@d1g1tal/transportr 3.3.0 → 3.3.1

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+## [3.3.1](https://github.com/D1g1talEntr0py/transportr/compare/v3.3.0...v3.3.1) (2026-04-09)
+
+### Bug Fixes
+
+* bypasses DOMPurify entirely for trusted content (bc6b70db9199f985ce908688fc4e0ac16e05ec6e)
+Fixes an issue where the handler partially sanitized HTML even when scripts were allowed. Bypassing DOMPurify completely ensures that inline event handlers and other required attributes are preserved, allowing JavaScript to execute reliably when the caller explicitly trusts the content.
+
 ## [3.3.0](https://github.com/D1g1talEntr0py/transportr/compare/v3.2.2...v3.3.0) (2026-04-09)
 
 ### Features

package/dist/iife/transportr.js

@@ -74,12 +74,12 @@ function ht() {
   }
   let g, X2 = "", { implementation: de2, createNodeIterator: Nt, createDocumentFragment: Ct, getElementsByTagName: It } = l, { importNode: Mt } = a, A2 = Et();
   o.isSupported = typeof _t == "function" && typeof te2 == "function" && de2 && de2.createHTMLDocument !== void 0;
-  let { MUSTACHE_EXPR: Ee2, ERB_EXPR: _e2, TMPLIT_EXPR: ge2, DATA_ATTR: wt, ARIA_ATTR: xt, IS_SCRIPT_OR_DATA: Pt, ATTR_WHITESPACE: He2, CUSTOM_ELEMENT: kt } = dt, { IS_ALLOWED_URI: ze } = dt, T2 = null, Ge = r({}, [...ut, ...we, ...xe, ...Pe, ...mt]), d = null, We = r({}, [...pt, ...ke, ...Tt, ...ue]), u = Object.seal(me(null, { tagNameCheck: { writable: true, configurable: false, enumerable: true, value: null }, attributeNameCheck: { writable: true, configurable: false, enumerable: true, value: null }, allowCustomizedBuiltInElements: { writable: true, configurable: false, enumerable: true, value: false } })), j2 = null, ne2 = null, x2 = Object.seal(me(null, { tagCheck: { writable: true, configurable: false, enumerable: true, value: null }, attributeCheck: { writable: true, configurable: false, enumerable: true, value: null } })), Be2 = true, Ae2 = true, Ye = false, Xe = true, U2 = false, oe = true, P = false, he2 = false, Se2 = false, F2 = false, ie = false, ae2 = false, je2 = true, Ve = false, vt = "user-content-", Re2 = true, V2 = false, H2 = {}, L = null, De2 = r({}, ["annotation-xml", "audio", "colgroup", "desc", "foreignobject", "head", "iframe", "math", "mi", "mn", "mo", "ms", "mtext", "noembed", "noframes", "noscript", "plaintext", "script", "style", "svg", "template", "thead", "title", "video", "xmp"]), $e = null, qe2 = r({}, ["audio", "video", "img", "source", "image", "track"]), Oe2 = null, Ke = r({}, ["alt", "class", "for", "id", "label", "name", "pattern", "placeholder", "role", "summary", "title", "value", "style", "xmlns"]), re = "http://www.w3.org/1998/Math/MathML", se2 = "http://www.w3.org/2000/svg", I2 = "http://www.w3.org/1999/xhtml", z2 = I2, ye2 = false, be2 = null, Ut = r({}, [re, se2, I2], Ie), le2 = r({}, ["mi", "mo", "mn", "ms", "mtext"]), ce2 = r({}, ["annotation-xml"]), Ft = r({}, ["title", "style", "font", "a", "script"]), $2 = null, Ht = ["application/xhtml+xml", "text/html"], zt = "text/html", p = null, G = null, Gt = l.createElement("form"), Ze = function(e) {
