@lukso/web-components 1.46.0 → 1.47.1

package/dist/components/lukso-sanitize/index.cjs

@@ -2,17 +2,17 @@
 
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
-const shared_tailwindElement_index = require('../../index-c00a1316.cjs');
-const queryAssignedElements = require('../../query-assigned-elements-5200f974.cjs');
+const shared_tailwindElement_index = require('../../index-416afa07.cjs');
+const queryAssignedElements = require('../../query-assigned-elements-1d5d9d4c.cjs');
 const directive = require('../../directive-8278ab14.cjs');
 
 /**
  * @license
  * Copyright 2017 Google LLC
  * SPDX-License-Identifier: BSD-3-Clause
- */class e extends directive.i{constructor(i){if(super(i),this.et=shared_tailwindElement_index.A$1,i.type!==directive.t.CHILD)throw Error(this.constructor.directiveName+"() can only be used in child bindings")}render(r){if(r===shared_tailwindElement_index.A$1||null==r)return this.ft=void 0,this.et=r;if(r===shared_tailwindElement_index.T)return r;if("string"!=typeof r)throw Error(this.constructor.directiveName+"() called with a non-string value");if(r===this.et)return this.ft;this.et=r;const s=[r];return s.raw=s,this.ft={_$litType$:this.constructor.resultType,strings:s,values:[]}}}e.directiveName="unsafeHTML",e.resultType=1;const o=directive.e(e);
+ */class e extends directive.i{constructor(i){if(super(i),this.et=shared_tailwindElement_index.A,i.type!==directive.t.CHILD)throw Error(this.constructor.directiveName+"() can only be used in child bindings")}render(r){if(r===shared_tailwindElement_index.A||null==r)return this.ft=void 0,this.et=r;if(r===shared_tailwindElement_index.T)return r;if("string"!=typeof r)throw Error(this.constructor.directiveName+"() called with a non-string value");if(r===this.et)return this.ft;this.et=r;const s=[r];return s.raw=s,this.ft={_$litType$:this.constructor.resultType,strings:s,values:[]}}}e.directiveName="unsafeHTML",e.resultType=1;const o=directive.e(e);
 
-/*! @license DOMPurify 3.0.5 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.0.5/LICENSE */
+/*! @license DOMPurify 3.0.6 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.0.6/LICENSE */
 
 const {
   entries,
@@ -32,12 +32,6 @@ let {
   construct
 } = typeof Reflect !== 'undefined' && Reflect;
 
-if (!apply) {
-  apply = function apply(fun, thisValue, args) {
-    return fun.apply(thisValue, args);
-  };
-}
-
 if (!freeze) {
   freeze = function freeze(x) {
     return x;
@@ -50,6 +44,12 @@ if (!seal) {
   };
 }
 
+if (!apply) {
+  apply = function apply(fun, thisValue, args) {
+    return fun.apply(thisValue, args);
+  };
+}
+
 if (!construct) {
   construct = function construct(Func, args) {
     return new Func(...args);
@@ -67,6 +67,13 @@ const stringIndexOf = unapply(String.prototype.indexOf);
 const stringTrim = unapply(String.prototype.trim);
 const regExpTest = unapply(RegExp.prototype.test);
 const typeErrorCreate = unconstruct(TypeError);
+/**
+ * Creates a new function that calls the given function with a specified thisArg and arguments.
+ *
+ * @param {Function} func - The function to be wrapped and called.
+ * @returns {Function} A new function that calls the given function with a specified thisArg and arguments.
+ */
+
 function unapply(func) {
   return function (thisArg) {
     for (var _len = arguments.length, args = new Array(_len > 1 ? _len - 1 : 0), _key = 1; _key < _len; _key++) {
@@ -76,6 +83,14 @@ function unapply(func) {
     return apply(func, thisArg, args);
   };
 }
+/**
+ * Creates a new function that constructs an instance of the given constructor function with the provided arguments.
+ *
+ * @param {Function} func - The constructor function to be wrapped and called.
+ * @returns {Function} A new function that constructs an instance of the given constructor function with the provided arguments.
+ */
+
+
 function unconstruct(func) {
   return function () {
     for (var _len2 = arguments.length, args = new Array(_len2), _key2 = 0; _key2 < _len2; _key2++) {
@@ -85,12 +100,18 @@ function unconstruct(func) {
     return construct(func, args);
   };
 }
-/* Add properties to a lookup table */
+/**
+ * Add properties to a lookup table
+ *
+ * @param {Object} set - The set to which elements will be added.
+ * @param {Array} array - The array containing elements to be added to the set.
+ * @param {Function} transformCaseFunc - An optional function to transform the case of each element before adding to the set.
+ * @returns {Object} The modified set with added elements.
+ */
 
-function addToSet(set, array, transformCaseFunc) {
-  var _transformCaseFunc;
 
