@formio/js 5.4.0 → 5.4.2

package/dist/formio.utils.min.js.LICENSE.txt

@@ -18,9 +18,9 @@
  * MIT licensed
  */
 
-/*! @license DOMPurify 3.4.0 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.0/LICENSE */
+/*! @license DOMPurify 3.4.11 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.11/LICENSE */
 
-/*! formiojs v5.4.0 | https://unpkg.com/formiojs@5.4.0/LICENSE.txt */
+/*! formiojs v5.4.2 | https://unpkg.com/formiojs@5.4.2/LICENSE.txt */
 
 /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE */
 

package/lib/cjs/Embed.js

@@ -161,10 +161,10 @@ class Formio {
             if (!liveRegion) {
                 liveRegion = _a.createElement('div', {
                     id: 'formio-announcements',
-                    'role': 'status',
+                    role: 'status',
                     'aria-live': 'polite',
                     'aria-atomic': 'true',
-                    style: 'position: absolute; left: -10000px; width: 1px; height: 1px; overflow: hidden; clip: rect(0, 0, 0, 0);'
+                    style: 'position: absolute; left: -10000px; width: 1px; height: 1px; overflow: hidden; clip: rect(0, 0, 0, 0);',
                 });
                 document.body.appendChild(liveRegion);
             }
@@ -278,9 +278,7 @@ class Formio {
             _a.cdn = new CDN_js_1.default(_a.config.cdn, _a.config.cdnUrls || {});
             _a.config.libs = _a.config.libs || {
                 uswds: {
-                    dependencies: [
-                        'fontawesome',
-                    ],
+                    dependencies: ['fontawesome'],
                     js: `${_a.cdn.uswds}/uswds.min.js`,
                     css: `${_a.cdn.uswds}/uswds.min.css`,
                     use: true,
@@ -298,15 +296,11 @@ class Formio {
                   }`,
                 },
                 bootstrap4: {
-                    dependencies: [
-                        'fontawesome',
-                    ],
+                    dependencies: ['fontawesome'],
                     css: `${_a.cdn.bootstrap4}/css/bootstrap.min.css`,
                 },
                 bootstrap: {
-                    dependencies: [
-                        'bootstrap-icons',
-                    ],
+                    dependencies: ['bootstrap-icons'],
                     css: `${_a.cdn.bootstrap}/css/bootstrap.min.css`,
                 },
                 'bootstrap-icons': {
@@ -346,9 +340,7 @@ class Formio {
                 'yeti',
             ].forEach((template) => {
                 _a.config.libs[template] = {
-                    dependencies: [
-                        'bootstrap-icons',
-                    ],
+                    dependencies: ['bootstrap-icons'],
                     css: `${_a.cdn.bootswatch}/dist/${template}/bootstrap.min.css`,
                 };
             });
@@ -390,7 +382,7 @@ class Formio {
                 // Due to an issue with quill not loading styles in the shadowdom, we need to add quill styles and js to the shadowdom
                 const quill = {
                     js: `${_a.cdn.quill}/quill.js`,
-                    css: `${_a.cdn.quill}/quill.snow.css`
+                    css: `${_a.cdn.quill}/quill.snow.css`,
                 };
                 yield _a.addLibrary(wrapper, quill, 'quill');
             }
@@ -508,7 +500,7 @@ Formio.formioReady = new Promise((ready, reject) => {
     _a._formioReady = ready;
     _a._formioReadyReject = reject;
 });
-Formio.version = '5.4.0';
+Formio.version = '5.4.2';
 // Create a report.
 Formio.Report = {
     create: (element, submission, options = {}) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/cjs/Form.js

