@lionrapid/core 0.1.4-beta.0 → 0.2.0

package/dist/browser/lionrapid.umd.js

@@ -80,12 +80,23 @@ var LogLevel = /* @__PURE__ */ ((LogLevel2) => {
 })(LogLevel || {});
 
 // src/utils/logger.ts
-var IS_PRODUCTION = true;
-var IS_DEVELOPMENT = false;
-var IS_CI = false;
-var LIONRAPID_DEV = false;
-var PERFORMANCE_TRACKING = false;
-var LOG_LEVEL_ENV = IS_PRODUCTION ? "ERROR" : "DEBUG";
+var _ENV = typeof process !== "undefined" && process.env ? process.env : {};
+var IS_PRODUCTION = _ENV.NODE_ENV === "production";
+var IS_DEVELOPMENT = _ENV.NODE_ENV === "development";
+var IS_CI = _ENV.CI === "true";
+var LIONRAPID_DEV = _ENV.LIONRAPID_DEV === "true";
+var PERFORMANCE_TRACKING = _ENV.LIONRAPID_PERFORMANCE_TRACKING === "true";
+function readBrowserLogLevel() {
+  try {
+    if (typeof localStorage !== "undefined") {
+      const v = localStorage.getItem("LIONRAPID_LOG_LEVEL");
+      if (v && typeof v === "string") return v;
+    }
+  } catch {
+  }
+  return null;
+}
+var LOG_LEVEL_ENV = readBrowserLogLevel() || _ENV.LOG_LEVEL || "WARN";
 var Colors = {
   // Reset
   RESET: "\x1B[0m",
@@ -291,7 +302,7 @@ var DevelopmentLogger = class _DevelopmentLogger {
       case "NONE":
         return 4 /* NONE */;
       default:
-        return 0 /* DEBUG */;
+        return 2 /* WARN */;
     }
   }
   shouldEnableLogging() {
@@ -410,7 +421,9 @@ var EventEmitter = class {
   constructor() {
     // ✅ Properly typed event listeners without `any`
     __publicField(this, "eventListeners", /* @__PURE__ */ new Map());
-    __publicField(this, "debugMode", false);
+    // Browser-safe: `process` is undeclared in browsers; guard before reading.
+    // Bundlers still substitute `process.env.NODE_ENV` at build time.
+    __publicField(this, "debugMode", typeof process !== "undefined" && false);
   }
   /**
    * Subscribe to events (PUBLIC API) - Fully type-safe
@@ -1267,7 +1280,8 @@ function prepareTranslationRequest(key, currentLocale, defaultValueOrParams, par
 function parseTranslationParams(secondParam, thirdParam) {
   let defaultValue;
   let params;
-  if (typeof secondParam === "object" && typeof thirdParam === "object" && false) {
+  const _isNotProd = typeof process === "undefined" || false;
+  if (typeof secondParam === "object" && typeof thirdParam === "object" && _isNotProd) {
     console.warn(
       "[LionRapid] Warning: Both secondParam and thirdParam are objects. Expected pattern: t(key, params, defaultValue) or t(key, defaultValue, params). Second object will be ignored as it cannot be a defaultValue."
     );
@@ -2211,6 +2225,27 @@ var NetworkHandler = class {
   }
 };
 
+// src/content/safe-href.ts
+var SAFE_SCHEME = /^[a-z][a-z0-9+.-]*:/i;
+var ALLOWED_SCHEMES = /* @__PURE__ */ new Set(["http:", "https:", "mailto:", "tel:", "sms:"]);
+function safeHref(href) {
+  if (!href) return "#";
+  const trimmed = href.trim();
+  if (!trimmed) return "#";
+  if (trimmed.startsWith("//")) {
+    return "#";
+  }
+  if (trimmed.startsWith("/") || trimmed.startsWith("?") || trimmed.startsWith("#") || trimmed.startsWith("./") || trimmed.startsWith("../")) {
+    return trimmed;
+  }
+  const schemeMatch = SAFE_SCHEME.exec(trimmed);
+  if (schemeMatch) {
+    const scheme = schemeMatch[0].toLowerCase();
+    return ALLOWED_SCHEMES.has(scheme) ? trimmed : "#";
+  }
+  return trimmed;
+}
+
 // src/content/style-mapper/DefaultStyleMapper.ts
 var DefaultStyleMapper = class {
   constructor() {
@@ -2296,7 +2331,7 @@ var DefaultStyleMapper = class {
       if (style.startsWith("hyperlink:")) {
         return {
           element: "a",
-          attrs: { href: style.slice("hyperlink:".length) }
+          attrs: { href: safeHref(style.slice("hyperlink:".length)) }
         };
       }
     }