-  transformCaseFunc = (_transformCaseFunc = transformCaseFunc) !== null && _transformCaseFunc !== void 0 ? _transformCaseFunc : stringToLowerCase;
+function addToSet(set, array) {
+  let transformCaseFunc = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : stringToLowerCase;
 
   if (setPrototypeOf) {
     // Make 'in' and truthy checks like Boolean(set.constructor)
@@ -122,19 +143,32 @@ function addToSet(set, array, transformCaseFunc) {
 
   return set;
 }
-/* Shallow clone an object */
+/**
+ * Shallow clone an object
+ *
+ * @param {Object} object - The object to be cloned.
+ * @returns {Object} A new object that copies the original.
+ */
+
 
 function clone(object) {
   const newObject = create(null);
 
   for (const [property, value] of entries(object)) {
-    newObject[property] = value;
+    if (getOwnPropertyDescriptor(object, property) !== undefined) {
+      newObject[property] = value;
+    }
   }
 
   return newObject;
 }
-/* This method automatically checks if the prop is function
- * or getter and behaves accordingly. */
+/**
+ * This method automatically checks if the prop is function or getter and behaves accordingly.
+ *
+ * @param {Object} object - The object to look up the getter function in its prototype chain.
+ * @param {String} prop - The property name for which to find the getter function.
+ * @returns {Function} The getter function found in the prototype chain or a fallback function.
+ */
 
 function lookupGetter(object, prop) {
   while (object !== null) {
@@ -209,7 +243,9 @@ var EXPRESSIONS = /*#__PURE__*/Object.freeze({
   DOCTYPE_NAME: DOCTYPE_NAME
 });
 
-const getGlobal = () => typeof window === 'undefined' ? null : window;
+const getGlobal = function getGlobal() {
+  return typeof window === 'undefined' ? null : window;
+};
 /**
  * Creates a no-op policy for internal use only.
  * Don't export this function outside this module!
@@ -267,7 +303,7 @@ function createDOMPurify() {
    */
 
 
-  DOMPurify.version = '3.0.5';
+  DOMPurify.version = '3.0.6';
   /**
    * Array of elements that DOMPurify removed during sanitation.
    * Empty if nothing was removed.
@@ -282,11 +318,11 @@ function createDOMPurify() {
     return DOMPurify;
   }
 
-  const originalDocument = window.document;
-  const currentScript = originalDocument.currentScript;
   let {
     document
   } = window;
+  const originalDocument = document;
+  const currentScript = originalDocument.currentScript;
   const {
     DocumentFragment,
     HTMLTemplateElement,
@@ -366,7 +402,7 @@ function createDOMPurify() {
    * @property {boolean} allowCustomizedBuiltInElements allow custom elements derived from built-ins if they pass CUSTOM_ELEMENT_HANDLING.tagNameCheck. Default: `false`.
    */
 
-  let CUSTOM_ELEMENT_HANDLING = Object.seal(Object.create(null, {
+  let CUSTOM_ELEMENT_HANDLING = Object.seal(create(null, {
     tagNameCheck: {
       writable: true,
       configurable: false,
@@ -490,10 +526,10 @@ function createDOMPurify() {
   const DEFAULT_ALLOWED_NAMESPACES = addToSet({}, [MATHML_NAMESPACE, SVG_NAMESPACE, HTML_NAMESPACE], stringToString);
   /* Parsing of strict XHTML documents */
 
-  let PARSER_MEDIA_TYPE;
+  let PARSER_MEDIA_TYPE = null;
   const SUPPORTED_PARSER_MEDIA_TYPES = ['application/xhtml+xml', 'text/html'];
   const DEFAULT_PARSER_MEDIA_TYPE = 'text/html';
-  let transformCaseFunc;
+  let transformCaseFunc = null;
   /* Keep a reference to config to pass to hooks */
 
   let CONFIG = null;
@@ -514,7 +550,9 @@ function createDOMPurify() {
   // eslint-disable-next-line complexity
 
 
-  const _parseConfig = function _parseConfig(cfg) {
+  const _parseConfig = function _parseConfig() {
+    let cfg = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+
     if (CONFIG && CONFIG === cfg) {
       return;
     }
@@ -733,8 +771,6 @@ function createDOMPurify() {
   const ALL_MATHML_TAGS = addToSet({}, mathMl$1);
   addToSet(ALL_MATHML_TAGS, mathMlDisallowed);
   /**
-   *
-   *
    * @param  {Element} element a DOM element whose namespace is being checked
    * @returns {boolean} Return false if the element has a
    *  namespace that a spec-compliant parser would never
@@ -890,8 +926,8 @@ function createDOMPurify() {
 
   const _initDocument = function _initDocument(dirty) {
     /* Create a HTML document */
-    let doc;
-    let leadingWhitespace;
+    let doc = null;
+    let leadingWhitespace = null;
 
     if (FORCE_BODY) {
       dirty = '<remove></remove>' + dirty;
@@ -944,16 +980,16 @@ function createDOMPurify() {
     return WHOLE_DOCUMENT ? doc.documentElement : body;
   };
   /**
-   * _createIterator
+   * Creates a NodeIterator object that you can use to traverse filtered lists of nodes or elements in a document.
    *
-   * @param  {Document} root document/fragment to create iterator for
-   * @return {Iterator} iterator instance
+   * @param  {Node} root The root element or node to start traversing on.
+   * @return {NodeIterator} The created NodeIterator
    */
 
