@inzombieland/core 1.18.48 → 1.18.50

package/define-vue-plugins.d.ts

@@ -1,4 +1,2 @@
-import type { createApp } from "vue";
-type App = ReturnType<typeof createApp>;
+import type { App } from "vue";
 export declare function defineVuePlugins(app: App): void;
-export {};

package/define-vue-plugins.mjs

@@ -1,5 +1,7 @@
-import { defineOtpInputPlugin, defineVarletPlugin } from "./plugins/index.mjs";
+import { defineOtpInputPlugin, defineSanitizeHtmlPlugin, defineSanitizeUrlPlugin, defineVarletPlugin } from "./plugins/index.mjs";
 export function defineVuePlugins(app) {
   defineOtpInputPlugin(app);
+  defineSanitizeHtmlPlugin(app);
+  defineSanitizeUrlPlugin(app);
   defineVarletPlugin(app);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inzombieland/core",
-  "version": "1.18.48",
+  "version": "1.18.50",
   "type": "module",
   "license": "ISC",
   "main": "./index.mjs",
@@ -19,6 +19,7 @@
     "ofetch": "^1.4.1",
     "ohash": "^2.0.11",
     "rxjs": "^7.8.2",
+    "ultrahtml": "^1.6.0",
     "vant": "^4.9.19",
     "vue3-otp-input": "^0.5.21",
     "zod": "^3.24.2"

package/plugins/index.d.ts

@@ -1,2 +1,4 @@
 export * from "./otp-input";
+export * from "./sanitize-html";
+export * from "./sanitize-url";
 export * from "./varlet-ui";

package/plugins/index.mjs

@@ -1,2 +1,4 @@
 export * from "./otp-input.mjs";
+export * from "./sanitize-html.mjs";
+export * from "./sanitize-url.mjs";
 export * from "./varlet-ui.mjs";

package/plugins/sanitize-html.d.ts

@@ -0,0 +1,2 @@
+import type { App } from "vue";
+export declare function defineSanitizeHtmlPlugin(app: App): void;

package/plugins/sanitize-html.mjs

@@ -0,0 +1,89 @@
+import { transform } from "ultrahtml";
+import sanitize from "ultrahtml/transformers/sanitize";
+export function defineSanitizeHtmlPlugin(app) {
+  app.directive("sanitize-html", async (el, binding) => {
+    if (binding.value !== binding.oldValue) {
+      el.innerHTML = await transform(binding.value, [
+        sanitize({
+          allowElements: [
+            "address",
+            "article",
+            "aside",
+            "footer",
+            "header",
+            "h1",
+            "h2",
+            "h3",
+            "h4",
+            "h5",
+            "h6",
+            "hgroup",
+            "main",
+            "nav",
+            "section",
+            "blockquote",
+            "dd",
+            "div",
+            "dl",
+            "dt",
+            "figcaption",
+            "figure",
+            "hr",
+            "li",
+            "main",
+            "ol",
+            "p",
+            "pre",
+            "ul",
+            "a",
+            "abbr",
+            "b",
+            "bdi",
+            "bdo",
+            "br",
+            "cite",
+            "code",
+            "data",
+            "dfn",
+            "em",
+            "i",
+            "kbd",
+            "mark",
+            "q",
+            "rb",
+            "rp",
+            "rt",
+            "rtc",
+            "ruby",
+            "s",
+            "samp",
+            "small",
+            "span",
+            "strong",
+            "sub",
+            "sup",
+            "time",
+            "u",
+            "var",
+            "wbr",
+            "caption",
+            "col",
+            "colgroup",
+            "table",
+            "tbody",
+            "td",
+            "tfoot",
+            "th",
+            "thead",
+            "tr",
+            "img"
+          ],
+          allowAttributes: {
+            a: ["href", "name", "target"],
+            img: ["src", "srcset", "alt", "title", "width", "height", "loading"]
+          }
+        })
+      ]);
+    }
+  });
+}

