@blamejs/blamejs-shop 0.5.21 → 0.5.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +2 -0
- package/README.md +1 -1
- package/SECURITY.md +7 -1
- package/lib/addresses.js +16 -2
- package/lib/affiliates.js +3 -3
- package/lib/announcement-bar.js +2 -2
- package/lib/api-keys.js +2 -2
- package/lib/asset-manifest.json +1 -1
- package/lib/blog-articles.js +2 -2
- package/lib/carrier-accounts.js +2 -2
- package/lib/catalog-drafts.js +1 -1
- package/lib/category-navigation.js +6 -3
- package/lib/compliance-export.js +8 -1
- package/lib/customer-notes.js +1 -1
- package/lib/customer-roles.js +1 -1
- package/lib/customer-surveys.js +2 -2
- package/lib/customers.js +1 -1
- package/lib/dispute-resolution.js +3 -3
- package/lib/dropship-forwarding.js +1 -1
- package/lib/dunning.js +1 -1
- package/lib/email-ab-tests.js +1 -1
- package/lib/email-campaigns.js +15 -2
- package/lib/email-warmup.js +1 -1
- package/lib/externaldb-d1.js +0 -8
- package/lib/gift-options.js +3 -3
- package/lib/knowledge-base.js +3 -3
- package/lib/line-gift-wrap.js +6 -2
- package/lib/live-chat.js +1 -1
- package/lib/notifications.js +1 -1
- package/lib/operator-accounts.js +1 -1
- package/lib/operator-help-center.js +3 -3
- package/lib/operator-inbox.js +2 -2
- package/lib/operator-roles.js +1 -1
- package/lib/order-notes.js +2 -2
- package/lib/order-ratings.js +3 -3
- package/lib/payment-methods.js +1 -1
- package/lib/payment-retries.js +1 -1
- package/lib/pixel-events.js +14 -6
- package/lib/plan-changes.js +1 -1
- package/lib/product-qa.js +1 -1
- package/lib/push-notifications.js +2 -2
- package/lib/reviews.js +3 -3
- package/lib/seller-signup.js +4 -4
- package/lib/sidebar-widgets.js +1 -1
- package/lib/sms-dispatcher.js +3 -3
- package/lib/stock-receipts.js +1 -1
- package/lib/storefront-dashboards.js +1 -1
- package/lib/storefront-forms.js +1 -1
- package/lib/storefront-pages.js +2 -2
- package/lib/subscription-billing.js +1 -1
- package/lib/subscription-controls.js +1 -1
- package/lib/suggestion-box.js +4 -4
- package/lib/support-tickets.js +3 -3
- package/lib/tenants.js +1 -1
- package/lib/text-guard.js +44 -2
- package/lib/theme-assets.js +1 -1
- package/lib/vendor/MANIFEST.json +12 -12
- package/lib/vendor/blamejs/CHANGELOG.md +32 -0
- package/lib/vendor/blamejs/NOTICE +1 -1
- package/lib/vendor/blamejs/README.md +1 -1
- package/lib/vendor/blamejs/lib/network-tls.js +98 -13
- package/lib/vendor/blamejs/lib/vendor/MANIFEST.json +12 -12
- package/lib/vendor/blamejs/lib/vendor/blamejs-pki.cjs +568 -304
- package/lib/vendor/blamejs/package.json +1 -1
- package/lib/vendor/blamejs/sbom.cdx.json +6 -6
- package/lib/vendors.js +3 -3
- package/lib/webhook-receiver.js +1 -1
- package/lib/webhook-subscriptions.js +1 -1
- package/lib/wishlist-sharing.js +1 -1
- package/package.json +1 -1
|
@@ -2,10 +2,10 @@
|
|
|
2
2
|
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
|
|
3
3
|
"bomFormat": "CycloneDX",
|
|
4
4
|
"specVersion": "1.5",
|
|
5
|
-
"serialNumber": "urn:uuid:
|
|
5
|
+
"serialNumber": "urn:uuid:6fba0fbc-d16f-4c2c-864f-99f1c662d2af",
|
|
6
6
|
"version": 1,
|
|
7
7
|
"metadata": {
|
|
8
|
-
"timestamp": "2026-08-
|
|
8
|
+
"timestamp": "2026-08-11T01:57:40.816Z",
|
|
9
9
|
"lifecycles": [
|
|
10
10
|
{
|
|
11
11
|
"phase": "build"
|
|
@@ -19,14 +19,14 @@
|
|
|
19
19
|
}
|
|
20
20
|
],
|
|
21
21
|
"component": {
|
|
22
|
-
"bom-ref": "@blamejs/core@0.18.
|
|
22
|
+
"bom-ref": "@blamejs/core@0.18.24",
|
|
23
23
|
"type": "application",
|
|
24
24
|
"name": "blamejs",
|
|
25
|
-
"version": "0.18.
|
|
25
|
+
"version": "0.18.24",
|
|
26
26
|
"scope": "required",
|
|
27
27
|
"author": "blamejs contributors",
|
|
28
28
|
"description": "The Node framework that owns its stack.",
|
|
29
|
-
"purl": "pkg:npm/%40blamejs/core@0.18.
