@json-editor/json-editor 2.15.2 → 2.16.0

package/dist/jsoneditor.js.LICENSE.txt

@@ -3,7 +3,7 @@
  * * @name JSON Editor
  * * @description JSON Schema Based Editor
  * * This library is the continuation of jdorn's great work (see also https://github.com/jdorn/json-editor/issues/800)
- * * @version "2.15.2"
+ * * @version "2.16.0"
  * * @author Jeremy Dorn
  * * @see https://github.com/jdorn/json-editor/
  * * @see https://github.com/json-editor/json-editor

package/dist/nonmin/jsoneditor.js

@@ -3,7 +3,7 @@
  * * @name JSON Editor
  * * @description JSON Schema Based Editor
  * * This library is the continuation of jdorn's great work (see also https://github.com/jdorn/json-editor/issues/800)
- * * @version "2.15.2"
+ * * @version "2.16.0"
  * * @author Jeremy Dorn
  * * @see https://github.com/jdorn/json-editor/
  * * @see https://github.com/json-editor/json-editor
@@ -844,7 +844,7 @@ var AbstractEditor = /*#__PURE__*/function () {
       }
       var editor = this.jsoneditor.getEditor(path);
       var value = editor ? editor.getValue() : undefined;
-      if (!editor || !editor.dependenciesFulfilled || !value) {
+      if (!editor || !editor.dependenciesFulfilled || value === undefined || value === null) {
         this.dependenciesFulfilled = false;
       } else if (Array.isArray(choices)) {
         this.dependenciesFulfilled = choices.some(function (choice) {
@@ -1174,6 +1174,19 @@ var AbstractEditor = /*#__PURE__*/function () {
         }
       }
     }
+  }, {
+    key: "purify",
+    value: function purify(val) {
+      if (typeof val !== 'string') {
+        return val;
+      }
+      if (window.DOMPurify) {
+        val = window.DOMPurify.sanitize(val);
+      } else {
+        val = this.cleanText(val);
+      }
+      return val;
+    }
   }, {
     key: "getHeaderText",
     value: function getHeaderText(titleOnly) {
@@ -5563,6 +5576,7 @@ var HiddenEditor = /*#__PURE__*/function (_AbstractEditor) {
   }, {
     key: "sanitize",
     value: function sanitize(value) {
+      value = this.purify(value);
       return value;
     }
 
@@ -7120,6 +7134,7 @@ var MultiSelectEditor = /*#__PURE__*/function (_AbstractEditor) {
   }, {
     key: "sanitize",
     value: function sanitize(value) {
+      value = this.purify(value);
       if (this.schema.items.type === 'boolean') return !!value;else if (this.schema.items.type === 'number') return 1 * value || 0;else if (this.schema.items.type === 'integer') return Math.floor(value * 1 || 0);
       return "".concat(value);
     }
@@ -11252,6 +11267,7 @@ var StringEditor = /*#__PURE__*/function (_AbstractEditor) {
   }, {
     key: "setValue",
     value: function setValue(value, initial, fromTemplate) {
+      value = this.purify(value);
       value = this.applyConstFilter(value);
       if (this.template && !fromTemplate) return;
       if (!this.shouldBeUnset() && (value === null || typeof value === 'undefined')) value = '';else if (_typeof(value) === 'object') value = JSON.stringify(value);else if (!this.shouldBeUnset() && typeof value !== 'string') value = "".concat(value);
@@ -11580,6 +11596,7 @@ var StringEditor = /*#__PURE__*/function (_AbstractEditor) {
   }, {
     key: "sanitize",
     value: function sanitize(value) {
+      value = this.purify(value);
       return value;
     }
 
@@ -12856,6 +12873,7 @@ var UuidEditor = /*#__PURE__*/function (_StringEditor) {
   }, {
     key: "sanitize",
     value: function sanitize(value) {
+      value = this.purify(value);
       if (!this.testUuid(value)) value = this.uuid;
       return value;
     }