@evolvere/sgp-ui 1.6.7 → 1.6.9

package/lib/date-picker.js

@@ -82,11 +82,12 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 61);
+/******/ 	return __webpack_require__(__webpack_require__.s = 62);
 /******/ })
 /************************************************************************/
-/******/ ([
-/* 0 */
+/******/ ({
+
+/***/ 0:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
@@ -190,94 +191,50 @@ function normalizeComponent(
 
 
 /***/ }),
-/* 1 */
+
+/***/ 1:
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/utils/date-util");
 
 /***/ }),
-/* 2 */
-/***/ (function(module, exports) {
-
-module.exports = require("@evolvere/sgp-ui/lib/utils/dom");
 
-/***/ }),
-/* 3 */
+/***/ 10:
 /***/ (function(module, exports) {
 
-module.exports = require("@evolvere/sgp-ui/lib/utils/util");
+module.exports = require("@evolvere/sgp-ui/lib/input");
 
 /***/ }),
-/* 4 */
-/***/ (function(module, exports) {
-
-module.exports = require("@evolvere/sgp-ui/lib/mixins/emitter");
 
-/***/ }),
-/* 5 */
+/***/ 12:
 /***/ (function(module, exports) {
 
-module.exports = require("@evolvere/sgp-ui/lib/utils/vue-popper");
+module.exports = require("@evolvere/sgp-ui/lib/utils/clickoutside");
 
 /***/ }),
-/* 6 */
-/***/ (function(module, exports) {
 
-module.exports = require("@evolvere/sgp-ui/lib/mixins/locale");
-
-/***/ }),
-/* 7 */
+/***/ 14:
 /***/ (function(module, exports) {
 
-module.exports = require("vue");
+module.exports = require("@evolvere/sgp-ui/lib/button");
 
 /***/ }),
-/* 8 */,
-/* 9 */
-/***/ (function(module, exports) {
-
-module.exports = require("@evolvere/sgp-ui/lib/utils/merge");
 
-/***/ }),
-/* 10 */
+/***/ 15:
 /***/ (function(module, exports) {
 
-module.exports = require("@evolvere/sgp-ui/lib/input");
+module.exports = require("@evolvere/sgp-ui/lib/scrollbar");
 
 /***/ }),
-/* 11 */,
-/* 12 */
-/***/ (function(module, exports) {
 
-module.exports = require("@evolvere/sgp-ui/lib/utils/clickoutside");
-
-/***/ }),
-/* 13 */,
-/* 14 */
+/***/ 2:
 /***/ (function(module, exports) {
 
-module.exports = require("@evolvere/sgp-ui/lib/button");
+module.exports = require("@evolvere/sgp-ui/lib/utils/dom");
 
 /***/ }),
-/* 15 */
-/***/ (function(module, exports) {
-
-module.exports = require("@evolvere/sgp-ui/lib/scrollbar");
 
-/***/ }),
-/* 16 */,
-/* 17 */,
-/* 18 */,
-/* 19 */,
-/* 20 */,
-/* 21 */,
-/* 22 */,
-/* 23 */,
-/* 24 */,
-/* 25 */,
-/* 26 */,
-/* 27 */,
-/* 28 */
+/***/ 28:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
@@ -601,9 +558,15 @@ var component = Object(componentNormalizer["a" /* default */])(
 /* harmony default export */ var time = __webpack_exports__["a"] = (component.exports);
 
 /***/ }),
-/* 29 */,
-/* 30 */,
-/* 31 */
+
+/***/ 3:
+/***/ (function(module, exports) {
+
+module.exports = require("@evolvere/sgp-ui/lib/utils/util");
+
+/***/ }),
+
+/***/ 31:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
@@ -637,8 +600,8 @@ var component = Object(componentNormalizer["a" /* default */])(
 });
 
 /***/ }),
-/* 32 */,
-/* 33 */
+
+/***/ 33:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
@@ -1768,8 +1731,8 @@ var component = Object(componentNormalizer["a" /* default */])(
 /* harmony default export */ var picker = __webpack_exports__["a"] = (component.exports);
 
