "tr", "track", "tt", "u", "ul", "var", "video", "wbr"]);
235
+ var svg$1 = freeze(["svg", "a", "altglyph", "altglyphdef", "altglyphitem", "animatecolor", "animatemotion", "animatetransform", "circle", "clippath", "defs", "desc", "ellipse", "enterkeyhint", "exportparts", "filter", "font", "g", "glyph", "glyphref", "hkern", "image", "inputmode", "line", "lineargradient", "marker", "mask", "metadata", "mpath", "part", "path", "pattern", "polygon", "polyline", "radialgradient", "rect", "stop", "style", "switch", "symbol", "text", "textpath", "title", "tref", "tspan", "view", "vkern"]);
236
+ var svgFilters = freeze(["feBlend", "feColorMatrix", "feComponentTransfer", "feComposite", "feConvolveMatrix", "feDiffuseLighting", "feDisplacementMap", "feDistantLight", "feDropShadow", "feFlood", "feFuncA", "feFuncB", "feFuncG", "feFuncR", "feGaussianBlur", "feImage", "feMerge", "feMergeNode", "feMorphology", "feOffset", "fePointLight", "feSpecularLighting", "feSpotLight", "feTile", "feTurbulence"]);
237
+ var svgDisallowed = freeze(["animate", "color-profile", "cursor", "discard", "font-face", "font-face-format", "font-face-name", "font-face-src", "font-face-uri", "foreignobject", "hatch", "hatchpath", "mesh", "meshgradient", "meshpatch", "meshrow", "missing-glyph", "script", "set", "solidcolor", "unknown", "use"]);
238
+ var mathMl$1 = freeze(["math", "menclose", "merror", "mfenced", "mfrac", "mglyph", "mi", "mlabeledtr", "mmultiscripts", "mn", "mo", "mover", "mpadded", "mphantom", "mroot", "mrow", "ms", "mspace", "msqrt", "mstyle", "msub", "msup", "msubsup", "mtable", "mtd", "mtext", "mtr", "munder", "munderover", "mprescripts"]);
239
+ var mathMlDisallowed = freeze(["maction", "maligngroup", "malignmark", "mlongdiv", "mscarries", "mscarry", "msgroup", "mstack", "msline", "msrow", "semantics", "annotation", "annotation-xml", "mprescripts", "none"]);
240
+ var text = freeze(["#text"]);
241
+ var html = freeze(["accept", "action", "align", "alt", "autocapitalize", "autocomplete", "autopictureinpicture", "autoplay", "background", "bgcolor", "border", "capture", "cellpadding", "cellspacing", "checked", "cite", "class", "clear", "color", "cols", "colspan", "command", "commandfor", "controls", "controlslist", "coords", "crossorigin", "datetime", "decoding", "default", "dir", "disabled", "disablepictureinpicture", "disableremoteplayback", "download", "draggable", "enctype", "enterkeyhint", "exportparts", "face", "for", "headers", "height", "hidden", "high", "href", "hreflang", "id", "inert", "inputmode", "integrity", "ismap", "kind", "label", "lang", "list", "loading", "loop", "low", "max", "maxlength", "media", "method", "min", "minlength", "multiple", "muted", "name", "nonce", "noshade", "novalidate", "nowrap", "open", "optimum", "part", "pattern", "placeholder", "playsinline", "popover", "popovertarget", "popovertargetaction", "poster", "preload", "pubdate", "radiogroup", "readonly", "rel", "required", "rev", "reversed", "role", "rows", "rowspan", "spellcheck", "scope", "selected", "shape", "size", "sizes", "slot", "span", "srclang", "start", "src", "srcset", "step", "style", "summary", "tabindex", "title", "translate", "type", "usemap", "valign", "value", "width", "wrap", "xmlns"]);
242
+ var svg = freeze(["accent-height", "accumulate", "additive", "alignment-baseline", "amplitude", "ascent", "attributename", "attributetype", "azimuth", "basefrequency", "baseline-shift", "begin", "bias", "by", "class", "clip", "clippathunits", "clip-path", "clip-rule", "color", "color-interpolation", "color-interpolation-filters", "color-profile", "color-rendering", "cx", "cy", "d", "dx", "dy", "diffuseconstant", "direction", "display", "divisor", "dominant-baseline", "dur", "edgemode", "elevation", "end", "exponent", "fill", "fill-opacity", "fill-rule", "filter", "filterunits", "flood-color", "flood-opacity", "font-family", "font-size", "font-size-adjust", "font-stretch", "font-style", "font-variant", "font-weight", "fx", "fy", "g1", "g2", "glyph-name", "glyphref", "gradientunits", "gradienttransform", "height", "href", "id", "image-rendering", "in", "in2", "intercept", "k", "k1", "k2", "k3", "k4", "kerning", "keypoints", "keysplines", "keytimes", "lang", "lengthadjust", "letter-spacing", "kernelmatrix", "kernelunitlength", "lighting-color", "local", "marker-end", "marker-mid", "marker-start", "markerheight", "markerunits", "markerwidth", "maskcontentunits", "maskunits", "max", "mask", "mask-type", "media", "method", "mode", "min", "name", "numoctaves", "offset", "operator", "opacity", "order", "orient", "orientation", "origin", "overflow", "paint-order", "path", "pathlength", "patterncontentunits", "patterntransform", "patternunits", "points", "preservealpha", "preserveaspectratio", "primitiveunits", "r", "rx", "ry", "radius", "refx", "refy", "repeatcount", "repeatdur", "restart", "result", "rotate", "scale", "seed", "shape-rendering", "slope", "specularconstant", "specularexponent", "spreadmethod", "startoffset", "stddeviation", "stitchtiles", "stop-color", "stop-opacity", "stroke-dasharray", "stroke-dashoffset", "stroke-linecap", "stroke-linejoin", "stroke-miterlimit", "stroke-opacity", "stroke", "stroke-width", "style", "surfacescale", "systemlanguage", "tabindex", "tablevalues", "targetx", "targety", "transform", "transform-origin", "text-anchor", "text-decoration", "text-orientation", "text-rendering", "textlength", "type", "u1", "u2", "unicode", "values", "viewbox", "visibility", "version", "vert-adv-y", "vert-origin-x", "vert-origin-y", "width", "word-spacing", "wrap", "writing-mode", "xchannelselector", "ychannelselector", "x", "x1", "x2", "xmlns", "y", "y1", "y2", "z", "zoomandpan"]);
243
+ var mathMl = freeze(["accent", "accentunder", "align", "bevelled", "close", "columnalign", "columnlines", "columnspacing", "columnspan", "denomalign", "depth", "dir", "display", "displaystyle", "encoding", "fence", "frame", "height", "href", "id", "largeop", "length", "linethickness", "lquote", "lspace", "mathbackground", "mathcolor", "mathsize", "mathvariant", "maxsize", "minsize", "movablelimits", "notation", "numalign", "open", "rowalign", "rowlines", "rowspacing", "rowspan", "rspace", "rquote", "scriptlevel", "scriptminsize", "scriptsizemultiplier", "selection", "separator", "separators", "stretchy", "subscriptshift", "supscriptshift", "symmetric", "voffset", "width", "xmlns"]);
244
+ var xml = freeze(["xlink:href", "xml:id", "xlink:title", "xml:space", "xmlns:xlink"]);
245
+ var MUSTACHE_EXPR = seal(/{{[\w\W]*|^[\w\W]*}}/g);
246
+ var ERB_EXPR = seal(/<%[\w\W]*|^[\w\W]*%>/g);
247
+ var TMPLIT_EXPR = seal(/\${[\w\W]*/g);
248
+ var DATA_ATTR = seal(/^data-[\-\w.\u00B7-\uFFFF]+$/);
249
+ var ARIA_ATTR = seal(/^aria-[\-\w]+$/);
250
+ var IS_ALLOWED_URI = seal(
251
+ /^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp|matrix):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i
252
+ // eslint-disable-line no-useless-escape
253
+ );
254
+ var IS_SCRIPT_OR_DATA = seal(/^(?:\w+script|data):/i);
255
+ var ATTR_WHITESPACE = seal(
256
+ /[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g
257
+ // eslint-disable-line no-control-regex
258
+ );
259
+ var DOCTYPE_NAME = seal(/^html$/i);
260
+ var CUSTOM_ELEMENT = seal(/^[a-z][.\w]*(-[.\w]+)+$/i);
261
+ var ELEMENT_MARKUP_PROBE = seal(/<[/\w!]/g);
262
+ var COMMENT_MARKUP_PROBE = seal(/<[/\w]/g);
263
+ var FALLBACK_TAG_CLOSE = seal(/<\/no(script|embed|frames)/i);
264
+ var SELF_CLOSING_TAG = seal(/\/>/i);
265
+ var NODE_TYPE = {
266
+ element: 1,
267
+ attribute: 2,
268
+ text: 3,
269
+ cdataSection: 4,
270
+ entityReference: 5,
271
+ // Deprecated
272
+ entityNode: 6,
273
+ // Deprecated
274
+ processingInstruction: 7,
275
+ comment: 8,
276
+ document: 9,
277
+ documentType: 10,
278
+ documentFragment: 11,
279
+ notation: 12
280
+ // Deprecated
281
+ };
282
+ var getGlobal = function getGlobal2() {
283
+ return typeof window === "undefined" ? null : window;
284
+ };
285
+ var _createTrustedTypesPolicy = function _createTrustedTypesPolicy2(trustedTypes, purifyHostElement) {
286
+ if (typeof trustedTypes !== "object" || typeof trustedTypes.createPolicy !== "function") {
287
+ return null;
288
+ }
289
+ let suffix = null;
290
+ const ATTR_NAME = "data-tt-policy-suffix";
291
+ if (purifyHostElement && purifyHostElement.hasAttribute(ATTR_NAME)) {
292
+ suffix = purifyHostElement.getAttribute(ATTR_NAME);
