@firebase/auth 1.7.5-canary.d752e8096 → 1.7.5-canary.f58d48cd4

package/dist/rn/index.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, '__esModule', { value: true });
 
 var app = require('@firebase/app');
-var index = require('./index-846af2d1.js');
+var index = require('./index-14ed2e1f.js');
 var tslib = require('tslib');
 require('@firebase/util');
 require('@firebase/component');

package/dist/rn/internal.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var index = require('./index-846af2d1.js');
+var index = require('./index-14ed2e1f.js');
 var tslib = require('tslib');
 var util = require('@firebase/util');
 var app = require('@firebase/app');
@@ -3060,6 +3060,10 @@ index._setExternalJSProvider({
         // TODO: consider adding timeout support & cancellation
         return new Promise(function (resolve, reject) {
             var el = document.createElement('script');
+            // TODO: Do not use setAttribute, since it can lead to XSS. Instead, use the safevalues library to
+            // safely set an attribute for a sanitized trustedResourceUrl. Since the trustedResourceUrl
+            // must be initialized from a template string literal, this could involve some heavy
+            // refactoring.
             el.setAttribute('src', url);
             el.onload = resolve;
             el.onerror = function (e) {