@fileverse-dev/ddoc 4.1.11-patch-1 → 4.1.11-patch-2

package/dist/{index-CqX0iYGN.mjs → index-BwbwqtUK.mjs}

@@ -1,4 +1,4 @@
-import { k as Ql, b as Zl, s as eh } from "./index-ES2pPSG6.mjs";
+import { k as Ql, b as Zl, s as eh } from "./index-BbiswCbz.mjs";
 let An = [], Xr = [];
 (() => {
   let s = "lc,34,7n,7,7b,19,,,,2,,2,,,20,b,1c,l,g,,2t,7,2,6,2,2,,4,z,,u,r,2j,b,1m,9,9,,o,4,,9,,3,,5,17,3,3b,f,,w,1j,,,,4,8,4,,3,7,a,2,t,,1m,,,,2,4,8,,9,,a,2,q,,2,2,1l,,4,2,4,2,2,3,3,,u,2,3,,b,2,1l,,4,5,,2,4,,k,2,m,6,,,1m,,,2,,4,8,,7,3,a,2,u,,1n,,,,c,,9,,14,,3,,1l,3,5,3,,4,7,2,b,2,t,,1m,,2,,2,,3,,5,2,7,2,b,2,s,2,1l,2,,,2,4,8,,9,,a,2,t,,20,,4,,2,3,,,8,,29,,2,7,c,8,2q,,2,9,b,6,22,2,r,,,,,,1j,e,,5,,2,5,b,,10,9,,2u,4,,6,,2,2,2,p,2,4,3,g,4,d,,2,2,6,,f,,jj,3,qa,3,t,3,t,2,u,2,1s,2,,7,8,,2,b,9,,19,3,3b,2,y,,3a,3,4,2,9,,6,3,63,2,2,,1m,,,7,,,,,2,8,6,a,2,,1c,h,1r,4,1c,7,,,5,,14,9,c,2,w,4,2,2,,3,1k,,,2,3,,,3,1m,8,2,2,48,3,,d,,7,4,,6,,3,2,5i,1m,,5,ek,,5f,x,2da,3,3x,,2o,w,fe,6,2x,2,n9w,4,,a,w,2,28,2,7k,,3,,4,,p,2,5,,47,2,q,i,d,,12,8,p,b,1a,3,1c,,2,4,2,2,13,,1v,6,2,2,2,2,c,,8,,1b,,1f,,,3,2,2,5,2,,,16,2,8,,6m,,2,,4,,fn4,,kh,g,g,g,a6,2,gt,,6a,,45,5,1ae,3,,2,5,4,14,3,4,,4l,2,fx,4,ar,2,49,b,4w,,1i,f,1k,3,1d,4,2,2,1x,3,10,5,,8,1q,,c,2,1g,9,a,4,2,,2n,3,2,,,2,6,,4g,,3,8,l,2,1l,2,,,,,m,,e,7,3,5,5f,8,2,3,,,n,,29,,2,6,,,2,,,2,,2,6j,,2,4,6,2,,2,r,2,2d,8,2,,,2,2y,,,,2,6,,,2t,3,2,4,,5,77,9,,2,6t,,a,2,,,4,,40,4,2,2,4,,w,a,14,6,2,4,8,,9,6,2,3,1a,d,,2,ba,7,,6,,,2a,m,2,7,,2,,2,3e,6,3,,,2,,7,,,20,2,3,,,,9n,2,f0b,5,1n,7,t4,,1r,4,29,,f5k,2,43q,,,3,4,5,8,8,2,7,u,4,44,3,1iz,1j,4,1e,8,,e,,m,5,,f,11s,7,,h,2,7,,2,,5,79,7,c5,4,15s,7,31,7,240,5,gx7k,2o,3k,6o".split(",").map((e) => e ? parseInt(e, 36) : 1);

package/dist/index.es.js

@@ -1,4 +1,4 @@
-import { D as e, a as o, E as t, P as d, e as r, h as i, m as n, d as E, c as l, u, v as C } from "./index-ES2pPSG6.mjs";
+import { D as e, a as o, E as t, P as d, e as r, h as i, m as n, d as E, c as l, u, v as C } from "./index-BbiswCbz.mjs";
 export {
   e as DdocEditor,
   o as DdocExportModal,

package/dist/{markdown-source-pane-CL7ZPDWq.mjs → markdown-source-pane-DKbf6EKw.mjs}