+  let { MUSTACHE_EXPR: Ee2, ERB_EXPR: _e2, TMPLIT_EXPR: ge2, DATA_ATTR: wt, ARIA_ATTR: xt, IS_SCRIPT_OR_DATA: Pt, ATTR_WHITESPACE: He2, CUSTOM_ELEMENT: kt } = dt, { IS_ALLOWED_URI: ze } = dt, T2 = null, Ge = r({}, [...ut, ...we, ...xe, ...Pe, ...mt]), d = null, We = r({}, [...pt, ...ke, ...Tt, ...ue]), u = Object.seal(me(null, { tagNameCheck: { writable: true, configurable: false, enumerable: true, value: null }, attributeNameCheck: { writable: true, configurable: false, enumerable: true, value: null }, allowCustomizedBuiltInElements: { writable: true, configurable: false, enumerable: true, value: false } })), j2 = null, ne2 = null, x2 = Object.seal(me(null, { tagCheck: { writable: true, configurable: false, enumerable: true, value: null }, attributeCheck: { writable: true, configurable: false, enumerable: true, value: null } })), Be2 = true, Ae2 = true, Ye = false, Xe = true, U = false, oe = true, P = false, he2 = false, Se2 = false, F2 = false, ie = false, ae2 = false, je2 = true, Ve = false, vt = "user-content-", Re2 = true, V2 = false, H2 = {}, L2 = null, De2 = r({}, ["annotation-xml", "audio", "colgroup", "desc", "foreignobject", "head", "iframe", "math", "mi", "mn", "mo", "ms", "mtext", "noembed", "noframes", "noscript", "plaintext", "script", "style", "svg", "template", "thead", "title", "video", "xmp"]), $e = null, qe2 = r({}, ["audio", "video", "img", "source", "image", "track"]), Oe2 = null, Ke = r({}, ["alt", "class", "for", "id", "label", "name", "pattern", "placeholder", "role", "summary", "title", "value", "style", "xmlns"]), re = "http://www.w3.org/1998/Math/MathML", se2 = "http://www.w3.org/2000/svg", I2 = "http://www.w3.org/1999/xhtml", z2 = I2, ye2 = false, be2 = null, Ut = r({}, [re, se2, I2], Ie), le2 = r({}, ["mi", "mo", "mn", "ms", "mtext"]), ce2 = r({}, ["annotation-xml"]), Ft = r({}, ["title", "style", "font", "a", "script"]), $2 = null, Ht = ["application/xhtml+xml", "text/html"], zt = "text/html", p = null, G = null, Gt = l.createElement("form"), Ze = function(e) {
     return e instanceof RegExp || e instanceof Function;
   }, Le2 = function() {
     let e = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
     if (!(G && G === e)) {
-      if ((!e || typeof e != "object") && (e = {}), e = C(e), $2 = Ht.indexOf(e.PARSER_MEDIA_TYPE) === -1 ? zt : e.PARSER_MEDIA_TYPE, p = $2 === "application/xhtml+xml" ? Ie : pe, T2 = y(e, "ALLOWED_TAGS") ? r({}, e.ALLOWED_TAGS, p) : Ge, d = y(e, "ALLOWED_ATTR") ? r({}, e.ALLOWED_ATTR, p) : We, be2 = y(e, "ALLOWED_NAMESPACES") ? r({}, e.ALLOWED_NAMESPACES, Ie) : Ut, Oe2 = y(e, "ADD_URI_SAFE_ATTR") ? r(C(Ke), e.ADD_URI_SAFE_ATTR, p) : Ke, $e = y(e, "ADD_DATA_URI_TAGS") ? r(C(qe2), e.ADD_DATA_URI_TAGS, p) : qe2, L = y(e, "FORBID_CONTENTS") ? r({}, e.FORBID_CONTENTS, p) : De2, j2 = y(e, "FORBID_TAGS") ? r({}, e.FORBID_TAGS, p) : C({}), ne2 = y(e, "FORBID_ATTR") ? r({}, e.FORBID_ATTR, p) : C({}), H2 = y(e, "USE_PROFILES") ? e.USE_PROFILES : false, Be2 = e.ALLOW_ARIA_ATTR !== false, Ae2 = e.ALLOW_DATA_ATTR !== false, Ye = e.ALLOW_UNKNOWN_PROTOCOLS || false, Xe = e.ALLOW_SELF_CLOSE_IN_ATTR !== false, U2 = e.SAFE_FOR_TEMPLATES || false, oe = e.SAFE_FOR_XML !