package/plugins/sanitize-url.d.ts

@@ -0,0 +1,2 @@
+import type { App } from "vue";
+export declare function defineSanitizeUrlPlugin(app: App): void;

package/plugins/sanitize-url.mjs

@@ -0,0 +1,8 @@
+import { sanitizeUrl } from "../thirdparty/sanitize-url/index.mjs";
+export function defineSanitizeUrlPlugin(app) {
+  app.directive("sanitize-url", (el, binding) => {
+    if (binding.value !== binding.oldValue) {
+      el.href = sanitizeUrl(binding.value);
+    }
+  });
+}

package/thirdparty/sanitize-url/index.d.mts

@@ -0,0 +1,2 @@
+export { sanitizeUrl_1 as sanitizeUrl };
+declare var sanitizeUrl_1: undefined;

package/thirdparty/sanitize-url/index.d.ts

@@ -0,0 +1 @@
+export { sanitizeUrl } from '@braintree/sanitize-url';

package/thirdparty/sanitize-url/index.mjs

@@ -0,0 +1,98 @@
+var dist = {};
+
+var constants = {};
+
+Object.defineProperty(constants, "__esModule", { value: true });
+constants.BLANK_URL = constants.relativeFirstCharacters = constants.whitespaceEscapeCharsRegex = constants.urlSchemeRegex = constants.ctrlCharactersRegex = constants.htmlCtrlEntityRegex = constants.htmlEntitiesRegex = constants.invalidProtocolRegex = void 0;
+constants.invalidProtocolRegex = /^([^\w]*)(javascript|data|vbscript)/im;
+constants.htmlEntitiesRegex = /&#(\w+)(^\w|;)?/g;
+constants.htmlCtrlEntityRegex = /&(newline|tab);/gi;
+constants.ctrlCharactersRegex = /[\u0000-\u001F\u007F-\u009F\u2000-\u200D\uFEFF]/gim;
+constants.urlSchemeRegex = /^.+(:|:)/gim;
+constants.whitespaceEscapeCharsRegex = /(\\|%5[cC])((%(6[eE]|72|74))|[nrt])/g;
+constants.relativeFirstCharacters = [".", "/"];
+constants.BLANK_URL = "about:blank";
+
+Object.defineProperty(dist, "__esModule", { value: true });
+var sanitizeUrl_1 = dist.sanitizeUrl = void 0;
+var constants_1 = constants;
+function isRelativeUrlWithoutProtocol(url) {
+    return constants_1.relativeFirstCharacters.indexOf(url[0]) > -1;
+}
+function decodeHtmlCharacters(str) {
+    var removedNullByte = str.replace(constants_1.ctrlCharactersRegex, "");
+    return removedNullByte.replace(constants_1.htmlEntitiesRegex, function (match, dec) {
+        return String.fromCharCode(dec);
+    });
+}
+function isValidUrl(url) {
+    return URL.canParse(url);
+}
+function decodeURI(uri) {
+    try {
+        return decodeURIComponent(uri);
+    }
+    catch (e) {
+        // Ignoring error
+        // It is possible that the URI contains a `%` not associated
+        // with URI/URL-encoding.
+        return uri;
+    }
+}
+function sanitizeUrl(url) {
+    if (!url) {
+        return constants_1.BLANK_URL;
+    }
+    var charsToDecode;
+    var decodedUrl = decodeURI(url.trim());
+    do {
+        decodedUrl = decodeHtmlCharacters(decodedUrl)
+            .replace(constants_1.htmlCtrlEntityRegex, "")
+            .replace(constants_1.ctrlCharactersRegex, "")
+            .replace(constants_1.whitespaceEscapeCharsRegex, "")
+            .trim();
+        decodedUrl = decodeURI(decodedUrl);
+        charsToDecode =
+            decodedUrl.match(constants_1.ctrlCharactersRegex) ||
+                decodedUrl.match(constants_1.htmlEntitiesRegex) ||
+                decodedUrl.match(constants_1.htmlCtrlEntityRegex) ||
+                decodedUrl.match(constants_1.whitespaceEscapeCharsRegex);
+    } while (charsToDecode && charsToDecode.length > 0);
+    var sanitizedUrl = decodedUrl;
+    if (!sanitizedUrl) {
+        return constants_1.BLANK_URL;
+    }
+    if (isRelativeUrlWithoutProtocol(sanitizedUrl)) {
+        return sanitizedUrl;
+    }
+    // Remove any leading whitespace before checking the URL scheme
+    var trimmedUrl = sanitizedUrl.trimStart();
+    var urlSchemeParseResults = trimmedUrl.match(constants_1.urlSchemeRegex);
+    if (!urlSchemeParseResults) {
+        return sanitizedUrl;
+    }
+    var urlScheme = urlSchemeParseResults[0].toLowerCase().trim();
+    if (constants_1.invalidProtocolRegex.test(urlScheme)) {
+        return constants_1.BLANK_URL;
+    }
+    var backSanitized = trimmedUrl.replace(/\\/g, "/");
+    // Handle special cases for mailto: and custom deep-link protocols
+    if (urlScheme === "mailto:" || urlScheme.includes("://")) {
+        return backSanitized;
+    }
+    // For http and https URLs, perform additional validation
+    if (urlScheme === "http:" || urlScheme === "https:") {
+        if (!isValidUrl(backSanitized)) {
+            return constants_1.BLANK_URL;
+        }
+        var url_1 = new URL(backSanitized);
+        url_1.protocol = url_1.protocol.toLowerCase();
+        url_1.hostname = url_1.hostname.toLowerCase();
+        return url_1.toString();
+    }
+    return backSanitized;
+}
+sanitizeUrl_1 = dist.sanitizeUrl = sanitizeUrl;
+
+export { sanitizeUrl_1 as sanitizeUrl };
+//# sourceMappingURL=index.mjs.map

