@hmcts/rpx-xui-common-lib 3.2.8 → 3.2.9

package/fesm2022/hmcts-rpx-xui-common-lib.mjs

@@ -1,5 +1,5 @@
 import * as i0 from '@angular/core';
-import { Component, EventEmitter, ViewEncapsulation, Input, Output, Injectable, InjectionToken, DOCUMENT, Inject, ViewChild, Pipe, ChangeDetectionStrategy, Directive, ElementRef, NgModule } from '@angular/core';
+import { Component, EventEmitter, ViewEncapsulation, Input, Output, Injectable, InjectionToken, DOCUMENT, Inject, ViewChild, Pipe, ChangeDetectionStrategy, Directive, SecurityContext, ElementRef, NgModule } from '@angular/core';
 import * as i2 from 'rpx-xui-translation';
 import { RpxTranslationModule } from 'rpx-xui-translation';
 import * as i1 from '@angular/common';
@@ -6502,16 +6502,21 @@ function ServiceMessageComponent_Conditional_8_Template(rf, ctx) { if (rf & 1) {
     i0.ɵɵelement(0, "h2", 5);
 } if (rf & 2) {
     const ctx_r0 = i0.ɵɵnextContext();
-    i0.ɵɵproperty("innerHTML", ctx_r0.message_cy, i0.ɵɵsanitizeHtml);
+    i0.ɵɵproperty("innerHTML", ctx_r0.sanitizeHtml(ctx_r0.message_cy), i0.ɵɵsanitizeHtml);
 } }
 class ServiceMessageComponent {
-    constructor() {
+    constructor(sanitizer) {
+        this.sanitizer = sanitizer;
         this.hideMessage = new EventEmitter();
     }
     onHideMessageEvent(key) {
         this.hideMessage.emit(key);
     }
-    static { this.ɵfac = function ServiceMessageComponent_Factory(__ngFactoryType__) { return new (__ngFactoryType__ || ServiceMessageComponent)(); }; }
+    // ensure no dangerous HTML is rendered in the service message banner
+    sanitizeHtml(content) {
+        return this.sanitizer.sanitize(SecurityContext.HTML, content ?? '') ?? '';
+    }
+    static { this.ɵfac = function ServiceMessageComponent_Factory(__ngFactoryType__) { return new (__ngFactoryType__ || ServiceMessageComponent)(i0.ɵɵdirectiveInject(i2$1.DomSanitizer)); }; }
     static { this.ɵcmp = /*@__PURE__*/ i0.ɵɵdefineComponent({ type: ServiceMessageComponent, selectors: [["xuilib-service-message"]], inputs: { message_en: "message_en", message_cy: "message_cy", key: "key" }, outputs: { hideMessage: "hideMessage" }, standalone: false, decls: 12, vars: 8, consts: [[1, "hmcts-banner", "hmcts-banner--warning"], ["fill", "currentColor", "role", "img", "aria-label", "hmcts-warning-icon", "focusable", "false", "xmlns", "http://www.w3.org/2000/svg", "viewBox", "0 0 25 25", "height", "25", "width", "25", 1, "hmcts-banner__icon"], ["d", "M13.6,15.4h-2.3v-4.5h2.3V15.4z M13.6,19.8h-2.3v-2.2h2.3V19.8z M0,23.2h25L12.5,2L0,23.2z"], [1, "hmcts-banner__message"], [1, "hmcts-banner__assistive"], [1, "govuk-heading-s", 3, "innerHTML"], ["tabindex", "0", 1, "govuk-link--no-visited-state", 3, "click", "keyup.enter", "routerLink"]], template: function ServiceMessageComponent_Template(rf, ctx) { if (rf & 1) {
             i0.ɵɵelementStart(0, "div", 0);
             i0.ɵɵnamespaceSVG();
@@ -6534,7 +6539,7 @@ class ServiceMessageComponent {
             i0.ɵɵadvance(5);
             i0.ɵɵtextInterpolate(i0.ɵɵpipeBind1(6, 4, "Warning"));
             i0.ɵɵadvance(2);
-            i0.ɵɵproperty("innerHTML", ctx.message_en, i0.ɵɵsanitizeHtml);
+            i0.ɵɵproperty("innerHTML", ctx.sanitizeHtml(ctx.message_en), i0.ɵɵsanitizeHtml);
             i0.ɵɵadvance();
             i0.ɵɵconditional(ctx.message_cy ? 8 : -1);
             i0.ɵɵadvance(2);
@@ -6543,8 +6548,8 @@ class ServiceMessageComponent {
 }
 (() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassMetadata(ServiceMessageComponent, [{
         type: Component,
