@evolvere/sgp-ui 1.6.9 → 1.6.10

package/lib/rdc-sgp-ui.common.js

@@ -82,7 +82,7 @@ module.exports =
 /******/
 /******/
 /******/ 	// Load entry module and return exports
-/******/ 	return __webpack_require__(__webpack_require__.s = 50);
+/******/ 	return __webpack_require__(__webpack_require__.s = 52);
 /******/ })
 /************************************************************************/
 /******/ ([
@@ -201,82 +201,259 @@ module.exports = require("@evolvere/sgp-ui/lib/checkbox");
 
 /***/ }),
 /* 19 */
+/***/ (function(module, __webpack_exports__, __webpack_require__) {
+
+"use strict";
+/* unused harmony export MAX_EDITOR_HTML_LENGTH */
+/* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "b", function() { return MAX_IMAGE_SIZE; });
+/* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "a", function() { return MAX_IMAGE_COUNT; });
+/* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "c", function() { return isSafeLink; });
+/* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "d", function() { return isSafeMediaSource; });
+/* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "e", function() { return sanitizeEditorHtml; });
+/* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "f", function() { return validateImageFiles; });
+/* harmony import */ var dompurify__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(41);
+/* harmony import */ var dompurify__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(dompurify__WEBPACK_IMPORTED_MODULE_0__);
+
+
+var MAX_EDITOR_HTML_LENGTH = 1024 * 1024;
+var MAX_IMAGE_SIZE = 5 * 1024 * 1024;
+var MAX_IMAGE_COUNT = 10;
+
+var SAFE_PROTOCOLS = ['http:', 'https:'];
+var SAFE_LINK_PROTOCOLS = SAFE_PROTOCOLS.concat(['mailto:', 'tel:']);
+var SAFE_URI_PATTERN = /^(?:(?:https?|mailto|tel):|(?:\.{0,2}\/|#))/i;
+
+var PURIFY_OPTIONS = {
+  ALLOWED_TAGS: ['a', 'b', 'blockquote', 'br', 'code', 'del', 'div', 'em', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'hr', 'i', 'iframe', 'img', 'li', 'ol', 'p', 'pre', 's', 'span', 'strike', 'strong', 'sub', 'sup', 'table', 'tbody', 'td', 'tfoot', 'th', 'thead', 'tr', 'u', 'ul', 'video', 'source'],
+  ALLOWED_ATTR: ['allow', 'allowfullscreen', 'alt', 'colspan', 'controls', 'frameborder', 'height', 'href', 'loading', 'loop', 'muted', 'playsinline', 'poster', 'preload', 'referrerpolicy', 'rel', 'rowspan', 'sandbox', 'src', 'style', 'target', 'title', 'webkitallowfullscreen', 'width'],
+  // These attributes carry fixed policy tokens rather than URLs. DOMPurify
+  // otherwise applies its URI value check and removes the security settings.
+  ADD_URI_SAFE_ATTR: ['loading', 'referrerpolicy', 'rel', 'sandbox', 'target'],
+  ALLOW_ARIA_ATTR: false,
+  ALLOW_DATA_ATTR: false,
+  ALLOW_UNKNOWN_PROTOCOLS: false,
+  ALLOWED_URI_REGEXP: SAFE_URI_PATTERN,
+  FORBID_TAGS: ['base', 'button', 'embed', 'form', 'input', 'link', 'math', 'meta', 'noscript', 'object', 'option', 'script', 'select', 'style', 'svg', 'template', 'textarea'],
+  FORBID_ATTR: ['formaction', 'id', 'name', 'srcdoc', 'xlink:href'],
+  KEEP_CONTENT: true,
+  RETURN_TRUSTED_TYPE: false,
+  SANITIZE_DOM: true,
+  SANITIZE_NAMED_PROPS: true
+};
+
+var COLOR_VALUE = /^(?:#[0-9a-f]{3,8}|[a-z]{1,20}|rgba?\(\s*\d{1,3}\s*,\s*\d{1,3}\s*,\s*\d{1,3}(?:\s*,\s*(?:0|1|0?\.\d+))?\s*\))$/i;
+var LENGTH_VALUE = /^\d+(?:\.\d+)?(?:px|em|rem|%)?$/i;
+var FONT_FAMILY_VALUE = /^[a-z0-9\u4e00-\u9fff ,'-]{1,120}$/i;
+
+var SAFE_STYLE_RULES = {
+  'background-color': COLOR_VALUE,
+  color: COLOR_VALUE,
+  'font-family': FONT_FAMILY_VALUE,
+  'font-size': LENGTH_VALUE,
+  'font-style': /^(?:normal|italic|oblique)$/i,
+  'font-weight': /^(?:normal|bold|bolder|lighter|[1-9]00)$/i,
+  'line-height': LENGTH_VALUE,
+  'list-style-type': /^(?:disc|circle|square|decimal|lower-alpha|upper-alpha|lower-roman|upper-roman|none)$/i,
+  'margin-left': LENGTH_VALUE,
+  'max-width': LENGTH_VALUE,
+  'padding-left': LENGTH_VALUE,
+  'text-align': /^(?:left|right|center|justify)$/i,
+  'text-decoration': /^(?:none|underline|line-through)(?:\s+(?:underline|line-through))*$/i,
+  'text-indent': LENGTH_VALUE,
+  'vertical-align': /^(?:baseline|sub|super|top|text-top|middle|bottom|text-bottom)$/i,