293
+ }
294
+ const policyName = "dompurify" + (suffix ? "#" + suffix : "");
295
+ try {
296
+ return trustedTypes.createPolicy(policyName, {
297
+ createHTML(html2) {
298
+ return html2;
299
+ },
300
+ createScriptURL(scriptUrl) {
301
+ return scriptUrl;
302
+ }
303
+ });
304
+ } catch (_) {
305
+ console.warn("TrustedTypes policy " + policyName + " could not be created.");
306
+ return null;
307
+ }
308
+ };
309
+ var _createHooksMap = function _createHooksMap2() {
310
+ return {
311
+ afterSanitizeAttributes: [],
312
+ afterSanitizeElements: [],
313
+ afterSanitizeShadowDOM: [],
314
+ beforeSanitizeAttributes: [],
315
+ beforeSanitizeElements: [],
316
+ beforeSanitizeShadowDOM: [],
317
+ uponSanitizeAttribute: [],
318
+ uponSanitizeElement: [],
319
+ uponSanitizeShadowNode: []
320
+ };
321
+ };
322
+ var _resolveSetOption = function _resolveSetOption2(cfg, key, fallback, options) {
323
+ return objectHasOwnProperty(cfg, key) && arrayIsArray(cfg[key]) ? addToSet(options.base ? clone(options.base) : {}, cfg[key], options.transform) : fallback;
324
+ };
325
+ function createDOMPurify() {
326
+ let window2 = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : getGlobal();
327
+ const DOMPurify = (root) => createDOMPurify(root);
328
+ DOMPurify.version = "3.4.12";
329
+ DOMPurify.removed = [];
330
+ if (!window2 || !window2.document || window2.document.nodeType !== NODE_TYPE.document || !window2.Element) {
331
+ DOMPurify.isSupported = false;
332
+ return DOMPurify;
333
+ }
334
+ let document = window2.document;
335
+ const originalDocument = document;
336
+ const currentScript = originalDocument.currentScript;
337
+ window2.DocumentFragment;
338
+ const HTMLTemplateElement = window2.HTMLTemplateElement, Node = window2.Node, Element = window2.Element, NodeFilter = window2.NodeFilter, _window$NamedNodeMap = window2.NamedNodeMap;
339
+ _window$NamedNodeMap === void 0 ? window2.NamedNodeMap || window2.MozNamedAttrMap : _window$NamedNodeMap;
340
+ window2.HTMLFormElement;
341
+ const DOMParser = window2.DOMParser, trustedTypes = window2.trustedTypes;
342
+ const ElementPrototype = Element.prototype;
343
+ const cloneNode = lookupGetter(ElementPrototype, "cloneNode");
344
+ const remove = lookupGetter(ElementPrototype, "remove");
345
+ const getNextSibling = lookupGetter(ElementPrototype, "nextSibling");
346
+ const getChildNodes = lookupGetter(ElementPrototype, "childNodes");
347
+ const getParentNode = lookupGetter(ElementPrototype, "parentNode");
348
+ const getShadowRoot = lookupGetter(ElementPrototype, "shadowRoot");
349
+ const getAttributes = lookupGetter(ElementPrototype, "attributes");
350
+ const getNodeType = Node && Node.prototype ? lookupGetter(Node.prototype, "nodeType") : null;
351
+ const getNodeName = Node && Node.prototype ? lookupGetter(Node.prototype, "nodeName") : null;
352
+ if (typeof HTMLTemplateElement === "function") {
353
+ const template = document.createElement("template");
354
+ if (template.content && template.content.ownerDocument) {
355
+ document = template.content.ownerDocument;
356
+ }
357
+ }
358
+ let trustedTypesPolicy;
359
+ let emptyHTML = "";
360
+ let defaultTrustedTypesPolicy;
361
+ let defaultTrustedTypesPolicyResolved = false;
362
+ let IN_TRUSTED_TYPES_POLICY = 0;
363
+ const _assertNotInTrustedTypesPolicy = function _assertNotInTrustedTypesPolicy2() {
364
+ if (IN_TRUSTED_TYPES_POLICY > 0) {
365
+ throw typeErrorCreate('A configured TRUSTED_TYPES_POLICY callback (createHTML or createScriptURL) must not call DOMPurify.sanitize, as that causes infinite recursion. Do not pass a policy whose callbacks wrap DOMPurify as TRUSTED_TYPES_POLICY; see the "DOMPurify and Trusted Types" section of the README.');
366
+ }
367
+ };
368
+ const _createTrustedHTML = function _createTrustedHTML2(html2) {
369
+ _assertNotInTrustedTypesPolicy();
370
+ IN_TRUSTED_TYPES_POLICY++;
371
+ try {
372
+ return trustedTypesPolicy.createHTML(html2);
373
+ } finally {
374
+ IN_TRUSTED_TYPES_POLICY--;
375
+ }
376
+ };
377
+ const _createTrustedScriptURL = function _createTrustedScriptURL2(scriptUrl) {
378
+ _assertNotInTrustedTypesPolicy();
379
+ IN_TRUSTED_TYPES_POLICY++;
380
+ try {
381
+ return trustedTypesPolicy.createScriptURL(scriptUrl);
382
+ } finally {
383
+ IN_TRUSTED_TYPES_POLICY--;
384
+ }
385
+ };
386
+ const _getDefaultTrustedTypesPolicy = function _getDefaultTrustedTypesPolicy2() {
387
+ if (!defaultTrustedTypesPolicyResolved) {
388
+ defaultTrustedTypesPolicy = _createTrustedTypesPolicy(trustedTypes, currentScript);
389
+ defaultTrustedTypesPolicyResolved = true;
390
+ }
391
+ return defaultTrustedTypesPolicy;
392
+ };
393
+ const _document = document, implementation = _document.implementation, createNodeIterator = _document.createNodeIterator, createDocumentFragment = _document.createDocumentFragment, getElementsByTagName = _document.getElementsByTagName;
394
+ const importNode = originalDocument.importNode;
395
+ let hooks = _createHooksMap();
396
+ DOMPurify.isSupported = typeof entries === "function" && typeof getParentNode === "function" && implementation && implementation.createHTMLDocument !== void 0;
397
+ const MUSTACHE_EXPR$1 = MUSTACHE_EXPR, ERB_EXPR$1 = ERB_EXPR, TMPLIT_EXPR$1 = TMPLIT_EXPR, DATA_ATTR$1 = DATA_ATTR, ARIA_ATTR$1 = ARIA_ATTR, IS_SCRIPT_OR_DATA$1 = IS_SCRIPT_OR_DATA, ATTR_WHITESPACE$1 = ATTR_WHITESPACE, CUSTOM_ELEMENT$1 = CUSTOM_ELEMENT;
398
+ let IS_ALLOWED_URI$1 = IS_ALLOWED_URI;
399
+ let ALLOWED_TAGS = null;
400
+ const DEFAULT_ALLOWED_TAGS = addToSet({}, [...html$1, ...svg$1, ...svgFilters, ...mathMl$1, ...text]);
401
+ let ALLOWED_ATTR = null;
402
+ const DEFAULT_ALLOWED_ATTR = addToSet({}, [...html, ...svg, ...mathMl, ...xml]);
403
+ let CUSTOM_ELEMENT_HANDLING = Object.seal(create(null, {
404
+ tagNameCheck: {
405
+ writable: true,
406
+ configurable: false,
407
+ enumerable: true,
408
+ value: null
409
+ },
410
+ attributeNameCheck: {
411
+ writable: true,
412
+ configurable: false,
413
+ enumerable: true,
414
+ value: null
415
+ },
416
+ allowCustomizedBuiltInElements: {
417
+ writable: true,
418
+ configurable: false,
419
+ enumerable: true,
420
+ value: false
421
+ }
422
+ }));
423
+ let FORBID_TAGS = null;
424
+ let FORBID_ATTR = null;
425
+ const EXTRA_ELEMENT_HANDLING = Object.seal(create(null, {
426
+ tagCheck: {
427
+ writable: true,
428
+ configurable: false,
429
+ enumerable: true,
430
+ value: null
431
+ },
432
+ attributeCheck: {
433
+ writable: true,
434
+ configurable: false,
435
+ enumerable: true,
436
+ value: null
437
+ }
438
+ }));
439
+ let ALLOW_ARIA_ATTR = true;
440
+ let ALLOW_DATA_ATTR = true;
441
+ let ALLOW_UNKNOWN_PROTOCOLS = false;
442
+ let ALLOW_SELF_CLOSE_IN_ATTR = true;
443
+ let SAFE_FOR_TEMPLATES = false;
444
+ let SAFE_FOR_XML = true;
445
+ let WHOLE_DOCUMENT = false;
446
+ let SET_CONFIG = false;
447
+ let SET_CONFIG_ALLOWED_TAGS = null;
448
+ let SET_CONFIG_ALLOWED_ATTR = null;
449
+ let FORCE_BODY = false;
450
+ let RETURN_DOM = false;
451
+ let RETURN_DOM_FRAGMENT = false;
452
+ let RETURN_TRUSTED_TYPE = false;
453
+ let SANITIZE_DOM = true;
454
+ let SANITIZE_NAMED_PROPS = false;
455
+ const SANITIZE_NAMED_PROPS_PREFIX = "user-content-";
456
+ let KEEP_CONTENT = true;
457
+ let IN_PLACE = false;
458
+ let USE_PROFILES = {};
459
+ let FORBID_CONTENTS = null;
460
+ const DEFAULT_FORBID_CONTENTS = addToSet({}, [
461
+ "annotation-xml",
462
+ "audio",
463
+ "colgroup",
464
+ "desc",
465
+ "foreignobject",
466
+ "head",
467
+ "iframe",
468
+ "math",
469
+ "mi",
470
+ "mn",
471
+ "mo",
472
+ "ms",
473
+ "mtext",
474
+ "noembed",
475
+ "noframes",
476
+ "noscript",
477
+ "plaintext",
478
+ "script",
479
+ // <selectedcontent> mirrors the selected <option>'s subtree, cloned by
480
+ // the UA (customizable <select>) — including any on* handlers — and the
481
+ // engine re-mirrors synchronously whenever a removal changes which
482
+ // option/selectedcontent is current, even inside DOMPurify's inert
483
+ // DOMParser document. Hoisting its children on removal re-inserts a fresh
484
+ // mirror target ahead of the walk, which the engine refills, looping
485
+ // forever (DoS) and amplifying output. Dropping its content on removal
486
+ // (rather than hoisting) breaks that cascade; the content is a duplicate
487
+ // of the option, which is sanitized on its own. See campaign-3 F1/F6.