-        args: [{ selector: 'xuilib-service-message', standalone: false, template: "<div class=\"hmcts-banner hmcts-banner--warning\">\n\n  <svg class=\"hmcts-banner__icon\" fill=\"currentColor\" role=\"img\" aria-label=\"hmcts-warning-icon\" focusable=\"false\"\n    xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 25 25\" height=\"25\" width=\"25\">\n    <path d=\"M13.6,15.4h-2.3v-4.5h2.3V15.4z M13.6,19.8h-2.3v-2.2h2.3V19.8z M0,23.2h25L12.5,2L0,23.2z\" />\n  </svg>\n\n  <div class=\"hmcts-banner__message\">\n    <span class=\"hmcts-banner__assistive\">{{'Warning' | rpxTranslate}}</span>\n    <h2 class=\"govuk-heading-s\" [innerHTML]=\"message_en\"></h2>\n    @if (message_cy) {\n      <h2 class=\"govuk-heading-s\" [innerHTML]=\"message_cy\"></h2>\n    }\n    <a [routerLink]=\"\" tabindex=\"0\" class=\"govuk-link--no-visited-state\" (click)=\"onHideMessageEvent(key)\" (keyup.enter)=\"onHideMessageEvent(key)\">{{'Hide message' | rpxTranslate}}</a>\n  </div>\n\n</div>", styles: [".govuk-link--no-visited-state{cursor:pointer}\n"] }]
-    }], () => [], { message_en: [{
+        args: [{ selector: 'xuilib-service-message', standalone: false, template: "<div class=\"hmcts-banner hmcts-banner--warning\">\n\n  <svg class=\"hmcts-banner__icon\" fill=\"currentColor\" role=\"img\" aria-label=\"hmcts-warning-icon\" focusable=\"false\"\n    xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 25 25\" height=\"25\" width=\"25\">\n    <path d=\"M13.6,15.4h-2.3v-4.5h2.3V15.4z M13.6,19.8h-2.3v-2.2h2.3V19.8z M0,23.2h25L12.5,2L0,23.2z\" />\n  </svg>\n\n  <div class=\"hmcts-banner__message\">\n    <span class=\"hmcts-banner__assistive\">{{'Warning' | rpxTranslate}}</span>\n    <h2 class=\"govuk-heading-s\" [innerHTML]=\"sanitizeHtml(message_en)\"></h2>\n    @if (message_cy) {\n      <h2 class=\"govuk-heading-s\" [innerHTML]=\"sanitizeHtml(message_cy)\"></h2>\n    }\n    <a [routerLink]=\"\" tabindex=\"0\" class=\"govuk-link--no-visited-state\" (click)=\"onHideMessageEvent(key)\" (keyup.enter)=\"onHideMessageEvent(key)\">{{'Hide message' | rpxTranslate}}</a>\n  </div>\n\n</div>", styles: [".govuk-link--no-visited-state{cursor:pointer}\n"] }]
+    }], () => [{ type: i2$1.DomSanitizer }], { message_en: [{
             type: Input
         }], message_cy: [{
             type: Input
@@ -6553,7 +6558,7 @@ class ServiceMessageComponent {
         }], hideMessage: [{
             type: Output
         }] }); })();
-(() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassDebugInfo(ServiceMessageComponent, { className: "ServiceMessageComponent", filePath: "lib/components/service-message/service-message.component.ts", lineNumber: 10 }); })();
+(() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassDebugInfo(ServiceMessageComponent, { className: "ServiceMessageComponent", filePath: "lib/components/service-message/service-message.component.ts", lineNumber: 11 }); })();
 
 function ServiceMessagesComponent_Conditional_0_For_2_Template(rf, ctx) { if (rf & 1) {
     i0.ɵɵelementStart(0, "div", 1);
@@ -7560,7 +7565,7 @@ function TermsAndConditionsComponent_Case_0_Template(rf, ctx) { if (rf & 1) {
 } if (rf & 2) {
     const ctx_r0 = i0.ɵɵnextContext();
     i0.ɵɵadvance();
-    i0.ɵɵproperty("innerHTML", i0.ɵɵpipeBind1(2, 1, ctx_r0.document.content), i0.ɵɵsanitizeHtml);
+    i0.ɵɵproperty("innerHTML", ctx_r0.sanitizeHtml(i0.ɵɵpipeBind1(2, 1, ctx_r0.document.content)), i0.ɵɵsanitizeHtml);
 } }
 function TermsAndConditionsComponent_Case_1_Template(rf, ctx) { if (rf & 1) {
     i0.ɵɵelementStart(0, "xuilib-tc-display-plain");
@@ -7582,8 +7587,14 @@ function TermsAndConditionsComponent_Case_2_Template(rf, ctx) { if (rf & 1) {