== false, P = e.WHOLE_DOCUMENT || false, F2 = e.RETURN_DOM || false, ie = e.RETURN_DOM_FRAGMENT || false, ae2 = e.RETURN_TRUSTED_TYPE || false, Se2 = e.FORCE_BODY || false, je2 = e.SANITIZE_DOM !== false, Ve = e.SANITIZE_NAMED_PROPS || false, Re2 = e.KEEP_CONTENT !== false, V2 = e.IN_PLACE || false, ze = e.ALLOWED_URI_REGEXP || gt, z2 = e.NAMESPACE || I2, le2 = e.MATHML_TEXT_INTEGRATION_POINTS || le2, ce2 = e.HTML_INTEGRATION_POINTS || ce2, u = e.CUSTOM_ELEMENT_HANDLING || {}, e.CUSTOM_ELEMENT_HANDLING && Ze(e.CUSTOM_ELEMENT_HANDLING.tagNameCheck) && (u.tagNameCheck = e.CUSTOM_ELEMENT_HANDLING.tagNameCheck), e.CUSTOM_ELEMENT_HANDLING && Ze(e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck) && (u.attributeNameCheck = e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck), e.CUSTOM_ELEMENT_HANDLING && typeof e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements == "boolean" && (u.allowCustomizedBuiltInElements = e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements), U2 && (Ae2 = false), ie && (F2 = true), H2 && (T2 = r({}, mt), d = me(null), H2.html === true && (r(T2, ut), r(d, pt)), H2.svg === true && (r(T2, we), r(d, ke), r(d, ue)), H2.svgFilters === true && (r(T2, xe), r(d, ke), r(d, ue)), H2.mathMl === true && (r(T2, Pe), r(d, Tt), r(d, ue))), y(e, "ADD_TAGS") || (x2.tagCheck = null), y(e, "ADD_ATTR") || (x2.attributeCheck = null), e.ADD_TAGS && (typeof e.ADD_TAGS == "function" ? x2.tagCheck = e.ADD_TAGS : (T2 === Ge && (T2 = C(T2)), r(T2, e.ADD_TAGS, p))), e.ADD_ATTR && (typeof e.ADD_ATTR == "function" ? x2.attributeCheck = e.ADD_ATTR : (d === We && (d = C(d)), r(d, e.ADD_ATTR, p))), e.ADD_URI_SAFE_ATTR && r(Oe2, e.ADD_URI_SAFE_ATTR, p), e.FORBID_CONTENTS && (L === De2 && (L = C(L)), r(L, e.FORBID_CONTENTS, p)), e.ADD_FORBID_CONTENTS && (L === De2 && (L = C(L)), r(L, e.ADD_FORBID_CONTENTS, p)), Re2 && (T2["#text"] = true), P && r(T2, ["html", "head", "body"]), T2.table && (r(T2, ["tbody"]), delete j2.tbody), e.TRUSTED_TYPES_POLICY) {
+      if ((!e || typeof e != "object") && (e = {}), e = C(e), $2 = Ht.indexOf(e.PARSER_MEDIA_TYPE) === -1 ? zt : e.PARSER_MEDIA_TYPE, p = $2 === "application/xhtml+xml" ? Ie : pe, T2 = y(e, "ALLOWED_TAGS") ? r({}, e.ALLOWED_TAGS, p) : Ge, d = y(e, "ALLOWED_ATTR") ? r({}, e.ALLOWED_ATTR, p) : We, be2 = y(e, "ALLOWED_NAMESPACES") ? r({}, e.ALLOWED_NAMESPACES, Ie) : Ut, Oe2 = y(e, "ADD_URI_SAFE_ATTR") ? r(C(Ke), e.ADD_URI_SAFE_ATTR, p) : Ke, $e = y(e, "ADD_DATA_URI_TAGS") ? r(C(qe2), e.ADD_DATA_URI_TAGS, p) : qe2, L2 = y(e, "FORBID_CONTENTS") ? r({}, e.FORBID_CONTENTS, p) : De2, j2 = y(e, "FORBID_TAGS") ? r({}, e.FORBID_TAGS, p) : C({}), ne2 = y(e, "FORBID_ATTR") ? r({}, e.FORBID_ATTR, p) : C({}), H2 = y(e, "USE_PROFILES") ? e.USE_PROFILES : false, Be2 = e.ALLOW_ARIA_ATTR !== false, Ae2 = e.ALLOW_DATA_ATTR !== false, Ye = e.ALLOW_UNKNOWN_PROTOCOLS || false, Xe = e.ALLOW_SELF_CLOSE_IN_ATTR !== false, U = e.SAFE_FOR_TEMPLATES || false, oe = e.SAFE_FOR_XML !== false, P = e.WHOLE_DOCUMENT || false, F2 = e.RETURN_DOM || false, ie = e.RETURN_DOM_FRAGMENT || false, ae2 = e.RETURN_TRUSTED_TYPE || false, Se2 = e.FORCE_BODY || false, je2 = e.SANITIZE_DOM !== false, Ve = e.SANITIZE_NAMED_PROPS || false, Re2 = e.KEEP_CONTENT !