@instructure/platform-sanitize 0.3.0 → 0.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +13 -11
- package/dist/sanitizeUrl.d.ts.map +1 -1
- package/package.json +1 -1
package/dist/index.js
CHANGED
|
@@ -171,23 +171,23 @@ const d = /* @__PURE__ */ new Set([
|
|
|
171
171
|
// throw in modern browsers.
|
|
172
172
|
RETURN_TRUSTED_TYPE: !0
|
|
173
173
|
};
|
|
174
|
-
let
|
|
174
|
+
let i = null;
|
|
175
175
|
function g() {
|
|
176
|
-
return
|
|
176
|
+
return i || (i = typeof a == "function" ? a(window) : a, i.addHook("afterSanitizeAttributes", (t) => {
|
|
177
177
|
if (!(t instanceof Element) || !t.hasAttribute("style")) return;
|
|
178
|
-
const e = t.style,
|
|
178
|
+
const e = t.style, o = [];
|
|
179
179
|
for (let r = 0; r < e.length; r++) {
|
|
180
180
|
const n = e.item(r);
|
|
181
|
-
d.has(n) ||
|
|
181
|
+
d.has(n) || o.push(n);
|
|
182
182
|
}
|
|
183
|
-
for (const r of
|
|
183
|
+
for (const r of o) e.removeProperty(r);
|
|
184
184
|
e.length === 0 && t.removeAttribute("style");
|
|
185
|
-
}),
|
|
185
|
+
}), i.addHook("uponSanitizeAttribute", (t, e) => {
|
|
186
186
|
c.has(e.attrName) && l.test(e.attrValue) && (e.keepAttr = !1);
|
|
187
|
-
}),
|
|
187
|
+
}), i.addHook("afterSanitizeAttributes", (t) => {
|
|
188
188
|
if (!(t instanceof Element) || !t.hasAttribute("srcset")) return;
|
|
189
189
|
(t.getAttribute("srcset") ?? "").split(",").map((r) => r.trim().split(/\s+/)[0]).some((r) => l.test(r)) && t.removeAttribute("srcset");
|
|
190
|
-
}),
|
|
190
|
+
}), i);
|
|
191
191
|
}
|
|
192
192
|
function p(t) {
|
|
193
193
|
if (typeof window > "u")
|
|
@@ -196,10 +196,12 @@ function p(t) {
|
|
|
196
196
|
}
|
|
197
197
|
const m = /* @__PURE__ */ new Set(["http:", "https:", "mailto:", "tel:"]), s = "http://platform-sanitize.invalid/", u = /^\s*\/\//;
|
|
198
198
|
function h(t) {
|
|
199
|
-
if (!t || !t.trim()
|
|
199
|
+
if (!t || !t.trim()) return "about:blank";
|
|
200
|
+
const e = t.replace(/\\/g, "/");
|
|
201
|
+
if (u.test(e)) return "about:blank";
|
|
200
202
|
try {
|
|
201
|
-
const
|
|
202
|
-
return m.has(
|
|
203
|
+
const o = new URL(e, s);
|
|
204
|
+
return m.has(o.protocol) ? o.href.startsWith(s) ? t : o.href : "about:blank";
|
|
203
205
|
} catch {
|
|
204
206
|
return "about:blank";
|
|
205
207
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sanitizeUrl.d.ts","sourceRoot":"","sources":["../src/sanitizeUrl.ts"],"names":[],"mappings":"AAwBA,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,
|
|
1
|
+
{"version":3,"file":"sanitizeUrl.d.ts","sourceRoot":"","sources":["../src/sanitizeUrl.ts"],"names":[],"mappings":"AAwBA,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAiBlE"}
|