+  'white-space': /^(?:normal|nowrap|pre|pre-wrap|pre-line)$/i
+};
+
+function parseUrl(value) {
+  var url = (value || '').trim();
+  if (!url || /[\u0000-\u001f\u007f]/.test(url)) return null;
+
+  var parser = document.createElement('a');
+  parser.href = url;
+  return parser;
+}
+
+function hasSafeProtocol(value, protocols) {
+  var parser = parseUrl(value);
+  return !!parser && protocols.indexOf(parser.protocol.toLowerCase()) !== -1;
+}
+
+function isSafeLink(link) {
+  return hasSafeProtocol(link, SAFE_LINK_PROTOCOLS);
+}
+
+function isSafeMediaSource(source) {
+  return hasSafeProtocol(source, SAFE_PROTOCOLS);
+}
+
+function sanitizeStyle(styleText) {
+  if (!styleText || styleText.length > 500 || /[\\<>{}]|url\s*\(|expression\s*\(|@import|javascript\s*:|data\s*:|-moz-binding|behavior\s*:/i.test(styleText)) {
+    return '';
+  }
+
+  return styleText.split(';').reduce(function (rules, declaration) {
+    var separator = declaration.indexOf(':');
+    if (separator === -1) return rules;
+
+    var property = declaration.slice(0, separator).trim().toLowerCase();
+    var value = declaration.slice(separator + 1).trim();
+    var rule = SAFE_STYLE_RULES[property];
+    if (rule && rule.test(value)) rules.push(property + ': ' + value);
+    return rules;
+  }, []).join('; ');
+}
+
+function normalizeDimension(element, attribute) {
+  if (!element.hasAttribute(attribute)) return;
+  var value = Number(element.getAttribute(attribute));
+  if (!Number.isInteger(value) || value < 1 || value > 10000) {
+    element.removeAttribute(attribute);
+  }
+}
+
+function normalizeRichText(html) {
+  var template = document.createElement('template');
+  template.innerHTML = html;
+  var elements = Array.prototype.slice.call(template.content.querySelectorAll('*'));
+
+  elements.forEach(function (element) {
+    var style = sanitizeStyle(element.getAttribute('style'));
+    if (style) element.setAttribute('style', style);else element.removeAttribute('style');
+
+    normalizeDimension(element, 'width');
+    normalizeDimension(element, 'height');
+
+    if (element.tagName === 'A') {
+      if (!isSafeLink(element.getAttribute('href'))) element.removeAttribute('href');
+      if (element.getAttribute('target') === '_blank') {
+        element.setAttribute('rel', 'noopener noreferrer');
+      } else {
+        element.removeAttribute('target');
+        element.removeAttribute('rel');
+      }
+    }
+
+    if (element.tagName === 'IMG') {
+      if (!isSafeMediaSource(element.getAttribute('src'))) {
+        element.parentNode.removeChild(element);
+        return;
+      }
+      element.setAttribute('loading', 'lazy');
+      element.setAttribute('referrerpolicy', 'no-referrer');
+    }
+
+    if (element.tagName === 'IFRAME') {
+      if (!isSafeMediaSource(element.getAttribute('src'))) {
+        element.parentNode.removeChild(element);
+        return;
+      }
+      element.setAttribute('sandbox', 'allow-scripts allow-presentation allow-popups');
+      element.setAttribute('referrerpolicy', 'no-referrer');
+      element.setAttribute('loading', 'lazy');
+    }
+
+    if ((element.tagName === 'VIDEO' || element.tagName === 'SOURCE') && !isSafeMediaSource(element.getAttribute('src'))) {
+      element.parentNode.removeChild(element);
+    }
+  });
+
+  return template.innerHTML;
+}
+
+function sanitizeEditorHtml(html) {
+  if (typeof html !== 'string' || html.length > MAX_EDITOR_HTML_LENGTH) return '';
+
+  var sanitized = dompurify__WEBPACK_IMPORTED_MODULE_0___default.a.sanitize(html, PURIFY_OPTIONS);
+  var normalized = normalizeRichText(sanitized);
+  return dompurify__WEBPACK_IMPORTED_MODULE_0___default.a.sanitize(normalized, PURIFY_OPTIONS);
+}
+
+function validateImageFiles(files) {
+  if (!files || files.length < 1 || files.length > MAX_IMAGE_COUNT) return false;
+  return Array.prototype.every.call(files, function (file) {
+    return !!file && file.size > 0 && file.size <= MAX_IMAGE_SIZE && /^(?:image\/jpeg|image\/png|image\/gif)$/i.test(file.type || '');
+  });
+}
+
+/***/ }),
+/* 20 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/scrollbar");
 