package/thirdparty/sanitize-url/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../../node_modules/@braintree/sanitize-url/dist/constants.js","../../../../node_modules/@braintree/sanitize-url/dist/index.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.BLANK_URL = exports.relativeFirstCharacters = exports.whitespaceEscapeCharsRegex = exports.urlSchemeRegex = exports.ctrlCharactersRegex = exports.htmlCtrlEntityRegex = exports.htmlEntitiesRegex = exports.invalidProtocolRegex = void 0;\nexports.invalidProtocolRegex = /^([^\\w]*)(javascript|data|vbscript)/im;\nexports.htmlEntitiesRegex = /&#(\\w+)(^\\w|;)?/g;\nexports.htmlCtrlEntityRegex = /&(newline|tab);/gi;\nexports.ctrlCharactersRegex = /[\\u0000-\\u001F\\u007F-\\u009F\\u2000-\\u200D\\uFEFF]/gim;\nexports.urlSchemeRegex = /^.+(:|:)/gim;\nexports.whitespaceEscapeCharsRegex = /(\\\\|%5[cC])((%(6[eE]|72|74))|[nrt])/g;\nexports.relativeFirstCharacters = [\".\", \"/\"];\nexports.BLANK_URL = \"about:blank\";\n","\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.sanitizeUrl = void 0;\nvar constants_1 = require(\"./constants\");\nfunction isRelativeUrlWithoutProtocol(url) {\n    return constants_1.relativeFirstCharacters.indexOf(url[0]) > -1;\n}\nfunction decodeHtmlCharacters(str) {\n    var removedNullByte = str.replace(constants_1.ctrlCharactersRegex, \"\");\n    return removedNullByte.replace(constants_1.htmlEntitiesRegex, function (match, dec) {\n        return String.fromCharCode(dec);\n    });\n}\nfunction isValidUrl(url) {\n    return URL.canParse(url);\n}\nfunction decodeURI(uri) {\n    try {\n        return decodeURIComponent(uri);\n    }\n    catch (e) {\n        // Ignoring error\n        // It is possible that the URI contains a `%` not associated\n        // with URI/URL-encoding.\n        return uri;\n    }\n}\nfunction sanitizeUrl(url) {\n    if (!url) {\n        return constants_1.BLANK_URL;\n    }\n    var charsToDecode;\n    var decodedUrl = decodeURI(url.trim());\n    do {\n        decodedUrl = decodeHtmlCharacters(decodedUrl)\n            .replace(constants_1.htmlCtrlEntityRegex, \"\")\n            .replace(constants_1.ctrlCharactersRegex, \"\")\n            .replace(constants_1.whitespaceEscapeCharsRegex, \"\")\n            .trim();\n        decodedUrl = decodeURI(decodedUrl);\n        charsToDecode =\n            decodedUrl.match(constants_1.ctrlCharactersRegex) ||\n                decodedUrl.match(constants_1.htmlEntitiesRegex) ||\n                decodedUrl.match(constants_1.htmlCtrlEntityRegex) ||\n                