@@ -420,10 +420,10 @@ class Form extends Element_1.default {
      */
     build() {
         if (!this.instance) {
-            return Promise.reject('Form not ready. Use form.ready promise');
+            return Promise.reject(this.t('formNotReady'));
         }
         if (!this.element) {
-            return Promise.reject('No DOM element for form.');
+            return Promise.reject(this.t('noFormElement'));
         }
         // Add temporary loader.
         const template = this.options && this.options.template ? this.options.template : 'bootstrap';
@@ -441,7 +441,7 @@ class Form extends Element_1.default {
     }
     render() {
         if (!this.instance) {
-            return Promise.reject('Form not ready. Use form.ready promise');
+            return Promise.reject(this.t('formNotReady'));
         }
         return Promise.resolve(this.instance.render()).then((param) => {
             this.emit('render', param);
@@ -450,7 +450,7 @@ class Form extends Element_1.default {
     }
     attach(element) {
         if (!this.instance) {
-            return Promise.reject('Form not ready. Use form.ready promise');
+            return Promise.reject(this.t('formNotReady'));
         }
         if (this.element) {
             delete this.element.component;

package/lib/cjs/Formio.js

@@ -11,7 +11,7 @@ const CDN_1 = __importDefault(require("./CDN"));
 const providers_1 = __importDefault(require("./providers"));
 sdk_1.Formio.cdn = new CDN_1.default();
 sdk_1.Formio.Providers = providers_1.default;
-sdk_1.Formio.version = '5.4.0';
+sdk_1.Formio.version = '5.4.2';
 CDN_1.default.defaultCDN = sdk_1.Formio.version.includes('rc')
     ? 'https://cdn.test-form.io'
     : 'https://cdn.form.io';
@@ -90,14 +90,7 @@ sdk_1.Formio.prototype.deleteFile = function (file, options) {
     return sdk_1.Formio.pluginAlter('wrapFileRequestPromise', request, requestArgs);
 };
 // Esnure we proxy the following methods to the FormioEmbed class.
-[
-    'setBaseUrl',
-    'setApiUrl',
-    'setAppUrl',
-    'setProjectUrl',
-    'setPathType',
-    'setLicense',
-].forEach((fn) => {
+['setBaseUrl', 'setApiUrl', 'setAppUrl', 'setProjectUrl', 'setPathType', 'setLicense'].forEach((fn) => {
     const baseFn = sdk_1.Formio[fn];
     sdk_1.Formio[fn] = function (arg) {
         const retVal = Embed_1.Formio[fn](arg, true);

package/lib/cjs/InlineEmbed.js

@@ -31,10 +31,7 @@ function embed(config = {}) {
         let scriptSrc = thisScript.src.replace(/^([^?]+).*/, '$1').split('/');
         scriptSrc.pop();
         let cdnSrc = '';
-        if ([
-            'js',
-            'offline',
-        ].includes(scriptSrc[scriptSrc.length - 1])) {
+        if (['js', 'offline'].includes(scriptSrc[scriptSrc.length - 1])) {
             scriptSrc.pop();
             scriptSrc = cdnSrc = scriptSrc.join('/');
             scriptSrc += '/js';