 /***/ }),
-/* 20 */
+/* 21 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/utils/shared");
 
 /***/ }),
-/* 21 */
+/* 22 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/utils/date");
 
 /***/ }),
-/* 22 */
+/* 23 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/transitions/collapse-transition");
 
 /***/ }),
-/* 23 */
+/* 24 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/utils/vdom");
 
 /***/ }),
-/* 24 */
+/* 25 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/mixins/focus");
 
 /***/ }),
-/* 25 */
+/* 26 */
 /***/ (function(module, exports) {
 
 module.exports = require("babel-helper-vue-jsx-merge-props");
 
 /***/ }),
-/* 26 */
+/* 27 */
 /***/ (function(module, exports) {
 
 module.exports = require("throttle-debounce/throttle");
 
 /***/ }),
-/* 27 */
+/* 28 */
 /***/ (function(module, exports) {
 
 module.exports = require("yakuza1/lib/safe");
 
 /***/ }),
-/* 28 */
+/* 29 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/tooltip");
 
 /***/ }),
-/* 29 */
+/* 30 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/utils/scroll-into-view");
 
 /***/ }),
-/* 30 */
+/* 31 */
 /***/ (function(module, exports) {
 
 module.exports = require("yakuza1/lib/config/def");
 
 /***/ }),
-/* 31 */
+/* 32 */
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
-/* WEBPACK VAR INJECTION */(function(global) {/* harmony import */ var _video_security__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(49);
+/* WEBPACK VAR INJECTION */(function(global) {/* harmony import */ var _html_security__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19);
+/* harmony import */ var _video_security__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(51);
 var _extends = Object.assign || function (target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i]; for (var key in source) { if (Object.prototype.hasOwnProperty.call(source, key)) { target[key] = source[key]; } } } return target; };
 
 //
@@ -286,13 +463,14 @@ var _extends = Object.assign || function (target) { for (var i = 1; i < argument
 
 
 
-var signIsEditorChange = true;
+
 /* harmony default export */ __webpack_exports__["a"] = ({
   name: 'ElEditor',
   data: function data() {
     return {
       editor: null,
-      editorData: ''
+      editorData: '',
+      isEditorChange: true
     };
   },
 
@@ -314,11 +492,11 @@ var signIsEditorChange = true;
   mounted: function mounted() {
     var _this = this;
 
-    var E = __webpack_require__(52);
+    var E = __webpack_require__(54);
     var editor = new E(this.$refs.wangEditor);
 
     // 自定义按钮 text-indent
-    var textIndentDef = __webpack_require__(54);
+    var textIndentDef = __webpack_require__(56);
     var textIndent = textIndentDef.default(E);
     var textIndentKey = 'textIndent';
     editor.menus.extend('indent', textIndent);
@@ -333,7 +511,8 @@ var signIsEditorChange = true;
       editor.config.uploadImgServer = '/apiv2/nfs/file/upload/wangEditor';
     }
     editor.config.showLinkImg = false;
-    editor.config.uploadImgMaxSize = 1000 * 1024 * 1024; // 100M
+    editor.config.uploadImgMaxSize = _html_security__WEBPACK_IMPORTED_MODULE_0__[/* MAX_IMAGE_SIZE */ "b"];
+    editor.config.uploadImgMaxLength = _html_security__WEBPACK_IMPORTED_MODULE_0__[/* MAX_IMAGE_COUNT */ "a"];
     editor.config.emotions = [{
       title: 'emoji',
       type: 'emoji',
@@ -342,39 +521,72 @@ var signIsEditorChange = true;
 
     editor.config = _extends({}, editor.config, this.options);
 
