@descope/flow-components 2.2.54 → 2.2.56

package/dist/fm/mf-manifest.json

@@ -5,7 +5,7 @@
     "name": "flowComponents",
     "type": "app",
     "buildInfo": {
-      "buildVersion": "2.2.54",
+      "buildVersion": "2.2.56",
       "buildName": "@descope/flow-components"
     },
     "remoteEntry": {

package/dist/fm/mf-stats.json

@@ -5,7 +5,7 @@
     "name": "flowComponents",
     "type": "app",
     "buildInfo": {
-      "buildVersion": "2.2.54",
+      "buildVersion": "2.2.56",
       "buildName": "@descope/flow-components"
     },
     "remoteEntry": {

package/dist/index.cjs.js

@@ -27,7 +27,7 @@ var hasRequiredLodash_merge;
 function requireLodash_merge () {
 	if (hasRequiredLodash_merge) return lodash_merge.exports;
 	hasRequiredLodash_merge = 1;
-	(function (module, exports) {
+	(function (module, exports$1) {
 		/** Used as the size to enable large array optimizations. */
 		var LARGE_ARRAY_SIZE = 200;
 
@@ -111,7 +111,7 @@ function requireLodash_merge () {
 		var root = freeGlobal || freeSelf || Function('return this')();
 
 		/** Detect free variable `exports`. */
-		var freeExports = exports && !exports.nodeType && exports;
+		var freeExports = exports$1 && !exports$1.nodeType && exports$1;
 
 		/** Detect free variable `module`. */
 		var freeModule = freeExports && 'object' == 'object' && module && !module.nodeType && module;
@@ -4396,7 +4396,7 @@ function requireColor () {
 	return color;
 }
 
-/*! @license DOMPurify 3.2.7 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.2.7/LICENSE */
+/*! @license DOMPurify 3.3.1 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.3.1/LICENSE */
 
 var purify_cjs;
 var hasRequiredPurify_cjs;
@@ -4589,7 +4589,7 @@ function requirePurify_cjs () {
 	}
 
 	const html$1 = freeze(['a', 'abbr', 'acronym', 'address', 'area', 'article', 'aside', 'audio', 'b', 'bdi', 'bdo', 'big', 'blink', 'blockquote', 'body', 'br', 'button', 'canvas', 'caption', 'center', 'cite', 'code', 'col', 'colgroup', 'content', 'data', 'datalist', 'dd', 'decorator', 'del', 'details', 'dfn', 'dialog', 'dir', 'div', 'dl', 'dt', 'element', 'em', 'fieldset', 'figcaption', 'figure', 'font', 'footer', 'form', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'head', 'header', 'hgroup', 'hr', 'html', 'i', 'img', 'input', 'ins', 'kbd', 'label', 'legend', 'li', 'main', 'map', 'mark', 'marquee', 'menu', 'menuitem', 'meter', 'nav', 'nobr', 'ol', 'optgroup', 'option', 'output', 'p', 'picture', 'pre', 'progress', 'q', 'rp', 'rt', 'ruby', 's', 'samp', 'search', 'section', 'select', 'shadow', 'slot', 'small', 'source', 'spacer', 'span', 'strike', 'strong', 'style', 'sub', 'summary', 'sup', 'table', 'tbody', 'td', 'template', 'textarea', 'tfoot', 'th', 'thead', 'time', 'tr', 'track', 'tt', 'u', 'ul', 'var', 'video', 'wbr']);
-	const svg$1 = freeze(['svg', 'a', 'altglyph', 'altglyphdef', 'altglyphitem', 'animatecolor', 'animatemotion', 'animatetransform', 'circle', 'clippath', 'defs', 'desc', 'ellipse', 'enterkeyhint', 'exportparts', 'filter', 'font', 'g', 'glyph', 'glyphref', 'hkern', 'image', 'inputmode', 'line', 'lineargradient', 'marker', 'mask', 'metadata', 'mpath', 'part', 'path', 'pattern', 'polygon', 'polyline', 'radialgradient', 'rect', 'slot', 'stop', 'style', 'switch', 'symbol', 'text', 'textpath', 'title', 'tref', 'tspan', 'view', 'vkern']);
+	const svg$1 = freeze(['svg', 'a', 'altglyph', 'altglyphdef', 'altglyphitem', 'animatecolor', 'animatemotion', 'animatetransform', 'circle', 'clippath', 'defs', 'desc', 'ellipse', 'enterkeyhint', 'exportparts', 'filter', 'font', 'g', 'glyph', 'glyphref', 'hkern', 'image', 'inputmode', 'line', 'lineargradient', 'marker', 'mask', 'metadata', 'mpath', 'part', 'path', 'pattern', 'polygon', 'polyline', 'radialgradient', 'rect', 'stop', 'style', 'switch', 'symbol', 'text', 'textpath', 'title', 'tref', 'tspan', 'view', 'vkern']);
 	const svgFilters = freeze(['feBlend', 'feColorMatrix', 'feComponentTransfer', 'feComposite', 'feConvolveMatrix', 'feDiffuseLighting', 'feDisplacementMap', 'feDistantLight', 'feDropShadow', 'feFlood', 'feFuncA', 'feFuncB', 'feFuncG', 'feFuncR', 'feGaussianBlur', 'feImage', 'feMerge', 'feMergeNode', 'feMorphology', 'feOffset', 'fePointLight', 'feSpecularLighting', 'feSpotLight', 'feTile', 'feTurbulence']);
 	// List of SVG elements that are disallowed by default.
 	// We still need to know them so that we can do namespace
@@ -4603,7 +4603,7 @@ function requirePurify_cjs () {
 	const text = freeze(['#text']);
 
