@ctzhian/tiptap 2.11.2 → 2.11.4

package/dist/extension/component/Tooltip/index.js

@@ -7,13 +7,36 @@ function _arrayWithHoles(arr) { if (Array.isArray(arr)) return arr; }
 import { EditLineIcon } from "../../../component/Icons";
 import { Box, Stack, Tooltip } from "@mui/material";
 import { MarkViewContent } from "@tiptap/react";
-import DOMPurify from 'isomorphic-dompurify';
-import React, { useEffect, useRef, useState } from "react";
+import React, { useEffect, useMemo, useRef, useState } from "react";
+import sanitizeHtml from 'sanitize-html';
 import EditPopover from "./EditPopover";
+var SANITIZE_CONFIG = {
+  allowedTags: ['p', 'br', 'strong', 'em', 'b', 'i', 'u', 's', 'strike', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'ul', 'ol', 'li', 'a', 'span', 'div', 'blockquote', 'code', 'pre'],
+  allowedAttributes: {
+    a: ['href', 'title', 'target'],
+    span: ['style', 'class'],
+    div: ['style', 'class'],
+    p: ['style', 'class'],
+    '*': ['class']
+  },
+  allowedStyles: {
+    '*': {
+      color: [/^#[0-9A-Fa-f]{3,6}$/, /^rgb/, /^rgba/],
+      'text-align': [/^left$/, /^right$/, /^center$/, /^justify$/],
+      'font-size': [/^\d+(?:px|em|rem|%)$/],
+      'font-weight': [/^\d+$/, /^normal$/, /^bold$/]
+    }
+  },
+  disallowedTagsMode: 'discard',
+  allowedSchemes: ['http', 'https', 'mailto'],
+  allowedSchemesByTag: {
+    a: ['http', 'https', 'mailto']
+  }
+};
 var TooltipView = function TooltipView(_ref) {
   var mark = _ref.mark,
     editor = _ref.editor;
-  var tooltip = DOMPurify.sanitize(mark.attrs.tooltip || '').trim();
+  var rawTooltip = mark.attrs.tooltip || '';
   var isEditable = editor.isEditable;
   var _useState = useState(false),
     _useState2 = _slicedToArray(_useState, 2),
@@ -28,6 +51,9 @@ var TooltipView = function TooltipView(_ref) {
     isMobile = _useState6[0],
     setIsMobile = _useState6[1];
   var anchorRef = useRef(null);
+  var tooltip = useMemo(function () {
+    return sanitizeHtml(rawTooltip, SANITIZE_CONFIG).trim();
+  }, [rawTooltip]);
   var handleEditClick = function handleEditClick(e) {
     e.stopPropagation();
     setOpen(true);
@@ -63,7 +89,7 @@ var TooltipView = function TooltipView(_ref) {
     if (isEditable && tooltip === '' && !isSelectionEmpty && anchorRef.current) {
       setOpen(true);
     }
-  }, [tooltip, isEditable, anchorRef.current]);
+  }, [tooltip, isEditable]);
   var isMobileReadonly = !isEditable && isMobile;
   return /*#__PURE__*/React.createElement(React.Fragment, null, /*#__PURE__*/React.createElement(Tooltip, {
     arrow: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ctzhian/tiptap",
-  "version": "2.11.2",
+  "version": "2.11.4",
   "description": "基于 Tiptap 二次开发的编辑器组件",
   "main": "dist/index.js",
   "module": "dist/index.js",
@@ -66,6 +66,7 @@
     "@types/diff-match-patch": "^1.0.36",
     "@types/react": "^18.0.0",
     "@types/react-dom": "^18.0.0",
+    "@types/sanitize-html": "^2.16.0",
     "@umijs/lint": "^4.0.0",
     "dumi": "^2.4.21",
     "eslint": "^8.23.0",
@@ -118,7 +119,6 @@
     "core-js": "^3.46.0",
     "diff-match-patch": "^1.0.5",
     "highlight.js": "^11.11.1",
-    "isomorphic-dompurify": "^2.34.0",
     "jszip": "^3.10.1",
     "katex": "^0.16.22",
     "linkifyjs": "^4.3.2",
@@ -128,6 +128,7 @@
     "react-colorful": "^5.6.1",
     "react-image-crop": "^11.0.10",
     "react-photo-view": "^1.2.7",
+    "sanitize-html": "^2.17.0",
     "uuid": "^11.1.0"
   },
   "scripts": {