+    var customPasteTextHandle = editor.config.pasteTextHandle;
+    var customLinkCheck = editor.config.linkCheck;
+    var customLinkImgCheck = editor.config.linkImgCheck;
+    var customUploadImgBefore = editor.config.uploadImgHooks && editor.config.uploadImgHooks.before;
+
+    // Security-sensitive settings cannot be relaxed through component options.
+    editor.config.uploadImgServer = '/apiv2/nfs/file/upload/wangEditor';
+    editor.config.uploadImgShowBase64 = false;
+    editor.config.showLinkImg = false;
+    editor.config.uploadImgAccept = ['jpg', 'jpeg', 'png', 'gif'];
+    editor.config.uploadImgMaxSize = _html_security__WEBPACK_IMPORTED_MODULE_0__[/* MAX_IMAGE_SIZE */ "b"];
+    editor.config.uploadImgMaxLength = _html_security__WEBPACK_IMPORTED_MODULE_0__[/* MAX_IMAGE_COUNT */ "a"];
+    editor.config.withCredentials = true;
+    editor.config.pasteTextHandle = function (content) {
+      return Object(_html_security__WEBPACK_IMPORTED_MODULE_0__[/* sanitizeEditorHtml */ "e"])(typeof customPasteTextHandle === 'function' ? customPasteTextHandle(content) : content);
+    };
+    editor.config.linkCheck = function (text, link) {
+      if (!Object(_html_security__WEBPACK_IMPORTED_MODULE_0__[/* isSafeLink */ "c"])(link)) return '链接地址不安全，仅支持 http、https、mailto 和 tel';
+      return typeof customLinkCheck === 'function' ? customLinkCheck(text, link) : true;
+    };
+    editor.config.linkImgCheck = function (src, alt, href) {
+      if (!Object(_html_security__WEBPACK_IMPORTED_MODULE_0__[/* isSafeMediaSource */ "d"])(src) || href && !Object(_html_security__WEBPACK_IMPORTED_MODULE_0__[/* isSafeLink */ "c"])(href)) {
+        return '图片地址不安全';
+      }
+      return typeof customLinkImgCheck === 'function' ? customLinkImgCheck(src, alt, href) : true;
+    };
+    editor.config.uploadImgHooks = _extends({}, editor.config.uploadImgHooks, {
+      before: function before(xhr, currentEditor, files) {
+        if (!Object(_html_security__WEBPACK_IMPORTED_MODULE_0__[/* validateImageFiles */ "f"])(files)) {
+          return { prevent: true, msg: '仅允许上传 10 张以内、单张不超过 5MB 的 JPG、PNG 或 GIF 图片' };
+        }
+        return typeof customUploadImgBefore === 'function' ? customUploadImgBefore(xhr, currentEditor, files) : undefined;
+      }
+    });
+
     // wangEditor 4 inserts online-video markup with insertHTML. Always run the
     // built-in security check before an optional consumer-provided validator.
     var customOnlineVideoCheck = editor.config.onlineVideoCheck;
     editor.config.onlineVideoCheck = function (video) {
-      var securityCheck = Object(_video_security__WEBPACK_IMPORTED_MODULE_0__[/* validateOnlineVideo */ "a"])(video);
+      var securityCheck = Object(_video_security__WEBPACK_IMPORTED_MODULE_1__[/* validateOnlineVideo */ "a"])(video);
       if (securityCheck !== true) return securityCheck;
       return typeof customOnlineVideoCheck === 'function' ? customOnlineVideoCheck(video) : true;
     };
 
     editor.config.onchange = function (newHtml) {
-      // this.editorData = newHtml;
-      signIsEditorChange = false;
-      _this.$emit('input', newHtml);
+      var safeHtml = Object(_html_security__WEBPACK_IMPORTED_MODULE_0__[/* sanitizeEditorHtml */ "e"])(newHtml);
+      _this.isEditorChange = false;
+      _this.$emit('input', safeHtml);
       _this.$nextTick(function () {
-        signIsEditorChange = true;
+        _this.isEditorChange = true;
       });
-      _this.$emit('change', { html: newHtml, text: editor.txt.text(), editor: editor });
+      _this.$emit('change', { html: safeHtml, text: editor.txt.text(), editor: editor });
     };
 
     editor.config.onblur = function (newHtml) {
-      // this.editorData = newHtml;
-      _this.$emit('blur', { html: newHtml, text: editor.txt.text(), editor: editor });
+      _this.$emit('blur', { html: Object(_html_security__WEBPACK_IMPORTED_MODULE_0__[/* sanitizeEditorHtml */ "e"])(newHtml), text: editor.txt.text(), editor: editor });
     };
 
     editor.config.onfocus = function (newHtml) {
-      // this.editorData = newHtml;
-      _this.$emit('focus', { html: newHtml, text: editor.txt.text(), editor: editor });
+      _this.$emit('focus', { html: Object(_html_security__WEBPACK_IMPORTED_MODULE_0__[/* sanitizeEditorHtml */ "e"])(newHtml), text: editor.txt.text(), editor: editor });
     };
 
     editor.create();
 
     var initValue = this.value !== undefined && this.value !== null ? this.value : this.content;
-    editor.txt.html(initValue);
+    editor.txt.html(Object(_html_security__WEBPACK_IMPORTED_MODULE_0__[/* sanitizeEditorHtml */ "e"])(initValue || ''));
     if (this.disabled) {
       editor.disable();
     }
@@ -393,123 +605,135 @@ var signIsEditorChange = true;
       }
     },
     value: function value() {
-      if (this.editor && signIsEditorChange) {
-        this.editor.txt.html(this.value);
+      if (this.editor && this.isEditorChange) {
+        this.editor.txt.html(Object(_html_security__WEBPACK_IMPORTED_MODULE_0__[/* sanitizeEditorHtml */ "e"])(this.value || ''));
       }
     }
+  },
+  beforeDestroy: function beforeDestroy() {
+    if (this.editor) {
+      this.editor.destroy();
+      this.editor = null;
+    }
   }
 });
-/* WEBPACK VAR INJECTION */}.call(this, __webpack_require__(51)))
+/* WEBPACK VAR INJECTION */}.call(this, __webpack_require__(53)))
 
