@descope/web-components-ui 1.94.0 → 1.95.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/index.cjs.js +4 -0
- package/dist/cjs/index.cjs.js.map +1 -1
- package/dist/index.esm.js +4 -0
- package/dist/index.esm.js.map +1 -1
- package/dist/umd/DescopeDev.js +1 -1
- package/dist/umd/DescopeDev.js.map +1 -1
- package/dist/umd/descope-collapsible-container.js +1 -1
- package/dist/umd/descope-collapsible-container.js.map +1 -1
- package/dist/umd/descope-icon.js +1 -1
- package/dist/umd/descope-icon.js.map +1 -1
- package/dist/umd/descope-image.js +1 -1
- package/dist/umd/descope-image.js.map +1 -1
- package/dist/umd/descope-third-party-app-logo-index-js.js +1 -1
- package/dist/umd/descope-third-party-app-logo-index-js.js.map +1 -1
- package/dist/umd/descope-timer-button.js +1 -1
- package/dist/umd/descope-timer-button.js.map +1 -1
- package/dist/umd/descope-timer.js +1 -1
- package/dist/umd/descope-timer.js.map +1 -1
- package/package.json +7 -7
package/dist/cjs/index.cjs.js
CHANGED
|
@@ -14680,6 +14680,10 @@ const createSvgEle = (text) => {
|
|
|
14680
14680
|
// we want to purify the SVG to avoid XSS attacks
|
|
14681
14681
|
const clean = DOMPurify.sanitize(text, {
|
|
14682
14682
|
USE_PROFILES: { svg: true, svgFilters: true },
|
|
14683
|
+
// allow image to render
|
|
14684
|
+
ADD_TAGS: ['image'],
|
|
14685
|
+
// forbid interactiviy via `use` tags (which are sanitized by default)
|
|
14686
|
+
FORBID_TAGS: ['defs']
|
|
14683
14687
|
});
|
|
14684
14688
|
|
|
14685
14689
|
const parser = new DOMParser();
|