488
+ "selectedcontent",
489
+ "style",
490
+ "svg",
491
+ "template",
492
+ "thead",
493
+ "title",
494
+ "video",
495
+ "xmp"
496
+ ]);
497
+ let DATA_URI_TAGS = null;
498
+ const DEFAULT_DATA_URI_TAGS = addToSet({}, ["audio", "video", "img", "source", "image", "track"]);
499
+ let URI_SAFE_ATTRIBUTES = null;
500
+ const DEFAULT_URI_SAFE_ATTRIBUTES = addToSet({}, ["alt", "class", "for", "id", "label", "name", "pattern", "placeholder", "role", "summary", "title", "value", "style", "xmlns"]);
501
+ const MATHML_NAMESPACE = "http://www.w3.org/1998/Math/MathML";
502
+ const SVG_NAMESPACE = "http://www.w3.org/2000/svg";
503
+ const HTML_NAMESPACE = "http://www.w3.org/1999/xhtml";
504
+ let NAMESPACE = HTML_NAMESPACE;
505
+ let IS_EMPTY_INPUT = false;
506
+ let ALLOWED_NAMESPACES = null;
507
+ const DEFAULT_ALLOWED_NAMESPACES = addToSet({}, [MATHML_NAMESPACE, SVG_NAMESPACE, HTML_NAMESPACE], stringToString);
508
+ const DEFAULT_MATHML_TEXT_INTEGRATION_POINTS = freeze(["mi", "mo", "mn", "ms", "mtext"]);
509
+ let MATHML_TEXT_INTEGRATION_POINTS = addToSet({}, DEFAULT_MATHML_TEXT_INTEGRATION_POINTS);
510
+ const DEFAULT_HTML_INTEGRATION_POINTS = freeze(["annotation-xml"]);
511
+ let HTML_INTEGRATION_POINTS = addToSet({}, DEFAULT_HTML_INTEGRATION_POINTS);
512
+ const COMMON_SVG_AND_HTML_ELEMENTS = addToSet({}, ["title", "style", "font", "a", "script"]);
513
+ let PARSER_MEDIA_TYPE = null;
514
+ const SUPPORTED_PARSER_MEDIA_TYPES = ["application/xhtml+xml", "text/html"];
515
+ const DEFAULT_PARSER_MEDIA_TYPE = "text/html";
516
+ let transformCaseFunc = null;
517
+ let CONFIG = null;
518
+ const formElement = document.createElement("form");
519
+ const isRegexOrFunction = function isRegexOrFunction2(testValue) {
520
+ return testValue instanceof RegExp || testValue instanceof Function;
521
+ };
522
+ const _parseConfig = function _parseConfig2() {
523
+ let cfg = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
524
+ if (CONFIG && CONFIG === cfg) {
525
+ return;
526
+ }
527
+ if (!cfg || typeof cfg !== "object") {
528
+ cfg = {};
529
+ }
530
+ cfg = clone(cfg);
531
+ PARSER_MEDIA_TYPE = // eslint-disable-next-line unicorn/prefer-includes
532
+ SUPPORTED_PARSER_MEDIA_TYPES.indexOf(cfg.PARSER_MEDIA_TYPE) === -1 ? DEFAULT_PARSER_MEDIA_TYPE : cfg.PARSER_MEDIA_TYPE;
533
+ transformCaseFunc = PARSER_MEDIA_TYPE === "application/xhtml+xml" ? stringToString : stringToLowerCase;
534
+ ALLOWED_TAGS = _resolveSetOption(cfg, "ALLOWED_TAGS", DEFAULT_ALLOWED_TAGS, {
535
+ transform: transformCaseFunc
536
+ });
537
+ ALLOWED_ATTR = _resolveSetOption(cfg, "ALLOWED_ATTR", DEFAULT_ALLOWED_ATTR, {
538
+ transform: transformCaseFunc
539
+ });
540
+ ALLOWED_NAMESPACES = _resolveSetOption(cfg, "ALLOWED_NAMESPACES", DEFAULT_ALLOWED_NAMESPACES, {
541
+ transform: stringToString
542
+ });
543
+ URI_SAFE_ATTRIBUTES = _resolveSetOption(cfg, "ADD_URI_SAFE_ATTR", DEFAULT_URI_SAFE_ATTRIBUTES, {
544
+ transform: transformCaseFunc,
545
+ base: DEFAULT_URI_SAFE_ATTRIBUTES
546
+ });
547
+ DATA_URI_TAGS = _resolveSetOption(cfg, "ADD_DATA_URI_TAGS", DEFAULT_DATA_URI_TAGS, {
548
+ transform: transformCaseFunc,
549
+ base: DEFAULT_DATA_URI_TAGS
550
+ });
551
+ FORBID_CONTENTS = _resolveSetOption(cfg, "FORBID_CONTENTS", DEFAULT_FORBID_CONTENTS, {
552
+ transform: transformCaseFunc
553
+ });
554
+ FORBID_TAGS = _resolveSetOption(cfg, "FORBID_TAGS", clone({}), {
555
+ transform: transformCaseFunc
556
+ });
557
+ FORBID_ATTR = _resolveSetOption(cfg, "FORBID_ATTR", clone({}), {
558
+ transform: transformCaseFunc
559
+ });
560
+ USE_PROFILES = objectHasOwnProperty(cfg, "USE_PROFILES") ? cfg.USE_PROFILES && typeof cfg.USE_PROFILES === "object" ? clone(cfg.USE_PROFILES) : cfg.USE_PROFILES : false;
561
+ ALLOW_ARIA_ATTR = cfg.ALLOW_ARIA_ATTR !== false;
562
+ ALLOW_DATA_ATTR = cfg.ALLOW_DATA_ATTR !== false;
563
+ ALLOW_UNKNOWN_PROTOCOLS = cfg.ALLOW_UNKNOWN_PROTOCOLS || false;
564
+ ALLOW_SELF_CLOSE_IN_ATTR = cfg.ALLOW_SELF_CLOSE_IN_ATTR !== false;
565
+ SAFE_FOR_TEMPLATES = cfg.SAFE_FOR_TEMPLATES || false;
566
+ SAFE_FOR_XML = cfg.SAFE_FOR_XML !== false;
567
+ WHOLE_DOCUMENT = cfg.WHOLE_DOCUMENT || false;
568
+ RETURN_DOM = cfg.RETURN_DOM || false;
569
+ RETURN_DOM_FRAGMENT = cfg.RETURN_DOM_FRAGMENT || false;
570
+ RETURN_TRUSTED_TYPE = cfg.RETURN_TRUSTED_TYPE || false;
571
+ FORCE_BODY = cfg.FORCE_BODY || false;
572
+ SANITIZE_DOM = cfg.SANITIZE_DOM !== false;
573
+ SANITIZE_NAMED_PROPS = cfg.SANITIZE_NAMED_PROPS || false;
574
+ KEEP_CONTENT = cfg.KEEP_CONTENT !== false;
575
+ IN_PLACE = cfg.IN_PLACE || false;
576
+ IS_ALLOWED_URI$1 = isRegex(cfg.ALLOWED_URI_REGEXP) ? cfg.ALLOWED_URI_REGEXP : IS_ALLOWED_URI;
577
+ NAMESPACE = typeof cfg.NAMESPACE === "string" ? cfg.NAMESPACE : HTML_NAMESPACE;
578
+ MATHML_TEXT_INTEGRATION_POINTS = objectHasOwnProperty(cfg, "MATHML_TEXT_INTEGRATION_POINTS") && cfg.MATHML_TEXT_INTEGRATION_POINTS && typeof cfg.MATHML_TEXT_INTEGRATION_POINTS === "object" ? clone(cfg.MATHML_TEXT_INTEGRATION_POINTS) : addToSet({}, DEFAULT_MATHML_TEXT_INTEGRATION_POINTS);
579
+ HTML_INTEGRATION_POINTS = objectHasOwnProperty(cfg, "HTML_INTEGRATION_POINTS") && cfg.HTML_INTEGRATION_POINTS && typeof cfg.HTML_INTEGRATION_POINTS === "object" ? clone(cfg.HTML_INTEGRATION_POINTS) : addToSet({}, DEFAULT_HTML_INTEGRATION_POINTS);
580
+ const customElementHandling = objectHasOwnProperty(cfg, "CUSTOM_ELEMENT_HANDLING") && cfg.CUSTOM_ELEMENT_HANDLING && typeof cfg.CUSTOM_ELEMENT_HANDLING === "object" ? clone(cfg.CUSTOM_ELEMENT_HANDLING) : create(null);
581
+ CUSTOM_ELEMENT_HANDLING = create(null);
582
+ if (objectHasOwnProperty(customElementHandling, "tagNameCheck") && isRegexOrFunction(customElementHandling.tagNameCheck)) {
583
+ CUSTOM_ELEMENT_HANDLING.tagNameCheck = customElementHandling.tagNameCheck;
584
+ }
585
+ if (objectHasOwnProperty(customElementHandling, "attributeNameCheck") && isRegexOrFunction(customElementHandling.attributeNameCheck)) {
586
+ CUSTOM_ELEMENT_HANDLING.attributeNameCheck = customElementHandling.attributeNameCheck;
587
+ }
588
+ if (objectHasOwnProperty(customElementHandling, "allowCustomizedBuiltInElements") && typeof customElementHandling.allowCustomizedBuiltInElements === "boolean") {
589
+ CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements = customElementHandling.allowCustomizedBuiltInElements;
590
+ }
591
+ seal(CUSTOM_ELEMENT_HANDLING);
592
+ if (SAFE_FOR_TEMPLATES) {
593
+ ALLOW_DATA_ATTR = false;
594
+ }
595
+ if (RETURN_DOM_FRAGMENT) {
596
+ RETURN_DOM = true;
597
+ }
598
+ if (USE_PROFILES) {
599
+ ALLOWED_TAGS = addToSet({}, text);
600
+ ALLOWED_ATTR = create(null);
601
+ if (USE_PROFILES.html === true) {
602
+ addToSet(ALLOWED_TAGS, html$1);
603
+ addToSet(ALLOWED_ATTR, html);
604
+ }
605
+ if (USE_PROFILES.svg === true) {
606
+ addToSet(ALLOWED_TAGS, svg$1);
607
+ addToSet(ALLOWED_ATTR, svg);
608
+ addToSet(ALLOWED_ATTR, xml);
609
