@ktjs/mui 0.34.0 → 0.34.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +24 -9
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -1,20 +1,21 @@
1
1
  # KT.js
2
2
 
3
- [![npm version](https://img.shields.io/npm/v/kt.js.svg)](https://www.npmjs.com/package/kt.js)
4
- [![npm downloads](https://img.shields.io/npm/dm/kt.js.svg)](https://www.npmjs.com/package/kt.js)
5
- [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
6
-
7
3
  <p align="center">
8
4
  <a href="https://baendlorel.github.io/kt.js/">
9
- <img src="https://raw.githubusercontent.com/baendlorel/kt.js/refs/heads/main/assets/ktjs-0.0.1.svg" width="240px" alt="KT.js logo" />
5
+ <img src="https://raw.githubusercontent.com/baendlorel/kt.js/refs/heads/main/assets/ktjs-0.0.1.svg" width="200px" alt="KT.js logo" />
10
6
  </a>
11
7
  </p>
8
+ <p align="center">
9
+ <img src="https://img.shields.io/npm/v/kt.js.svg"/>
10
+ <img src="https://img.shields.io/npm/dm/kt.js.svg"/>
11
+ <img src="https://img.shields.io/badge/License-MIT-yellow.svg"/>
12
+ </p>
12
13
 
13
- <h3 align="center">Visit Document Page: <a href="https://baendlorel.github.io/kt.js/">https://baendlorel.github.io/kt.js/</a></h3>
14
+ <h4 align="center">Doc <a href="https://baendlorel.github.io/kt.js/">https://baendlorel.github.io/kt.js/</a></h4>
14
15
 
15
- > kt.js is still under development, so there might be some breaking changes.
16
+ > kt.js is still under development, there might be some breaking api changes.
16
17
 
17
- ## Recent Updates and Breaking Changes
18
+ ## Recent Updates
18
19
 
19
20
  1. `ref.value` remains the standard read API, and it can also replace the whole outer value with `ref.value = nextValue`.
20
21
  2. `ref.draft` is the deep-mutation entry for literally any objects. Just use `someRef.draft.a = someValue`, and kt.js will add it to microqueue and redraw it on the next tick. Works for `Map`, `Set`, `Array`, `Date` and your custom objects.
@@ -28,7 +29,7 @@
28
29
 
29
30
  ## Introduction
30
31
 
31
- kt.js is a simple framework with a tiny runtime that renders real DOM directly (no virtual DOM), uses explicit reactivity variables and gives you manual control over refs, bindings, and redraw timing.
32
+ kt.js is a web framework with a tiny runtime that renders real DOM directly (no virtual DOM), uses explicit reactivity variables and gives you manual control over refs, bindings, and redraw timing.
32
33
 
33
34
  KT.js focuses on one principle: keep direct control of the DOM and avoid unnecessary repainting.
34
35
 
@@ -40,3 +41,17 @@ cd my-app
40
41
  pnpm install
41
42
  pnpm dev
42
43
  ```
44
+
45
+ ## Security model
46
+
47
+ kt.js intentionally trusts application code and keeps DOM operations explicit.
48
+
49
+ - Text children are inserted as text nodes by default.
50
+ - `k-html` is a raw HTML escape hatch that writes to `innerHTML` without sanitization.
51
+ - Prefer `on:*` event bindings. Do not pass raw `onclick` / `onerror` style strings.
52
+ - Attributes such as `href`, `src`, `srcdoc`, `action`, and SVG URL attributes are forwarded as-is.
53
+ - If you bind untrusted input, sanitization and validation must be handled by your application.
54
+
55
+ ## License
56
+
57
+ MIT License.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ktjs/mui",
3
- "version": "0.34.0",
3
+ "version": "0.34.3",
4
4
  "description": "Material-UI inspired components for kt.js - pre-styled UI components",
5
5
  "description_zh": "面向 kt.js 的类 Material-UI 预设组件库。",
6
6
  "type": "module",