@coveo/atomic-react 3.11.19 → 3.11.20

package/dist/cjs/commerce/atomic-react.cjs

@@ -8551,7 +8551,7 @@ function getWindow() {
 }
 function getAtomicEnvironment(headlessVersion) {
     return {
-        version: "3.57.2",
+        version: "3.57.3",
         headlessVersion
     };
 }
@@ -8577,16 +8577,28 @@ function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r)
 function _arrayLikeToArray(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
 function _typeof$2(o) { "@babel/helpers - typeof"; return _typeof$2 = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof$2(o); }
 var UNSAFE_KEYS$1 = ['__proto__', 'constructor', 'prototype'];
-function isSafeUrlSegment(v) {
+function isSafeUrlSegmentBase(v) {
   if (typeof v !== 'string') return false;
   if (v.length === 0 || v.length > 128) return false;
   if (UNSAFE_KEYS$1.indexOf(v) > -1) return false;
   if (v.indexOf('..') > -1) return false;
-  if (v.indexOf('/') > -1 || v.indexOf('\\') > -1) return false;
+  if (v.indexOf('\\') > -1) return false;
   if (/[?#%\s@]/.test(v)) return false;
   if (/[\x00-\x1F\x7F]/.test(v)) return false;
   return true;
 }
+function isSafeLangUrlSegment(v) {
+  if (!isSafeUrlSegmentBase(v)) return false;
+  if (v.indexOf('/') > -1) return false;
+  return true;
+}
+function isSafeNsUrlSegment(v) {
+  return isSafeUrlSegmentBase(v);
+}
+var SAFETY_CHECK_BY_KEY = {
+  lng: isSafeLangUrlSegment,
+  ns: isSafeNsUrlSegment
+};
 function sanitizeLogValue(v) {
   if (typeof v !== 'string') return v;
   return v.replace(/[\r\n\x00-\x1F\x7F]/g, ' ');
@@ -8625,13 +8637,14 @@ function interpolateUrl(str, data) {
     if (UNSAFE_KEYS$1.indexOf(k) > -1) return match;
     var value = data[k];
     if (value == null) return match;
+    var check = SAFETY_CHECK_BY_KEY[k] || isSafeLangUrlSegment;
     var segments = String(value).split('+');
     var _iterator = _createForOfIteratorHelper(segments),
       _step;
     try {
       for (_iterator.s(); !(_step = _iterator.n()).done;) {
         var seg = _step.value;
-        if (!isSafeUrlSegment(seg)) {
+        if (!check(seg)) {
           unsafe = true;
           return match;
         }