@leanix/components 0.3.49 → 0.3.50

package/fesm2020/leanix-components.mjs

@@ -16,6 +16,7 @@ import { TranslatePipe, TranslateModule } from '@ngx-translate/core';
 import * as i1$3 from '@angular/platform-browser';
 import Color from 'color';
 import { format, distanceInWords, startOfDay } from 'date-fns';
+import { sanitize } from 'dompurify';
 import _, { curry } from 'lodash';
 import { Renderer, marked } from 'marked';
 import * as i2$1 from '@angular/forms';
@@ -1344,6 +1345,10 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.1.3", ngImpor
 
 class HighlightRangePipe {
     transform(text, offset = 0, length = 0) {
+        const highlightedMarkup = this.doTransform(text, offset, length);
+        return sanitize(highlightedMarkup, { ALLOWED_TAGS: ['span'], ALLOWED_ATTR: ['class'] });
+    }
+    doTransform(text, offset, length) {
         if (!text || offset < 0 || length < 0 || offset >= text?.length || offset + length > text?.length) {
             return '';
         }
@@ -1376,12 +1381,21 @@ class HighlightTermPipe {
      * @returns The transformed text with highlighted search term.
      */
     transform(text, search, options = { exactMatch: false }) {
-        if (search && text) {
+        if (text) {
+            const highlightedMarkup = this.doTransform(text, search, options);
+            return highlightedMarkup ? sanitize(highlightedMarkup, { ALLOWED_TAGS: ['span'], ALLOWED_ATTR: ['class'] }) : undefined;
+        }
+        else {
+            return undefined;
+        }
+    }
+    doTransform(text, search, options) {
+        if (search) {
             let pattern = options.exactMatch ? search.trim() : search.replace(STANDARD_TOKENIZER_SEPERATORS, ' ');
             // replace special chars for a backslash for RegExp
             pattern = pattern.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g, '\\$&');
             pattern = options.exactMatch
-                ? escape(pattern)
+                ? pattern
                 : pattern
                     .split(' ')
                     .filter((t) => {
@@ -1389,7 +1403,6 @@ class HighlightTermPipe {
                 })
                     .join('|');
             const regex = new RegExp(pattern, 'gi');
-            text = escape(text);
             return text.replace(regex, (match) => `<span class="termHighlight">${match}</span>`); // add highlighting to matched regex pattern
         }
         else {