package/lib/cjs/PDF.js

@@ -6,6 +6,24 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const Formio_1 = require("./Formio");
 const Webform_1 = __importDefault(require("./Webform"));
 const utils_1 = require("./utils");
+const getIframeOrigin = (iframeElement) => {
+    try {
+        const origin = new URL(iframeElement.src, window.location.href).origin;
+        return origin === 'null' ? null : origin;
+    }
+    catch (ignoreErr) {
+        return null;
+    }
+};
+const isTrustedIframeMessage = (event, form) => {
+    var _a;
+    const iframeWindow = (_a = form === null || form === void 0 ? void 0 : form.iframeElement) === null || _a === void 0 ? void 0 : _a.contentWindow;
+    const iframeOrigin = (form === null || form === void 0 ? void 0 : form.iframeElement) && getIframeOrigin(form.iframeElement);
+    return Boolean(iframeWindow &&
+        iframeOrigin &&
+        event.source === iframeWindow &&
+        event.origin === iframeOrigin);
+};
 class PDF extends Webform_1.default {
     constructor(element, options) {
         options.display = 'pdf';
@@ -17,11 +35,11 @@ class PDF extends Webform_1.default {
         // Handle an iframe submission.
         this.on('iframe-submission', (submission) => this.setValue(submission, {
             fromIframe: true,
-            noDefault: true
+            noDefault: true,
         }), true);
         this.on('iframe-change', (submission) => this.setValue(submission, {
             fromIframe: true,
-            noDefault: true
+            noDefault: true,
         }), true);
         this.on('iframe-getIframePositions', (query) => {
             const iframe = document.getElementById(`iframe-${query.formId}`);
@@ -167,9 +185,7 @@ class PDF extends Webform_1.default {
             return '';
         }
         let iframeSrc = `${this._form.settings.pdf.src}.html`;
-        const params = [
-            `id=${this.id}`,
-        ];
+        const params = [`id=${this.id}`];
         if (this.options.showCheckboxBackground || this._form.settings.showCheckboxBackground) {
             params.push('checkboxbackground=1');
         }
@@ -283,19 +299,23 @@ if (typeof window !== 'undefined') {
         catch (ignoreErr) {
             eventData = null;
         }
-        // If this form exists, then emit the event within this form.
+        // If this form exists and the message came from its PDF iframe, emit the event within this form.
         if (eventData &&
             eventData.name &&
             eventData.formId &&
             Formio_1.Formio.forms.hasOwnProperty(eventData.formId)) {
+            const form = Formio_1.Formio.forms[eventData.formId];
+            if (!isTrustedIframeMessage(event, form)) {
+                return;
+            }
             if (eventData.compPath) {
-                const comp = Formio_1.Formio.forms[eventData.formId].getComponent(eventData.compPath);
+                const comp = form.getComponent(eventData.compPath);
                 if (comp) {
                     comp.emit(eventData.name, eventData.data);
                 }
             }
             else {
-                Formio_1.Formio.forms[eventData.formId].emit(`iframe-${eventData.name}`, eventData.data);
+                form.emit(`iframe-${eventData.name}`, eventData.data);
             }
         }
     });

package/lib/cjs/PDFBuilder.js

@@ -199,10 +199,10 @@ class PDFBuilder extends WebformBuilder_1.default {
                 const progress = Math.floor((event.loaded / event.total) * 100);
                 this.refs.uploadProgress.style.width = `${progress}%`;
                 if (progress > 98) {
-                    this.refs.uploadProgress.innerHTML = this.t('Converting PDF. Please wait.');
+                    this.refs.uploadProgress.innerHTML = this.t('waitPdfConverting');
                 }
                 else {
-                    this.refs.uploadProgress.innerHTML = `${this.t('Uploading')} ${progress}%`;
+                    this.refs.uploadProgress.innerHTML = `${this.t('uploading')} ${progress}%`;
                 }
             }
         }, `${this.projectUrl}/upload`, {}, 'file')
@@ -247,7 +247,7 @@ class PDFBuilder extends WebformBuilder_1.default {
             return;
         }
         this.refs.uploadError.style.display = message ? '' : 'none';
-        this.refs.uploadError.innerHTML = message;
+        this.refs.uploadError.innerHTML = this.t(`${message}`);
     }
     createForm(options) {
         // Instantiate the webform from the PDF class instead of Webform
@@ -257,9 +257,7 @@ class PDFBuilder extends WebformBuilder_1.default {
         this.webform.on('attach', () => {
             // If the dropzone exists but has been removed in a PDF rebuild, reinstate it
             if (this.refs.iframeDropzone &&
-                ![
-                    ...this.refs.form.children,
-                ].includes(this.refs.iframeDropzone)) {
+                ![...this.refs.form.children].includes(this.refs.iframeDropzone)) {
                 this.prependTo(this.refs.iframeDropzone, this.refs.form);
             }
         });
@@ -375,9 +373,7 @@ class PDFBuilder extends WebformBuilder_1.default {
             return;
         }
         this.refs['sidebar-container'].forEach((container) => {
-            [
-                ...container.children,
-            ].forEach((el) => {
+            [...container.children].forEach((el) => {
                 el.draggable = true;
                 el.setAttribute('draggable', true);
                 this.removeEventListener(el, 'dragstart');
@@ -492,7 +488,7 @@ class PDFBuilder extends WebformBuilder_1.default {
                     name: 'showBuilderErrors',
                     data: {
                         compId: comp.component.id,
-                        errorMessage: `API Key is not unique: ${comp.key}`,
+                        errorMessage: `${this.t('notUniqueKey')}: ${comp.key}`,
                     },
                 });
             }

