@descope/flow-components 2.3.1 → 2.3.3

package/dist/fm/mf-manifest.json

@@ -5,7 +5,7 @@
     "name": "flowComponents",
     "type": "app",
     "buildInfo": {
-      "buildVersion": "2.3.1",
+      "buildVersion": "2.3.3",
       "buildName": "@descope/flow-components"
     },
     "remoteEntry": {

package/dist/fm/mf-stats.json

@@ -5,7 +5,7 @@
     "name": "flowComponents",
     "type": "app",
     "buildInfo": {
-      "buildVersion": "2.3.1",
+      "buildVersion": "2.3.3",
       "buildName": "@descope/flow-components"
     },
     "remoteEntry": {

package/dist/index.cjs.js

@@ -4396,7 +4396,7 @@ function requireColor () {
 	return color;
 }
 
-/*! @license DOMPurify 3.3.1 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.3.1/LICENSE */
+/*! @license DOMPurify 3.3.2 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.3.2/LICENSE */
 
 var purify_cjs;
 var hasRequiredPurify_cjs;
@@ -4701,7 +4701,7 @@ function requirePurify_cjs () {
 	function createDOMPurify() {
 	  let window = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : getGlobal();
 	  const DOMPurify = root => createDOMPurify(root);
-	  DOMPurify.version = '3.3.1';
+	  DOMPurify.version = '3.3.2';
 	  DOMPurify.removed = [];
 	  if (!window || !window.document || window.document.nodeType !== NODE_TYPE.document || !window.Element) {
 	    // Not running in a browser, provide a factory function
@@ -4996,7 +4996,7 @@ function requirePurify_cjs () {
 	    /* Parse profile info */
 	    if (USE_PROFILES) {
 	      ALLOWED_TAGS = addToSet({}, text);
-	      ALLOWED_ATTR = [];
+	      ALLOWED_ATTR = create(null);
 	      if (USE_PROFILES.html === true) {
 	        addToSet(ALLOWED_TAGS, html$1);
 	        addToSet(ALLOWED_ATTR, html);
@@ -5017,6 +5017,13 @@ function requirePurify_cjs () {
 	        addToSet(ALLOWED_ATTR, xml);
 	      }
 	    }
+	    /* Prevent function-based ADD_ATTR / ADD_TAGS from leaking across calls */
+	    if (!objectHasOwnProperty(cfg, 'ADD_TAGS')) {
+	      EXTRA_ELEMENT_HANDLING.tagCheck = null;
+	    }
+	    if (!objectHasOwnProperty(cfg, 'ADD_ATTR')) {
+	      EXTRA_ELEMENT_HANDLING.attributeCheck = null;
+	    }
 	    /* Merge configuration parameters */
 	    if (cfg.ADD_TAGS) {
 	      if (typeof cfg.ADD_TAGS === 'function') {
@@ -5414,6 +5421,10 @@ function requirePurify_cjs () {
 	   */
 	  // eslint-disable-next-line complexity
 	  const _isValidAttribute = function _isValidAttribute(lcTag, lcName, value) {
+	    /* FORBID_ATTR must always win, even if ADD_ATTR predicate would allow it */
+	    if (FORBID_ATTR[lcName]) {
+	      return false;
+	    }
 	    /* Make sure attribute cannot clobber */
 	    if (SANITIZE_DOM && (lcName === 'id' || lcName === 'name') && (value in document || value in formElement)) {
 	      return false;
@@ -5506,7 +5517,7 @@ function requirePurify_cjs () {
 	        value = SANITIZE_NAMED_PROPS_PREFIX + value;
 	      }
 	      /* Work around a security issue with comments inside attributes */
-	      if (SAFE_FOR_XML && regExpTest(/((--!?|])>)|<\/(style|title|textarea)/i, value)) {
+	      if (SAFE_FOR_XML && regExpTest(/((--!?|])>)|<\/(style|script|title|xmp|textarea|noscript|iframe|noembed|noframes)/i, value)) {
 	        _removeAttribute(name, currentNode);
 	        continue;
 	      }
@@ -89180,7 +89191,7 @@ descope-enriched-text {
 	    },
 	    {
 	      name: 'Guyana',
-	      dialCode: '+595',
+	      dialCode: '+592',
 	      code: 'GY',
 	    },
 	    {
@@ -99494,7 +99505,9 @@ descope-enriched-text {
 
 	  set value(val) {
 	    this.handleActiveInput(val);
-	    this.activeInput.value = val;
+	    setTimeout(() => {
+	      this.activeInput.value = val;
+	    });
 	  }
 
 	  async init() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@descope/flow-components",
-  "version": "2.3.1",
+  "version": "2.3.3",
   "description": "",
   "main": "dist/index.cjs.js",
   "module": "dist/index.esm.js",
@@ -60,7 +60,7 @@
     "eslint-config-standard": "17.1.0",
     "eslint-import-resolver-typescript": "4.4.4",
     "eslint-plugin-import": "2.32.0",
-    "eslint-plugin-jest": "29.12.2",
+    "eslint-plugin-jest": "29.14.0",
     "eslint-plugin-jest-dom": "5.5.0",
     "eslint-plugin-jest-formatting": "3.1.0",
     "eslint-plugin-jsx-a11y": "^6.6.1",
@@ -96,7 +96,7 @@
     "webpack-dev-server": "5.2.3"
   },
   "dependencies": {
-    "@descope/web-components-ui": "2.3.1"
+    "@descope/web-components-ui": "2.3.3"
   },
   "peerDependencies": {
     "react": ">= 18"