 /***/ }),
-/* 34 */,
-/* 35 */
+
+/***/ 35:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
@@ -2466,32 +2429,29 @@ var component = Object(componentNormalizer["a" /* default */])(
 /* harmony default export */ var time_spinner = __webpack_exports__["a"] = (component.exports);
 
 /***/ }),
-/* 36 */,
-/* 37 */,
-/* 38 */,
-/* 39 */,
-/* 40 */,
-/* 41 */,
-/* 42 */,
-/* 43 */,
-/* 44 */,
-/* 45 */,
-/* 46 */,
-/* 47 */,
-/* 48 */,
-/* 49 */,
-/* 50 */,
-/* 51 */,
-/* 52 */,
-/* 53 */,
-/* 54 */,
-/* 55 */,
-/* 56 */,
-/* 57 */,
-/* 58 */,
-/* 59 */,
-/* 60 */,
-/* 61 */
+
+/***/ 4:
+/***/ (function(module, exports) {
+
+module.exports = require("@evolvere/sgp-ui/lib/mixins/emitter");
+
+/***/ }),
+
+/***/ 5:
+/***/ (function(module, exports) {
+
+module.exports = require("@evolvere/sgp-ui/lib/utils/vue-popper");
+
+/***/ }),
+
+/***/ 6:
+/***/ (function(module, exports) {
+
+module.exports = require("@evolvere/sgp-ui/lib/mixins/locale");
+
+/***/ }),
+
+/***/ 62:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
@@ -6249,5 +6209,20 @@ date_picker.install = function install(Vue) {
 
 /* harmony default export */ var packages_date_picker = __webpack_exports__["default"] = (date_picker);
 
+/***/ }),
+
+/***/ 7:
+/***/ (function(module, exports) {
+
+module.exports = require("vue");
+
+/***/ }),
+
+/***/ 9:
+/***/ (function(module, exports) {
+
+module.exports = require("@evolvere/sgp-ui/lib/utils/merge");
+
 /***/ })
-/******/ ]);
+
+/******/ });

package/lib/descriptions-item.js

@@ -82,12 +82,12 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 148);
+/******/ 	return __webpack_require__(__webpack_require__.s = 149);
 /******/ })
 /************************************************************************/
 /******/ ({
 
-/***/ 148:
+/***/ 149:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/descriptions.js

@@ -82,12 +82,12 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 143);
+/******/ 	return __webpack_require__(__webpack_require__.s = 144);
 /******/ })
 /************************************************************************/
 /******/ ({
 
-/***/ 143:
+/***/ 144:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/dialog.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 87);
+/******/ 	return __webpack_require__(__webpack_require__.s = 88);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -213,7 +213,7 @@ module.exports = require("@evolvere/sgp-ui/lib/mixins/emitter");
 
 /***/ }),
 
-/***/ 87:
+/***/ 88:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/divider.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 128);
+/******/ 	return __webpack_require__(__webpack_require__.s = 129);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -192,7 +192,7 @@ function normalizeComponent(
 
 /***/ }),
 
-/***/ 128:
+/***/ 129:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/drawer.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 131);
+/******/ 	return __webpack_require__(__webpack_require__.s = 132);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -199,7 +199,7 @@ module.exports = require("@evolvere/sgp-ui/lib/utils/popup");
 
 /***/ }),
 
-/***/ 131:
+/***/ 132:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/dropdown-item.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 89);
+/******/ 	return __webpack_require__(__webpack_require__.s = 90);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -199,7 +199,7 @@ module.exports = require("@evolvere/sgp-ui/lib/mixins/emitter");
 
 /***/ }),
 
-/***/ 89:
+/***/ 90:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/dropdown-menu.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 88);
+/******/ 	return __webpack_require__(__webpack_require__.s = 89);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -199,7 +199,7 @@ module.exports = require("@evolvere/sgp-ui/lib/utils/vue-popper");
 
 /***/ }),
 
-/***/ 88:
+/***/ 89:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/dropdown.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 135);
+/******/ 	return __webpack_require__(__webpack_require__.s = 136);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -206,7 +206,7 @@ module.exports = require("@evolvere/sgp-ui/lib/utils/clickoutside");
 