+ }
610
+ if (USE_PROFILES.svgFilters === true) {
611
+ addToSet(ALLOWED_TAGS, svgFilters);
612
+ addToSet(ALLOWED_ATTR, svg);
613
+ addToSet(ALLOWED_ATTR, xml);
614
+ }
615
+ if (USE_PROFILES.mathMl === true) {
616
+ addToSet(ALLOWED_TAGS, mathMl$1);
617
+ addToSet(ALLOWED_ATTR, mathMl);
618
+ addToSet(ALLOWED_ATTR, xml);
619
+ }
620
+ }
621
+ EXTRA_ELEMENT_HANDLING.tagCheck = null;
622
+ EXTRA_ELEMENT_HANDLING.attributeCheck = null;
623
+ if (objectHasOwnProperty(cfg, "ADD_TAGS")) {
624
+ if (typeof cfg.ADD_TAGS === "function") {
625
+ EXTRA_ELEMENT_HANDLING.tagCheck = cfg.ADD_TAGS;
626
+ } else if (arrayIsArray(cfg.ADD_TAGS)) {
627
+ if (ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {
628
+ ALLOWED_TAGS = clone(ALLOWED_TAGS);
629
+ }
630
+ addToSet(ALLOWED_TAGS, cfg.ADD_TAGS, transformCaseFunc);
631
+ }
632
+ }
633
+ if (objectHasOwnProperty(cfg, "ADD_ATTR")) {
634
+ if (typeof cfg.ADD_ATTR === "function") {
635
+ EXTRA_ELEMENT_HANDLING.attributeCheck = cfg.ADD_ATTR;
636
+ } else if (arrayIsArray(cfg.ADD_ATTR)) {
637
+ if (ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {
638
+ ALLOWED_ATTR = clone(ALLOWED_ATTR);
639
+ }
640
+ addToSet(ALLOWED_ATTR, cfg.ADD_ATTR, transformCaseFunc);
641
+ }
642
+ }
643
+ if (objectHasOwnProperty(cfg, "ADD_URI_SAFE_ATTR") && arrayIsArray(cfg.ADD_URI_SAFE_ATTR)) {
644
+ addToSet(URI_SAFE_ATTRIBUTES, cfg.ADD_URI_SAFE_ATTR, transformCaseFunc);
645
+ }
646
+ if (objectHasOwnProperty(cfg, "FORBID_CONTENTS") && arrayIsArray(cfg.FORBID_CONTENTS)) {
647
+ if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {
648
+ FORBID_CONTENTS = clone(FORBID_CONTENTS);
649
+ }
650
+ addToSet(FORBID_CONTENTS, cfg.FORBID_CONTENTS, transformCaseFunc);
651
+ }
652
+ if (objectHasOwnProperty(cfg, "ADD_FORBID_CONTENTS") && arrayIsArray(cfg.ADD_FORBID_CONTENTS)) {
653
+ if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {
654
+ FORBID_CONTENTS = clone(FORBID_CONTENTS);
655
+ }
656
+ addToSet(FORBID_CONTENTS, cfg.ADD_FORBID_CONTENTS, transformCaseFunc);
657
+ }
658
+ if (KEEP_CONTENT) {
659
+ ALLOWED_TAGS["#text"] = true;
660
+ }
661
+ if (WHOLE_DOCUMENT) {
662
+ addToSet(ALLOWED_TAGS, ["html", "head", "body"]);
663
+ }
664
+ if (ALLOWED_TAGS.table) {
665
+ addToSet(ALLOWED_TAGS, ["tbody"]);
666
+ delete FORBID_TAGS.tbody;
667
+ }
668
+ if (cfg.TRUSTED_TYPES_POLICY) {
669
+ if (typeof cfg.TRUSTED_TYPES_POLICY.createHTML !== "function") {
670
+ throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a "createHTML" hook.');
671
+ }
672
+ if (typeof cfg.TRUSTED_TYPES_POLICY.createScriptURL !== "function") {
673
+ throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a "createScriptURL" hook.');
674
+ }
675
+ const previousTrustedTypesPolicy = trustedTypesPolicy;
676
+ trustedTypesPolicy = cfg.TRUSTED_TYPES_POLICY;
677
+ try {
678
+ emptyHTML = _createTrustedHTML("");
679
+ } catch (error) {
680
+ trustedTypesPolicy = previousTrustedTypesPolicy;
681
+ throw error;
682
+ }
683
+ } else if (cfg.TRUSTED_TYPES_POLICY === null) {
684
+ trustedTypesPolicy = void 0;
685
+ emptyHTML = "";
686
+ } else {
687
+ if (trustedTypesPolicy === void 0) {
688
+ trustedTypesPolicy = _getDefaultTrustedTypesPolicy();
689
+ }
690
+ if (trustedTypesPolicy && typeof emptyHTML === "string") {
691
+ emptyHTML = _createTrustedHTML("");
692
+ }
693
+ }
694
+ if (freeze) {
695
+ freeze(cfg);
696
+ }
697
+ CONFIG = cfg;
698
+ };
699
+ const ALL_SVG_TAGS = addToSet({}, [...svg$1, ...svgFilters, ...svgDisallowed]);
700
+ const ALL_MATHML_TAGS = addToSet({}, [...mathMl$1, ...mathMlDisallowed]);
701
+ const _checkSvgNamespace = function _checkSvgNamespace2(tagName, parent, parentTagName) {
702
+ if (parent.namespaceURI === HTML_NAMESPACE) {
703
+ return tagName === "svg";
704
+ }
705
+ if (parent.namespaceURI === MATHML_NAMESPACE) {
706
+ return tagName === "svg" && (parentTagName === "annotation-xml" || MATHML_TEXT_INTEGRATION_POINTS[parentTagName]);
707
+ }
708
+ return Boolean(ALL_SVG_TAGS[tagName]);
709
+ };
710
+ const _checkMathMlNamespace = function _checkMathMlNamespace2(tagName, parent, parentTagName) {
711
+ if (parent.namespaceURI === HTML_NAMESPACE) {
712
+ return tagName === "math";
713
+ }
714
+ if (parent.namespaceURI === SVG_NAMESPACE) {
715
+ return tagName === "math" && HTML_INTEGRATION_POINTS[parentTagName];
716
+ }
717
+ return Boolean(ALL_MATHML_TAGS[tagName]);
718
+ };
719
+ const _checkHtmlNamespace = function _checkHtmlNamespace2(tagName, parent, parentTagName) {
720
+ if (parent.namespaceURI === SVG_NAMESPACE && !HTML_INTEGRATION_POINTS[parentTagName]) {
721
+ return false;
722
+ }
723
+ if (parent.namespaceURI === MATHML_NAMESPACE && !MATHML_TEXT_INTEGRATION_POINTS[parentTagName]) {
724
+ return false;
725
+ }
726
+ return !ALL_MATHML_TAGS[tagName] && (COMMON_SVG_AND_HTML_ELEMENTS[tagName] || !ALL_SVG_TAGS[tagName]);
727
+ };
728
+ const _checkValidNamespace = function _checkValidNamespace2(element) {
729
+ let parent = getParentNode(element);
730
+ if (!parent || !parent.tagName) {
731
+ parent = {
732
+ namespaceURI: NAMESPACE,
733
+ tagName: "template"
734
+ };
735
+ }
736
+ const tagName = stringToLowerCase(element.tagName);
737
+ const parentTagName = stringToLowerCase(parent.tagName);
738
+ if (!ALLOWED_NAMESPACES[element.namespaceURI]) {
739
+ return false;
740
+ }
741
+ if (element.namespaceURI === SVG_NAMESPACE) {
742
+ return _checkSvgNamespace(tagName, parent, parentTagName);
743
+ }
744
+ if (element.namespaceURI === MATHML_NAMESPACE) {
745
+ return _checkMathMlNamespace(tagName, parent, parentTagName);
746
+ }
747
+ if (element.namespaceURI === HTML_NAMESPACE) {
748
+ return _checkHtmlNamespace(tagName, parent, parentTagName);
749
+ }
750
+ if (PARSER_MEDIA_TYPE === "application/xhtml+xml" && ALLOWED_NAMESPACES[element.namespaceURI]) {
751
+ return true;
752
+ }
753
+ return false;
754
+ };
755
+ const _forceRemove = function _forceRemove2(node) {
756
+ arrayPush(DOMPurify.removed, {
757
+ element: node
758
+ });
759
+ try {
760
+ getParentNode(node).removeChild(node);
761
+ } catch (_) {
762
+ remove(node);
763
+ if (!getParentNode(node)) {
764
+ throw typeErrorCreate("a node selected for removal could not be detached from its tree and cannot be safely returned; refusing to sanitize in place");
765
+ }
766
+ }
767
+ };
768
+ const _neutralizeRoot = function _neutralizeRoot2(root) {
769
+ _neutralizeSubtree(root);
770
+ const childNodes = getChildNodes(root);
771
+ if (childNodes) {
772
+ const snapshot = [];
773
+ arrayForEach(childNodes, (child) => {
774
+ arrayPush(snapshot, child);
775
+ });
776
+ arrayForEach(snapshot, (child) => {
777
+ try {
778
+ remove(child);
779
+ } catch (_) {
780
+ }
781
+ });
782
+ }
783
+ const attributes = getAttributes(root);
784
+ if (attributes) {
785
+ for (let i = attributes.length - 1; i >= 0; --i) {
786
+ const attribute = attributes[i];
787
