@limetech/lime-elements 39.34.0 → 39.34.1

package/dist/cjs/limel-file-viewer.cjs.entry.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var index$1 = require('./index-BjHIBY-I.js');
+var index$1 = require('./index-8x93m5oI.js');
 var translations = require('./translations-VEsa81QY.js');
 var index = require('./index-BgFEL6FF.js');
 require('./_commonjsHelpers-CFO10eej.js');
@@ -128,7 +128,7 @@ const base64Chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456
 
 // Use a lookup table to find the index.
 const base64Lookup = new Uint8Array(256);
-for (var i = 0; i < base64Chars.length; i++) {
+for (let i = 0; i < base64Chars.length; i++) {
     base64Lookup[base64Chars.charCodeAt(i)] = i;
 }
 
@@ -441,9 +441,7 @@ class Base64Decoder {
     update(buffer) {
         let str = this.decoder.decode(buffer);
 
-        if (/[^a-zA-Z0-9+\/]/.test(str)) {
-            str = str.replace(/[^a-zA-Z0-9+\/]+/g, '');
-        }
+        str = str.replace(/[^a-zA-Z0-9+\/]+/g, '');
 
         this.remainder += str;
 
@@ -555,7 +553,6 @@ class QPDecoder {
         }
         if (encodedBytes.length) {
             this.chunks.push(this.decodeQPBytes(encodedBytes));
-            encodedBytes = [];
         }
     }
 
@@ -596,6 +593,8 @@ class QPDecoder {
     }
 }
 
+const defaultDecoder = getDecoder();
+
 class MimeNode {
     constructor(options) {
         this.options = options || {};
@@ -826,7 +825,7 @@ class MimeNode {
                 // remove soft linebreaks
                 // soft linebreaks are added after space symbols
                 .reduce((previousValue, currentValue) => {
-                    if (/ $/.test(previousValue) && !/(^|\n)-- $/.test(previousValue)) {
+                    if (previousValue.endsWith(' ') && previousValue !== '-- ' && !previousValue.endsWith('\n-- ')) {
                         if (delSp) {
                             // delsp adds space to text to be able to fold it
                             // these spaces can be removed once the text is unfolded
@@ -953,7 +952,7 @@ class MimeNode {
                     throw error;
                 }
 
-                this.headerLines.push(getDecoder().decode(line));
+                this.headerLines.push(defaultDecoder.decode(line));
                 break;
             case 'body': {
                 // add line to body
@@ -3218,7 +3217,7 @@ function decodeHTMLEntities(str) {
             codePoint = parseInt(entity.substr(1), 10);
         }
 
-        var output = '';
+        let output = '';
 
         if ((codePoint >= 0xd800 && codePoint <= 0xdfff) || codePoint > 0x10ffff) {
             // Invalid range, return a replacement character instead
@@ -3690,13 +3689,13 @@ function _handleAddress(tokens, depth) {
             }
         }
 
-        // If there's still is no text but a comment exixts, replace the two
+        // If there's still no text but a comment exists, replace the two
         if (!data.text.length && data.comment.length) {
             data.text = data.comment;
             data.comment = [];
         }
 
-        // Keep only the first address occurence, push others to regular text
+        // Keep only the first address occurrence, push others to regular text
         if (data.address.length > 1) {
             data.text = data.text.concat(data.address.splice(1));
         }
@@ -3707,30 +3706,34 @@ function _handleAddress(tokens, depth) {
 
         if (!data.address && /^=\?[^=]+?=$/.test(data.text.trim())) {
             // try to extract words from text content
-            const parsedSubAddresses = addressParser(decodeWords(data.text));
-            if (parsedSubAddresses && parsedSubAddresses.length) {
-                return parsedSubAddresses;
+            const decodedText = decodeWords(data.text);
+            // Security: only re-parse if decoded text contains angle-bracket addresses.
+            // Without this, a bare encoded email (e.g. =?utf-8?B?dGVzdEBldmlsLmNv?=)
+            // would be fabricated into an address from attacker-controlled input.
+            if (/<[^<>]+@[^<>]+>/.test(decodedText)) {
+                const parsedSubAddresses = addressParser(decodedText);
+                if (parsedSubAddresses && parsedSubAddresses.length) {
+                    return parsedSubAddresses;
+                }
             }
+            // No usable address found - treat decoded text as display name only
+            return [{ address: '', name: decodedText }];
         }
 
-        if (!data.address && isGroup) {
-            return [];
-        } else {
-            address = {
-                address: data.address || data.text || '',
-                name: decodeWords(data.text || data.address || '')
-            };
+        address = {
+            address: data.address || data.text || '',
+            name: decodeWords(data.text || data.address || '')
+        };
 