 /***/ }),
-/* 32 */
+/* 33 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/button-group");
 
 /***/ }),
-/* 33 */
+/* 34 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/tag");
 
 /***/ }),
-/* 34 */
+/* 35 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/utils/scrollbar-width");
 
 /***/ }),
-/* 35 */
+/* 36 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/checkbox-group");
 
 /***/ }),
-/* 36 */
+/* 37 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/utils/after-leave");
 
 /***/ }),
-/* 37 */
+/* 38 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/progress");
 
 /***/ }),
-/* 38 */
+/* 39 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/utils/aria-utils");
 
 /***/ }),
-/* 39 */
+/* 40 */
 /***/ (function(module, exports) {
 
 module.exports = require("throttle-debounce");
 
 /***/ }),
-/* 40 */
+/* 41 */
+/***/ (function(module, exports) {
+
+module.exports = require("dompurify");
+
+/***/ }),
+/* 42 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/select");
 
 /***/ }),
-/* 41 */
+/* 43 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/option");
 
 /***/ }),
-/* 42 */
+/* 44 */
 /***/ (function(module, exports) {
 
 module.exports = require("normalize-wheel");
 
 /***/ }),
-/* 43 */
+/* 45 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/utils/aria-dialog");
 
 /***/ }),
-/* 44 */
+/* 46 */
 /***/ (function(module, exports) {
 
 module.exports = require("async-validator");
 
 /***/ }),
-/* 45 */
+/* 47 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/input-number");
 
 /***/ }),
-/* 46 */
+/* 48 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/cascader-panel");
 
 /***/ }),
-/* 47 */
+/* 49 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/radio");
 
 /***/ }),
-/* 48 */
+/* 50 */
 /***/ (function(module, exports) {
 
 module.exports = require("@evolvere/sgp-ui/lib/popover");
 
 /***/ }),
-/* 49 */
+/* 51 */
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
 /* harmony export (binding) */ __webpack_require__.d(__webpack_exports__, "a", function() { return validateOnlineVideo; });
-var ALLOWED_IFRAME_ATTRIBUTES = ['allow', 'allowfullscreen', 'frameborder', 'height', 'loading', 'mozallowfullscreen', 'referrerpolicy', 'src', 'title', 'webkitallowfullscreen', 'width'];
+var ALLOWED_IFRAME_ATTRIBUTES = ['allow', 'allowfullscreen', 'frameborder', 'height', 'loading', 'mozallowfullscreen', 'referrerpolicy', 'sandbox', 'src', 'title', 'webkitallowfullscreen', 'width'];
 
 var INVALID_VIDEO_MESSAGE = '视频代码不安全，仅支持使用 http/https 地址的 iframe';
 
@@ -555,14 +779,14 @@ function validateOnlineVideo(video) {
 }
 
 /***/ }),
-/* 50 */
+/* 52 */
 /***/ (function(module, exports, __webpack_require__) {
 
-module.exports = __webpack_require__(53);
+module.exports = __webpack_require__(55);
 
 
 /***/ }),
-/* 51 */
+/* 53 */
 /***/ (function(module, exports) {
 
 var g;
@@ -588,13 +812,13 @@ module.exports = g;
 
 
 /***/ }),
-/* 52 */
+/* 54 */
 /***/ (function(module, exports) {
 
 module.exports = require("wangeditor");
 
 /***/ }),
-/* 53 */
+/* 55 */
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";
@@ -967,11 +1191,11 @@ var component = normalizeComponent(
 
 /* harmony default export */ var pager = (component.exports);
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/select"
-var select_ = __webpack_require__(40);
+var select_ = __webpack_require__(42);
 var select_default = /*#__PURE__*/__webpack_require__.n(select_);
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/option"
-var option_ = __webpack_require__(41);
+var option_ = __webpack_require__(43);
 var option_default = /*#__PURE__*/__webpack_require__.n(option_);
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/input"
@@ -2006,7 +2230,7 @@ var vue_popper_ = __webpack_require__(5);
 var vue_popper_default = /*#__PURE__*/__webpack_require__.n(vue_popper_);
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/scrollbar"
-var scrollbar_ = __webpack_require__(19);
+var scrollbar_ = __webpack_require__(20);
 var scrollbar_default = /*#__PURE__*/__webpack_require__.n(scrollbar_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/autocomplete/src/autocomplete-suggestions.vue?vue&type=script&lang=js&
@@ -2111,7 +2335,7 @@ var autocomplete_suggestions_component = normalizeComponent(
 
 /* harmony default export */ var autocomplete_suggestions = (autocomplete_suggestions_component.exports);
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/mixins/focus"
-var focus_ = __webpack_require__(24);
+var focus_ = __webpack_require__(25);
 var focus_default = /*#__PURE__*/__webpack_require__.n(focus_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/autocomplete/src/autocomplete.vue?vue&type=script&lang=js&
@@ -2446,7 +2670,7 @@ var button_ = __webpack_require__(14);
 var button_default = /*#__PURE__*/__webpack_require__.n(button_);
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/button-group"
-var button_group_ = __webpack_require__(32);
+var button_group_ = __webpack_require__(33);
 var button_group_default = /*#__PURE__*/__webpack_require__.n(button_group_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/dropdown/src/dropdown.vue?vue&type=script&lang=js&
@@ -3677,7 +3901,7 @@ src_menu.install = function (Vue) {
 