|
|
29
|
+
"purl": "pkg:npm/%40blamejs/core@0.18.24",
|
|
30
30
|
"properties": [],
|
|
31
31
|
"externalReferences": [
|
|
32
32
|
{
|
|
@@ -54,7 +54,7 @@
|
|
|
54
54
|
"components": [],
|
|
55
55
|
"dependencies": [
|
|
56
56
|
{
|
|
57
|
-
"ref": "@blamejs/core@0.18.
|
|
57
|
+
"ref": "@blamejs/core@0.18.24",
|
|
58
58
|
"dependsOn": []
|
|
59
59
|
}
|
|
60
60
|
]
|
package/lib/vendors.js
CHANGED
|
@@ -156,7 +156,7 @@ function _name(s) {
|
|
|
156
156
|
if (s.length > MAX_NAME_LEN) {
|
|
157
157
|
throw new TypeError("vendors: name must be <= " + MAX_NAME_LEN + " characters");
|
|
158
158
|
}
|
|
159
|
-
textGuard.freeText(s, "vendors: name", { singleLine: "reject", zeroWidth: "reject" });
|
|
159
|
+
textGuard.freeText(s, "vendors: name", { singleLine: "reject", zeroWidth: "reject", bidiMarks: "allow" });
|
|
160
160
|
return s;
|
|
161
161
|
}
|
|
162
162
|
|
|
@@ -178,7 +178,7 @@ function _payoutAddress(s) {
|
|
|
178
178
|
if (s.length > MAX_PAYOUT_ADDRESS_LEN) {
|
|
179
179
|
throw new TypeError("vendors: payout_address must be <= " + MAX_PAYOUT_ADDRESS_LEN + " characters");
|
|
180
180
|
}
|
|
181
|
-
textGuard.freeText(s, "vendors: payout_address", { singleLine: "reject", zeroWidth: "reject" });
|
|
181
|
+
textGuard.freeText(s, "vendors: payout_address", { singleLine: "reject", zeroWidth: "reject", bidiMarks: "allow" });
|
|
182
182
|
return s;
|
|
183
183
|
}
|
|
184
184
|
|
|
@@ -211,7 +211,7 @@ function _addressJson(value) {
|
|
|
211
211
|
if (encoded.length > MAX_ADDRESS_JSON_LEN) {
|
|
212
212
|
throw new TypeError("vendors: address JSON must be <= " + MAX_ADDRESS_JSON_LEN + " characters serialised");
|
|
213
213
|
}
|
|
214
|
-
textGuard.freeText(encoded, "vendors: address", { singleLine: "reject", zeroWidth: "reject" });
|
|
214
|
+
textGuard.freeText(encoded, "vendors: address", { singleLine: "reject", zeroWidth: "reject", bidiMarks: "allow" });
|
|
215
215
|
return encoded;
|
|
216
216
|
}
|
|
217
217
|
|
package/lib/webhook-receiver.js
CHANGED
|
@@ -210,7 +210,7 @@ function _reason(s) {
|
|
|
210
210
|
if (s.length > MAX_REASON_LEN) {
|
|
211
211
|
throw new TypeError("webhookReceiver: reason must be <= " + MAX_REASON_LEN + " characters");
|
|
212
212
|
}
|
|
213
|
-
textGuard.freeText(s, "webhookReceiver: reason", { singleLine: "reject", zeroWidth: "reject" });
|
|
213
|
+
textGuard.freeText(s, "webhookReceiver: reason", { singleLine: "reject", zeroWidth: "reject", bidiMarks: "allow" });
|
|
214
214
|
return s;
|
|
215
215
|
}
|
|
216
216
|
|
|
@@ -185,7 +185,7 @@ function _name(s) {
|
|
|
185
185
|
if (s.length > MAX_NAME_LEN) {
|
|
186
186
|
throw new TypeError("webhookSubscriptions: name must be <= " + MAX_NAME_LEN + " characters");
|
|
187
187
|
}
|
|
188
|
-
textGuard.freeText(s, "webhookSubscriptions: name", { singleLine: "reject", zeroWidth: "reject" });
|
|
188
|
+
textGuard.freeText(s, "webhookSubscriptions: name", { singleLine: "reject", zeroWidth: "reject", bidiMarks: "allow" });
|
|
189
189
|
return s;
|
|
190
190
|
}
|
|
191
191
|
|
package/lib/wishlist-sharing.js
CHANGED
|
@@ -161,7 +161,7 @@ function _reason(s) {
|
|
|
161
161
|
if (typeof s !== "string" || !s.length || s.length > MAX_REASON_LEN) {
|
|
162
162
|
throw new TypeError("wishlistSharing: reason must be a non-empty string <= " + MAX_REASON_LEN + " chars");
|
|
163
163
|
}
|
|
164
|
-
textGuard.freeText(s, "wishlistSharing: reason");
|
|
164
|
+
textGuard.freeText(s, "wishlistSharing: reason", { bidiMarks: "allow" });
|
|
165
165
|
return s;
|
|
166
166
|
}
|
|
167
167
|
|
package/package.json
CHANGED