+ const name = attribute && attribute.name;
788
+ if (typeof name === "string") {
789
+ try {
790
+ root.removeAttribute(name);
791
+ } catch (_) {
792
+ }
793
+ }
794
+ }
795
+ }
796
+ };
797
+ const _removeAttribute = function _removeAttribute2(name, element) {
798
+ try {
799
+ arrayPush(DOMPurify.removed, {
800
+ attribute: element.getAttributeNode(name),
801
+ from: element
802
+ });
803
+ } catch (_) {
804
+ arrayPush(DOMPurify.removed, {
805
+ attribute: null,
806
+ from: element
807
+ });
808
+ }
809
+ element.removeAttribute(name);
810
+ if (name === "is") {
811
+ if (RETURN_DOM || RETURN_DOM_FRAGMENT) {
812
+ try {
813
+ _forceRemove(element);
814
+ } catch (_) {
815
+ }
816
+ } else {
817
+ try {
818
+ element.setAttribute(name, "");
819
+ } catch (_) {
820
+ }
821
+ }
822
+ }
823
+ };
824
+ const _stripDisallowedAttributes = function _stripDisallowedAttributes2(element) {
825
+ const attributes = getAttributes(element);
826
+ if (!attributes) {
827
+ return;
828
+ }
829
+ for (let i = attributes.length - 1; i >= 0; --i) {
830
+ const attribute = attributes[i];
831
+ const name = attribute && attribute.name;
832
+ if (typeof name !== "string" || ALLOWED_ATTR[transformCaseFunc(name)]) {
833
+ continue;
834
+ }
835
+ try {
836
+ element.removeAttribute(name);
837
+ } catch (_) {
838
+ }
839
+ }
840
+ };
841
+ const _neutralizeSubtree = function _neutralizeSubtree2(root) {
842
+ const stack = [root];
843
+ while (stack.length > 0) {
844
+ const node = stack.pop();
845
+ const nodeType = getNodeType ? getNodeType(node) : node.nodeType;
846
+ if (nodeType === NODE_TYPE.element) {
847
+ _stripDisallowedAttributes(node);
848
+ }
849
+ const childNodes = getChildNodes(node);
850
+ if (childNodes) {
851
+ for (let i = childNodes.length - 1; i >= 0; --i) {
852
+ stack.push(childNodes[i]);
853
+ }
854
+ }
855
+ }
856
+ };
857
+ const _neutralizePatchLinkage = function _neutralizePatchLinkage2(root) {
858
+ if (!SAFE_FOR_XML) {
859
+ return;
860
+ }
861
+ const stack = [root];
862
+ while (stack.length > 0) {
863
+ const node = stack.pop();
864
+ const nodeType = getNodeType ? getNodeType(node) : node.nodeType;
865
+ if (nodeType === NODE_TYPE.processingInstruction || nodeType === NODE_TYPE.comment && regExpTest(COMMENT_MARKUP_PROBE, node.data)) {
866
+ try {
867
+ remove(node);
868
+ } catch (_) {
869
+ }
870
+ continue;
871
+ }
872
+ if (nodeType === NODE_TYPE.element) {
873
+ const element = node;
874
+ const lcTag = transformCaseFunc(getNodeName ? getNodeName(node) : node.nodeName);
875
+ try {
876
+ if (element.hasAttribute && element.hasAttribute("patchsrc")) {
877
+ element.removeAttribute("patchsrc");
878
+ }
879
+ if (element.hasAttribute && element.hasAttribute("for") && lcTag !== "label" && lcTag !== "output") {
880
+ element.removeAttribute("for");
881
+ }
882
+ } catch (_) {
883
+ }
884
+ }
885
+ const childNodes = getChildNodes(node);
886
+ if (childNodes) {
887
+ for (let i = childNodes.length - 1; i >= 0; --i) {
888
+ stack.push(childNodes[i]);
889
+ }
890
+ }
891
+ }
892
+ };
893
+ const _initDocument = function _initDocument2(dirty) {
894
+ let doc = null;
895
+ let leadingWhitespace = null;
896
+ if (FORCE_BODY) {
897
+ dirty = "<remove></remove>" + dirty;
898
+ } else {
899
+ const matches = stringMatch(dirty, /^[\r\n\t ]+/);
900
+ leadingWhitespace = matches && matches[0];
901
+ }
902
+ if (PARSER_MEDIA_TYPE === "application/xhtml+xml" && NAMESPACE === HTML_NAMESPACE) {
903
+ dirty = '<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>' + dirty + "</body></html>";
904
+ }
905
+ const dirtyPayload = trustedTypesPolicy ? _createTrustedHTML(dirty) : dirty;
906
+ if (NAMESPACE === HTML_NAMESPACE) {
907
+ try {
908
+ doc = new DOMParser().parseFromString(dirtyPayload, PARSER_MEDIA_TYPE);
909
+ } catch (_) {
910
+ }
911
+ }
912
+ if (!doc || !doc.documentElement) {
913
+ doc = implementation.createDocument(NAMESPACE, "template", null);
914
+ try {
915
+ doc.documentElement.innerHTML = IS_EMPTY_INPUT ? emptyHTML : dirtyPayload;
916
+ } catch (_) {
917
+ }
918
+ }
919
+ const body = doc.body || doc.documentElement;
920
+ if (dirty && leadingWhitespace) {
921
+ body.insertBefore(document.createTextNode(leadingWhitespace), body.childNodes[0] || null);
922
+ }
923
+ if (NAMESPACE === HTML_NAMESPACE) {
924
+ return getElementsByTagName.call(doc, WHOLE_DOCUMENT ? "html" : "body")[0];
925
+ }
926
+ return WHOLE_DOCUMENT ? doc.documentElement : body;
927
+ };
928
+ const _createNodeIterator = function _createNodeIterator2(root) {
929
+ return createNodeIterator.call(
930
+ root.ownerDocument || root,
931
+ root,
932
+ // eslint-disable-next-line no-bitwise
933
+ NodeFilter.SHOW_ELEMENT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_TEXT | NodeFilter.SHOW_PROCESSING_INSTRUCTION | NodeFilter.SHOW_CDATA_SECTION,
934
+ null
935
+ );
936
+ };
937
+ const _stripTemplateExpressions = function _stripTemplateExpressions2(value) {
938
+ value = stringReplace(value, MUSTACHE_EXPR$1, " ");
939
+ value = stringReplace(value, ERB_EXPR$1, " ");
940
+ value = stringReplace(value, TMPLIT_EXPR$1, " ");
941
+ return value;
942
+ };
943
+ const _scrubTemplateExpressions2 = function _scrubTemplateExpressions(node) {
944
+ var _node$querySelectorAl;
945
+ node.normalize();
946
+ const walker = createNodeIterator.call(
947
+ node.ownerDocument || node,
948
+ node,
949
+ // eslint-disable-next-line no-bitwise
950
+ NodeFilter.SHOW_TEXT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_CDATA_SECTION | NodeFilter.SHOW_PROCESSING_INSTRUCTION,
951
+ null
952
+ );
953
+ let currentNode = walker.nextNode();
954
+ while (currentNode) {
955
+ currentNode.data = _stripTemplateExpressions(currentNode.data);
956
+ currentNode = walker.nextNode();
957
+ }
958
+ const templates = (_node$querySelectorAl = node.querySelectorAll) === null || _node$querySelectorAl === void 0 ? void 0 : _node$querySelectorAl.call(node, "template");
959
+ if (templates) {
960
+ arrayForEach(templates, (tmpl) => {
961
+ if (_isDocumentFragment(tmpl.content)) {
962
+ _scrubTemplateExpressions2(tmpl.content);
963
+ }
964
+ });
965
+ }
966
+ };
967
+ const _isClobbered = function _isClobbered2(element) {
968
+ const realTagName = getNodeName ? getNodeName(element) : null;
969
+ if (typeof realTagName !== "string") {
970
+ return false;
971
+ }
972
+ if (transformCaseFunc(realTagName) !== "form") {
973
+ return false;
974
+ }
975
+ return typeof element.nodeName !== "string" || typeof element.textContent !== "string" || typeof element.removeChild !== "function" || // Realm-safe NamedNodeMap detection: equality against the cached
976
+ // prototype getter. Clobbered .attributes (e.g. <input name="attributes">)
977
+ // makes the direct read diverge from the cached read; a clean form
978
+ // (same-realm OR foreign-realm) has both reads pointing at the same
979
+ // canonical NamedNodeMap.