== false, V2 = e.IN_PLACE || false, ze = e.ALLOWED_URI_REGEXP || gt, z2 = e.NAMESPACE || I2, le2 = e.MATHML_TEXT_INTEGRATION_POINTS || le2, ce2 = e.HTML_INTEGRATION_POINTS || ce2, u = e.CUSTOM_ELEMENT_HANDLING || {}, e.CUSTOM_ELEMENT_HANDLING && Ze(e.CUSTOM_ELEMENT_HANDLING.tagNameCheck) && (u.tagNameCheck = e.CUSTOM_ELEMENT_HANDLING.tagNameCheck), e.CUSTOM_ELEMENT_HANDLING && Ze(e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck) && (u.attributeNameCheck = e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck), e.CUSTOM_ELEMENT_HANDLING && typeof e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements == "boolean" && (u.allowCustomizedBuiltInElements = e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements), U && (Ae2 = false), ie && (F2 = true), H2 && (T2 = r({}, mt), d = me(null), H2.html === true && (r(T2, ut), r(d, pt)), H2.svg === true && (r(T2, we), r(d, ke), r(d, ue)), H2.svgFilters === true && (r(T2, xe), r(d, ke), r(d, ue)), H2.mathMl === true && (r(T2, Pe), r(d, Tt), r(d, ue))), y(e, "ADD_TAGS") || (x2.tagCheck = null), y(e, "ADD_ATTR") || (x2.attributeCheck = null), e.ADD_TAGS && (typeof e.ADD_TAGS == "function" ? x2.tagCheck = e.ADD_TAGS : (T2 === Ge && (T2 = C(T2)), r(T2, e.ADD_TAGS, p))), e.ADD_ATTR && (typeof e.ADD_ATTR == "function" ? x2.attributeCheck = e.ADD_ATTR : (d === We && (d = C(d)), r(d, e.ADD_ATTR, p))), e.ADD_URI_SAFE_ATTR && r(Oe2, e.ADD_URI_SAFE_ATTR, p), e.FORBID_CONTENTS && (L2 === De2 && (L2 = C(L2)), r(L2, e.FORBID_CONTENTS, p)), e.ADD_FORBID_CONTENTS && (L2 === De2 && (L2 = C(L2)), r(L2, e.ADD_FORBID_CONTENTS, p)), Re2 && (T2["#text"] = true), P && r(T2, ["html", "head", "body"]), T2.table && (r(T2, ["tbody"]), delete j2.tbody), e.TRUSTED_TYPES_POLICY) {
         if (typeof e.TRUSTED_TYPES_POLICY.createHTML != "function") throw Z('TRUSTED_TYPES_POLICY configuration option must provide a "createHTML" hook.');
         if (typeof e.TRUSTED_TYPES_POLICY.createScriptURL != "function") throw Z('TRUSTED_TYPES_POLICY configuration option must provide a "createScriptURL" hook.');
         g = e.TRUSTED_TYPES_POLICY, X2 = g.createHTML("");
@@ -153,7 +153,7 @@ function ht() {
     if (M2(A2.uponSanitizeElement, e, { tagName: n, allowedTags: T2 }), oe && e.hasChildNodes() && !nt(e.firstElementChild) && h(/<[/\w!]/g, e.innerHTML) && h(/<[/\w!]/g, e.textContent) || e.nodeType === Q.progressingInstruction || oe && e.nodeType === Q.comment && h(/<[/\w]/g, e.data)) return N2(e), true;
     if (!(x2.tagCheck instanceof Function && x2.tagCheck(n)) && (!T2[n] || j2[n])) {
       if (!j2[n] && at(n) && (u.tagNameCheck instanceof RegExp && h(u.tagNameCheck, n) || u.tagNameCheck instanceof Function && u.tagNameCheck(n))) return false;
-      if (Re2 && !L[n]) {
+      if (Re2 && !L2[n]) {
         let f = te2(e) || e.parentNode, _2 = Lt(e) || e.childNodes;
         if (_2 && f) {
           let m2 = _2.length;
@@ -165,7 +165,7 @@ function ht() {
       }
       return N2(e), true;
     }
-    return e instanceof Fe && !Wt(e) || (n === "noscript" || n === "noembed" || n === "noframes") && h(/<\/no(script|embed|frames)/i, e.innerHTML) ? (N2(e), true) : (U2 && e.nodeType === Q.text && (t = e.textContent, fe([Ee2, _e2, ge2], (f) => {