 	const html = freeze(['accept', 'action', 'align', 'alt', 'autocapitalize', 'autocomplete', 'autopictureinpicture', 'autoplay', 'background', 'bgcolor', 'border', 'capture', 'cellpadding', 'cellspacing', 'checked', 'cite', 'class', 'clear', 'color', 'cols', 'colspan', 'controls', 'controlslist', 'coords', 'crossorigin', 'datetime', 'decoding', 'default', 'dir', 'disabled', 'disablepictureinpicture', 'disableremoteplayback', 'download', 'draggable', 'enctype', 'enterkeyhint', 'exportparts', 'face', 'for', 'headers', 'height', 'hidden', 'high', 'href', 'hreflang', 'id', 'inert', 'inputmode', 'integrity', 'ismap', 'kind', 'label', 'lang', 'list', 'loading', 'loop', 'low', 'max', 'maxlength', 'media', 'method', 'min', 'minlength', 'multiple', 'muted', 'name', 'nonce', 'noshade', 'novalidate', 'nowrap', 'open', 'optimum', 'part', 'pattern', 'placeholder', 'playsinline', 'popover', 'popovertarget', 'popovertargetaction', 'poster', 'preload', 'pubdate', 'radiogroup', 'readonly', 'rel', 'required', 'rev', 'reversed', 'role', 'rows', 'rowspan', 'spellcheck', 'scope', 'selected', 'shape', 'size', 'sizes', 'slot', 'span', 'srclang', 'start', 'src', 'srcset', 'step', 'style', 'summary', 'tabindex', 'title', 'translate', 'type', 'usemap', 'valign', 'value', 'width', 'wrap', 'xmlns', 'slot']);
-	const svg = freeze(['accent-height', 'accumulate', 'additive', 'alignment-baseline', 'amplitude', 'ascent', 'attributename', 'attributetype', 'azimuth', 'basefrequency', 'baseline-shift', 'begin', 'bias', 'by', 'class', 'clip', 'clippathunits', 'clip-path', 'clip-rule', 'color', 'color-interpolation', 'color-interpolation-filters', 'color-profile', 'color-rendering', 'cx', 'cy', 'd', 'dx', 'dy', 'diffuseconstant', 'direction', 'display', 'divisor', 'dur', 'edgemode', 'elevation', 'end', 'exponent', 'fill', 'fill-opacity', 'fill-rule', 'filter', 'filterunits', 'flood-color', 'flood-opacity', 'font-family', 'font-size', 'font-size-adjust', 'font-stretch', 'font-style', 'font-variant', 'font-weight', 'fx', 'fy', 'g1', 'g2', 'glyph-name', 'glyphref', 'gradientunits', 'gradienttransform', 'height', 'href', 'id', 'image-rendering', 'in', 'in2', 'intercept', 'k', 'k1', 'k2', 'k3', 'k4', 'kerning', 'keypoints', 'keysplines', 'keytimes', 'lang', 'lengthadjust', 'letter-spacing', 'kernelmatrix', 'kernelunitlength', 'lighting-color', 'local', 'marker-end', 'marker-mid', 'marker-start', 'markerheight', 'markerunits', 'markerwidth', 'maskcontentunits', 'maskunits', 'max', 'mask', 'media', 'method', 'mode', 'min', 'name', 'numoctaves', 'offset', 'operator', 'opacity', 'order', 'orient', 'orientation', 'origin', 'overflow', 'paint-order', 'path', 'pathlength', 'patterncontentunits', 'patterntransform', 'patternunits', 'points', 'preservealpha', 'preserveaspectratio', 'primitiveunits', 'r', 'rx', 'ry', 'radius', 'refx', 'refy', 'repeatcount', 'repeatdur', 'restart', 'result', 'rotate', 'scale', 'seed', 'shape-rendering', 'slope', 'specularconstant', 'specularexponent', 'spreadmethod', 'startoffset', 'stddeviation', 'stitchtiles', 'stop-color', 'stop-opacity', 'stroke-dasharray', 'stroke-dashoffset', 'stroke-linecap', 'stroke-linejoin', 'stroke-miterlimit', 'stroke-opacity', 'stroke', 'stroke-width', 'style', 'surfacescale', 'systemlanguage', 'tabindex', 'tablevalues', 'targetx', 'targety', 'transform', 'transform-origin', 'text-anchor', 'text-decoration', 'text-rendering', 'textlength', 'type', 'u1', 'u2', 'unicode', 'values', 'viewbox', 'visibility', 'version', 'vert-adv-y', 'vert-origin-x', 'vert-origin-y', 'width', 'word-spacing', 'wrap', 'writing-mode', 'xchannelselector', 'ychannelselector', 'x', 'x1', 'x2', 'xmlns', 'y', 'y1', 'y2', 'z', 'zoomandpan']);