980
+ element.attributes !== getAttributes(element) || typeof element.removeAttribute !== "function" || typeof element.setAttribute !== "function" || typeof element.namespaceURI !== "string" || typeof element.insertBefore !== "function" || typeof element.hasChildNodes !== "function" || // NodeType clobbering probe. Cached Node.prototype.nodeType getter
981
+ // returns the integer 1 for any Element regardless of realm; direct
982
+ // read on a clobbered form (e.g. <input name="nodeType">) returns
983
+ // the named child element. Cheap addition — nodeType is read from
984
+ // an internal slot, no serialization cost — and removes a residual
985
+ // clobbering surface used by several mXSS / PI / comment branches
986
+ // in _sanitizeElements that compare currentNode.nodeType directly.
987
+ element.nodeType !== getNodeType(element) || // HTMLFormElement has [LegacyOverrideBuiltIns]: a descendant named
988
+ // "childNodes" shadows the prototype getter. Direct reads of
989
+ // form.childNodes from a clobbered form return the named child
990
+ // instead of the real NodeList, so any walk that reads it directly
991
+ // skips the form's real children. Compare the direct read to the
992
+ // cached Node.prototype getter — when the form's named-property
993
+ // getter intercepts the read, the two values differ and we flag
994
+ // the form. This catches every clobbering child type (input,
995
+ // select, etc.) regardless of whether the named child happens to
996
+ // carry a numeric .length, which a typeof-based probe would miss
997
+ // (e.g. HTMLSelectElement.length is a defined unsigned-long).
998
+ element.childNodes !== getChildNodes(element);
999
+ };
1000
+ const _isDocumentFragment = function _isDocumentFragment2(value) {
1001
+ if (!getNodeType || typeof value !== "object" || value === null) {
1002
+ return false;
1003
+ }
1004
+ try {
1005
+ return getNodeType(value) === NODE_TYPE.documentFragment;
1006
+ } catch (_) {
1007
+ return false;
1008
+ }
1009
+ };
1010
+ const _isNode = function _isNode2(value) {
1011
+ if (!getNodeType || typeof value !== "object" || value === null) {
1012
+ return false;
1013
+ }
1014
+ try {
1015
+ return typeof getNodeType(value) === "number";
1016
+ } catch (_) {
1017
+ return false;
1018
+ }
1019
+ };
1020
+ function _executeHooks(hooks2, currentNode, data) {
1021
+ if (hooks2.length === 0) {
1022
+ return;
1023
+ }
1024
+ arrayForEach(hooks2, (hook) => {
1025
+ hook.call(DOMPurify, currentNode, data, CONFIG);
1026
+ });
1027
+ }
1028
+ const _isUnsafeNode = function _isUnsafeNode2(currentNode, tagName) {
1029
+ if (SAFE_FOR_XML && currentNode.hasChildNodes() && !_isNode(currentNode.firstElementChild) && regExpTest(ELEMENT_MARKUP_PROBE, currentNode.textContent) && regExpTest(ELEMENT_MARKUP_PROBE, currentNode.innerHTML)) {
1030
+ return true;
1031
+ }
1032
+ if (SAFE_FOR_XML && currentNode.namespaceURI === HTML_NAMESPACE && tagName === "style" && _isNode(currentNode.firstElementChild)) {
1033
+ return true;
1034
+ }
1035
+ if (currentNode.nodeType === NODE_TYPE.processingInstruction) {
1036
+ return true;
1037
+ }
1038
+ if (SAFE_FOR_XML && currentNode.nodeType === NODE_TYPE.comment && regExpTest(COMMENT_MARKUP_PROBE, currentNode.data)) {
1039
+ return true;
1040
+ }
1041
+ return false;
1042
+ };
1043
+ const _sanitizeDisallowedNode = function _sanitizeDisallowedNode2(currentNode, tagName) {
1044
+ if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) {
1045
+ if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)) {
1046
+ return false;
1047
+ }
1048
+ if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(tagName)) {
1049
+ return false;
1050
+ }
1051
+ }
1052
+ if (KEEP_CONTENT && !FORBID_CONTENTS[tagName]) {
1053
+ const parentNode = getParentNode(currentNode);
1054
+ const childNodes = getChildNodes(currentNode);
1055
+ if (childNodes && parentNode) {
1056
+ const childCount = childNodes.length;
1057
+ for (let i = childCount - 1; i >= 0; --i) {
1058
+ const hoisted = IN_PLACE ? childNodes[i] : cloneNode(childNodes[i], true);
1059
+ parentNode.insertBefore(hoisted, getNextSibling(currentNode));
1060
+ }
1061
+ }
1062
+ }
1063
+ _forceRemove(currentNode);
1064
+ return true;
1065
+ };
1066
+ const _sanitizeElements = function _sanitizeElements2(currentNode, root) {
1067
+ _executeHooks(hooks.beforeSanitizeElements, currentNode, null);
1068
+ if (currentNode !== root && getParentNode(currentNode) === null) {
1069
+ return true;
1070
+ }
1071
+ if (_isClobbered(currentNode)) {
1072
+ _forceRemove(currentNode);
1073
+ return true;
1074
+ }
1075
+ const tagName = transformCaseFunc(getNodeName ? getNodeName(currentNode) : currentNode.nodeName);
1076
+ _executeHooks(hooks.uponSanitizeElement, currentNode, {
1077
+ tagName,
1078
+ allowedTags: ALLOWED_TAGS
1079
+ });
1080
+ if (currentNode !== root && getParentNode(currentNode) === null) {
1081
+ return true;
1082
+ }
1083
+ if (_isUnsafeNode(currentNode, tagName)) {
1084
+ _forceRemove(currentNode);
1085
+ return true;
1086
+ }
1087
+ if (FORBID_TAGS[tagName] || !(EXTRA_ELEMENT_HANDLING.tagCheck instanceof Function && EXTRA_ELEMENT_HANDLING.tagCheck(tagName)) && !ALLOWED_TAGS[tagName]) {
1088
+ const removed2 = _sanitizeDisallowedNode(currentNode, tagName);
1089
+ if (removed2 === false) {
1090
+ _executeHooks(hooks.afterSanitizeElements, currentNode, null);
1091
+ }
1092
+ return removed2;
1093
+ }
1094
+ const nt = getNodeType ? getNodeType(currentNode) : currentNode.nodeType;
1095
+ if (nt === NODE_TYPE.element && !_checkValidNamespace(currentNode)) {
1096
+ _forceRemove(currentNode);
1097
+ return true;
1098
+ }
1099
+ if ((tagName === "noscript" || tagName === "noembed" || tagName === "noframes") && regExpTest(FALLBACK_TAG_CLOSE, currentNode.innerHTML)) {
1100
+ _forceRemove(currentNode);
1101
+ return true;
1102
+ }
1103
+ if (SAFE_FOR_TEMPLATES && currentNode.nodeType === NODE_TYPE.text) {
1104
+ const content = _stripTemplateExpressions(currentNode.textContent);
1105
+ if (currentNode.textContent !== content) {
1106
+ arrayPush(DOMPurify.removed, {
1107
+ element: currentNode.cloneNode()
1108
+ });
1109
+ currentNode.textContent = content;
1110
+ }
1111
+ }
1112
+ _executeHooks(hooks.afterSanitizeElements, currentNode, null);
1113
+ return false;
1114
+ };
1115
+ const _isValidAttribute = function _isValidAttribute2(lcTag, lcName, value) {
1116
+ if (FORBID_ATTR[lcName]) {
1117
+ return false;
1118
+ }
1119
+ if (SAFE_FOR_XML && lcName === "patchsrc") {
1120
+ return false;
1121
+ }
1122
+ if (SAFE_FOR_XML && lcName === "for" && lcTag !== "label" && lcTag !== "output") {
1123
+ return false;
1124
+ }
1125
+ if (SANITIZE_DOM && (lcName === "id" || lcName === "name") && (value in document || value in formElement)) {
1126
+ return false;
1127
+ }
1128
+ const nameIsPermitted = ALLOWED_ATTR[lcName] || EXTRA_ELEMENT_HANDLING.attributeCheck instanceof Function && EXTRA_ELEMENT_HANDLING.attributeCheck(lcName, lcTag);
1129
+ if (ALLOW_DATA_ATTR && regExpTest(DATA_ATTR$1, lcName)) ;
1130
+ else if (ALLOW_ARIA_ATTR && regExpTest(ARIA_ATTR$1, lcName)) ;
1131
+ else if (!nameIsPermitted) {
1132
+ if (
1133
+ // First condition does a very basic check if a) it's basically a valid custom element tagname AND
1134
+ // b) if the tagName passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
1135
+ // and c) if the attribute name passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.attributeNameCheck
1136
