@emberkit/core 0.2.7 → 0.2.8

package/dist/runtime/helpers/render.d.ts

@@ -2,6 +2,7 @@ import type { JSXElement, JSXElementProps, JSXNode } from '../types.js';
 export declare function getHandler(id: string): ((e: Event) => void) | undefined;
 export declare function clearHandlers(): void;
 export declare function renderElementToHTML(element: JSXElement): string;
+export declare function escapeHtml(str: string): string;
 export declare function renderToString(element: JSXElement | string | null | number | unknown[]): string;
 export declare function getComponentName(type: string | ((props: JSXElementProps) => JSXNode)): string;
 export declare function createPropsProxy(props: JSXElementProps): JSXElementProps;

package/dist/runtime/helpers/render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../../src/runtime/helpers/render.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAuBpF,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,GAAG,SAAS,CAEvE;AAED,wBAAgB,aAAa,IAAI,IAAI,CAGpC;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CA+G/D;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,MAAM,CAO/F;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,GAAG,MAAM,CAM7F;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,eAAe,CASxE"}
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../../src/runtime/helpers/render.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAuBpF,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,GAAG,SAAS,CAEvE;AAED,wBAAgB,aAAa,IAAI,IAAI,CAGpC;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CA+G/D;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAO9C;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,MAAM,CAO/F;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,GAAG,MAAM,CAM7F;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,eAAe,CASxE"}

package/dist/runtime/helpers/render.js

@@ -45,7 +45,7 @@ export function renderElementToHTML(element) {
             }
             else if (typeof result === 'string' || typeof result === 'number') {
                 renderDepth--;
-                return String(result);
+                return typeof result === 'string' ? escapeHtml(result) : String(result);
             }
             else if (Array.isArray(result)) {
                 const r = result.map((item) => renderToString(item)).join('');
@@ -114,9 +114,9 @@ export function renderElementToHTML(element) {
                 return `${cssProp}: ${val}`;
             })
                 .join('; ');
-            return ` ${key}="${styleStr}"`;
+            return ` ${key}="${escapeHtml(styleStr)}"`;
         }
-        return ` ${key}="${value}"`;
+        return ` ${key}="${typeof value === 'string' ? escapeHtml(value) : value}"`;
     })
         .join('');
     // Register onClick handler as data attribute
@@ -134,11 +134,19 @@ export function renderElementToHTML(element) {
     renderDepth--;
     return `<${currentType}${attributes}${onclickAttr}>${innerHtml}</${currentType}>`;
 }
+export function escapeHtml(str) {
+    return str
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#039;');
+}
 export function renderToString(element) {
     if (!element && element !== 0)
         return '';
     if (typeof element === 'string')
-        return element;
+        return escapeHtml(element);
     if (typeof element === 'number')
         return String(element);
     if (Array.isArray(element))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@emberkit/core",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "type": "module",
   "private": false,
   "description": "Lightweight TypeScript-first JSX framework core",