+	const svg = freeze(['accent-height', 'accumulate', 'additive', 'alignment-baseline', 'amplitude', 'ascent', 'attributename', 'attributetype', 'azimuth', 'basefrequency', 'baseline-shift', 'begin', 'bias', 'by', 'class', 'clip', 'clippathunits', 'clip-path', 'clip-rule', 'color', 'color-interpolation', 'color-interpolation-filters', 'color-profile', 'color-rendering', 'cx', 'cy', 'd', 'dx', 'dy', 'diffuseconstant', 'direction', 'display', 'divisor', 'dur', 'edgemode', 'elevation', 'end', 'exponent', 'fill', 'fill-opacity', 'fill-rule', 'filter', 'filterunits', 'flood-color', 'flood-opacity', 'font-family', 'font-size', 'font-size-adjust', 'font-stretch', 'font-style', 'font-variant', 'font-weight', 'fx', 'fy', 'g1', 'g2', 'glyph-name', 'glyphref', 'gradientunits', 'gradienttransform', 'height', 'href', 'id', 'image-rendering', 'in', 'in2', 'intercept', 'k', 'k1', 'k2', 'k3', 'k4', 'kerning', 'keypoints', 'keysplines', 'keytimes', 'lang', 'lengthadjust', 'letter-spacing', 'kernelmatrix', 'kernelunitlength', 'lighting-color', 'local', 'marker-end', 'marker-mid', 'marker-start', 'markerheight', 'markerunits', 'markerwidth', 'maskcontentunits', 'maskunits', 'max', 'mask', 'mask-type', 'media', 'method', 'mode', 'min', 'name', 'numoctaves', 'offset', 'operator', 'opacity', 'order', 'orient', 'orientation', 'origin', 'overflow', 'paint-order', 'path', 'pathlength', 'patterncontentunits', 'patterntransform', 'patternunits', 'points', 'preservealpha', 'preserveaspectratio', 'primitiveunits', 'r', 'rx', 'ry', 'radius', 'refx', 'refy', 'repeatcount', 'repeatdur', 'restart', 'result', 'rotate', 'scale', 'seed', 'shape-rendering', 'slope', 'specularconstant', 'specularexponent', 'spreadmethod', 'startoffset', 'stddeviation', 'stitchtiles', 'stop-color', 'stop-opacity', 'stroke-dasharray', 'stroke-dashoffset', 'stroke-linecap', 'stroke-linejoin', 'stroke-miterlimit', 'stroke-opacity', 'stroke', 'stroke-width', 'style', 'surfacescale', 'systemlanguage', 'tabindex', 'tablevalues', 'targetx', 'targety', 'transform', 'transform-origin', 'text-anchor', 'text-decoration', 'text-rendering', 'textlength', 'type', 'u1', 'u2', 'unicode', 'values', 'viewbox', 'visibility', 'version', 'vert-adv-y', 'vert-origin-x', 'vert-origin-y', 'width', 'word-spacing', 'wrap', 'writing-mode', 'xchannelselector', 'ychannelselector', 'x', 'x1', 'x2', 'xmlns', 'y', 'y1', 'y2', 'z', 'zoomandpan']);
 	const mathMl = freeze(['accent', 'accentunder', 'align', 'bevelled', 'close', 'columnsalign', 'columnlines', 'columnspan', 'denomalign', 'depth', 'dir', 'display', 'displaystyle', 'encoding', 'fence', 'frame', 'height', 'href', 'id', 'largeop', 'length', 'linethickness', 'lspace', 'lquote', 'mathbackground', 'mathcolor', 'mathsize', 'mathvariant', 'maxsize', 'minsize', 'movablelimits', 'notation', 'numalign', 'open', 'rowalign', 'rowlines', 'rowspacing', 'rowspan', 'rspace', 'rquote', 'scriptlevel', 'scriptminsize', 'scriptsizemultiplier', 'selection', 'separator', 'separators', 'stretchy', 'subscriptshift', 'supscriptshift', 'symmetric', 'voffset', 'width', 'xmlns']);
 	const xml = freeze(['xlink:href', 'xml:id', 'xlink:title', 'xml:space', 'xmlns:xlink']);
 