decodedUrl.match(constants_1.whitespaceEscapeCharsRegex);\n    } while (charsToDecode && charsToDecode.length > 0);\n    var sanitizedUrl = decodedUrl;\n    if (!sanitizedUrl) {\n        return constants_1.BLANK_URL;\n    }\n    if (isRelativeUrlWithoutProtocol(sanitizedUrl)) {\n        return sanitizedUrl;\n    }\n    // Remove any leading whitespace before checking the URL scheme\n    var trimmedUrl = sanitizedUrl.trimStart();\n    var urlSchemeParseResults = trimmedUrl.match(constants_1.urlSchemeRegex);\n    if (!urlSchemeParseResults) {\n        return sanitizedUrl;\n    }\n    var urlScheme = urlSchemeParseResults[0].toLowerCase().trim();\n    if (constants_1.invalidProtocolRegex.test(urlScheme)) {\n        return constants_1.BLANK_URL;\n    }\n    var backSanitized = trimmedUrl.replace(/\\\\/g, \"/\");\n    // Handle special cases for mailto: and custom deep-link protocols\n    if (urlScheme === \"mailto:\" || urlScheme.includes(\"://\")) {\n        return backSanitized;\n    }\n    // For http and https URLs, perform additional validation\n    if (urlScheme === \"http:\" || urlScheme === \"https:\") {\n        if (!isValidUrl(backSanitized)) {\n            return constants_1.BLANK_URL;\n        }\n        var url_1 = new URL(backSanitized);\n        url_1.protocol = url_1.protocol.toLowerCase();\n        url_1.hostname = url_1.hostname.toLowerCase();\n        return url_1.toString();\n    }\n    return backSanitized;\n}\nexports.sanitizeUrl = sanitizeUrl;\n"],"names":["require$$0"],"mappings":";;;;AACA,MAAM,CAAC,cAAc,CAAC,SAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC7D,SAAA,CAAA,SAAiB,GAAkC,SAAA,CAAA,uBAAA,GAAqC,SAAA,CAAA,0BAAA,2BAAyB,GAAG,SAAA,CAAA,mBAA2B,GAAG,SAAA,CAAA,mBAA2B,GAA4B,SAAA,CAAA,iBAAA,GAA+B,SAAA,CAAA,oBAAA,GAAG;AAC3O,SAAA,CAAA,oBAA4B,GAAG;AAC/B,SAAA,CAAA,iBAAyB,GAAG;AAC5B,SAAA,CAAA,mBAA2B,GAAG;AAC9B,SAAA,CAAA,mBAA2B,GAAG;AAC9B,SAAA,CAAA,cAAsB,GAAG;AACzB,SAAA,CAAA,0BAAkC,GAAG;AACrC,SAAA,CAAA,uBAA+B,GAAG,CAAC,GAAG,EAAE,GAAG;AAC3C,SAAA,CAAA,SAAiB,GAAG,aAAa;;ACTjC,MAAM,CAAC,cAAc,CAAC,IAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC1C,IAAA,aAAA,GAAA,IAAA,CAAA,WAAA,GAAG;AACtB,IAAI,WAAW,GAAGA,SAAsB;AACxC,SAAS,4BAA4B,CAAC,GAAG,EAAE;AAC3C,IAAI,OAAO,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;AACnE;AACA,SAAS,oBAAoB,CAAC,GAAG,EAAE;AACnC,IAAI,IAAI,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAE,CAAC;AAC1E,IAAI,OAAO,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,UAAU,KAAK,EAAE,GAAG,EAAE;AACxF,QAAQ,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC;AACvC,KAAK,CAAC;AACN;AACA,SAAS,UAAU,CAAC,GAAG,EAAE;AACzB,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;AAC5B;AACA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,IAAI,IAAI;AACR,QAAQ,OAAO,kBAAkB,CAAC,GAAG,CAAC;AACtC;AACA,IAAI,OAAO,CAAC,EAAE;AACd;AACA;AACA;AACA,QAAQ,OAAO,GAAG;AAClB;AACA;AACA,SAAS,WAAW,CAAC,GAAG,EAAE;AAC1B,IAAI,IAAI,CAAC,GAAG,EAAE;AACd,QAAQ,OAAO,WAAW,CAAC,SAAS;AACpC;AACA,IAAI,IAAI,aAAa;AACrB,IAAI,IAAI,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;AAC1C,IAAI,GAAG;AACP,QAAQ,UAAU,GAAG,oBAAoB,CAAC,UAAU;AACpD,aAAa,OAAO,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAE;AACxD,aAAa,OAAO,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAE;AACxD,aAAa,OAAO,CAAC,WAAW,CAAC,0BAA0B,EAAE,EAAE;AAC/D,aAAa,IAAI,EAAE;AACnB,QAAQ,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;AAC1C,QAAQ,aAAa;AACrB,YAAY,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,mBAAmB,CAAC;AAC7D,gBAAgB,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,CAAC;AAC/D,gBAAgB,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,mBAAmB,CAAC;AACjE,gBAAgB,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,0BAA0B,CAAC;AACxE,KAAK,QAAQ,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;AACtD,IAAI,IAAI,YAAY,GAAG,UAAU;AACjC,IAAI,IAAI,CAAC,YAAY,EAAE;AACvB,QAAQ,OAAO,WAAW,CAAC,SAAS;AACpC;AACA,IAAI,IAAI,4BAA4B,CAAC,YAAY,CAAC,EAAE;AACpD,QAAQ,OAAO,YAAY;AAC3B;AACA;AACA,IAAI,IAAI,UAAU,GAAG,YAAY,CAAC,SAAS,EAAE;AAC7C,IAAI,IAAI,qBAAqB,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC;AAC5E,IAAI,IAAI,CAAC,qBAAqB,EAAE;AAChC,QAAQ,OAAO,YAAY;AAC3B;AACA,IAAI,IAAI,SAAS,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;AACjE,IAAI,IAAI,WAAW,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;AAC1D,QAAQ,OAAO,WAAW,CAAC,SAAS;AACpC;AACA,IAAI,IAAI,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AACtD;AACA,IAAI,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;AAC9D,QAAQ,OAAO,aAAa;AAC5B;AACA;AACA,IAAI,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,QAAQ,EAAE;AACzD,QAAQ,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE;AACxC,YAAY,OAAO,WAAW,CAAC,SAAS;AACxC;AACA,QAAQ,IAAI,KAAK,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC;AAC1C,QAAQ,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE;AACrD,QAAQ,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE;AACrD,QAAQ,OAAO,KAAK,CAAC,QAAQ,EAAE;AAC/B;AACA,IAAI,OAAO,aAAa;AACxB;AACA,aAAA,GAAA,IAAA,CAAA,WAAmB,GAAG,WAAW;;;;","x_google_ignoreList":[0,1]}