+ _isBasicCustomElement(lcTag) && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, lcTag) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(lcTag)) && (CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.attributeNameCheck, lcName) || CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.attributeNameCheck(lcName, lcTag)) || // Alternative, second condition checks if it's an `is`-attribute, AND
1137
+ // the value passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
1138
+ lcName === "is" && CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, value) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(value))
1139
+ ) ;
1140
+ else {
1141
+ return false;
1142
+ }
1143
+ } else if (URI_SAFE_ATTRIBUTES[lcName]) ;
1144
+ else if (regExpTest(IS_ALLOWED_URI$1, stringReplace(value, ATTR_WHITESPACE$1, ""))) ;
1145
+ else if ((lcName === "src" || lcName === "xlink:href" || lcName === "href") && lcTag !== "script" && stringIndexOf(value, "data:") === 0 && DATA_URI_TAGS[lcTag]) ;
1146
+ else if (ALLOW_UNKNOWN_PROTOCOLS && !regExpTest(IS_SCRIPT_OR_DATA$1, stringReplace(value, ATTR_WHITESPACE$1, ""))) ;
1147
+ else if (value) {
1148
+ return false;
1149
+ } else ;
1150
+ return true;
1151
+ };
1152
+ const RESERVED_CUSTOM_ELEMENT_NAMES = addToSet({}, ["annotation-xml", "color-profile", "font-face", "font-face-format", "font-face-name", "font-face-src", "font-face-uri", "missing-glyph"]);
1153
+ const _isBasicCustomElement = function _isBasicCustomElement2(tagName) {
1154
+ return !RESERVED_CUSTOM_ELEMENT_NAMES[stringToLowerCase(tagName)] && regExpTest(CUSTOM_ELEMENT$1, tagName);
1155
+ };
1156
+ const _applyTrustedTypesToAttribute = function _applyTrustedTypesToAttribute2(lcTag, lcName, namespaceURI, value) {
1157
+ if (trustedTypesPolicy && typeof trustedTypes === "object" && typeof trustedTypes.getAttributeType === "function" && !namespaceURI) {
1158
+ switch (trustedTypes.getAttributeType(lcTag, lcName)) {
1159
+ case "TrustedHTML": {
1160
+ return _createTrustedHTML(value);
1161
+ }
1162
+ case "TrustedScriptURL": {
1163
+ return _createTrustedScriptURL(value);
1164
+ }
1165
+ }
1166
+ }
1167
+ return value;
1168
+ };
1169
+ const _setAttributeValue = function _setAttributeValue2(currentNode, name, namespaceURI, value) {
1170
+ try {
1171
+ if (namespaceURI) {
1172
+ currentNode.setAttributeNS(namespaceURI, name, value);
1173
+ } else {
1174
+ currentNode.setAttribute(name, value);
1175
+ }
1176
+ if (_isClobbered(currentNode)) {
1177
+ _forceRemove(currentNode);
1178
+ } else {
1179
+ arrayPop(DOMPurify.removed);
1180
+ }
1181
+ } catch (_) {
1182
+ _removeAttribute(name, currentNode);
1183
+ }
1184
+ };
1185
+ const _sanitizeAttributes = function _sanitizeAttributes2(currentNode) {
1186
+ _executeHooks(hooks.beforeSanitizeAttributes, currentNode, null);
1187
+ const attributes = currentNode.attributes;
1188
+ if (!attributes || _isClobbered(currentNode)) {
1189
+ return;
1190
+ }
1191
+ const hookEvent = {
1192
+ attrName: "",
1193
+ attrValue: "",
1194
+ keepAttr: true,
1195
+ allowedAttributes: ALLOWED_ATTR,
1196
+ forceKeepAttr: void 0
1197
+ };
1198
+ let l = attributes.length;
1199
+ const lcTag = transformCaseFunc(currentNode.nodeName);
1200
+ while (l--) {
1201
+ const attr = attributes[l];
1202
+ const name = attr.name, namespaceURI = attr.namespaceURI, attrValue = attr.value;
1203
+ const lcName = transformCaseFunc(name);
1204
+ const initValue = attrValue;
1205
+ let value = name === "value" ? initValue : stringTrim(initValue);
1206
+ hookEvent.attrName = lcName;
1207
+ hookEvent.attrValue = value;
1208
+ hookEvent.keepAttr = true;
1209
+ hookEvent.forceKeepAttr = void 0;
1210
+ _executeHooks(hooks.uponSanitizeAttribute, currentNode, hookEvent);
1211
+ value = hookEvent.attrValue;
1212
+ if (SANITIZE_NAMED_PROPS && (lcName === "id" || lcName === "name") && stringIndexOf(value, SANITIZE_NAMED_PROPS_PREFIX) !== 0) {
1213
+ _removeAttribute(name, currentNode);
1214
+ value = SANITIZE_NAMED_PROPS_PREFIX + value;
1215
+ }
1216
+ if (SAFE_FOR_XML && regExpTest(/((--!?|])>)|<\/(style|script|title|xmp|textarea|noscript|iframe|noembed|noframes)/i, value)) {
1217
+ _removeAttribute(name, currentNode);
1218
+ continue;
1219
+ }
1220
+ if (lcName === "attributename" && stringMatch(value, "href")) {
1221
+ _removeAttribute(name, currentNode);
1222
+ continue;
1223
+ }
1224
+ if (hookEvent.forceKeepAttr) {
1225
+ continue;
1226
+ }
1227
+ if (!hookEvent.keepAttr) {
1228
+ _removeAttribute(name, currentNode);
1229
+ continue;
1230
+ }
1231
+ if (!ALLOW_SELF_CLOSE_IN_ATTR && regExpTest(SELF_CLOSING_TAG, value)) {
1232
+ _removeAttribute(name, currentNode);
1233
+ continue;
1234
+ }
1235
+ if (SAFE_FOR_TEMPLATES) {
1236
+ value = _stripTemplateExpressions(value);
1237
+ }
1238
+ if (!_isValidAttribute(lcTag, lcName, value)) {
1239
+ _removeAttribute(name, currentNode);
1240
+ continue;
1241
+ }
1242
+ value = _applyTrustedTypesToAttribute(lcTag, lcName, namespaceURI, value);
1243
+ if (value !== initValue) {
1244
+ _setAttributeValue(currentNode, name, namespaceURI, value);
1245
+ }
1246
+ }
1247
+ _executeHooks(hooks.afterSanitizeAttributes, currentNode, null);
1248
+ };
1249
+ const _sanitizeShadowDOM2 = function _sanitizeShadowDOM(fragment) {
1250
+ let shadowNode = null;
1251
+ const shadowIterator = _createNodeIterator(fragment);
1252
+ _executeHooks(hooks.beforeSanitizeShadowDOM, fragment, null);
1253
+ while (shadowNode = shadowIterator.nextNode()) {
1254
+ _executeHooks(hooks.uponSanitizeShadowNode, shadowNode, null);
1255
+ _sanitizeElements(shadowNode, fragment);
1256
+ _sanitizeAttributes(shadowNode);
1257
+ if (_isDocumentFragment(shadowNode.content)) {
1258
+ _sanitizeShadowDOM2(shadowNode.content);
1259
+ }
1260
+ const shadowNodeType = getNodeType ? getNodeType(shadowNode) : shadowNode.nodeType;
1261
+ if (shadowNodeType === NODE_TYPE.element) {
1262
+ const innerSr = getShadowRoot(shadowNode);
1263
+ if (_isDocumentFragment(innerSr)) {
1264
+ _sanitizeAttachedShadowRoots(innerSr);
1265
+ _sanitizeShadowDOM2(innerSr);
1266
+ }
1267
+ }
1268
+ }
1269
+ _executeHooks(hooks.afterSanitizeShadowDOM, fragment, null);
1270
+ };
1271
+ const _sanitizeAttachedShadowRoots = function _sanitizeAttachedShadowRoots2(root) {
1272
+ const stack = [{
1273
+ node: root,
1274
+ shadow: null
1275
+ }];
1276
+ while (stack.length > 0) {
1277
+ const item = stack.pop();
1278
+ if (item.shadow) {
1279
+ _sanitizeShadowDOM2(item.shadow);
1280
+ continue;
1281
+ }
1282
+ const node = item.node;
1283
+ const nodeType = getNodeType ? getNodeType(node) : node.nodeType;
1284
+ const isElement = nodeType === NODE_TYPE.element;
1285
+ const childNodes = getChildNodes(node);
1286
+ if (childNodes) {
1287
+ for (let i = childNodes.length - 1; i >= 0; --i) {
1288
+ stack.push({
1289
+ node: childNodes[i],
1290
+ shadow: null
1291
+ });
1292
+ }
1293
+ }
1294
+ if (isElement) {
1295
+ const rootName = getNodeName ? getNodeName(node) : null;
1296
+ if (typeof rootName === "string" && transformCaseFunc(rootName) === "template") {
1297
+ const content = node.content;
1298
+ if (_isDocumentFragment(content)) {
1299
+ stack.push({
1300
+ node: content,
1301
+ shadow: null
1302
+ });
1303
+ }
1304
+ }
1305
+ }
1306
+ if (isElement) {
1307
+ const sr = getShadowRoot(node);
1308
+ if (_isDocumentFragment(sr)) {
1309
+ stack.push({
1310
+ node: null,
1311
+ shadow: sr
1312
+ }, {
1313
+ node: sr,
1314
+ shadow: null
1315
+ });
1316
+ }
1317
+ }
1318
+ }
1319
+ };
1320
+ DOMPurify.sanitize = function(dirty) {
1321
+ let cfg = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {};
1322
+ let body = null;
1323
+ let importedNode = null;
1324
+ let currentNode = null;
1325
+ let returnNode = null;
1326
+ IS_EMPTY_INPUT = !dirty;
1327
+ if (IS_EMPTY_INPUT) {
1328
+ dirty = "<!-->";
1329
+ }
1330