+    return e instanceof Fe && !Wt(e) || (n === "noscript" || n === "noembed" || n === "noframes") && h(/<\/no(script|embed|frames)/i, e.innerHTML) ? (N2(e), true) : (U && e.nodeType === Q.text && (t = e.textContent, fe([Ee2, _e2, ge2], (f) => {
       t = K(t, f, " ");
     }), e.textContent !== t && (q(o.removed, { element: e.cloneNode() }), e.textContent = t)), M2(A2.afterSanitizeElements, e, null), false);
   }, it = function(e, t, n) {
@@ -214,7 +214,7 @@ function ht() {
         k2(m2, e);
         continue;
       }
-      U2 && fe([Ee2, _e2, ge2], (lt) => {
+      U && fe([Ee2, _e2, ge2], (lt) => {
         E = K(E, lt, " ");
       });
       let st = p(e.nodeName);
@@ -257,7 +257,7 @@ function ht() {
       }
     } else if (i instanceof Te2) t = et("<!---->"), n = t.ownerDocument.importNode(i, true), n.nodeType === Q.element && n.nodeName === "BODY" || n.nodeName === "HTML" ? t = n : t.appendChild(n);
     else {
-      if (!F2 && !U2 && !P && i.indexOf("<") === -1) return g && ae2 ? g.createHTML(i) : i;
+      if (!F2 && !U && !P && i.indexOf("<") === -1) return g && ae2 ? g.createHTML(i) : i;
       if (t = et(i), !t) return F2 ? null : ae2 ? X2 : "";
     }
     t && Se2 && N2(t.firstChild);
@@ -271,7 +271,7 @@ function ht() {
     }
     let O = P ? t.outerHTML : t.innerHTML;
     return P && T2["!doctype"] && t.ownerDocument && t.ownerDocument.doctype && t.ownerDocument.doctype.name && h(At, t.ownerDocument.doctype.name) && (O = "<!DOCTYPE " + t.ownerDocument.doctype.name + `>
-` + O), U2 && fe([Ee2, _e2, ge2], (w2) => {
+` + O), U && fe([Ee2, _e2, ge2], (w2) => {
       O = K(O, w2, " ");
     }), g && ae2 ? g.createHTML(O) : O;
   }, o.setConfig = function() {
@@ -380,7 +380,7 @@ var init_OP3JQ447 = __esm({
 });
 
 // iife:/home/runner/work/transportr/transportr/dist/transportr.js
-var I = /^[-!#$%&'*+.^_`|~A-Za-z0-9]*$/u;
+var L = /^[-!#$%&'*+.^_`|~A-Za-z0-9]*$/u;
 var xe2 = /(["\\])/ug;
 var Ue2 = /^[\t\u0020-\u007E\u0080-\u00FF]*$/u;
 var ae = class ue2 extends Map {
@@ -388,7 +388,7 @@ var ae = class ue2 extends Map {
     super(e);
   }
   static isValid(e, t) {
-    return I.test(e) && Ue2.test(t);
+    return L.test(e) && Ue2.test(t);
   }
   get(e) {
     return super.get(e.toLowerCase());
@@ -404,7 +404,7 @@ var ae = class ue2 extends Map {
     return super.delete(e.toLowerCase());
   }
   toString() {
-    return Array.from(this).map(([e, t]) => `;${e}=${!t || !I.test(t) ? `"${t.replace(xe2, "\\$1")}"` : t}`).join("");
+    return Array.from(this).map(([e, t]) => `;${e}=${!t || !L.test(t) ? `"${t.replace(xe2, "\\$1")}"` : t}`).join("");
   }
   get [Symbol.toStringTag]() {
     return "MediaTypeParameters";
@@ -418,10 +418,10 @@ var Ne = class w {
   static parse(e) {
     e = e.replace(Me2, "");
     let t = 0, [n, r2] = w.collect(e, t, ["/"]);
-    if (t = r2, !n.length || t >= e.length || !I.test(n)) throw new TypeError(w.generateErrorMessage("type", n));
+    if (t = r2, !n.length || t >= e.length || !L.test(n)) throw new TypeError(w.generateErrorMessage("type", n));