 /* harmony default export */ var packages_menu = (src_menu);
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/transitions/collapse-transition"
-var collapse_transition_ = __webpack_require__(22);
+var collapse_transition_ = __webpack_require__(23);
 var collapse_transition_default = /*#__PURE__*/__webpack_require__.n(collapse_transition_);
 
 // CONCATENATED MODULE: ./packages/menu/src/menu-mixin.js
@@ -4199,7 +4423,7 @@ menu_itemvue_type_template_id_183d9f30_render._withStripped = true
 // CONCATENATED MODULE: ./packages/menu/src/menu-item.vue?vue&type=template&id=183d9f30&
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/tooltip"
-var tooltip_ = __webpack_require__(28);
+var tooltip_ = __webpack_require__(29);
 var tooltip_default = /*#__PURE__*/__webpack_require__.n(tooltip_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/menu/src/menu-item.vue?vue&type=script&lang=js&
@@ -4738,7 +4962,7 @@ var merge_ = __webpack_require__(7);
 var merge_default = /*#__PURE__*/__webpack_require__.n(merge_);
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/utils/shared"
-var shared_ = __webpack_require__(20);
+var shared_ = __webpack_require__(21);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/input/src/input.vue?vue&type=script&lang=js&
 //
@@ -8384,14 +8608,14 @@ var option_component = normalizeComponent(
 
 /* harmony default export */ var src_option = (option_component.exports);
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/tag"
-var tag_ = __webpack_require__(33);
+var tag_ = __webpack_require__(34);
 var tag_default = /*#__PURE__*/__webpack_require__.n(tag_);
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/utils/resize-event"
 var resize_event_ = __webpack_require__(15);
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/utils/scroll-into-view"
-var scroll_into_view_ = __webpack_require__(29);
+var scroll_into_view_ = __webpack_require__(30);
 var scroll_into_view_default = /*#__PURE__*/__webpack_require__.n(scroll_into_view_);
 
 // CONCATENATED MODULE: ./packages/select/src/navigation-mixin.js
@@ -10146,10 +10370,10 @@ var checkbox_ = __webpack_require__(18);
 var checkbox_default = /*#__PURE__*/__webpack_require__.n(checkbox_);
 
 // EXTERNAL MODULE: external "throttle-debounce"
-var external_throttle_debounce_ = __webpack_require__(39);
+var external_throttle_debounce_ = __webpack_require__(40);
 
 // EXTERNAL MODULE: external "normalize-wheel"
-var external_normalize_wheel_ = __webpack_require__(42);
+var external_normalize_wheel_ = __webpack_require__(44);
 var external_normalize_wheel_default = /*#__PURE__*/__webpack_require__.n(external_normalize_wheel_);
 
 // CONCATENATED MODULE: ./src/directives/mousewheel.js
@@ -11461,7 +11685,7 @@ function mapStates(mapper) {
   return res;
 };
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/utils/scrollbar-width"
-var scrollbar_width_ = __webpack_require__(34);
+var scrollbar_width_ = __webpack_require__(35);
 var scrollbar_width_default = /*#__PURE__*/__webpack_require__.n(scrollbar_width_);
 
 // CONCATENATED MODULE: ./packages/table/src/table-layout.js
@@ -12526,7 +12750,7 @@ var dropdowns = [];
   }
 });
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/checkbox-group"
-var checkbox_group_ = __webpack_require__(35);
+var checkbox_group_ = __webpack_require__(36);
 var checkbox_group_default = /*#__PURE__*/__webpack_require__.n(checkbox_group_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/table/src/filter-panel.vue?vue&type=script&lang=js&
@@ -22186,7 +22410,7 @@ var lib_locale_ = __webpack_require__(12);
 var lib_locale_default = /*#__PURE__*/__webpack_require__.n(lib_locale_);
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/utils/aria-dialog"
-var aria_dialog_ = __webpack_require__(43);
+var aria_dialog_ = __webpack_require__(45);
 var aria_dialog_default = /*#__PURE__*/__webpack_require__.n(aria_dialog_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/message-box/src/main.vue?vue&type=script&lang=js&
@@ -22549,7 +22773,7 @@ var src_main_component = normalizeComponent(
 
 /* harmony default export */ var message_box_src_main = (src_main_component.exports);
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/utils/vdom"
-var vdom_ = __webpack_require__(23);
+var vdom_ = __webpack_require__(24);
 
