@deneb-ui/cli 2.0.89 → 2.0.90

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@deneb-ui/cli",
3
- "version": "2.0.89",
3
+ "version": "2.0.90",
4
4
  "description": "Official DENEB CLI — scaffold, convert, validate, and package Fivora-ready storefront templates.",
5
5
  "bin": {
6
6
  "deneb": "bin/index.js",
@@ -49,7 +49,7 @@
49
49
  "license": "MIT",
50
50
  "dependencies": {
51
51
  "@babel/parser": "^7.28.0",
52
- "@deneb-ui/core": "^2.0.89",
52
+ "@deneb-ui/core": "^2.0.90",
53
53
  "@octokit/rest": "^22.0.1",
54
54
  "adm-zip": "^0.6.0",
55
55
  "dotenv": "^17.4.2",
@@ -2177,8 +2177,11 @@ function auditSensitiveAttributes(
2177
2177
  }
2178
2178
 
2179
2179
  function isHiddenHtmlElement(token: string, tag: string) {
2180
+ // Strip quoted attribute values so CSS classes like "overflow-hidden" are not falsely flagged as HTML attributes
2181
+ const stripped = token.replace(/="[^"]*"|='[^']*'/g, '=""');
2182
+
2180
2183
  if (
2181
- /(?:^|\s)hidden(?:\s|=|\/?>)/i.test(token) ||
2184
+ /(?<![\w-])hidden(?:[\s=]|\/?>)/i.test(stripped) ||
2182
2185
  /\baria-hidden\s*=\s*(?:"true"|'true')/i.test(token)
2183
2186
  ) {
2184
2187
  return true;