     ++t;
     let [o, i] = w.collect(e, t, [";"], true, true);
-    if (t = i, !o.length || !I.test(o)) throw new TypeError(w.generateErrorMessage("subtype", o));
+    if (t = i, !o.length || !L.test(o)) throw new TypeError(w.generateErrorMessage("subtype", o));
     let a = new ae();
     for (; t < e.length; ) {
       for (++t; Le.has(e[t]); ) ++t;
@@ -552,7 +552,7 @@ var je = class {
     return "Subscription";
   }
 };
-var M = class {
+var I = class {
   subscribers = new De();
   errorHandler;
   setErrorHandler(s2) {
@@ -662,17 +662,17 @@ var b2 = { CONFIGURED: "configured", SUCCESS: "success", ERROR: "error", ABORTED
 var H = { ABORT: "abort", TIMEOUT: "timeout" };
 var A = { ABORT: "AbortError", TIMEOUT: "TimeoutError" };
 var x = { once: true, passive: true };
-var N = () => new CustomEvent(H.ABORT, { detail: { cause: A.ABORT } });
+var M = () => new CustomEvent(H.ABORT, { detail: { cause: A.ABORT } });
 var Re = () => new CustomEvent(H.TIMEOUT, { detail: { cause: A.TIMEOUT } });
 var he = ["POST", "PUT", "PATCH", "DELETE"];
 var ge = new v(500, "Internal Server Error");
 var me2 = new v(499, "Aborted");
 var ye = new v(504, "Request Timeout");
-var z = [408, 413, 429, 500, 502, 503, 504];
-var W = ["GET", "PUT", "HEAD", "DELETE", "OPTIONS"];
-var D = 300;
-var _ = 2;
-var j = class {
+var W = [408, 413, 429, 500, 502, 503, 504];
+var z = ["GET", "PUT", "HEAD", "DELETE", "OPTIONS"];
+var N = 300;
+var D = 2;
+var _ = class {
   abortSignal;
   abortController = new AbortController();
   events = /* @__PURE__ */ new Map();
@@ -693,7 +693,7 @@ var j = class {
   onTimeout(e) {
     return this.addEventListener(H.TIMEOUT, e);
   }
-  abort(e = N()) {
+  abort(e = M()) {
     this.abortController.abort(e.detail?.cause);
   }
   destroy() {
@@ -708,15 +708,15 @@ var j = class {
     return "SignalController";
   }
 };
+var j;
 var F;
-var U;
-var k = () => F || (F = (typeof document > "u" || typeof DOMParser > "u" || typeof DocumentFragment > "u" ? import("jsdom").then(({ JSDOM: e }) => {
+var k = () => j || (j = (typeof document > "u" || typeof DOMParser > "u" || typeof DocumentFragment > "u" ? import("jsdom").then(({ JSDOM: e }) => {
   let { window: t } = new e("<!DOCTYPE html><html><head></head><body></body></html>", { url: "http://localhost" });
   globalThis.window = t, Object.assign(globalThis, { document: t.document, DOMParser: t.DOMParser, DocumentFragment: t.DocumentFragment });
 }).catch(() => {
-  throw F = void 0, new Error("jsdom is required for HTML/XML/DOM features in Node.js environments. Install it with: npm install jsdom");
+  throw j = void 0, new Error("jsdom is required for HTML/XML/DOM features in Node.js environments. Install it with: npm install jsdom");
 }) : Promise.resolve()).then(() => Promise.resolve().then(() => (init_OP3JQ447(), OP3JQ447_exports))).then(({ default: e }) => {
-  U = e;
+  F = e;
 }));
 var be = async (s2) => await s2.text();
 var K2 = async (s2) => {
@@ -757,10 +757,10 @@ var Z2 = async (s2) => {
 };
 var Ee = async (s2) => await s2.arrayBuffer();
 var ee = async (s2) => Promise.resolve(s2.body);
