@datorama/core 22.12.6 → 22.12.7

package/fesm2015/datorama-core.js

@@ -10088,6 +10088,9 @@ function tryParsePivotValue(str) {
     }
     return value;
 }
+function isHtmlAllowedForCol(gridOptions, colDef) {
+    return (!gridOptions.disabledHTMLRenderingFields || !gridOptions.disabledHTMLRenderingFields.includes(getColField(colDef)));
+}
 
 let GridQuery = class GridQuery extends Query {
     constructor(store) {
@@ -10569,18 +10572,24 @@ function toolbarActionToContextAction(params) {
 const DATO_GRID_STORAGE_API = new InjectionToken('DATO_GRID_STORAGE_API');
 
 const defaultEditableColumnRenderer = params => params && params.value ? `<div class="value-wrapper ellipsis">${params.value}</div>` : null;
-const editableCellRendererWithSearchHighlight = (params, searchTerm) => {
+const editableCellRendererWithSearchHighlight = (params, searchTerm, allowHTML) => {
     if (!params || !params.value) {
         return null;
     }
-    return `<div class="value-wrapper ellipsis">${searchHighlightCellRenderer(params, searchTerm)}</div>`;
+    return `<div class="value-wrapper ellipsis">${searchHighlightCellRenderer(params, searchTerm, allowHTML)}</div>`;
 };
-const searchHighlightCellRenderer = (params, searchTerm) => {
+const searchHighlightCellRenderer = (params, searchTerm, allowHTML = true) => {
+    let cellValue = (params.valueFormatted || params.value || '').toString();
+    if (!allowHTML) {
+        cellValue = escape(cellValue);
+    }
+    else {
+        cellValue = DOMPurify.sanitize(cellValue);
+    }
     searchTerm = (searchTerm || '').trim();
-    const value = (params.valueFormatted || params.value || '').toString();
     return searchTerm
-        ? value.replace(new RegExp(searchTerm, 'gi'), (str) => `<span class="search-highlight">${str}</span>`)
-        : value;
+        ? cellValue.replace(new RegExp(searchTerm, 'gi'), (str) => `<span class="search-highlight">${str}</span>`)
+        : cellValue;
 };
 var GridMinWidths;
 (function (GridMinWidths) {
@@ -12100,7 +12109,7 @@ const defaultGridOptions = Object.assign({
         type: DatoGridColumnTypes.String,
         menuTabs: ['filterMenuTab'],
         headerComponentFramework: DatoGridColumnHeaderComponent
-    }, suppressCellSelection: true, suppressPropertyNamesCheck: true, rowHeight: 35, headerHeight: 30, rowSelection: GridRowSelectionType.MULTIPLE, rowDeselection: true, unSortIcon: true, animateRows: true, rememberGroupStateWhenNewData: true, groupMultiAutoColumn: true, groupDefaultExpanded: -1, usePivotGridStyle: false }, (isTestEnv() ? { suppressColumnVirtualisation: true, rowBuffer: 99999 } : {}));
+    }, suppressCellSelection: true, suppressPropertyNamesCheck: true, rowHeight: 35, headerHeight: 30, rowSelection: GridRowSelectionType.MULTIPLE, rowDeselection: true, unSortIcon: true, animateRows: true, rememberGroupStateWhenNewData: true, groupMultiAutoColumn: true, groupDefaultExpanded: -1, usePivotGridStyle: false, disabledHTMLRenderingFields: [] }, (isTestEnv() ? { suppressColumnVirtualisation: true, rowBuffer: 99999 } : {}));
 const DEFAULT_GRID_SEARCH_DEBOUNCE_TIME = {
     CLIENT: 200,
     SERVER: 250
@@ -12744,11 +12753,12 @@ let GridService = class GridService {
             !this.hasCellRenderer(normalized, gridOptions) &&
             gridOptions.enableSearchHighlight) {
             normalized.cellRenderer = (params) => {
+                const allowHTML = isHtmlAllowedForCol(gridOptions, params.colDef);
                 const isEditable = (isFunction(normalized.editable) && normalized.editable(params)) ||
                     (!isFunction(normalized.editable) && normalized.editable);
                 return isEditable
-                    ? editableCellRendererWithSearchHighlight(params, this.gridQuery.getSearchTerm())
-                    : searchHighlightCellRenderer(params, this.gridQuery.getSearchTerm());
+                    ? editableCellRendererWithSearchHighlight(params, this.gridQuery.getSearchTerm(), allowHTML)
+                    : searchHighlightCellRenderer(params, this.gridQuery.getSearchTerm(), allowHTML);
             };
         }
     }
@@ -13958,7 +13968,7 @@ let DatoGridControllerComponent = class DatoGridControllerComponent {
             rowActions: this.rowActions
         };
         let normalized = this.gridService.normalizeOptions(params);
-        const defaults = Object.assign(Object.assign(Object.assign({}, defaultGridOptions), (this.gridOptions.treeData ? defaultTreeOptions : {})), { icons: this.getGridIcons() });
+        const defaults = Object.assign(Object.assign(Object.assign({}, defaultGridOptions), (this.gridOptions.treeData ? defaultTreeOptions : {})), { icons: this.getGridIcons(), disabledHTMLRenderingFields: normalized.disabledHTMLRenderingFields || defaultGridOptions.disabledHTMLRenderingFields });
         return deepmerge(defaults, normalized);
     }
     setGridRows(data) {
@@ -14146,17 +14156,18 @@ let DatoGridControllerComponent = class DatoGridControllerComponent {
         const textOverflow = cell.offsetWidth < cell.scrollWidth;
         if (textOverflow) {
             clearTimeout(this.cellMouseOutTimer);
-            const params = { cell, value: cell.innerText };
+            const allowHTML = isHtmlAllowedForCol(this.gridOptions, event.colDef);
+            const params = { cell, value: cell.innerText, allowHTML };
             isNil(this.tooltip) ? this.createAndShowTooltip(params) : this.updateTooltip(params);
         }
     }
-    createAndShowTooltip({ cell, value }) {
+    createAndShowTooltip({ cell, value, allowHTML }) {
         this.tooltip = new Tooltip(cell, {
             placement: 'top',
             container: document.body,
             trigger: 'manual',
-            title: DOMPurify.sanitize(value),
-            html: true,
+            title: allowHTML ? DOMPurify.sanitize(value) : value,
+            html: allowHTML,
             popperOptions: {
                 modifiers: {
                     preventOverflow: { enabled: false }
@@ -22917,7 +22928,7 @@ function fixNgLeaks() {
     };
 }
 
-window.coreVersion = '22.12.6';
+window.coreVersion = '22.12.7';
 
 /**
  * @license