@@ -4701,7 +4701,7 @@ function requirePurify_cjs () {
 	function createDOMPurify() {
 	  let window = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : getGlobal();
 	  const DOMPurify = root => createDOMPurify(root);
-	  DOMPurify.version = '3.2.7';
+	  DOMPurify.version = '3.3.1';
 	  DOMPurify.removed = [];
 	  if (!window || !window.document || window.document.nodeType !== NODE_TYPE.document || !window.Element) {
 	    // Not running in a browser, provide a factory function
@@ -4812,6 +4812,21 @@ function requirePurify_cjs () {
 	  let FORBID_TAGS = null;
 	  /* Explicitly forbidden attributes (overrides ALLOWED_ATTR/ADD_ATTR) */
 	  let FORBID_ATTR = null;
+	  /* Config object to store ADD_TAGS/ADD_ATTR functions (when used as functions) */
+	  const EXTRA_ELEMENT_HANDLING = Object.seal(create(null, {
+	    tagCheck: {
+	      writable: true,
+	      configurable: false,
+	      enumerable: true,
+	      value: null
+	    },
+	    attributeCheck: {
+	      writable: true,
+	      configurable: false,
+	      enumerable: true,
+	      value: null
+	    }
+	  }));
 	  /* Decide if ARIA attributes are okay */
 	  let ALLOW_ARIA_ATTR = true;
 	  /* Decide if custom data attributes are okay */
@@ -5004,16 +5019,24 @@ function requirePurify_cjs () {
 	    }
 	    /* Merge configuration parameters */
 	    if (cfg.ADD_TAGS) {
-	      if (ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {
-	        ALLOWED_TAGS = clone(ALLOWED_TAGS);
+	      if (typeof cfg.ADD_TAGS === 'function') {
+	        EXTRA_ELEMENT_HANDLING.tagCheck = cfg.ADD_TAGS;
+	      } else {
+	        if (ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {
+	          ALLOWED_TAGS = clone(ALLOWED_TAGS);
+	        }
+	        addToSet(ALLOWED_TAGS, cfg.ADD_TAGS, transformCaseFunc);
 	      }
-	      addToSet(ALLOWED_TAGS, cfg.ADD_TAGS, transformCaseFunc);
 	    }
 	    if (cfg.ADD_ATTR) {
-	      if (ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {
-	        ALLOWED_ATTR = clone(ALLOWED_ATTR);
+	      if (typeof cfg.ADD_ATTR === 'function') {
+	        EXTRA_ELEMENT_HANDLING.attributeCheck = cfg.ADD_ATTR;
+	      } else {
+	        if (ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {
+	          ALLOWED_ATTR = clone(ALLOWED_ATTR);
+	        }
+	        addToSet(ALLOWED_ATTR, cfg.ADD_ATTR, transformCaseFunc);
 	      }
-	      addToSet(ALLOWED_ATTR, cfg.ADD_ATTR, transformCaseFunc);
 	    }
 	    if (cfg.ADD_URI_SAFE_ATTR) {
 	      addToSet(URI_SAFE_ATTRIBUTES, cfg.ADD_URI_SAFE_ATTR, transformCaseFunc);
@@ -5024,6 +5047,12 @@ function requirePurify_cjs () {
 	      }
 	      addToSet(FORBID_CONTENTS, cfg.FORBID_CONTENTS, transformCaseFunc);
 	    }
+	    if (cfg.ADD_FORBID_CONTENTS) {
+	      if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {
+	        FORBID_CONTENTS = clone(FORBID_CONTENTS);
+	      }
+	      addToSet(FORBID_CONTENTS, cfg.ADD_FORBID_CONTENTS, transformCaseFunc);
+	    }
 	    /* Add #text in case KEEP_CONTENT is set to true */
 	    if (KEEP_CONTENT) {
 	      ALLOWED_TAGS['#text'] = true;
@@ -5321,7 +5350,7 @@ function requirePurify_cjs () {
 	      return true;
 	    }
 	    /* Remove element if anything forbids its presence */
-	    if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {
+	    if (!(EXTRA_ELEMENT_HANDLING.tagCheck instanceof Function && EXTRA_ELEMENT_HANDLING.tagCheck(tagName)) && (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName])) {
 	      /* Check if we have a custom element to handle */
 	      if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) {
 	        if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)) {
@@ -5393,7 +5422,7 @@ function requirePurify_cjs () {
 	        (https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-*-attributes)
 	        XML-compatible (https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible and http://www.w3.org/TR/xml/#d0e804)
 	        We don't need to check the value; it's always URI safe. */
-	    if (ALLOW_DATA_ATTR && !FORBID_ATTR[lcName] && regExpTest(DATA_ATTR, lcName)) ; else if (ALLOW_ARIA_ATTR && regExpTest(ARIA_ATTR, lcName)) ; else if (!ALLOWED_ATTR[lcName] || FORBID_ATTR[lcName]) {
+	    if (ALLOW_DATA_ATTR && !FORBID_ATTR[lcName] && regExpTest(DATA_ATTR, lcName)) ; else if (ALLOW_ARIA_ATTR && regExpTest(ARIA_ATTR, lcName)) ; else if (EXTRA_ELEMENT_HANDLING.attributeCheck instanceof Function && EXTRA_ELEMENT_HANDLING.attributeCheck(lcName, lcTag)) ; else if (!ALLOWED_ATTR[lcName] || FORBID_ATTR[lcName]) {
 	      if (
 	      // First condition does a very basic check if a) it's basically a valid custom element tagname AND
 	      // b) if the tagName passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
@@ -6373,11 +6402,11 @@ var hasRequiredDecode_codepoint;
 function requireDecode_codepoint () {
 	if (hasRequiredDecode_codepoint) return decode_codepoint;
 	hasRequiredDecode_codepoint = 1;
-	(function (exports) {
+	(function (exports$1) {
 		// Adapted from https://github.com/mathiasbynens/he/blob/36afe179392226cf1b6ccdb16ebbb7a5a844d93a/src/he.js#L106-L134
 		var _a;
-		Object.defineProperty(exports, "__esModule", { value: true });
-		exports.replaceCodePoint = exports.fromCodePoint = void 0;
+		Object.defineProperty(exports$1, "__esModule", { value: true });
+		exports$1.replaceCodePoint = exports$1.fromCodePoint = void 0;
 		var decodeMap = new Map([
 		    [0, 65533],
 		    // C1 Unicode control character reference replacements
@@ -6412,7 +6441,7 @@ function requireDecode_codepoint () {
 		/**
 		 * Polyfill for `String.fromCodePoint`. It is used to create a string from a Unicode code point.
 		 */
-		exports.fromCodePoint = 
+		exports$1.fromCodePoint = 
 		// eslint-disable-next-line @typescript-eslint/no-unnecessary-condition, node/no-unsupported-features/es-builtins
 		(_a = String.fromCodePoint) !== null && _a !== void 0 ? _a : function (codePoint) {
 		    var output = "";
@@ -6436,7 +6465,7 @@ function requireDecode_codepoint () {
 		    }
 		    return (_a = decodeMap.get(codePoint)) !== null && _a !== void 0 ? _a : codePoint;
 		}
-		exports.replaceCodePoint = replaceCodePoint;
+		exports$1.replaceCodePoint = replaceCodePoint;
 		/**
 		 * Replace the code point if relevant, then convert it to a string.
 		 *
@@ -6445,9 +6474,9 @@ function requireDecode_codepoint () {
 		 * @returns The decoded code point.
 		 */
 		function decodeCodePoint(codePoint) {
-		    return (0, exports.fromCodePoint)(replaceCodePoint(codePoint));
+		    return (0, exports$1.fromCodePoint)(replaceCodePoint(codePoint));
 		}
-		exports.default = decodeCodePoint;
+		exports$1.default = decodeCodePoint;
 		