@@ -1,9 +1,9 @@
 var Vr = Object.defineProperty;
 var Wr = (t, e, O) => e in t ? Vr(t, e, { enumerable: !0, configurable: !0, writable: !0, value: O }) : t[e] = O;
 var gt = (t, e, O) => Wr(t, typeof e != "symbol" ? e + "" : e, O);
-import { j as Cr } from "./index-ES2pPSG6.mjs";
+import { j as Cr } from "./index-BbiswCbz.mjs";
 import { useRef as pe, useEffect as St } from "react";
-import { s as y, A as pO, T as dO, a as Gr, S as et, b as Lr, P as fO, E as j, i as QO, c as _, D as le, k as tt, F as Ar, M as Pt, W as Er, R as Ur, d as mO, N as oe, e as V, f as Mr, g as Ot, h as ce, p as $O, j as Y, t as h, l as Ir, I as rt, L as at, m as ye, n as ue, o as Qe, q as gO, r as te, u as SO, v as Br, w as Nr, x as PO, y as kO, z as Dr, B as Fr, C as Kr, G as Oe, H as ZO, J as Jr, K as kt, O as Hr, Q as ea, U as ta, V as Oa, X as ra, Y as aa, Z as ia, _ as sa, $ as na, a0 as la, a1 as oa, a2 as ca } from "./index-CqX0iYGN.mjs";
+import { s as y, A as pO, T as dO, a as Gr, S as et, b as Lr, P as fO, E as j, i as QO, c as _, D as le, k as tt, F as Ar, M as Pt, W as Er, R as Ur, d as mO, N as oe, e as V, f as Mr, g as Ot, h as ce, p as $O, j as Y, t as h, l as Ir, I as rt, L as at, m as ye, n as ue, o as Qe, q as gO, r as te, u as SO, v as Br, w as Nr, x as PO, y as kO, z as Dr, B as Fr, C as Kr, G as Oe, H as ZO, J as Jr, K as kt, O as Hr, Q as ea, U as ta, V as Oa, X as ra, Y as aa, Z as ia, _ as sa, $ as na, a0 as la, a1 as oa, a2 as ca } from "./index-BwbwqtUK.mjs";
 class ua {
   /**
   Create a new completion context. (Mostly useful for testing

