@kubex/zinc 1.1.175 → 1.1.177

package/dist/custom-elements.json

@@ -4113,7 +4113,7 @@
                 "text": "string"
               },
               "default": "''",
-              "description": "The message body as an HTML string. When set, it is sanitized (scripts and event\nhandlers stripped), newlines become line breaks and bare URLs become links. When\nomitted the default slot is rendered instead.",
+              "description": "The message body as an HTML string. When set, it is sanitized down to formatting tags and\nhttp(s) or mailto links, newlines become line breaks and bare URLs become links. When\nomitted the default slot is rendered instead.",
               "attribute": "message"
             },
             {
@@ -4254,7 +4254,7 @@
                 "text": "string"
               },
               "default": "''",
-              "description": "The message body as an HTML string. When set, it is sanitized (scripts and event\nhandlers stripped), newlines become line breaks and bare URLs become links. When\nomitted the default slot is rendered instead.",
+              "description": "The message body as an HTML string. When set, it is sanitized down to formatting tags and\nhttp(s) or mailto links, newlines become line breaks and bare URLs become links. When\nomitted the default slot is rendered instead.",
               "fieldName": "message"
             },
             {
@@ -53936,7 +53936,7 @@
   "package": {
     "name": "@kubex/zinc",
     "description": "A collection of web components for building web applications based off of @shoelace-style/Shoelace",
-    "version": "1.1.175",
+    "version": "1.1.177",
     "author": "",
     "license": "MIT"
   }

package/dist/vscode.html-custom-data.json

@@ -557,7 +557,7 @@
         },
         {
           "name": "message",
-          "description": "The message body as an HTML string. When set, it is sanitized (scripts and event\nhandlers stripped), newlines become line breaks and bare URLs become links. When\nomitted the default slot is rendered instead.",
+          "description": "The message body as an HTML string. When set, it is sanitized down to formatting tags and\nhttp(s) or mailto links, newlines become line breaks and bare URLs become links. When\nomitted the default slot is rendered instead.",
           "values": []
         },
         {

package/dist/web-types.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://raw.githubusercontent.com/JetBrains/web-types/master/schema/web-types.json",
   "name": "@kubex/zinc",
-  "version": "1.1.175",
+  "version": "1.1.177",
   "description-markup": "markdown",
   "contributions": {
     "html": {
@@ -1148,7 +1148,7 @@
             },
             {
               "name": "message",
-              "description": "The message body as an HTML string. When set, it is sanitized (scripts and event\nhandlers stripped), newlines become line breaks and bare URLs become links. When\nomitted the default slot is rendered instead.",
+              "description": "The message body as an HTML string. When set, it is sanitized down to formatting tags and\nhttp(s) or mailto links, newlines become line breaks and bare URLs become links. When\nomitted the default slot is rendered instead.",
               "value": { "type": "string", "default": "''" }
             },
             {
@@ -1214,7 +1214,7 @@
               },
               {
                 "name": "message",
-                "description": "The message body as an HTML string. When set, it is sanitized (scripts and event\nhandlers stripped), newlines become line breaks and bare URLs become links. When\nomitted the default slot is rendered instead.",
+                "description": "The message body as an HTML string. When set, it is sanitized down to formatting tags and\nhttp(s) or mailto links, newlines become line breaks and bare URLs become links. When\nomitted the default slot is rendered instead.",
                 "type": "string"
               },
               {

package/dist/zn.d.ts

@@ -1568,8 +1568,18 @@ declare module "components/button-group/index" {
         }
     }
 }
+declare module "utilities/sanitize-html" {
+    /**
+     * Sanitizes untrusted HTML down to formatting tags, keeping only a link's href when it is http(s) or mailto.
+     * Tags in `keep` are allowed as they are, so a block such as `pre` isn't turned into a paragraph.
+     */
+    export function sanitizeHtml(source: string, keep?: string[]): string;
+}
 declare module "components/chat-message/clean-message" {
-    /** Strip scripts and event/handler attributes from an untrusted HTML string. */
+    /**
+     * Sanitizes an untrusted chat message, turning newlines into breaks and bare URLs into links first so the
+     * links are vetted too.
+     */
     export function cleanHTML(message: string): string;
 }
 declare module "components/chat-message/chat-message.component" {
@@ -1615,8 +1625,8 @@ declare module "components/chat-message/chat-message.component" {
         /** The sender's name, also used for the avatar. */
         sender: string;
         /**
-         * The message body as an HTML string. When set, it is sanitized (scripts and event
-         * handlers stripped), newlines become line breaks and bare URLs become links. When
+         * The message body as an HTML string. When set, it is sanitized down to formatting tags and
+         * http(s) or mailto links, newlines become line breaks and bare URLs become links. When
          * omitted the default slot is rendered instead.
          */
         message: string;
@@ -8936,14 +8946,11 @@ declare module "components/split-button/index" {
         }
     }
 }
-declare module "components/content-block/sanitize-html" {
+declare module "components/content-block/html-text" {
     /** Whether a plain-text body is really HTML source. `<br>` alone doesn't count. */
     export function looksLikeHtml(text: string): boolean;
-    /**
-     * Rebuilds untrusted HTML from an allowlist of formatting tags. Attributes are never copied,
-     * except a link's href when it is http(s) or mailto.
-     */
-    export function sanitizeHtml(source: string): string;
+    /** Plain text of a body that may be HTML source or text holding encoded entities like `&nbsp;`. */
+    export function htmlToText(source: string): string;
 }
 declare module "components/content-block/content-block.component" {
     import ZincElement from "internal/zinc-element";