 	} (decode_codepoint));
 	return decode_codepoint;
@@ -6458,7 +6487,7 @@ var hasRequiredDecode;
 function requireDecode () {
 	if (hasRequiredDecode) return decode;
 	hasRequiredDecode = 1;
-	(function (exports) {
+	(function (exports$1) {
 		var __createBinding = (decode && decode.__createBinding) || (Object.create ? (function(o, m, k, k2) {
 		    if (k2 === undefined) k2 = k;
 		    var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -6485,17 +6514,17 @@ function requireDecode () {
 		var __importDefault = (decode && decode.__importDefault) || function (mod) {
 		    return (mod && mod.__esModule) ? mod : { "default": mod };
 		};
-		Object.defineProperty(exports, "__esModule", { value: true });
-		exports.decodeXML = exports.decodeHTMLStrict = exports.decodeHTMLAttribute = exports.decodeHTML = exports.determineBranch = exports.EntityDecoder = exports.DecodingMode = exports.BinTrieFlags = exports.fromCodePoint = exports.replaceCodePoint = exports.decodeCodePoint = exports.xmlDecodeTree = exports.htmlDecodeTree = void 0;
+		Object.defineProperty(exports$1, "__esModule", { value: true });
+		exports$1.decodeXML = exports$1.decodeHTMLStrict = exports$1.decodeHTMLAttribute = exports$1.decodeHTML = exports$1.determineBranch = exports$1.EntityDecoder = exports$1.DecodingMode = exports$1.BinTrieFlags = exports$1.fromCodePoint = exports$1.replaceCodePoint = exports$1.decodeCodePoint = exports$1.xmlDecodeTree = exports$1.htmlDecodeTree = void 0;
 		var decode_data_html_js_1 = __importDefault(/*@__PURE__*/ requireDecodeDataHtml());
-		exports.htmlDecodeTree = decode_data_html_js_1.default;
+		exports$1.htmlDecodeTree = decode_data_html_js_1.default;
 		var decode_data_xml_js_1 = __importDefault(/*@__PURE__*/ requireDecodeDataXml());
-		exports.xmlDecodeTree = decode_data_xml_js_1.default;
+		exports$1.xmlDecodeTree = decode_data_xml_js_1.default;
 		var decode_codepoint_js_1 = __importStar(/*@__PURE__*/ requireDecode_codepoint());
-		exports.decodeCodePoint = decode_codepoint_js_1.default;
+		exports$1.decodeCodePoint = decode_codepoint_js_1.default;
 		var decode_codepoint_js_2 = /*@__PURE__*/ requireDecode_codepoint();
-		Object.defineProperty(exports, "replaceCodePoint", { enumerable: true, get: function () { return decode_codepoint_js_2.replaceCodePoint; } });
-		Object.defineProperty(exports, "fromCodePoint", { enumerable: true, get: function () { return decode_codepoint_js_2.fromCodePoint; } });
+		Object.defineProperty(exports$1, "replaceCodePoint", { enumerable: true, get: function () { return decode_codepoint_js_2.replaceCodePoint; } });
+		Object.defineProperty(exports$1, "fromCodePoint", { enumerable: true, get: function () { return decode_codepoint_js_2.fromCodePoint; } });
 		var CharCodes;
 		(function (CharCodes) {
 		    CharCodes[CharCodes["NUM"] = 35] = "NUM";
@@ -6518,7 +6547,7 @@ function requireDecode () {
 		    BinTrieFlags[BinTrieFlags["VALUE_LENGTH"] = 49152] = "VALUE_LENGTH";
 		    BinTrieFlags[BinTrieFlags["BRANCH_LENGTH"] = 16256] = "BRANCH_LENGTH";
 		    BinTrieFlags[BinTrieFlags["JUMP_TABLE"] = 127] = "JUMP_TABLE";
-		})(BinTrieFlags = exports.BinTrieFlags || (exports.BinTrieFlags = {}));
+		})(BinTrieFlags = exports$1.BinTrieFlags || (exports$1.BinTrieFlags = {}));
 		function isNumber(code) {
 		    return code >= CharCodes.ZERO && code <= CharCodes.NINE;
 		}
@@ -6556,7 +6585,7 @@ function requireDecode () {
 		    DecodingMode[DecodingMode["Strict"] = 1] = "Strict";
 		    /** Entities in attributes have limitations on ending characters. */
 		    DecodingMode[DecodingMode["Attribute"] = 2] = "Attribute";
-		})(DecodingMode = exports.DecodingMode || (exports.DecodingMode = {}));
+		})(DecodingMode = exports$1.DecodingMode || (exports$1.DecodingMode = {}));
 		/**
 		 * Token decoder with support of writing partial entities.
 		 */
@@ -6872,7 +6901,7 @@ function requireDecode () {
 		    };
 		    return EntityDecoder;
 		}());
-		exports.EntityDecoder = EntityDecoder;
+		exports$1.EntityDecoder = EntityDecoder;
 		/**
 		 * Creates a function that decodes entities in a string.
 		 *
@@ -6948,7 +6977,7 @@ function requireDecode () {
 		    }
 		    return -1;
 		}
-		exports.determineBranch = determineBranch;
+		exports$1.determineBranch = determineBranch;
 		var htmlDecoder = getDecoder(decode_data_html_js_1.default);
 		var xmlDecoder = getDecoder(decode_data_xml_js_1.default);
 		/**
@@ -6962,7 +6991,7 @@ function requireDecode () {
 		    if (mode === void 0) { mode = DecodingMode.Legacy; }
 		    return htmlDecoder(str, mode);
 		}
-		exports.decodeHTML = decodeHTML;
+		exports$1.decodeHTML = decodeHTML;
 		/**
 		 * Decodes an HTML string in an attribute.
 		 *
@@ -6972,7 +7001,7 @@ function requireDecode () {
 		function decodeHTMLAttribute(str) {
 		    return htmlDecoder(str, DecodingMode.Attribute);
 		}
-		exports.decodeHTMLAttribute = decodeHTMLAttribute;
+		exports$1.decodeHTMLAttribute = decodeHTMLAttribute;
 		/**
 		 * Decodes an HTML string, requiring all entities to be terminated by a semicolon.
 		 *
@@ -6982,7 +7011,7 @@ function requireDecode () {
 		function decodeHTMLStrict(str) {
 		    return htmlDecoder(str, DecodingMode.Strict);
 		}
-		exports.decodeHTMLStrict = decodeHTMLStrict;
+		exports$1.decodeHTMLStrict = decodeHTMLStrict;
 		/**
 		 * Decodes an XML string, requiring all entities to be terminated by a semicolon.
 		 *
@@ -6992,7 +7021,7 @@ function requireDecode () {
 		function decodeXML(str) {
 		    return xmlDecoder(str, DecodingMode.Strict);
 		}
-		exports.decodeXML = decodeXML;
+		exports$1.decodeXML = decodeXML;
 		