package/lib/cjs/Webform.d.ts

@@ -269,6 +269,7 @@ declare class Webform extends NestedDataComponent {
     get schema(): any;
     mergeData(_this: any, _that: any): void;
     editing: boolean | undefined;
+    subFromServer: any;
     _submission: any;
     /**
      * Build the form.

package/lib/cjs/Webform.js

@@ -297,11 +297,7 @@ class Webform extends NestedDataComponent_1.default {
             return false;
         }
         if (element.nodeName === 'INPUT') {
-            return ([
-                'text',
-                'email',
-                'password',
-            ].indexOf(element.type) === -1);
+            return ['text', 'email', 'password'].indexOf(element.type) === -1;
         }
         return true;
     }
@@ -548,7 +544,7 @@ class Webform extends NestedDataComponent_1.default {
         }
         if ('schema' in form && (0, compare_versions_1.compareVersions)(form.schema, '1.x') > 0) {
             this.ready.then(() => {
-                this.setAlert('alert alert-danger', 'Form schema is for a newer version, please upgrade your renderer. Some functionality may not work.');
+                this.setAlert('alert alert-danger', this.t('newFormSchema'));
             });
         }
         // See if they pass a module, and evaluate it if so.
@@ -741,9 +737,7 @@ class Webform extends NestedDataComponent_1.default {
         });
     }
     get schema() {
-        const schema = (0, utils_1.fastCloneDeep)(lodash_1.default.omit(this._form, [
-            'components',
-        ]));
+        const schema = (0, utils_1.fastCloneDeep)(lodash_1.default.omit(this._form, ['components']));
         schema.components = [];
         this.eachComponent((component) => schema.components.push(component.schema));
         return schema;
@@ -770,10 +764,12 @@ class Webform extends NestedDataComponent_1.default {
         if (!this.options.submissionTimezone && submission.metadata && submission.metadata.timezone) {
             this.options.submissionTimezone = submission.metadata.timezone;
         }
+        this.subFromServer = lodash_1.default.cloneDeep(submission.data);
         const changed = super.setValue(submission.data, flags);
         if (!flags.sanitize) {
             this.mergeData(this.data, submission.data);
         }
+        // GOTCHA(G-FJS01)
         submission.data = this.data;
         this._submission = submission;
         return changed;
@@ -1010,6 +1006,7 @@ class Webform extends NestedDataComponent_1.default {
             const component = this.getComponent(key);
             if (component) {
                 component.focus();
+                component.scrollIntoView();
             }
         }
     }
@@ -1035,9 +1032,7 @@ class Webform extends NestedDataComponent_1.default {
         var _a, _b;
         this.loading = false;
         if (!Array.isArray(errors)) {
-            errors = [
-                errors,
-            ];
+            errors = [errors];
         }
         if (Array.isArray(this.errors) &&
             // do not show components validation errors in alert for draft submission
@@ -1070,14 +1065,7 @@ class Webform extends NestedDataComponent_1.default {
         }
         const displayedErrors = [];
         if (errors.length) {
-            errors = lodash_1.default.uniqBy(errors, (error) => {
-                var _a, _b;
-                return [
-                    error.message,
-                    (_a = error.component) === null || _a === void 0 ? void 0 : _a.id,
-                    (_b = error.context) === null || _b === void 0 ? void 0 : _b.path,
-                ].join();
-            });
+            errors = lodash_1.default.uniqBy(errors, (error) => { var _a, _b; return [error.message, (_a = error.component) === null || _a === void 0 ? void 0 : _a.id, (_b = error.context) === null || _b === void 0 ? void 0 : _b.path].join(); });