package/dist/package/utils/sanitize-css.d.ts

@@ -1,45 +1,45 @@
 /**
- * Sanitize + validate author-supplied custom CSS before it is injected into the
- * document.
+ * Sanitize + scope + validate author-supplied custom CSS before it is injected
+ * into the document.
  *
- * Custom CSS travels to VIEWERS of a published document, so the raw string is
- * NOT a trusted stylesheet. We defend against:
- *  - scope breakout: a `}` in the CSS escaping the `scope { … }` wrapper to
- *    style the whole app (toolbar, other content, security UI, overlays);
- *  - external resource loads / exfiltration: `url(…)` and `@import` (tracking
- *    beacons, plus CSS attribute-selector data exfiltration);
- *  - clickjacking / UI redressing: `position: fixed | sticky` overlays that
- *    escape the document box and cover the viewport;
+ * Authors write **normal, full-page CSS** — `body { … }`, `html body h1 { … }`,
+ * `h1 { … }`, `* { … }` — the way they'd style any web page. We transparently
+ * scope every rule to the document so it can't leak into the app, AND we map the
+ * page-root selectors (`html`, `body`, `:root`) onto the document root so that
+ * `body { background: … }` styles the doc surface and `html body h1 { … }`
+ * styles the doc's headings. No `.ProseMirror` prefix, no learning curve.
+ *
+ * Because the raw string reaches VIEWERS of a published doc, it is untrusted.
+ * Every selector is force-scoped (so a `}` breakout is neutralised — the escaped
+ * rule is simply scoped too), and dangerous declarations are stripped:
+ *  - external resource loads / exfiltration: `url(…)`, `@import`;
+ *  - clickjacking / UI redressing: `position: fixed | sticky`;
  *  - legacy script vectors: `expression()`, `-moz-binding`, `behavior:`.
  *
- * Strategy: wrap the raw CSS in `scope { … }` and parse it with the browser's
- * own CSS engine (no dependency, no regex parsing). A well-formed input yields
- * exactly ONE top-level rule whose selector is `scope`; a breakout produces
- * extra top-level rules with other selectors — we keep only `scope` rules and
- * drop the rest. Dangerous declarations are stripped at every nesting level.
- * The kept rules are re-serialized by the engine, so the output is always a
- * valid, balanced stylesheet.
+ * We parse with the browser's own CSS engine (no dependency), rewrite each
+ * selector, strip dangerous declarations at every nesting level, and let the
+ * engine re-serialise — so the output is always a valid, balanced stylesheet.
  *
- * The sanitizer knows exactly what it removed, so it also returns non-blocking
- * `diagnostics` — the editing UI shows these so authors aren't left wondering
- * why a rule silently vanished (CSS is forgiving; we warn, never block).
+ * The sanitizer knows exactly what it removed, so it returns non-blocking
+ * `diagnostics`; the editing UI surfaces them (CSS is forgiving — we warn,
+ * never block).
  */
 export interface CssDiagnostic {
     level: 'warning' | 'error';
     message: string;
 }
 export interface CssValidationResult {
-    /** Sanitized, scope-wrapped CSS, safe to inject. '' when nothing survives. */
+    /** Sanitized, scoped CSS, safe to inject. '' when nothing survives. */
     css: string;
     /** What was stripped/ignored, deduped. Empty when the CSS was fully clean. */
     diagnostics: CssDiagnostic[];
 }
 /**
- * Sanitize AND report. Use this from the editing UI to surface diagnostics.
+ * Sanitize + scope AND report. Use this from the editing UI for diagnostics.
  */
 export declare const validateCustomCss: (raw: string | undefined | null, scope?: string) => CssValidationResult;
 /**
- * Sanitized CSS only — used at injection/export sinks that just need the safe
- * string. Diagnostics are surfaced separately via validateCustomCss.
+ * Sanitized + scoped CSS only — used at injection/export sinks that just need
+ * the safe string. Diagnostics are surfaced separately via validateCustomCss.
  */
 export declare const sanitizeCustomCss: (raw: string | undefined | null, scope?: string) => string;

package/dist/{split-view-toolbar-Kh-dQ_qt.mjs → split-view-toolbar-Bsu1Xy1f.mjs}

@@ -1,7 +1,7 @@
-import { j as d } from "./index-ES2pPSG6.mjs";
+import { j as d } from "./index-BbiswCbz.mjs";
 import { useRef as I, useState as N, useEffect as D } from "react";
 import { DynamicDropdown as E, Tooltip as R, IconButton as O } from "@fileverse/ui";
-import { a3 as A, a4 as P, c as y } from "./index-CqX0iYGN.mjs";
+import { a3 as A, a4 as P, c as y } from "./index-BwbwqtUK.mjs";
 const p = (e, t, o = t) => {
   const { state: s } = e, l = s.changeByRange((n) => {
     const u = s.sliceDoc(n.from, n.to), r = s.sliceDoc(

package/package.json

@@ -2,7 +2,7 @@
   "name": "@fileverse-dev/ddoc",
   "private": false,
   "description": "DDoc",
-  "version": "4.1.11-patch-1",
+  "version": "4.1.11-patch-2",
   "main": "dist/index.es.js",
   "module": "dist/index.es.js",
   "exports": {