@innovastudio/contentbuilder 1.4.35 → 1.4.37

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@innovastudio/contentbuilder",
   "type": "module",
-  "version": "1.4.35",
+  "version": "1.4.37",
   "description": "",
   "main": "public/contentbuilder/contentbuilder.esm.js",
   "files": [

package/public/contentbuilder/contentbuilder.esm.js

@@ -4974,6 +4974,7 @@ class Util {
         // Render custom code block
         html = decodeURIComponent(block.getAttribute('data-html'));
         html = html.replace(/{id}/g, this.makeId());
+        html = html.replace(/<script>/g, `${this.builder.nonce ? `<script nonce="${this.builder.nonce}">` : '<script>'}`);
 
         for (var i = 1; i <= 20; i++) {
           html = html.replace('[%HTML' + i + '%]', block.getAttribute('data-html-' + i) === undefined ? '' : decodeURIComponent(block.getAttribute('data-html-' + i))); //render editable area
@@ -54193,6 +54194,7 @@ class Module {
         const iframe = moduleModal.querySelector('iframe');
         let result = await fetch(this.builder.opts.modulePath + modulename + '.html');
         result = await result.text();
+        result = result.replace(/<script>/g, `${this.builder.nonce ? `<script nonce="${this.builder.nonce}">` : '<script>'}`);
         let doc = iframe.contentWindow.document;
         doc.open();
         doc.write(result);
@@ -54214,6 +54216,7 @@ class Module {
 
         let html = this.builderStuff.querySelector('#hidContentModuleCode').value;
         html = html.replace(/{id}/g, this.util.makeId());
+        html = html.replace(/<script>/g, `${this.builder.nonce ? `<script nonce="${this.builder.nonce}">` : '<script>'}`);
         /* OLD
         for(var i=1;i<=20;i++){ // OLD
             html = html.replace('[%HTML'+i+'%]', (module.getAttribute('data-html-'+i) === undefined ? '' : decodeURIComponent(module.getAttribute('data-html-'+i))));//render editable area
@@ -54390,6 +54393,7 @@ class Code {
         });
         let html = decodeURIComponent(codeblock.getAttribute('data-html')); //html = html.replace(/{id}/g, this.util.makeId());
 
+        html = html.replace(/<script>/g, `${this.builder.nonce ? `<script nonce="${this.builder.nonce}">` : '<script>'}`);
         tmpbuilder.parentNode.removeChild(tmpbuilder); // Use existing modal
 
         let viewhtml;
@@ -77522,7 +77526,10 @@ class LivePreview {
                   if (!container) container = iframeDocument.querySelector('.is-container');
 
                   if (container) {
-                    container.innerHTML = html;
+                    // container.innerHTML = html;
+                    let range = this.doc.createRange();
+                    container.innerHTML = '';
+                    container.appendChild(range.createContextualFragment(html));
                   } else {
                     iframe.src = this.builder.previewURL + '?' + Math.floor(Date.now() / 1000);
                   }
@@ -77563,8 +77570,11 @@ class LivePreview {
               } else {
                 // sync. html
                 let html = localStorage.getItem('preview-html');
-                let wrapper = iframeDocument.querySelector('.is-wrapper');
-                wrapper.innerHTML = html; // sync. styles
+                let wrapper = iframeDocument.querySelector('.is-wrapper'); // wrapper.innerHTML = html;
+
+                let range = this.doc.createRange();
+                wrapper.innerHTML = '';
+                wrapper.appendChild(range.createContextualFragment(html)); // sync. styles
                 // let mainCss = localStorage.getItem('preview-maincss'); 
                 // let sectionCss = localStorage.getItem('preview-sectioncss');
 
@@ -79343,6 +79353,7 @@ class ContentBuilder {
                 // Render custom code block
                 html = decodeURIComponent(block.getAttribute('data-html'));
                 html = html.replace(/{id}/g, util.makeId());
+                html = html.replace(/<script>/g, `${this.nonce ? `<script nonce="${this.nonce}">` : '<script>'}`);
 
                 for (var i = 1; i <= 20; i++) {
                   html = html.replace('[%HTML' + i + '%]', block.getAttribute('data-html-' + i) === undefined ? '' : decodeURIComponent(block.getAttribute('data-html-' + i))); //render editable area
@@ -81971,6 +81982,7 @@ class ContentBuilder {
                 // Render custom code block
                 html = decodeURIComponent(block.getAttribute('data-html'));
                 html = html.replace(/{id}/g, this.util.makeId());
+                html = html.replace(/<script>/g, `${this.nonce ? `<script nonce="${this.nonce}">` : '<script>'}`);
 
                 for (var i = 1; i <= 20; i++) {
                   html = html.replace('[%HTML' + i + '%]', block.getAttribute('data-html-' + i) === undefined ? '' : decodeURIComponent(block.getAttribute('data-html-' + i))); //render editable area