     i0.ɵɵtextInterpolate1(" ", i0.ɵɵpipeBind1(2, 1, "An error occured. Please try again."), " ");
 } }
 class TermsAndConditionsComponent {
-    constructor() { }
-    static { this.ɵfac = function TermsAndConditionsComponent_Factory(__ngFactoryType__) { return new (__ngFactoryType__ || TermsAndConditionsComponent)(); }; }
+    constructor(sanitizer) {
+        this.sanitizer = sanitizer;
+    }
+    // ensure no dangerous HTML is rendered in the terms and conditions document
+    sanitizeHtml(content) {
+        return this.sanitizer.sanitize(SecurityContext.HTML, content ?? '') ?? '';
+    }
+    static { this.ɵfac = function TermsAndConditionsComponent_Factory(__ngFactoryType__) { return new (__ngFactoryType__ || TermsAndConditionsComponent)(i0.ɵɵdirectiveInject(i2$1.DomSanitizer)); }; }
     static { this.ɵcmp = /*@__PURE__*/ i0.ɵɵdefineComponent({ type: TermsAndConditionsComponent, selectors: [["xuilib-terms-and-conditions"]], inputs: { document: "document" }, standalone: false, decls: 3, vars: 1, consts: [[3, "innerHTML"]], template: function TermsAndConditionsComponent_Template(rf, ctx) { if (rf & 1) {
             i0.ɵɵconditionalCreate(0, TermsAndConditionsComponent_Case_0_Template, 3, 3, "xuilib-tc-display-html")(1, TermsAndConditionsComponent_Case_1_Template, 3, 3, "xuilib-tc-display-plain")(2, TermsAndConditionsComponent_Case_2_Template, 3, 3, "div");
         } if (rf & 2) {
@@ -7593,11 +7604,11 @@ class TermsAndConditionsComponent {
 }
 (() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassMetadata(TermsAndConditionsComponent, [{
         type: Component,
-        args: [{ selector: 'xuilib-terms-and-conditions', standalone: false, template: "\n@switch (document.mimeType) {\n  @case ('text/html') {\n    <xuilib-tc-display-html>\n      <div [innerHTML]=\"document.content | rpxTranslate\"></div>\n    </xuilib-tc-display-html>\n  }\n  @case ('text/plain') {\n    <xuilib-tc-display-plain>\n      {{ document.content | rpxTranslate}}\n    </xuilib-tc-display-plain>\n  }\n  @default {\n    <div>\n      {{'An error occured. Please try again.' | rpxTranslate}}\n    </div>\n  }\n}\n", styles: [":host{display:block;width:100%}\n"] }]
-    }], () => [], { document: [{
+        args: [{ selector: 'xuilib-terms-and-conditions', standalone: false, template: "\n@switch (document.mimeType) {\n  @case ('text/html') {\n    <xuilib-tc-display-html>\n      <div [innerHTML]=\"sanitizeHtml(document.content | rpxTranslate)\"></div>\n    </xuilib-tc-display-html>\n  }\n  @case ('text/plain') {\n    <xuilib-tc-display-plain>\n      {{ document.content | rpxTranslate}}\n    </xuilib-tc-display-plain>\n  }\n  @default {\n    <div>\n      {{'An error occured. Please try again.' | rpxTranslate}}\n    </div>\n  }\n}\n", styles: [":host{display:block;width:100%}\n"] }]
+    }], () => [{ type: i2$1.DomSanitizer }], { document: [{
             type: Input
         }] }); })();
-(() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassDebugInfo(TermsAndConditionsComponent, { className: "TermsAndConditionsComponent", filePath: "lib/components/terms-and-conditions/terms-and-conditions.component.ts", lineNumber: 10 }); })();
+(() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassDebugInfo(TermsAndConditionsComponent, { className: "TermsAndConditionsComponent", filePath: "lib/components/terms-and-conditions/terms-and-conditions.component.ts", lineNumber: 11 }); })();
 
 function UserDetailsComponent_Conditional_0_Template(rf, ctx) { if (rf & 1) {
     i0.ɵɵelementStart(0, "div", 0)(1, "span", 4);