@commercetools-frontend/application-config 23.1.0 → 23.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1318,18 +1318,16 @@ const processConfig = async function () {
1318
1318
  };
1319
1319
 
1320
1320
  const jsdom = new jsdom$1.JSDOM('');
1321
- // @ts-expect-error: jsdom returns DOMWindow, which doesn't match Window dompurify expects
1322
1321
  const DOMPurify = createDOMPurify__default["default"](jsdom.window);
1323
1322
  function sanitizeSvg(data) {
1324
1323
  return DOMPurify.sanitize(data, {
1325
1324
  USE_PROFILES: {
1326
1325
  svg: true
1327
1326
  },
1328
- RETURN_DOM: true,
1329
1327
  FORBID_ATTR: [
1330
1328
  // To avoid injection by using `style="filter:url(\"data:image/svg+xml,<svg`
1331
1329
  'style']
1332
- }).innerHTML;
1330
+ });
1333
1331
  }
1334
1332
 
1335
1333
  Object.defineProperty(exports, 'ENTRY_POINT_URI_PATH_REGEX', {
@@ -1318,18 +1318,16 @@ const processConfig = async function () {
1318
1318
  };
1319
1319
 
1320
1320
  const jsdom = new jsdom$1.JSDOM('');
1321
- // @ts-expect-error: jsdom returns DOMWindow, which doesn't match Window dompurify expects
1322
1321
  const DOMPurify = createDOMPurify__default["default"](jsdom.window);
1323
1322
  function sanitizeSvg(data) {
1324
1323
  return DOMPurify.sanitize(data, {
1325
1324
  USE_PROFILES: {
1326
1325
  svg: true
1327
1326
  },
1328
- RETURN_DOM: true,
1329
1327
  FORBID_ATTR: [
1330
1328
  // To avoid injection by using `style="filter:url(\"data:image/svg+xml,<svg`
1331
1329
  'style']
1332
- }).innerHTML;
1330
+ });
1333
1331
  }
1334
1332
 
1335
1333
  Object.defineProperty(exports, 'ENTRY_POINT_URI_PATH_REGEX', {
@@ -1284,18 +1284,16 @@ const processConfig = async function () {
1284
1284
  };
1285
1285
 
1286
1286
  const jsdom = new JSDOM('');
1287
- // @ts-expect-error: jsdom returns DOMWindow, which doesn't match Window dompurify expects
1288
1287
  const DOMPurify = createDOMPurify(jsdom.window);
1289
1288
  function sanitizeSvg(data) {
1290
1289
  return DOMPurify.sanitize(data, {
1291
1290
  USE_PROFILES: {
1292
1291
  svg: true
1293
1292
  },
1294
- RETURN_DOM: true,
1295
1293
  FORBID_ATTR: [
1296
1294
  // To avoid injection by using `style="filter:url(\"data:image/svg+xml,<svg`
1297
1295
  'style']
1298
- }).innerHTML;
1296
+ });
1299
1297
  }
1300
1298
 
1301
1299
  export { CLOUD_IDENTIFIERS, LOADED_CONFIG_TYPES, MC_API_URLS, MissingOrInvalidConfigError, getConfigPath, processConfig, sanitizeSvg };
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@commercetools-frontend/application-config",
3
- "version": "23.1.0",
3
+ "version": "23.2.0",
4
4
  "description": "Configuration utilities for building Custom Applications",
5
5
  "bugs": "https://github.com/commercetools/merchant-center-application-kit/issues",
6
6
  "repository": {
@@ -45,15 +45,14 @@
45
45
  "@babel/register": "^7.22.15",
46
46
  "@babel/runtime": "^7.22.15",
47
47
  "@babel/runtime-corejs3": "^7.22.15",
48
- "@commercetools-frontend/constants": "23.1.0",
49
- "@types/dompurify": "^2.4.0",
48
+ "@commercetools-frontend/constants": "23.2.0",
50
49
  "@types/lodash": "^4.14.198",
51
50
  "@types/react": "^17.0.83",
52
51
  "ajv": "8.16.0",
53
52
  "core-js": "^3.32.2",
54
53
  "cosmiconfig": "9.0.0",
55
54
  "cosmiconfig-typescript-loader": "6.1.0",
56
- "dompurify": "^2.4.7",
55
+ "dompurify": "^3.0.0",
57
56
  "jsdom": "^21.1.2",
58
57
  "lodash": "4.17.21",
59
58
  "omit-empty-es": "1.2.0"
@@ -61,7 +60,7 @@
61
60
  "devDependencies": {
62
61
  "@types/jsdom": "^21.1.2",
63
62
  "json-schema-to-typescript": "15.0.3",
64
- "@commercetools-frontend/assets": "23.1.0"
63
+ "@commercetools-frontend/assets": "23.2.0"
65
64
  },
66
65
  "engines": {
67
66
  "node": "18.x || 20.x || >=22.0.0"