@firebase/database-compat 1.0.6-canary.9cd3c1eca → 1.0.6-canary.b284467c1

package/dist/database-compat/test/helpers/util.d.ts

@@ -28,7 +28,7 @@ export declare function createTestApp(): import("@firebase/app-compat").Firebase
 export declare function getRootNode(i?: number, ref?: string): any;
 /**
  * Create multiple refs to the same top level
- * push key - each on it's own Firebase.Context.
+ * push key - each on its own Firebase.Context.
  */
 export declare function getRandomNode(numNodes?: any): Reference | Reference[];
 export declare function getQueryValue(query: Query): Promise<unknown>;

package/dist/index.esm2017.js

@@ -5,7 +5,7 @@ import { errorPrefix, validateArgCount, validateCallback, validateContextObject,
 import { Logger } from '@firebase/logger';
 
 const name = "@firebase/database-compat";
-const version = "1.0.6-canary.9cd3c1eca";
+const version = "1.0.6-canary.b284467c1";
 
 /**
  * @license

package/dist/index.esm5.js

@@ -6,7 +6,7 @@ import { __extends } from 'tslib';
 import { Logger } from '@firebase/logger';
 
 var name = "@firebase/database-compat";
-var version = "1.0.6-canary.9cd3c1eca";
+var version = "1.0.6-canary.b284467c1";
 
 /**
  * @license

package/dist/index.js

@@ -12,7 +12,7 @@ function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'defau
 var firebase__default = /*#__PURE__*/_interopDefaultLegacy(firebase);
 
 var name = "@firebase/database-compat";
-var version = "1.0.6-canary.9cd3c1eca";
+var version = "1.0.6-canary.b284467c1";
 
 /**
  * @license

package/dist/index.standalone.js

@@ -3954,7 +3954,7 @@ var isWindowsStoreApp = function () {
     return typeof Windows === 'object' && typeof Windows.UI === 'object';
 };
 /**
- * Converts a server error code to a Javascript Error
+ * Converts a server error code to a JavaScript Error
  */
 function errorForServerCode(code, query) {
     var reason = 'Unknown Error';
@@ -3983,7 +3983,7 @@ var INTEGER_REGEXP_ = new RegExp('^-?(0*)\\d{1,10}$');
  */
 var INTEGER_32_MIN = -2147483648;
 /**
- * For use in kyes, the maximum possible 32-bit integer.
+ * For use in keys, the maximum possible 32-bit integer.
  */
 var INTEGER_32_MAX = 2147483647;
 /**
@@ -4681,7 +4681,7 @@ var AppCheckTokenProvider = /** @class */ (function () {
                 // Support delayed initialization of FirebaseAppCheck. This allows our
                 // customers to initialize the RTDB SDK before initializing Firebase
                 // AppCheck and ensures that all requests are authenticated if a token
-                // becomes available before the timoeout below expires.
+                // becomes available before the timeout below expires.
                 setTimeout(function () {
                     if (_this.appCheck) {
                         _this.getToken(forceRefresh).then(resolve, reject);
@@ -4743,7 +4743,7 @@ var FirebaseAuthTokenProvider = /** @class */ (function () {
                 // Support delayed initialization of FirebaseAuth. This allows our
                 // customers to initialize the RTDB SDK before initializing Firebase
                 // Auth and ensures that all requests are authenticated if a token
-                // becomes available before the timoeout below expires.
+                // becomes available before the timeout below expires.
                 setTimeout(function () {
                     if (_this.auth_) {
                         _this.getToken(forceRefresh).then(resolve, reject);
@@ -5237,7 +5237,7 @@ var BrowserPollConnection = /** @class */ (function () {
  *********************************************************************************************/
 var FirebaseIFrameScriptHolder = /** @class */ (function () {
     /**
-     * @param commandCB - The callback to be called when control commands are recevied from the server.
+     * @param commandCB - The callback to be called when control commands are received from the server.
      * @param onMessageCB - The callback to be triggered when responses arrive from the server.
      * @param onDisconnect - The callback to be triggered when this tag holder is closed
      * @param urlFn - A function that provides the URL of the endpoint to send data to.
@@ -5282,6 +5282,8 @@ var FirebaseIFrameScriptHolder = /** @class */ (function () {
             var iframeContents = '<html><body>' + script + '</body></html>';
             try {
                 this.myIFrame.doc.open();
+                // TODO: Do not use document.write, since it can lead to XSS. Instead, use the safevalues
+                // library to sanitize the HTML in the iframeContents.
                 this.myIFrame.doc.write(iframeContents);
                 this.myIFrame.doc.close();
             }
@@ -5507,6 +5509,10 @@ var FirebaseIFrameScriptHolder = /** @class */ (function () {
                     var newScript_1 = _this.myIFrame.doc.createElement('script');
                     newScript_1.type = 'text/javascript';
                     newScript_1.async = true;
+                    // TODO: We cannot assign an arbitrary URL to a script attached to the DOM, since it is
+                    // at risk of XSS. We should use the safevalues library to create a safeScriptEl, and
+                    // assign a sanitized trustedResourceURL to it. Since the URL must be a template string
+                    // literal, this could require some heavy refactoring.
                     newScript_1.src = url;
                     // eslint-disable-next-line @typescript-eslint/no-explicit-any
                     newScript_1.onload = newScript_1.onreadystatechange =
@@ -13997,7 +14003,7 @@ function treeHasChildren(tree) {
     return tree.node.childCount > 0;
 }
 /**
- * @returns Whethe rthe tree is empty (no value or children).
+ * @returns Whether the tree is empty (no value or children).
  */
 function treeIsEmpty(tree) {
     return treeGetValue(tree) === undefined && !treeHasChildren(tree);
@@ -16408,7 +16414,7 @@ function push(parent, value) {
     // then() and catch() methods and is used as the return value of push(). The
     // second remains a regular Reference and is used as the fulfilled value of
     // the first ThennableReference.
-    var thennablePushRef = child(parent, name);
+    var thenablePushRef = child(parent, name);
     var pushRef = child(parent, name);
     var promise;
     if (value != null) {
@@ -16417,9 +16423,9 @@ function push(parent, value) {
     else {
         promise = Promise.resolve(pushRef);
     }
-    thennablePushRef.then = promise.then.bind(promise);
-    thennablePushRef.catch = promise.then.bind(promise, undefined);
-    return thennablePushRef;
+    thenablePushRef.then = promise.then.bind(promise);
+    thenablePushRef.catch = promise.then.bind(promise, undefined);
+    return thenablePushRef;
 }
 /**
  * Removes the data at this Database location.