 	} (decode));
 	return decode;
@@ -7028,10 +7057,10 @@ var hasRequired_escape;
 function require_escape () {
 	if (hasRequired_escape) return _escape;
 	hasRequired_escape = 1;
-	(function (exports) {
-		Object.defineProperty(exports, "__esModule", { value: true });
-		exports.escapeText = exports.escapeAttribute = exports.escapeUTF8 = exports.escape = exports.encodeXML = exports.getCodePoint = exports.xmlReplacer = void 0;
-		exports.xmlReplacer = /["&'<>$\x80-\uFFFF]/g;
+	(function (exports$1) {
+		Object.defineProperty(exports$1, "__esModule", { value: true });
+		exports$1.escapeText = exports$1.escapeAttribute = exports$1.escapeUTF8 = exports$1.escape = exports$1.encodeXML = exports$1.getCodePoint = exports$1.xmlReplacer = void 0;
+		exports$1.xmlReplacer = /["&'<>$\x80-\uFFFF]/g;
 		var xmlCodeMap = new Map([
 		    [34, "&quot;"],
 		    [38, "&amp;"],
@@ -7040,7 +7069,7 @@ function require_escape () {
 		    [62, "&gt;"],
 		]);
 		// For compatibility with node < 4, we wrap `codePointAt`
-		exports.getCodePoint = 
+		exports$1.getCodePoint = 
 		// eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
 		String.prototype.codePointAt != null
 		    ? function (str, index) { return str.codePointAt(index); }
@@ -7064,7 +7093,7 @@ function require_escape () {
 		    var ret = "";
 		    var lastIdx = 0;
 		    var match;
-		    while ((match = exports.xmlReplacer.exec(str)) !== null) {
+		    while ((match = exports$1.xmlReplacer.exec(str)) !== null) {
 		        var i = match.index;
 		        var char = str.charCodeAt(i);
 		        var next = xmlCodeMap.get(char);
@@ -7073,14 +7102,14 @@ function require_escape () {
 		            lastIdx = i + 1;
 		        }
 		        else {
-		            ret += "".concat(str.substring(lastIdx, i), "&#x").concat((0, exports.getCodePoint)(str, i).toString(16), ";");
+		            ret += "".concat(str.substring(lastIdx, i), "&#x").concat((0, exports$1.getCodePoint)(str, i).toString(16), ";");
 		            // Increase by 1 if we have a surrogate pair
-		            lastIdx = exports.xmlReplacer.lastIndex += Number((char & 0xfc00) === 0xd800);
+		            lastIdx = exports$1.xmlReplacer.lastIndex += Number((char & 0xfc00) === 0xd800);
 		        }
 		    }
 		    return ret + str.substr(lastIdx);
 		}
-		exports.encodeXML = encodeXML;
+		exports$1.encodeXML = encodeXML;
 		/**
 		 * Encodes all non-ASCII characters, as well as characters not valid in XML
 		 * documents using numeric hexadecimal reference (eg. `&#xfc;`).
@@ -7090,7 +7119,7 @@ function require_escape () {
 		 *
 		 * @param data String to escape.
 		 */
-		exports.escape = encodeXML;
+		exports$1.escape = encodeXML;
 		/**
 		 * Creates a function that escapes all characters matched by the given regular
 		 * expression using the given map of characters to escape to their entities.
@@ -7125,14 +7154,14 @@ function require_escape () {
 		 *
 		 * @param data String to escape.
 		 */
-		exports.escapeUTF8 = getEscaper(/[&<>'"]/g, xmlCodeMap);
+		exports$1.escapeUTF8 = getEscaper(/[&<>'"]/g, xmlCodeMap);
 		/**
 		 * Encodes all characters that have to be escaped in HTML attributes,
 		 * following {@link https://html.spec.whatwg.org/multipage/parsing.html#escapingString}.
 		 *
 		 * @param data String to escape.
 		 */
-		exports.escapeAttribute = getEscaper(/["&\u00A0]/g, new Map([
+		exports$1.escapeAttribute = getEscaper(/["&\u00A0]/g, new Map([
 		    [34, "&quot;"],
 		    [38, "&amp;"],
 		    [160, "&nbsp;"],
@@ -7143,7 +7172,7 @@ function require_escape () {
 		 *
 		 * @param data String to escape.
 		 */
-		exports.escapeText = getEscaper(/[&<>\u00A0]/g, new Map([
+		exports$1.escapeText = getEscaper(/[&<>\u00A0]/g, new Map([
 		    [38, "&amp;"],
 		    [60, "&lt;"],
 		    [62, "&gt;"],
@@ -7243,9 +7272,9 @@ var hasRequiredLib$1;
 function requireLib$1 () {
 	if (hasRequiredLib$1) return lib$1;
 	hasRequiredLib$1 = 1;
-	(function (exports) {
-		Object.defineProperty(exports, "__esModule", { value: true });
-		exports.decodeXMLStrict = exports.decodeHTML5Strict = exports.decodeHTML4Strict = exports.decodeHTML5 = exports.decodeHTML4 = exports.decodeHTMLAttribute = exports.decodeHTMLStrict = exports.decodeHTML = exports.decodeXML = exports.DecodingMode = exports.EntityDecoder = exports.encodeHTML5 = exports.encodeHTML4 = exports.encodeNonAsciiHTML = exports.encodeHTML = exports.escapeText = exports.escapeAttribute = exports.escapeUTF8 = exports.escape = exports.encodeXML = exports.encode = exports.decodeStrict = exports.decode = exports.EncodingMode = exports.EntityLevel = void 0;
+	(function (exports$1) {
+		Object.defineProperty(exports$1, "__esModule", { value: true });
+		exports$1.decodeXMLStrict = exports$1.decodeHTML5Strict = exports$1.decodeHTML4Strict = exports$1.decodeHTML5 = exports$1.decodeHTML4 = exports$1.decodeHTMLAttribute = exports$1.decodeHTMLStrict = exports$1.decodeHTML = exports$1.decodeXML = exports$1.DecodingMode = exports$1.EntityDecoder = exports$1.encodeHTML5 = exports$1.encodeHTML4 = exports$1.encodeNonAsciiHTML = exports$1.encodeHTML = exports$1.escapeText = exports$1.escapeAttribute = exports$1.escapeUTF8 = exports$1.escape = exports$1.encodeXML = exports$1.encode = exports$1.decodeStrict = exports$1.decode = exports$1.EncodingMode = exports$1.EntityLevel = void 0;
 		var decode_js_1 = /*@__PURE__*/ requireDecode();
 		var encode_js_1 = /*@__PURE__*/ requireEncode();
 		var escape_js_1 = /*@__PURE__*/ require_escape();
@@ -7256,7 +7285,7 @@ function requireLib$1 () {
 		    EntityLevel[EntityLevel["XML"] = 0] = "XML";
 		    /** Support HTML entities, which are a superset of XML entities. */
 		    EntityLevel[EntityLevel["HTML"] = 1] = "HTML";
-		})(EntityLevel = exports.EntityLevel || (exports.EntityLevel = {}));
+		})(EntityLevel = exports$1.EntityLevel || (exports$1.EntityLevel = {}));
 		var EncodingMode;
 		(function (EncodingMode) {
 		    /**
@@ -7285,7 +7314,7 @@ function requireLib$1 () {
 		     * following {@link https://html.spec.whatwg.org/multipage/parsing.html#escapingString}.
 		     */
 		    EncodingMode[EncodingMode["Text"] = 4] = "Text";
-		})(EncodingMode = exports.EncodingMode || (exports.EncodingMode = {}));
+		})(EncodingMode = exports$1.EncodingMode || (exports$1.EncodingMode = {}));