 /***/ }),
 
-/***/ 135:
+/***/ 136:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/editor.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 134);
+/******/ 	return __webpack_require__(__webpack_require__.s = 135);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -192,14 +192,14 @@ function normalizeComponent(
 
 /***/ }),
 
-/***/ 134:
+/***/ 135:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
 // ESM COMPAT FLAG
 __webpack_require__.r(__webpack_exports__);
 
-// CONCATENATED MODULE: ./node_modules/_vue-loader@15.10.0@vue-loader/lib/loaders/templateLoader.js??vue-loader-options!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/editor/src/index.vue?vue&type=template&id=3695aade&scoped=true&
+// CONCATENATED MODULE: ./node_modules/_vue-loader@15.10.0@vue-loader/lib/loaders/templateLoader.js??vue-loader-options!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/editor/src/index.vue?vue&type=template&id=a1662642&scoped=true&
 var render = function () {
   var _vm = this
   var _h = _vm.$createElement
@@ -210,7 +210,7 @@ var staticRenderFns = []
 render._withStripped = true
 
 
-// CONCATENATED MODULE: ./packages/editor/src/index.vue?vue&type=template&id=3695aade&scoped=true&
+// CONCATENATED MODULE: ./packages/editor/src/index.vue?vue&type=template&id=a1662642&scoped=true&
 
 // EXTERNAL MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/editor/src/index.vue?vue&type=script&lang=js&
 var srcvue_type_script_lang_js_ = __webpack_require__(44);
@@ -234,7 +234,7 @@ var component = Object(componentNormalizer["a" /* default */])(
   staticRenderFns,
   false,
   null,
-  "3695aade",
+  "a1662642",
   null
   
 )
@@ -252,7 +252,7 @@ src.install = function (Vue) {
 
 /***/ }),
 
-/***/ 141:
+/***/ 142:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
@@ -504,13 +504,16 @@ function _inherits(subClass, superClass) { if (typeof superClass !== "function"
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
-/* WEBPACK VAR INJECTION */(function(global) {var _extends = Object.assign || function (target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i]; for (var key in source) { if (Object.prototype.hasOwnProperty.call(source, key)) { target[key] = source[key]; } } } return target; };
+/* WEBPACK VAR INJECTION */(function(global) {/* harmony import */ var _video_security__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(57);
+var _extends = Object.assign || function (target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i]; for (var key in source) { if (Object.prototype.hasOwnProperty.call(source, key)) { target[key] = source[key]; } } } return target; };
 
 //
 //
 //
 //
 
+
+
 var signIsEditorChange = true;
 /* harmony default export */ __webpack_exports__["a"] = ({
   name: 'ElEditor',
@@ -539,11 +542,11 @@ var signIsEditorChange = true;
   mounted: function mounted() {
     var _this = this;
 
-    var E = __webpack_require__(59);
+    var E = __webpack_require__(60);
     var editor = new E(this.$refs.wangEditor);
 
     // 自定义按钮 text-indent
-    var textIndentDef = __webpack_require__(141);
+    var textIndentDef = __webpack_require__(142);
     var textIndent = textIndentDef.default(E);
     var textIndentKey = 'textIndent';
     editor.menus.extend('indent', textIndent);
@@ -567,6 +570,15 @@ var signIsEditorChange = true;
 
     editor.config = _extends({}, editor.config, this.options);
 
+    // wangEditor 4 inserts online-video markup with insertHTML. Always run the
+    // built-in security check before an optional consumer-provided validator.
+    var customOnlineVideoCheck = editor.config.onlineVideoCheck;
+    editor.config.onlineVideoCheck = function (video) {
+      var securityCheck = Object(_video_security__WEBPACK_IMPORTED_MODULE_0__[/* validateOnlineVideo */ "a"])(video);
+      if (securityCheck !== true) return securityCheck;
+      return typeof customOnlineVideoCheck === 'function' ? customOnlineVideoCheck(video) : true;
+    };
+
     editor.config.onchange = function (newHtml) {
       // this.editorData = newHtml;
       signIsEditorChange = false;
@@ -615,11 +627,63 @@ var signIsEditorChange = true;
     }
   }
 });
-/* WEBPACK VAR INJECTION */}.call(this, __webpack_require__(58)))
+/* WEBPACK VAR INJECTION */}.call(this, __webpack_require__(59)))
 