 // CONCATENATED MODULE: ./packages/message-box/src/main.js
 var main_typeof = typeof Symbol === "function" && typeof Symbol.iterator === "symbol" ? function (obj) { return typeof obj; } : function (obj) { return obj && typeof Symbol === "function" && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; };
@@ -23326,7 +23550,7 @@ form_itemvue_type_template_id_15341664_render._withStripped = true
 // CONCATENATED MODULE: ./packages/form/src/form-item.vue?vue&type=template&id=15341664&
 
 // EXTERNAL MODULE: external "async-validator"
-var external_async_validator_ = __webpack_require__(44);
+var external_async_validator_ = __webpack_require__(46);
 var external_async_validator_default = /*#__PURE__*/__webpack_require__.n(external_async_validator_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/form/src/label-wrap.vue?vue&type=script&lang=js&
@@ -27402,7 +27626,7 @@ mainvue_type_template_id_07c5ba0c_render._withStripped = true
 // CONCATENATED MODULE: ./packages/slider/src/main.vue?vue&type=template&id=07c5ba0c&
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/input-number"
-var input_number_ = __webpack_require__(45);
+var input_number_ = __webpack_require__(47);
 var input_number_default = /*#__PURE__*/__webpack_require__.n(input_number_);
 
 // CONCATENATED MODULE: ./node_modules/_vue-loader@15.10.0@vue-loader/lib/loaders/templateLoader.js??vue-loader-options!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/slider/src/button.vue?vue&type=template&id=212457cc&
@@ -28354,7 +28578,7 @@ var loading_component = normalizeComponent(
 
 /* harmony default export */ var loading = (loading_component.exports);
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/utils/after-leave"
-var after_leave_ = __webpack_require__(36);
+var after_leave_ = __webpack_require__(37);
 var after_leave_default = /*#__PURE__*/__webpack_require__.n(after_leave_);
 
 // CONCATENATED MODULE: ./packages/loading/src/directive.js
@@ -28949,7 +29173,7 @@ upload_listvue_type_template_id_509d6b3f_render._withStripped = true
 // CONCATENATED MODULE: ./packages/upload/src/upload-list.vue?vue&type=template&id=509d6b3f&
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/progress"
-var progress_ = __webpack_require__(37);
+var progress_ = __webpack_require__(38);
 var progress_default = /*#__PURE__*/__webpack_require__.n(progress_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/upload/src/upload-list.vue?vue&type=script&lang=js&
@@ -29081,17 +29305,17 @@ var upload_list_component = normalizeComponent(
 
 /* harmony default export */ var upload_list = (upload_list_component.exports);
 // EXTERNAL MODULE: external "babel-helper-vue-jsx-merge-props"
-var external_babel_helper_vue_jsx_merge_props_ = __webpack_require__(25);
+var external_babel_helper_vue_jsx_merge_props_ = __webpack_require__(26);
 var external_babel_helper_vue_jsx_merge_props_default = /*#__PURE__*/__webpack_require__.n(external_babel_helper_vue_jsx_merge_props_);
 
 // EXTERNAL MODULE: external "yakuza1/lib/config/def"
-var def_ = __webpack_require__(30);
+var def_ = __webpack_require__(31);
 
 // EXTERNAL MODULE: external "yakuza1"
 var external_yakuza1_ = __webpack_require__(13);
 
 // EXTERNAL MODULE: external "yakuza1/lib/safe"
-var safe_ = __webpack_require__(27);
+var safe_ = __webpack_require__(28);
 
 // CONCATENATED MODULE: ./packages/upload/src/ajax.js
 var ajax_extends = Object.assign || function (target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i]; for (var key in source) { if (Object.prototype.hasOwnProperty.call(source, key)) { target[key] = source[key]; } } } return target; };
@@ -32000,7 +32224,7 @@ mainvue_type_template_id_769f3494_render._withStripped = true
 // CONCATENATED MODULE: ./packages/carousel/src/main.vue?vue&type=template&id=769f3494&
 
 // EXTERNAL MODULE: external "throttle-debounce/throttle"
-var throttle_ = __webpack_require__(26);
+var throttle_ = __webpack_require__(27);
 var throttle_default = /*#__PURE__*/__webpack_require__.n(throttle_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/carousel/src/main.vue?vue&type=script&lang=js&
@@ -33523,11 +33747,11 @@ cascadervue_type_template_id_84bb86b6_render._withStripped = true
 // CONCATENATED MODULE: ./packages/cascader/src/cascader.vue?vue&type=template&id=84bb86b6&
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/cascader-panel"
-var cascader_panel_ = __webpack_require__(46);
+var cascader_panel_ = __webpack_require__(48);
 var cascader_panel_default = /*#__PURE__*/__webpack_require__.n(cascader_panel_);
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/utils/aria-utils"
-var aria_utils_ = __webpack_require__(38);
+var aria_utils_ = __webpack_require__(39);
 var aria_utils_default = /*#__PURE__*/__webpack_require__.n(aria_utils_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/cascader/src/cascader.vue?vue&type=script&lang=js&
@@ -38542,7 +38766,7 @@ mainvue_type_template_id_02b010cc_render._withStripped = true
 // CONCATENATED MODULE: ./packages/calendar/src/main.vue?vue&type=template&id=02b010cc&
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/utils/date"
-var date_ = __webpack_require__(21);
+var date_ = __webpack_require__(22);
 var date_default = /*#__PURE__*/__webpack_require__.n(date_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/calendar/src/date-table.vue?vue&type=script&lang=js&
@@ -39579,7 +39803,7 @@ cascader_panelvue_type_template_id_2111646a_render._withStripped = true
 // CONCATENATED MODULE: ./packages/cascader-panel/src/cascader-panel.vue?vue&type=template&id=2111646a&
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/radio"
-var radio_ = __webpack_require__(47);
+var radio_ = __webpack_require__(49);
 var radio_default = /*#__PURE__*/__webpack_require__.n(radio_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/cascader-panel/src/cascader-node.vue?vue&type=script&lang=js&
@@ -41394,7 +41618,7 @@ mainvue_type_template_id_34fecb68_render._withStripped = true
 // CONCATENATED MODULE: ./packages/popconfirm/src/main.vue?vue&type=template&id=34fecb68&
 