 		/**
 		 * Decodes a string with entities.
 		 *
@@ -7301,7 +7330,7 @@ function requireLib$1 () {
 		    }
 		    return (0, decode_js_1.decodeXML)(data);
 		}
-		exports.decode = decode;
+		exports$1.decode = decode;
 		/**
 		 * Decodes a string with entities. Does not allow missing trailing semicolons for entities.
 		 *
@@ -7316,7 +7345,7 @@ function requireLib$1 () {
 		    (_a = opts.mode) !== null && _a !== void 0 ? _a : (opts.mode = decode_js_1.DecodingMode.Strict);
 		    return decode(data, opts);
 		}
-		exports.decodeStrict = decodeStrict;
+		exports$1.decodeStrict = decodeStrict;
 		/**
 		 * Encodes a string with entities.
 		 *
@@ -7342,32 +7371,32 @@ function requireLib$1 () {
 		    // ASCII and Extensive are equivalent
 		    return (0, escape_js_1.encodeXML)(data);
 		}
-		exports.encode = encode;
+		exports$1.encode = encode;
 		var escape_js_2 = /*@__PURE__*/ require_escape();
-		Object.defineProperty(exports, "encodeXML", { enumerable: true, get: function () { return escape_js_2.encodeXML; } });
-		Object.defineProperty(exports, "escape", { enumerable: true, get: function () { return escape_js_2.escape; } });
-		Object.defineProperty(exports, "escapeUTF8", { enumerable: true, get: function () { return escape_js_2.escapeUTF8; } });
-		Object.defineProperty(exports, "escapeAttribute", { enumerable: true, get: function () { return escape_js_2.escapeAttribute; } });
-		Object.defineProperty(exports, "escapeText", { enumerable: true, get: function () { return escape_js_2.escapeText; } });
+		Object.defineProperty(exports$1, "encodeXML", { enumerable: true, get: function () { return escape_js_2.encodeXML; } });
+		Object.defineProperty(exports$1, "escape", { enumerable: true, get: function () { return escape_js_2.escape; } });
+		Object.defineProperty(exports$1, "escapeUTF8", { enumerable: true, get: function () { return escape_js_2.escapeUTF8; } });
+		Object.defineProperty(exports$1, "escapeAttribute", { enumerable: true, get: function () { return escape_js_2.escapeAttribute; } });
+		Object.defineProperty(exports$1, "escapeText", { enumerable: true, get: function () { return escape_js_2.escapeText; } });
 		var encode_js_2 = /*@__PURE__*/ requireEncode();
-		Object.defineProperty(exports, "encodeHTML", { enumerable: true, get: function () { return encode_js_2.encodeHTML; } });
-		Object.defineProperty(exports, "encodeNonAsciiHTML", { enumerable: true, get: function () { return encode_js_2.encodeNonAsciiHTML; } });
+		Object.defineProperty(exports$1, "encodeHTML", { enumerable: true, get: function () { return encode_js_2.encodeHTML; } });
+		Object.defineProperty(exports$1, "encodeNonAsciiHTML", { enumerable: true, get: function () { return encode_js_2.encodeNonAsciiHTML; } });
 		// Legacy aliases (deprecated)
-		Object.defineProperty(exports, "encodeHTML4", { enumerable: true, get: function () { return encode_js_2.encodeHTML; } });
-		Object.defineProperty(exports, "encodeHTML5", { enumerable: true, get: function () { return encode_js_2.encodeHTML; } });
+		Object.defineProperty(exports$1, "encodeHTML4", { enumerable: true, get: function () { return encode_js_2.encodeHTML; } });
+		Object.defineProperty(exports$1, "encodeHTML5", { enumerable: true, get: function () { return encode_js_2.encodeHTML; } });
 		var decode_js_2 = /*@__PURE__*/ requireDecode();
-		Object.defineProperty(exports, "EntityDecoder", { enumerable: true, get: function () { return decode_js_2.EntityDecoder; } });
-		Object.defineProperty(exports, "DecodingMode", { enumerable: true, get: function () { return decode_js_2.DecodingMode; } });
-		Object.defineProperty(exports, "decodeXML", { enumerable: true, get: function () { return decode_js_2.decodeXML; } });
-		Object.defineProperty(exports, "decodeHTML", { enumerable: true, get: function () { return decode_js_2.decodeHTML; } });
-		Object.defineProperty(exports, "decodeHTMLStrict", { enumerable: true, get: function () { return decode_js_2.decodeHTMLStrict; } });
-		Object.defineProperty(exports, "decodeHTMLAttribute", { enumerable: true, get: function () { return decode_js_2.decodeHTMLAttribute; } });
+		Object.defineProperty(exports$1, "EntityDecoder", { enumerable: true, get: function () { return decode_js_2.EntityDecoder; } });
+		Object.defineProperty(exports$1, "DecodingMode", { enumerable: true, get: function () { return decode_js_2.DecodingMode; } });
+		Object.defineProperty(exports$1, "decodeXML", { enumerable: true, get: function () { return decode_js_2.decodeXML; } });
+		Object.defineProperty(exports$1, "decodeHTML", { enumerable: true, get: function () { return decode_js_2.decodeHTML; } });
+		Object.defineProperty(exports$1, "decodeHTMLStrict", { enumerable: true, get: function () { return decode_js_2.decodeHTMLStrict; } });
+		Object.defineProperty(exports$1, "decodeHTMLAttribute", { enumerable: true, get: function () { return decode_js_2.decodeHTMLAttribute; } });
 		// Legacy aliases (deprecated)
-		Object.defineProperty(exports, "decodeHTML4", { enumerable: true, get: function () { return decode_js_2.decodeHTML; } });
-		Object.defineProperty(exports, "decodeHTML5", { enumerable: true, get: function () { return decode_js_2.decodeHTML; } });
-		Object.defineProperty(exports, "decodeHTML4Strict", { enumerable: true, get: function () { return decode_js_2.decodeHTMLStrict; } });
-		Object.defineProperty(exports, "decodeHTML5Strict", { enumerable: true, get: function () { return decode_js_2.decodeHTMLStrict; } });
-		Object.defineProperty(exports, "decodeXMLStrict", { enumerable: true, get: function () { return decode_js_2.decodeXML; } });
+		Object.defineProperty(exports$1, "decodeHTML4", { enumerable: true, get: function () { return decode_js_2.decodeHTML; } });
+		Object.defineProperty(exports$1, "decodeHTML5", { enumerable: true, get: function () { return decode_js_2.decodeHTML; } });
+		Object.defineProperty(exports$1, "decodeHTML4Strict", { enumerable: true, get: function () { return decode_js_2.decodeHTMLStrict; } });
+		Object.defineProperty(exports$1, "decodeHTML5Strict", { enumerable: true, get: function () { return decode_js_2.decodeHTMLStrict; } });
+		Object.defineProperty(exports$1, "decodeXMLStrict", { enumerable: true, get: function () { return decode_js_2.decodeXML; } });
 		