             const createListItem = (message, index) => {
                 var _a, _b, _c;
                 const err = errors[index];
@@ -1105,6 +1093,7 @@ class Webform extends NestedDataComponent_1.default {
             });
         }
         const errorsList = this.renderTemplate('errorsList', { errors: displayedErrors });
+        // GOTCHA(G-FJS02)
         // Only paint the alert from a subform when the root won't double paint it to avoid a painful flicker
         if (this === this.root || !((_a = this.root) === null || _a === void 0 ? void 0 : _a.submitted)) {
             (_b = this.root) === null || _b === void 0 ? void 0 : _b.setAlert('danger', errorsList);
@@ -1146,7 +1135,8 @@ class Webform extends NestedDataComponent_1.default {
                 liveRegion.setAttribute('role', 'status');
                 liveRegion.setAttribute('aria-live', 'polite');
                 liveRegion.setAttribute('aria-atomic', 'true');
-                liveRegion.style.cssText = 'position: absolute; left: -10000px; width: 1px; height: 1px; overflow: hidden; clip: rect(0, 0, 0, 0);';
+                liveRegion.style.cssText =
+                    'position: absolute; left: -10000px; width: 1px; height: 1px; overflow: hidden; clip: rect(0, 0, 0, 0);';
                 document.body.appendChild(liveRegion);
             }
             // Announce the submission completion using VPAT clear-and-reset technique
@@ -1361,11 +1351,7 @@ class Webform extends NestedDataComponent_1.default {
                             };
                         }
                         // Ensure err is an array.
-                        err = Array.isArray(err)
-                            ? err
-                            : [
-                                err,
-                            ];
+                        err = Array.isArray(err) ? err : [err];
                         return reject(err);
                     }
                     this.loading = true;
@@ -1416,9 +1402,7 @@ class Webform extends NestedDataComponent_1.default {
             });
         }
         else if (typeof error === 'string') {
-            this.serverErrors = [
-                { fromServer: true, level: 'error', message: error },
-            ];
+            this.serverErrors = [{ fromServer: true, level: 'error', message: error }];
         }
     }
     executeSubmit(options) {
@@ -1477,7 +1461,7 @@ class Webform extends NestedDataComponent_1.default {
     }
     submitUrl(URL, headers) {
         if (!URL) {
-            return console.warn('Missing URL argument');
+            return console.warn(this.t('missingUrl'));
         }
         const submission = this.submission || {};
         const API_URL = URL;
@@ -1498,7 +1482,7 @@ class Webform extends NestedDataComponent_1.default {
             })
                 .then(() => {
                 this.emit('requestDone');
-                this.setAlert('success', '<p> Success </p>');
+                this.setAlert('success', `<p> ${this.t('success')} </p>`);
             })
                 .catch((e) => {
                 const message = `${e.statusText ? e.statusText : ''} ${e.status ? e.status : e}`;
@@ -1509,9 +1493,10 @@ class Webform extends NestedDataComponent_1.default {
             });
         }
         else {
-            this.emit('error', 'You should add a URL to this button.');
-            this.setAlert('warning', 'You should add a URL to this button.');
-            return console.warn('You should add a URL to this button.');
+            const message = this.t('urlNotAttachedToBtn');
+            this.emit('error', message);
+            this.setAlert('warning', message);
+            return console.warn(message);
         }
     }
     triggerCaptcha(components = null) {