@humanspeak/svelte-markdown 0.7.19 → 0.7.21

package/README.md

@@ -24,6 +24,7 @@ A powerful, customizable markdown renderer for Svelte with TypeScript support. B
 - ♿ WCAG 2.1 accessibility compliance
 - 🧪 Comprehensive test coverage (vitest and playwright)
 - 🔄 Svelte 5 runes compatibility
+- 🛡️ XSS protection and sanitization
 
 ## Installation
 
@@ -175,6 +176,7 @@ Seamlessly mix HTML and Markdown:
 - `codespan` - Inline code (`<code>`)
 - `code` - Block of code (`<pre><code>`)
 - `html` - HTML node
+- `rawtext` - All other text that is going to be included in an object above
 
 ### Optional List Renderers
 
@@ -242,6 +244,15 @@ The component emits a `parsed` event when tokens are calculated:
 | options   | `SvelteMarkdownOptions` | Marked parser configuration           |
 | isInline  | `boolean`               | Toggle inline parsing mode            |
 
+## Security
+
+The package includes several security features:
+
+- XSS protection through HTML sanitization
+- Secure HTML parsing with HTMLParser2
+- Safe handling of HTML entities
+- Protection against malicious markdown injection
+
 ## License
 
 MIT © [Humanspeak, Inc.](LICENSE)

package/dist/Parser.svelte

@@ -195,7 +195,7 @@
                 {@const { text: _text, raw: _raw, ...parserRest } = rest}
                 <Parser {tokens} {renderers} {...parserRest} />
             {:else}
-                {rest.raw}
+                <renderers.rawtext text={rest.raw} />
             {/if}
         </GeneralComponent>
     {/if}

package/dist/renderers/RawText.svelte

@@ -0,0 +1,8 @@
+<script lang="ts">
+    interface Props {
+        text?: string
+    }
+    const { text }: Props = $props()
+</script>
+
+{text}

package/dist/renderers/RawText.svelte.d.ts

@@ -0,0 +1,6 @@
+interface Props {
+    text?: string;
+}
+declare const RawText: import("svelte").Component<Props, {}, "">;
+type RawText = ReturnType<typeof RawText>;
+export default RawText;

package/dist/renderers/index.d.ts

@@ -12,6 +12,7 @@ export { default as Link } from './Link.svelte';
 export { default as List } from './List.svelte';
 export { default as ListItem } from './ListItem.svelte';
 export { default as Paragraph } from './Paragraph.svelte';
+export { default as RawText } from './RawText.svelte';
 export { default as Strong } from './Strong.svelte';
 export { default as Table } from './Table.svelte';
 export { default as TableBody } from './TableBody.svelte';

package/dist/renderers/index.js

@@ -12,6 +12,7 @@ export { default as Link } from './Link.svelte';
 export { default as List } from './List.svelte';
 export { default as ListItem } from './ListItem.svelte';
 export { default as Paragraph } from './Paragraph.svelte';
+export { default as RawText } from './RawText.svelte';
 export { default as Strong } from './Strong.svelte';
 export { default as Table } from './Table.svelte';
 export { default as TableBody } from './TableBody.svelte';

package/dist/utils/markdown-parser.d.ts

@@ -24,6 +24,7 @@ export type RendererComponent = Component<any, any, any> | undefined | null;
  */
 export type Renderers = {
     html: HtmlRenderers;
+    rawtext: RendererComponent;
     heading: RendererComponent;
     paragraph: RendererComponent;
     blockquote: RendererComponent;

package/dist/utils/markdown-parser.js

@@ -1,7 +1,7 @@
 export { default as Slugger } from 'github-slugger';
 export { Lexer } from 'marked';
 import {} from '../renderers/html/index.js';
-import { Blockquote, Br, Code, Codespan, Del, Em, Heading, Hr, Html, Image, Link, List, ListItem, Paragraph, Strong, Table, TableBody, TableCell, TableHead, TableRow, Text } from '../renderers/index.js';
+import { Blockquote, Br, Code, Codespan, Del, Em, Heading, Hr, Html, Image, Link, List, ListItem, Paragraph, RawText, Strong, Table, TableBody, TableCell, TableHead, TableRow, Text } from '../renderers/index.js';
 /**
  * Default renderer configuration mapping markdown elements to Svelte components.
  * Provides out-of-the-box rendering capabilities while allowing for customization.
@@ -36,7 +36,8 @@ export const defaultRenderers = {
     html: Html,
     blockquote: Blockquote,
     code: Code,
-    br: Br
+    br: Br,
+    rawtext: RawText
 };
 /**
  * Default configuration options for the markdown parser.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@humanspeak/svelte-markdown",
-    "version": "0.7.19",
+    "version": "0.7.21",
     "description": "A powerful, customizable markdown renderer for Svelte with TypeScript support",
     "keywords": [
         "svelte",
@@ -76,37 +76,37 @@
     },
     "devDependencies": {
         "@eslint/compat": "^1.2.7",
-        "@eslint/js": "^9.21.0",
-        "@playwright/test": "^1.50.1",
-        "@sveltejs/adapter-auto": "^4.0.0",
-        "@sveltejs/kit": "^2.17.3",
+        "@eslint/js": "^9.23.0",
+        "@playwright/test": "^1.51.1",
+        "@sveltejs/adapter-auto": "^5.0.0",
+        "@sveltejs/kit": "^2.20.2",
         "@sveltejs/package": "^2.3.10",
         "@sveltejs/vite-plugin-svelte": "^5.0.3",
         "@testing-library/jest-dom": "^6.6.3",
         "@testing-library/svelte": "^5.2.7",
         "@testing-library/user-event": "^14.6.1",
-        "@types/node": "^22.13.8",
-        "@typescript-eslint/eslint-plugin": "^8.25.0",
-        "@typescript-eslint/parser": "^8.25.0",
-        "@vitest/coverage-v8": "^3.0.7",
-        "eslint": "^9.21.0",
-        "eslint-config-prettier": "^10.0.2",
+        "@types/node": "^22.13.14",
+        "@typescript-eslint/eslint-plugin": "^8.28.0",
+        "@typescript-eslint/parser": "^8.28.0",
+        "@vitest/coverage-v8": "^3.0.9",
+        "eslint": "^9.23.0",
+        "eslint-config-prettier": "^10.1.1",
         "eslint-plugin-import": "^2.31.0",
-        "eslint-plugin-svelte": "^3.0.2",
+        "eslint-plugin-svelte": "^3.3.3",
         "eslint-plugin-unused-imports": "^4.1.4",
         "globals": "^16.0.0",
         "jsdom": "^26.0.0",
-        "prettier": "^3.5.2",
+        "prettier": "^3.5.3",
         "prettier-plugin-organize-imports": "^4.1.0",
         "prettier-plugin-svelte": "^3.3.3",
         "prettier-plugin-tailwindcss": "^0.6.11",
-        "publint": "^0.3.7",
-        "svelte": "^5.20.5",
-        "svelte-check": "^4.1.4",
-        "typescript": "^5.7.3",
-        "typescript-eslint": "^8.25.0",
-        "vite": "^6.2.0",
-        "vitest": "^3.0.7"
+        "publint": "^0.3.9",
+        "svelte": "^5.25.3",
+        "svelte-check": "^4.1.5",
+        "typescript": "^5.8.2",
+        "typescript-eslint": "^8.28.0",
+        "vite": "^6.2.3",
+        "vitest": "^3.0.9"
     },
     "peerDependencies": {
         "svelte": "^5.0.0"