 	} (lib$1));
 	return lib$1;
@@ -12428,7 +12457,14 @@ function requireIndex_cjs$1 () {
 	  if (url.length <= proto.length) return false;
 
 	  // disallow '*' at the end of the link (conflicts with emphasis)
-	  url = url.replace(/\*+$/, '');
+	  // do manual backsearch to avoid perf issues with regex /\*+$/ on "****...****a".
+	  let urlEnd = url.length;
+	  while (urlEnd > 0 && url.charCodeAt(urlEnd - 1) === 0x2A /* * */) {
+	    urlEnd--;
+	  }
+	  if (urlEnd !== url.length) {
+	    url = url.slice(0, urlEnd);
+	  }
 	  const fullUrl = state.md.normalizeLink(url);
 	  if (!state.md.validateLink(fullUrl)) return false;
 	  if (!silent) {
@@ -82506,6 +82542,19 @@ function requireIndex_cjs () {
 	    }
 	  };
 
+	const inputOverrideValidConstraintsMixin$1 = (superclass) =>
+	  class InputOverrideValidConstraintsMixinClass extends superclass {
+	    init() {
+	      super.init?.();
+
+	      // vaadin uses `validConstraints` (required, pattern, minlength, maxlength) to determine if it should validate
+	      // the input or not. We want to override this behavior, so we can enforce validation even if these attributes are not present.
+	      if (this.baseElement._hasValidConstraints) {
+	        this.baseElement._hasValidConstraints = () => true;
+	      }
+	    }
+	  };
+
 	const getFileExtension = (path) => {
 	  const match = path.match(/\.([0-9a-z]+)(?:[\\?#]|$)/i);
 	  return match ? match[1] : null;
@@ -87757,7 +87806,7 @@ descope-enriched-text {
 	const ComboBoxMixin = (superclass) =>
 	  class ComboBoxMixinClass extends superclass {
 	    static get observedAttributes() {
-	      return ['label-type'];
+	      return ['label-type', 'require-match'];
 	    }
 
 	    // eslint-disable-next-line class-methods-use-this
@@ -87829,6 +87878,10 @@ descope-enriched-text {
 	      }
 	    }
 
+	    get requireMatch() {
+	      return this.getAttribute('require-match') === 'true' && !this.allowCustomValue;
+	    }
+
 	    // eslint-disable-next-line class-methods-use-this
 	    isValidDataType(data) {
 	      const isValid = Array.isArray(data);
@@ -87981,16 +88034,27 @@ descope-enriched-text {
 	      }
 	    }
 
+	    isValueMatch() {
+	      return this.baseElement.items.some(val => val.getAttribute('data-id') === this.baseElement.querySelector('input').value);
+	    }
+
 	    init() {
 	      super.init?.();
 
 	      // eslint-disable-next-line func-names
 	      this.getValidity = function () {
+	        if (this.requireMatch && !this.isValueMatch()) {
+	          return {
+	            patternMismatch: true,
+	          };
+	        }
+
 	        if (!this.value && this.isRequired) {
 	          return {
 	            valueMissing: true,
 	          };
 	        }
+
 	        return {};
 	      };
 
@@ -88042,6 +88106,10 @@ descope-enriched-text {
 	      }
 	    }
 
+	    handleRequireMatchChange(shouldValidate) {
+	      this.baseElement.allowCustomValue = shouldValidate || this.allowCustomValue;
+	    }
+
 	    attributeChangedCallback(attrName, oldValue, newValue) {
 	      super.attributeChangedCallback?.(attrName, oldValue, newValue);
 
@@ -88052,6 +88120,8 @@ descope-enriched-text {
 	          } else {
 	            this.removeEventListener('click', this.onLabelClick);
 	          }
+	        } else if (attrName === 'require-match') {
+	          this.handleRequireMatchChange(newValue === 'true');
 	        }
 	      }
 	    }
@@ -88349,6 +88419,7 @@ descope-enriched-text {
 	    proxyProps: ['selectionStart'],
 	    inputEvent: 'value-changed',
 	  }),
+	  inputOverrideValidConstraintsMixin$1,
 	  componentNameValidationMixin$1,
 	  ComboBoxMixin,
 	)(