 /***/ }),
 
-/***/ 58:
+/***/ 57:
+/***/ (function(module, __webpack_exports__, __webpack_require__) {
+
+"use strict";
+/* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "a", function() { return validateOnlineVideo; });
+var ALLOWED_IFRAME_ATTRIBUTES = ['allow', 'allowfullscreen', 'frameborder', 'height', 'loading', 'mozallowfullscreen', 'referrerpolicy', 'src', 'title', 'webkitallowfullscreen', 'width'];
+
+var INVALID_VIDEO_MESSAGE = '视频代码不安全，仅支持使用 http/https 地址的 iframe';
+
+function hasSafeSource(element) {
+  var source = (element.getAttribute('src') || '').trim();
+  if (!source) return false;
+
+  var parser = document.createElement('a');
+  parser.href = source;
+  return parser.protocol === 'http:' || parser.protocol === 'https:';
+}
+
+/**
+ * wangEditor 4 treats the online-video input as HTML rather than as a URL.
+ * Accept one tightly constrained iframe so attributes such as srcdoc/onload
+ * and sibling script elements cannot reach insertHTML.
+ */
+function validateOnlineVideo(video) {
+  if (typeof video !== 'string') return INVALID_VIDEO_MESSAGE;
+
+  var container = document.createElement('div');
+  container.innerHTML = video.trim();
+
+  if (container.children.length !== 1 || container.childNodes.length !== 1) {
+    return INVALID_VIDEO_MESSAGE;
+  }
+
+  var iframe = container.firstElementChild;
+  if (!iframe || iframe.tagName !== 'IFRAME' || !hasSafeSource(iframe)) {
+    return INVALID_VIDEO_MESSAGE;
+  }
+
+  var attributes = Array.prototype.slice.call(iframe.attributes);
+  var hasUnsafeAttribute = attributes.some(function (attribute) {
+    return ALLOWED_IFRAME_ATTRIBUTES.indexOf(attribute.name.toLowerCase()) === -1;
+  });
+
+  if (hasUnsafeAttribute || iframe.children.length > 0) {
+    return INVALID_VIDEO_MESSAGE;
+  }
+
+  return true;
+}
+
+/***/ }),
+
+/***/ 59:
 /***/ (function(module, exports) {
 
 var g;
@@ -646,7 +710,7 @@ module.exports = g;
 
 /***/ }),
 
-/***/ 59:
+/***/ 60:
 /***/ (function(module, exports) {
 
 module.exports = require("wangeditor");

package/lib/empty.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 74);
+/******/ 	return __webpack_require__(__webpack_require__.s = 75);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -199,7 +199,7 @@ module.exports = require("@evolvere/sgp-ui/lib/locale");
 
 /***/ }),
 
-/***/ 74:
+/***/ 75:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/footer.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 125);
+/******/ 	return __webpack_require__(__webpack_require__.s = 126);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -192,7 +192,7 @@ function normalizeComponent(
 
 /***/ }),
 
-/***/ 125:
+/***/ 126:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/form-item.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 75);
+/******/ 	return __webpack_require__(__webpack_require__.s = 76);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -213,7 +213,7 @@ module.exports = require("async-validator");
 
 /***/ }),
 
-/***/ 75:
+/***/ 76:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/form.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 105);
+/******/ 	return __webpack_require__(__webpack_require__.s = 106);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -192,7 +192,7 @@ function normalizeComponent(
 
 /***/ }),
 
-/***/ 105:
+/***/ 106:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/header.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 122);
+/******/ 	return __webpack_require__(__webpack_require__.s = 123);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -192,7 +192,7 @@ function normalizeComponent(
 
 /***/ }),
 
-/***/ 122:
+/***/ 123:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";

package/lib/icon.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 108);
+/******/ 	return __webpack_require__(__webpack_require__.s = 109);
 /******/ })
 /************************************************************************/
 /******/ ({
@@ -192,7 +192,7 @@ function normalizeComponent(
 
 /***/ }),
 
-/***/ 108:
+/***/ 109:
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";