-var te = async (s2) => (await k(), new DOMParser().parseFromString(U.sanitize(await s2.text()), "application/xml"));
-var se = async (s2) => (await k(), new DOMParser().parseFromString(U.sanitize(await s2.text()), "text/html"));
-var Se = async (s2) => (await k(), document.createRange().createContextualFragment(U.sanitize(await s2.text())));
-var Oe = async (s2) => (await k(), document.createRange().createContextualFragment(U.sanitize(await s2.text(), { ADD_TAGS: ["script"], ADD_ATTR: ["src", "type", "async", "defer", "nonce"] })));
+var te = async (s2) => (await k(), new DOMParser().parseFromString(F.sanitize(await s2.text()), "application/xml"));
+var se = async (s2) => (await k(), new DOMParser().parseFromString(F.sanitize(await s2.text()), "text/html"));
+var Se = async (s2) => (await k(), document.createRange().createContextualFragment(F.sanitize(await s2.text())));
+var Oe = async (s2) => (await k(), document.createRange().createContextualFragment(await s2.text()));
 var we2 = (s2) => ({ [Symbol.asyncIterator]() {
   let e = s2.body.getReader(), t = new TextDecoder(), n = "", r2 = false;
   return { async next() {
@@ -879,14 +879,14 @@ var Be = class s {
   _options;
   subscribr;
   hooks = { beforeRequest: [], afterResponse: [], beforeError: [] };
-  static globalSubscribr = new M();
+  static globalSubscribr = new I();
   static globalHooks = { beforeRequest: [], afterResponse: [], beforeError: [] };
   static signalControllers = /* @__PURE__ */ new Set();
   static inflightRequests = /* @__PURE__ */ new Map();
   static mediaTypeCache = new Map(Object.values(m).map((e) => [e.toString(), e]));
   static contentTypeHandlers = [[m.TEXT.type, be], [m.JSON.subtype, Q2], [m.BIN.subtype, ee], [m.HTML.subtype, se], [m.XML.subtype, te], [m.PNG.type, Z2], [m.JAVA_SCRIPT.subtype, K2], [m.CSS.subtype, Y]];
   constructor(e = V, t = {}) {
-    y2(e) && ([e, t] = [V, e]), this._baseUrl = s.getBaseUrl(e), this._options = s.createOptions(t, s.defaultRequestOptions), this.subscribr = new M();
+    y2(e) && ([e, t] = [V, e]), this._baseUrl = s.getBaseUrl(e), this._options = s.createOptions(t, s.defaultRequestOptions), this.subscribr = new I();
   }
   static CredentialsPolicy = { INCLUDE: "include", OMIT: "omit", SAME_ORIGIN: "same-origin" };
   static RequestMode = { CORS: "cors", NAVIGATE: "navigate", NO_CORS: "no-cors", SAME_ORIGIN: "same-origin" };
@@ -902,7 +902,7 @@ var Be = class s {
     return s.globalSubscribr.unsubscribe(e);
   }
   static abortAll() {
-    for (let e of this.signalControllers) e.abort(N());
+    for (let e of this.signalControllers) e.abort(M());
     this.signalControllers.clear();
   }
   static all(e) {
@@ -934,7 +934,7 @@ var Be = class s {
     s.globalHooks = { beforeRequest: [], afterResponse: [], beforeError: [] };
   }
   static unregisterAll() {
-    s.abortAll(), s.globalSubscribr = new M(), s.clearHooks(), s.inflightRequests.clear();
+    s.abortAll(), s.globalSubscribr = new I(), s.clearHooks(), s.inflightRequests.clear();
   }
   get baseUrl() {
     return this._baseUrl;
@@ -1106,12 +1106,12 @@ var Be = class s {
         else if (ke2(u)) f = new Uint8Array(u);