+ if (typeof dirty !== "string" && !_isNode(dirty)) {
1331
+ dirty = stringifyValue(dirty);
1332
+ if (typeof dirty !== "string") {
1333
+ throw typeErrorCreate("dirty is not a string, aborting");
1334
+ }
1335
+ }
1336
+ if (!DOMPurify.isSupported) {
1337
+ return dirty;
1338
+ }
1339
+ if (SET_CONFIG) {
1340
+ ALLOWED_TAGS = SET_CONFIG_ALLOWED_TAGS;
1341
+ ALLOWED_ATTR = SET_CONFIG_ALLOWED_ATTR;
1342
+ } else {
1343
+ _parseConfig(cfg);
1344
+ }
1345
+ if (hooks.uponSanitizeElement.length > 0 || hooks.uponSanitizeAttribute.length > 0) {
1346
+ ALLOWED_TAGS = clone(ALLOWED_TAGS);
1347
+ }
1348
+ if (hooks.uponSanitizeAttribute.length > 0) {
1349
+ ALLOWED_ATTR = clone(ALLOWED_ATTR);
1350
+ }
1351
+ DOMPurify.removed = [];
1352
+ const inPlace = IN_PLACE && typeof dirty !== "string" && _isNode(dirty);
1353
+ if (inPlace) {
1354
+ _neutralizePatchLinkage(dirty);
1355
+ const nn = getNodeName ? getNodeName(dirty) : dirty.nodeName;
1356
+ if (typeof nn === "string") {
1357
+ const tagName = transformCaseFunc(nn);
1358
+ if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {
1359
+ _neutralizeRoot(dirty);
1360
+ throw typeErrorCreate("root node is forbidden and cannot be sanitized in-place");
1361
+ }
1362
+ }
1363
+ if (_isClobbered(dirty)) {
1364
+ _neutralizeRoot(dirty);
1365
+ throw typeErrorCreate("root node is clobbered and cannot be sanitized in-place");
1366
+ }
1367
+ try {
1368
+ _sanitizeAttachedShadowRoots(dirty);
1369
+ } catch (error) {
1370
+ _neutralizeRoot(dirty);
1371
+ throw error;
1372
+ }
1373
+ } else if (_isNode(dirty)) {
1374
+ body = _initDocument("<!---->");
1375
+ importedNode = body.ownerDocument.importNode(dirty, true);
1376
+ if (importedNode.nodeType === NODE_TYPE.element && importedNode.nodeName === "BODY") {
1377
+ body = importedNode;
1378
+ } else if (importedNode.nodeName === "HTML") {
1379
+ body = importedNode;
1380
+ } else {
1381
+ body.appendChild(importedNode);
1382
+ }
1383
+ _sanitizeAttachedShadowRoots(importedNode);
1384
+ } else {
1385
+ if (!RETURN_DOM && !SAFE_FOR_TEMPLATES && !WHOLE_DOCUMENT && // eslint-disable-next-line unicorn/prefer-includes
1386
+ dirty.indexOf("<") === -1) {
1387
+ return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? _createTrustedHTML(dirty) : dirty;
1388
+ }
1389
+ body = _initDocument(dirty);
1390
+ if (!body) {
1391
+ return RETURN_DOM ? null : RETURN_TRUSTED_TYPE ? emptyHTML : "";
1392
+ }
1393
+ }
1394
+ if (body && FORCE_BODY) {
1395
+ _forceRemove(body.firstChild);
1396
+ }
1397
+ const walkRoot = inPlace ? dirty : body;
1398
+ const nodeIterator = _createNodeIterator(walkRoot);
1399
+ try {
1400
+ while (currentNode = nodeIterator.nextNode()) {
1401
+ _sanitizeElements(currentNode, walkRoot);
1402
+ _sanitizeAttributes(currentNode);
1403
+ if (_isDocumentFragment(currentNode.content)) {
1404
+ _sanitizeShadowDOM2(currentNode.content);
1405
+ }
1406
+ }
1407
+ } catch (error) {
1408
+ if (inPlace) {
1409
+ _neutralizeRoot(dirty);
1410
+ arrayForEach(DOMPurify.removed, (entry) => {
1411
+ if (entry.element) {
1412
+ _neutralizeSubtree(entry.element);
1413
+ }
1414
+ });
1415
+ }
1416
+ throw error;
1417
+ }
1418
+ if (inPlace) {
1419
+ arrayForEach(DOMPurify.removed, (entry) => {
1420
+ if (entry.element) {
1421
+ _neutralizeSubtree(entry.element);
1422
+ }
1423
+ });
1424
+ if (SAFE_FOR_TEMPLATES) {
1425
+ _scrubTemplateExpressions2(dirty);
1426
+ }
1427
+ return dirty;
1428
+ }
1429
+ if (RETURN_DOM) {
1430
+ if (SAFE_FOR_TEMPLATES) {
1431
+ _scrubTemplateExpressions2(body);
1432
+ }
1433
+ if (RETURN_DOM_FRAGMENT) {
1434
+ returnNode = createDocumentFragment.call(body.ownerDocument);
1435
+ while (body.firstChild) {
1436
+ returnNode.appendChild(body.firstChild);
1437
+ }
1438
+ } else {
1439
+ returnNode = body;
1440
+ }
1441
+ if (ALLOWED_ATTR.shadowroot || ALLOWED_ATTR.shadowrootmode) {
1442
+ returnNode = importNode.call(originalDocument, returnNode, true);
1443
+ }
1444
+ return returnNode;
1445
+ }
1446
+ let serializedHTML = WHOLE_DOCUMENT ? body.outerHTML : body.innerHTML;
1447
+ if (WHOLE_DOCUMENT && ALLOWED_TAGS["!doctype"] && body.ownerDocument && body.ownerDocument.doctype && body.ownerDocument.doctype.name && regExpTest(DOCTYPE_NAME, body.ownerDocument.doctype.name)) {
1448
+ serializedHTML = "<!DOCTYPE " + body.ownerDocument.doctype.name + ">\n" + serializedHTML;
1449
+ }
1450
+ if (SAFE_FOR_TEMPLATES) {
1451
+ serializedHTML = _stripTemplateExpressions(serializedHTML);
1452
+ }
1453
+ return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? _createTrustedHTML(serializedHTML) : serializedHTML;
1454
+ };
1455
+ DOMPurify.setConfig = function() {
1456
+ let cfg = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
1457
+ _parseConfig(cfg);
1458
+ SET_CONFIG = true;
1459
+ SET_CONFIG_ALLOWED_TAGS = ALLOWED_TAGS;
1460
+ SET_CONFIG_ALLOWED_ATTR = ALLOWED_ATTR;
1461
+ };
1462
+ DOMPurify.clearConfig = function() {
1463
+ CONFIG = null;
1464
+ SET_CONFIG = false;
1465
+ SET_CONFIG_ALLOWED_TAGS = null;
1466
+ SET_CONFIG_ALLOWED_ATTR = null;
1467
+ trustedTypesPolicy = defaultTrustedTypesPolicy;
1468
+ emptyHTML = "";
1469
+ };
1470
+ DOMPurify.isValidAttribute = function(tag, attr, value) {
1471
+ if (!CONFIG) {
1472
+ _parseConfig({});
1473
+ }
1474
+ const lcTag = transformCaseFunc(tag);
1475
+ const lcName = transformCaseFunc(attr);
1476
+ return _isValidAttribute(lcTag, lcName, value);
1477
+ };
1478
+ DOMPurify.addHook = function(entryPoint, hookFunction) {
1479
+ if (typeof hookFunction !== "function") {
1480
+ return;
1481
+ }
1482
+ if (!objectHasOwnProperty(hooks, entryPoint)) {
1483
+ return;
1484
+ }
1485
+ arrayPush(hooks[entryPoint], hookFunction);
1486
+ };
1487
+ DOMPurify.removeHook = function(entryPoint, hookFunction) {
1488
+ if (!objectHasOwnProperty(hooks, entryPoint)) {
1489
+ return void 0;
1490
+ }
1491
+ if (hookFunction !== void 0) {
1492
+ const index = arrayLastIndexOf(hooks[entryPoint], hookFunction);
1493
+ return index === -1 ? void 0 : arraySplice(hooks[entryPoint], index, 1)[0];
1494
+ }
1495
+ return arrayPop(hooks[entryPoint]);
1496
+ };
1497
+ DOMPurify.removeHooks = function(entryPoint) {
1498
+ if (!objectHasOwnProperty(hooks, entryPoint)) {
1499
+ return;
1500
+ }
1501
+ hooks[entryPoint] = [];
1502
+ };
1503
+ DOMPurify.removeAllHooks = function() {
1504
+ hooks = _createHooksMap();
1505
+ };
1506
+ return DOMPurify;
1507
+ }
1508
+ var purify = createDOMPurify();
1509
+
1510
+ // node_modules/isomorphic-dompurify/dist/browser.mjs
1511
+ var browser_default = purify;
1512
+ var sanitize = purify.sanitize.bind(purify);
1513
+ var isSupported = purify.isSupported;
1514
+ var addHook = purify.addHook.bind(purify);
1515
+ var removeHook = purify.removeHook.bind(purify);
1516
+ var removeHooks = purify.removeHooks.bind(purify);
1517
+ var removeAllHooks = purify.removeAllHooks.bind(purify);
1518
+ var setConfig = purify.setConfig.bind(purify);
1519
+ var clearConfig = purify.clearConfig.bind(purify);
1520
+ var isValidAttribute = purify.isValidAttribute.bind(purify);
1521
+ var version = purify.version;
1522
+ var removed = purify.removed;
1523
+ function clearWindow() {
1524
+ }
1525
+ export {
1526
+ addHook,
1527
+ clearConfig,
1528
+ clearWindow,
1529
+ browser_default as default,
1530
+ isSupported,
1531
+ isValidAttribute,
1532
+ removeAllHooks,
1533
+ removeHook,
1534
+ removeHooks,
1535
+ removed,
1536
+ sanitize,
1537
+ setConfig,
1538
+ version
1539
+ };
1540
+ /*! Bundled license information:
1541
+
1542
+ dompurify/dist/purify.es.mjs:
1543
+ (*! @license DOMPurify 3.4.12 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.12/LICENSE *)
1544
+ */