 // EXTERNAL MODULE: external "@evolvere/sgp-ui/lib/popover"
-var popover_ = __webpack_require__(48);
+var popover_ = __webpack_require__(50);
 var popover_default = /*#__PURE__*/__webpack_require__.n(popover_);
 
 // CONCATENATED MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/popconfirm/src/main.vue?vue&type=script&lang=js&
@@ -43100,21 +43324,21 @@ result_src.install = function (Vue) {
 };
 
 /* harmony default export */ var result = (result_src);
-// CONCATENATED MODULE: ./node_modules/_vue-loader@15.10.0@vue-loader/lib/loaders/templateLoader.js??vue-loader-options!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/editor/src/index.vue?vue&type=template&id=a1662642&scoped=true&
-var srcvue_type_template_id_a1662642_scoped_true_render = function () {
+// CONCATENATED MODULE: ./node_modules/_vue-loader@15.10.0@vue-loader/lib/loaders/templateLoader.js??vue-loader-options!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/editor/src/index.vue?vue&type=template&id=492dadf0&scoped=true&
+var srcvue_type_template_id_492dadf0_scoped_true_render = function () {
   var _vm = this
   var _h = _vm.$createElement
   var _c = _vm._self._c || _h
   return _c("div", { ref: "wangEditor" })
 }
-var srcvue_type_template_id_a1662642_scoped_true_staticRenderFns = []
-srcvue_type_template_id_a1662642_scoped_true_render._withStripped = true
+var srcvue_type_template_id_492dadf0_scoped_true_staticRenderFns = []
+srcvue_type_template_id_492dadf0_scoped_true_render._withStripped = true
 
 
-// CONCATENATED MODULE: ./packages/editor/src/index.vue?vue&type=template&id=a1662642&scoped=true&
+// CONCATENATED MODULE: ./packages/editor/src/index.vue?vue&type=template&id=492dadf0&scoped=true&
 
 // EXTERNAL MODULE: ./node_modules/_babel-loader@7.1.5@babel-loader/lib!./node_modules/_vue-loader@15.10.0@vue-loader/lib??vue-loader-options!./packages/editor/src/index.vue?vue&type=script&lang=js&
-var editor_srcvue_type_script_lang_js_ = __webpack_require__(31);
+var editor_srcvue_type_script_lang_js_ = __webpack_require__(32);
 
 // CONCATENATED MODULE: ./packages/editor/src/index.vue?vue&type=script&lang=js&
  /* harmony default export */ var packages_editor_srcvue_type_script_lang_js_ = (editor_srcvue_type_script_lang_js_["a" /* default */]); 
@@ -43128,11 +43352,11 @@ var editor_srcvue_type_script_lang_js_ = __webpack_require__(31);
 
 var editor_src_component = normalizeComponent(
   packages_editor_srcvue_type_script_lang_js_,
-  srcvue_type_template_id_a1662642_scoped_true_render,
-  srcvue_type_template_id_a1662642_scoped_true_staticRenderFns,
+  srcvue_type_template_id_492dadf0_scoped_true_render,
+  srcvue_type_template_id_492dadf0_scoped_true_staticRenderFns,
   false,
   null,
-  "a1662642",
+  "492dadf0",
   null
   
 )
@@ -43277,7 +43501,7 @@ if (typeof window !== 'undefined' && window.Vue) {
 }
 
 /* harmony default export */ var src_0 = __webpack_exports__["default"] = ({
-  version: '1.6.9',
+  version: '1.6.10',
   locale: lib_locale_default.a.use,
   i18n: lib_locale_default.a.i18n,
   install: src_install,
@@ -43374,7 +43598,7 @@ if (typeof window !== 'undefined' && window.Vue) {
 });
 
 /***/ }),
-/* 54 */
+/* 56 */
 /***/ (function(module, __webpack_exports__, __webpack_require__) {
 
 "use strict";