-            if (address.address === address.name) {
-                if ((address.address || '').match(/@/)) {
-                    address.name = '';
-                } else {
-                    address.address = '';
-                }
+        if (address.address === address.name) {
+            if ((address.address || '').match(/@/)) {
+                address.name = '';
+            } else {
+                address.address = '';
             }
-
-            addresses.push(address);
         }
+
+        addresses.push(address);
     }
 
     return addresses;
@@ -3826,7 +3829,7 @@ class Tokenizer {
             this.operatorExpecting = this.operators[chr];
             this.escaped = false;
             return;
-        } else if (['"', "'"].includes(this.operatorExpecting) && chr === '\\') {
+        } else if (this.operatorExpecting === '"' && chr === '\\') {
             this.escaped = true;
             return;
         }
@@ -4006,6 +4009,10 @@ function base64ArrayBuffer(arrayBuffer) {
 const MAX_NESTING_DEPTH = 256;
 const MAX_HEADERS_SIZE = 2 * 1024 * 1024;
 
+function toCamelCase(key) {
+    return key.replace(/-(.)/g, (o, c) => c.toUpperCase());
+}
+
 class PostalMime {
     static parse(buf, options) {
         const parser = new PostalMime(options);
@@ -4073,9 +4080,11 @@ class PostalMime {
                 let boundaryEnd = boundary.value.length + 2;
                 let isTerminator = false;
 
-                if (line.length >= boundary.value.length + 4 &&
+                if (
+                    line.length >= boundary.value.length + 4 &&
                     line[boundary.value.length + 2] === 0x2d &&
-                    line[boundary.value.length + 3] === 0x2d) {
+                    line[boundary.value.length + 3] === 0x2d
+                ) {
                     isTerminator = true;
                     boundaryEnd = boundary.value.length + 4;
                 }
@@ -4127,13 +4136,6 @@ class PostalMime {
         let startPos = this.readPos;
         let endPos = this.readPos;
 
-        let res = () => {
-            return {
-                bytes: new Uint8Array(this.buf, startPos, endPos - startPos),
-                done: this.readPos >= this.av.length
-            };
-        };
-
         while (this.readPos < this.av.length) {
             const c = this.av[this.readPos++];
 
@@ -4142,11 +4144,17 @@ class PostalMime {
             }
 
             if (c === 0x0a) {
-                return res();
+                return {
+                    bytes: new Uint8Array(this.buf, startPos, endPos - startPos),
+                    done: this.readPos >= this.av.length
+                };
             }
         }
 
-        return res();
+        return {
+            bytes: new Uint8Array(this.buf, startPos, endPos - startPos),
+            done: this.readPos >= this.av.length
+        };
     }
 
     async processNodeTree() {
@@ -4217,7 +4225,9 @@ class PostalMime {
                 // is it an attachment
                 else if (node.content) {
                     const filename =
-                        node.contentDisposition?.parsed?.params?.filename || node.contentType.parsed.params.name || null;
+                        node.contentDisposition?.parsed?.params?.filename ||
+                        node.contentType.parsed.params.name ||
+                        null;
                     const attachment = {
                         filename: filename ? decodeWords(filename) : null,
                         mimeType: node.contentType.parsed.value,
@@ -4271,7 +4281,7 @@ class PostalMime {
             }
         };
 
-        await walk(this.root, false, []);
+        await walk(this.root, false, false);
 
         textMap.forEach(mapEntry => {
             textTypes.forEach(textType => {
@@ -4468,7 +4478,9 @@ class PostalMime {
         await this.processNodeTree();
 
         const message = {
-            headers: this.root.headers.map(entry => ({ key: entry.key, value: entry.value })).reverse()
+            headers: this.root.headers
+                .map(entry => ({ key: entry.key, originalKey: entry.originalKey, value: entry.value }))
+                .reverse()
         };
 
         for (const key of ['from', 'sender']) {
@@ -4486,7 +4498,7 @@ class PostalMime {
             if (addressHeader && addressHeader.value) {
                 const addresses = addressParser(addressHeader.value);
                 if (addresses && addresses.length && addresses[0].address) {
-                    const camelKey = key.replace(/\-(.)/g, (o, c) => c.toUpperCase());
+                    const camelKey = toCamelCase(key);
                     message[camelKey] = addresses[0].address;
                 }
             }
@@ -4502,7 +4514,7 @@ class PostalMime {
                 .forEach(parsed => (addresses = addresses.concat(parsed || [])));
 
             if (addresses && addresses.length) {
-                const camelKey = key.replace(/\-(.)/g, (o, c) => c.toUpperCase());
+                const camelKey = toCamelCase(key);
                 message[camelKey] = addresses;
             }
         }
@@ -4510,7 +4522,7 @@ class PostalMime {
         for (const key of ['subject', 'message-id', 'in-reply-to', 'references']) {
             const header = this.root.headers.find(line => line.key === key);
             if (header && header.value) {
-                const camelKey = key.replace(/\-(.)/g, (o, c) => c.toUpperCase());
+                const camelKey = toCamelCase(key);
                 message[camelKey] = decodeWords(header.value);
             }
         }
@@ -4518,7 +4530,7 @@ class PostalMime {
         let dateHeader = this.root.headers.find(line => line.key === 'date');
         if (dateHeader) {
             let date = new Date(dateHeader.value);
-            if (!date || date.toString() === 'Invalid Date') {
+            if (date.toString() === 'Invalid Date') {
                 date = dateHeader.value;
             } else {
                 // enforce ISO format if seems to be a valid date
@@ -4564,7 +4576,7 @@ class PostalMime {
                 break;
 
