@contrail/document-generation 1.0.30 → 1.0.32

package/lib/document-generator.js

@@ -5,6 +5,7 @@ const documents_1 = require("@contrail/documents");
 const interfaces_1 = require("./interfaces");
 const util_1 = require("@contrail/util");
 const frame_generator_1 = require("./frame-generator");
+const document_util_1 = require("./util/document-util");
 class DocumentGenerator {
     constructor() {
     }
@@ -79,7 +80,7 @@ class DocumentGenerator {
         const elements = [];
         const heading = documents_1.DocumentElementFactory.createTextElement("Placeholder", {});
         heading.style = { border: { width: 1, color: "rgba(0,0,0,0)" }, color: "#000000", backgroundColor: template.frameGroupHeaderTemplate.style.backgroundColor || 'black' };
-        heading.text = `<p><span style=\"font-size: ${template.frameGroupHeaderTemplate.style.font.size}pt;\"><strong><span style=\"color: ${template.frameGroupHeaderTemplate.style.color};\">${dataGroup.name}</span></strong></span></p>`;
+        heading.text = `<p><span style=\"font-size: ${template.frameGroupHeaderTemplate.style.font.size}pt;\"><strong><span style=\"color: ${template.frameGroupHeaderTemplate.style.color};\">${document_util_1.DocumentUtil.sanitizeHTML(dataGroup.name)}</span></strong></span></p>`;
         heading.position = position;
         if (template.frameOrientation === interfaces_1.Orientation.HORIZONTAL) {
             let sizeDim = template.frameSize.height * span;

package/lib/frame-generator.js

@@ -61,7 +61,7 @@ class FrameGenerator {
     static generateFrameHeaderForDataGroup(dataGroup, position, template, headerSize) {
         const heading = documents_1.DocumentElementFactory.createTextElement(dataGroup.name, template.frameHeaderTemplate);
         heading.style = { border: { width: 1, color: "rgba(0,0,0,0)" }, color: "#000000", backgroundColor: template.frameHeaderTemplate.style.backgroundColor || 'black' };
-        heading.text = `<p><span style=\"font-size: ${template.frameHeaderTemplate.style.font.size}pt;\"><strong><span style=\"color: ${template.frameHeaderTemplate.style.color};\">${dataGroup.name}</span></strong></span></p>`;
+        heading.text = `<p><span style=\"font-size: ${template.frameHeaderTemplate.style.font.size}pt;\"><strong><span style=\"color: ${template.frameHeaderTemplate.style.color};\">${document_util_1.DocumentUtil.sanitizeHTML(dataGroup.name)}</span></strong></span></p>`;
         heading.size = util_1.ObjectUtil.cloneDeep(headerSize);
         heading.position = util_1.ObjectUtil.cloneDeep(position);
         return [heading];

package/lib/util/document-text-element-util.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.DocumentTextElementUtil = void 0;
 const documents_1 = require("@contrail/documents");
 const util_1 = require("@contrail/util");
+const document_util_1 = require("./document-util");
 class DocumentTextElementUtil {
     static generateTextElement(textValue, options, applyInlineFormatting = true) {
         var _a;
@@ -23,7 +24,7 @@ class DocumentTextElementUtil {
         size.height = size.height || 25;
         size.width = size.width || 125;
         const defaultedOptions = util_1.ObjectUtil.mergeDeep(util_1.ObjectUtil.cloneDeep(options), { position, size, style });
-        let element = documents_1.DocumentElementFactory.createTextElement(textValue);
+        let element = documents_1.DocumentElementFactory.createTextElement(document_util_1.DocumentUtil.sanitizeHTML(textValue));
         element = Object.assign(element, defaultedOptions);
         if (applyInlineFormatting) {
             element.text = this.applyInLineStyling(element.text, element.style);

package/lib/util/document-util.d.ts

@@ -4,4 +4,5 @@ export declare class DocumentUtil {
         x: number;
         y: number;
     };
+    static sanitizeHTML(text: string): string;
 }

package/lib/util/document-util.js

@@ -9,5 +9,15 @@ class DocumentUtil {
         };
         return relativePosition;
     }
+    static sanitizeHTML(text) {
+        if (text === undefined || text === null) {
+            return '';
+        }
+        return text.replace(/&/g, "&")
+            .replace(/</g, "&lt;")
+            .replace(/>/g, "&gt;")
+            .replace(/"/g, "&quot;")
+            .replace(/'/g, "&#39;");
+    }
 }
 exports.DocumentUtil = DocumentUtil;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrail/document-generation",
-  "version": "1.0.30",
+  "version": "1.0.32",
   "description": "Utilities for automatic generation of documents.",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -16,13 +16,13 @@
   "devDependencies": {
     "@contrail/aggregates": "^1.0.14",
     "@contrail/sdk": "^1.2.3",
-    "@types/jest": "^23.3.14",
+    "@types/jest": "^29.5.2",
     "@types/node": "^18.16.0",
-    "jest": "^23.6.0",
+    "jest": "^29.5.0",
     "nanoid": "^3.3.6",
     "npm": "^9.6.5",
     "prettier": "^1.19.1",
-    "ts-jest": "^23.10.5",
+    "ts-jest": "^29.1.1",
     "tslint": "^5.11.0",
     "tslint-config-prettier": "^1.18.0",
     "typescript": "^4.0.0"