         else if (ArrayBuffer.isView(u)) f = new Uint8Array(u.buffer, u.byteOffset, u.byteLength);
         else if (!(u instanceof ReadableStream)) return;
-        let E = f ? f.byteLength : null, L = f ? new ReadableStream({ start(P) {
+        let E = f ? f.byteLength : null, U = f ? new ReadableStream({ start(P) {
           P.enqueue(f), P.close();
         } }) : u, O = 0, C2 = new TransformStream({ transform(P, G) {
           O += P.byteLength, c({ loaded: O, total: E, percentage: E !== null && E > 0 ? Math.round(O / E * 100) : null }), G.enqueue(P);
         } });
-        n.body = L.pipeThrough(C2), Object.assign(n, { duplex: "half" });
+        n.body = U.pipeThrough(C2), Object.assign(n, { duplex: "half" });
       }, re = async () => {
         for (; ; ) try {
           await S2();
@@ -1140,7 +1140,7 @@ var Be = class s {
       }, oe = (f) => {
         let E = n.onDownloadProgress;
         if (!E || !f.body) return f;
-        let L = f.headers.get("content-length"), O = L ? parseInt(L, 10) : null, C2 = 0, P = new TransformStream({ transform(ie, Ce) {
+        let U = f.headers.get("content-length"), O = U ? parseInt(U, 10) : null, C2 = 0, P = new TransformStream({ transform(ie, Ce) {
           C2 += ie.byteLength, E({ loaded: C2, total: O, percentage: O !== null && O > 0 ? Math.round(C2 / O * 100) : null }), Ce.enqueue(ie);
         } }), G = f.body.pipeThrough(P);
         return new Response(G, { status: f.status, statusText: f.statusText, headers: f.headers });
@@ -1164,7 +1164,7 @@ var Be = class s {
     }
   }
   static normalizeRetryOptions(e) {
-    return e === void 0 ? { limit: 0, statusCodes: [], methods: [], delay: D, backoffFactor: _ } : typeof e == "number" ? { limit: e, statusCodes: [...z], methods: [...W], delay: D, backoffFactor: _ } : { limit: e.limit ?? 0, statusCodes: e.statusCodes ?? [...z], methods: e.methods ?? [...W], delay: e.delay ?? D, backoffFactor: e.backoffFactor ?? _ };
+    return e === void 0 ? { limit: 0, statusCodes: [], methods: [], delay: N, backoffFactor: D } : typeof e == "number" ? { limit: e, statusCodes: [...W], methods: [...z], delay: N, backoffFactor: D } : { limit: e.limit ?? 0, statusCodes: e.statusCodes ?? [...W], methods: e.methods ?? [...z], delay: e.delay ?? N, backoffFactor: e.backoffFactor ?? D };
   }
   static retryDelay(e, t) {
     let n = typeof e.delay == "function" ? e.delay(t) : e.delay * e.backoffFactor ** (t - 1);
@@ -1236,7 +1236,7 @@ var Be = class s {
       let { cookieName: u, headerName: c } = typeof p == "object" ? p : {}, S2 = He(u ?? ce);
       S2 && d.headers.set(c ?? pe2, S2);
     }
-    let l = new j({ signal: R2, timeout: g }).onAbort((u) => this.publish({ name: b2.ABORTED, event: u, global: h2 })).onTimeout((u) => this.publish({ name: b2.TIMEOUT, event: u, global: h2 }));
+    let l = new _({ signal: R2, timeout: g }).onAbort((u) => this.publish({ name: b2.ABORTED, event: u, global: h2 })).onTimeout((u) => this.publish({ name: b2.TIMEOUT, event: u, global: h2 }));
     return d.signal = l.signal, this.publish({ name: b2.CONFIGURED, data: d, global: h2 }), { signalController: l, requestOptions: d, global: h2 };
   }
   static getBaseUrl(e) {