             default:
-                throw new Error('Unknwon attachment encoding');
+                throw new Error('Unknown attachment encoding');
         }
 
         return message;

package/dist/cjs/limel-file.cjs.entry.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-BjHIBY-I.js');
+var index = require('./index-8x93m5oI.js');
 var translations = require('./translations-VEsa81QY.js');
 var fileMetadata = require('./file-metadata-BrhOssGG.js');
 require('./icons-isR5V1X0.js');
@@ -64,7 +64,7 @@ const File = class {
         };
     }
     render() {
-        return (index.h(index.Host, { key: '401aab598ccb204e781169a80e6e2d0585c76d8a' }, index.h("limel-file-dropzone", { key: '1979ee6425b29c7f20e353226c074ff9ed13b233', disabled: this.disabled || this.readonly || !!this.value, accept: this.accept, onFilesSelected: this.handleNewFiles }, this.renderChipset()), this.renderDragAndDropTip()));
+        return (index.h(index.Host, { key: 'e18047c4433798845cb52ad0873a2c4c7ab131b3' }, index.h("limel-file-dropzone", { key: 'fcdbdcd4334035343acba319ccde231e44fa86a8', disabled: this.disabled || this.readonly || !!this.value, accept: this.accept, onFilesSelected: this.handleNewFiles }, this.renderChipset()), this.renderDragAndDropTip()));
     }
     renderDragAndDropTip() {
         if (this.value || this.disabled || this.readonly) {

package/dist/cjs/limel-flatpickr-adapter.cjs.entry.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-BjHIBY-I.js');
+var index = require('./index-8x93m5oI.js');
 var translations = require('./translations-VEsa81QY.js');
 var _commonjsHelpers = require('./_commonjsHelpers-CFO10eej.js');
 require('./sv-BSR4W58y.js');
@@ -7653,7 +7653,7 @@ const DatePickerCalendar = class {
         });
     }
     render() {
-        return (index.h("div", { key: '41bbb26bc5120bde237df9ae3a17d633e597b918', class: "container", ref: (el) => (this.container = el), style: {
+        return (index.h("div", { key: '84520ade591db0e5be9b730765d2fb0b381cac40', class: "container", ref: (el) => (this.container = el), style: {
                 '--today-label': `"${translations.translate.get('date-picker.today')}"`,
             } }));
     }

package/dist/cjs/limel-flex-container.cjs.entry.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var index = require('./index-BjHIBY-I.js');
+var index = require('./index-8x93m5oI.js');
 
 const flexContainerCss = () => `:host(limel-flex-container){display:flex}:host(limel-flex-container[hidden]){display:none}:host(limel-flex-container[direction=horizontal]){flex-direction:row}:host(limel-flex-container[direction=horizontal][reverse]){flex-direction:row-reverse}:host(limel-flex-container[direction=vertical]){flex-direction:column}:host(limel-flex-container[direction=vertical][reverse]){flex-direction:column-reverse}:host(limel-flex-container[align=start]){align-items:flex-start}:host(limel-flex-container[align=end]){align-items:flex-end}:host(limel-flex-container[align=center]){align-items:center}:host(limel-flex-container[align=stretch]){align-items:stretch}:host(limel-flex-container[justify=start]){justify-content:flex-start}:host(limel-flex-container[justify=end]){justify-content:flex-end}:host(limel-flex-container[justify=center]){justify-content:center}:host(limel-flex-container[justify=space-between]){justify-content:space-between}:host(limel-flex-container[justify=space-around]){justify-content:space-around}:host(limel-flex-container[justify=space-evenly]){justify-content:space-evenly}:host(limel-flex-container[slot=button]){gap:0.5rem;width:100%;justify-content:flex-end}:host(limel-flex-container[slot=button][direction=horizontal][reverse]){justify-content:flex-start}`;
 
@@ -28,7 +28,7 @@ const FlexContainer = class {
         console.warn('limel-flex-container is deprecated, please use CSS instead: https://developer.mozilla.org/en-US/docs/Web/CSS/CSS_Flexible_Box_Layout/Basic_Concepts_of_Flexbox');
     }
     render() {
-        return index.h("slot", { key: 'fd157b39594a7aa1a7ac4ee7496c8a89301c8296' });
+        return index.h("slot", { key: '9e8444d16ed9d2f40cfb7a2f90c88b2ab739c109' });
     }
 };
 FlexContainer.style = flexContainerCss();