 
-  const _createIterator = function _createIterator(root) {
+  const _createNodeIterator = function _createNodeIterator(root) {
     return createNodeIterator.call(root.ownerDocument || root, root, // eslint-disable-next-line no-bitwise
-    NodeFilter.SHOW_ELEMENT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_TEXT, null, false);
+    NodeFilter.SHOW_ELEMENT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_TEXT, null);
   };
   /**
    * _isClobbered
@@ -967,15 +1003,15 @@ function createDOMPurify() {
     return elm instanceof HTMLFormElement && (typeof elm.nodeName !== 'string' || typeof elm.textContent !== 'string' || typeof elm.removeChild !== 'function' || !(elm.attributes instanceof NamedNodeMap) || typeof elm.removeAttribute !== 'function' || typeof elm.setAttribute !== 'function' || typeof elm.namespaceURI !== 'string' || typeof elm.insertBefore !== 'function' || typeof elm.hasChildNodes !== 'function');
   };
   /**
-   * _isNode
+   * Checks whether the given object is a DOM node.
    *
-   * @param  {Node} obj object to check whether it's a DOM node
+   * @param  {Node} object object to check whether it's a DOM node
    * @return {Boolean} true is object is a DOM node
    */
 
 
   const _isNode = function _isNode(object) {
-    return typeof Node === 'object' ? object instanceof Node : object && typeof object === 'object' && typeof object.nodeType === 'number' && typeof object.nodeName === 'string';
+    return typeof Node === 'function' && object instanceof Node;
   };
   /**
    * _executeHook
@@ -1009,7 +1045,7 @@ function createDOMPurify() {
 
 
   const _sanitizeElements = function _sanitizeElements(currentNode) {
-    let content;
+    let content = null;
     /* Execute a hook if present */
 
     _executeHook('beforeSanitizeElements', currentNode, null);
@@ -1034,7 +1070,7 @@ function createDOMPurify() {
     /* Detect mXSS attempts abusing namespace confusion */
 
 
-    if (currentNode.hasChildNodes() && !_isNode(currentNode.firstElementChild) && (!_isNode(currentNode.content) || !_isNode(currentNode.content.firstElementChild)) && regExpTest(/<[/\w]/g, currentNode.innerHTML) && regExpTest(/<[/\w]/g, currentNode.textContent)) {
+    if (currentNode.hasChildNodes() && !_isNode(currentNode.firstElementChild) && regExpTest(/<[/\w]/g, currentNode.innerHTML) && regExpTest(/<[/\w]/g, currentNode.textContent)) {
       _forceRemove(currentNode);
 
       return true;
@@ -1044,9 +1080,14 @@ function createDOMPurify() {
 
     if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {
       /* Check if we have a custom element to handle */
-      if (!FORBID_TAGS[tagName] && _basicCustomElementTest(tagName)) {
-        if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)) return false;
-        if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(tagName)) return false;
+      if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) {
+        if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)) {
+          return false;
+        }
+
+        if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(tagName)) {
+          return false;
+        }
       }
       /* Keep content except for bad-listed elements */
 
@@ -1090,9 +1131,9 @@ function createDOMPurify() {
     if (SAFE_FOR_TEMPLATES && currentNode.nodeType === 3) {
       /* Get the element's text content */
       content = currentNode.textContent;
-      content = stringReplace(content, MUSTACHE_EXPR, ' ');
-      content = stringReplace(content, ERB_EXPR, ' ');
-      content = stringReplace(content, TMPLIT_EXPR, ' ');
+      arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
+        content = stringReplace(content, expr, ' ');
+      });
 
       if (currentNode.textContent !== content) {
         arrayPush(DOMPurify.removed, {
@@ -1134,7 +1175,7 @@ function createDOMPurify() {
       if ( // First condition does a very basic check if a) it's basically a valid custom element tagname AND
       // b) if the tagName passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
       // and c) if the attribute name passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.attributeNameCheck
-      _basicCustomElementTest(lcTag) && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, lcTag) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(lcTag)) && (CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.attributeNameCheck, lcName) || CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.attributeNameCheck(lcName)) || // Alternative, second condition checks if it's an `is`-attribute, AND
+      _isBasicCustomElement(lcTag) && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, lcTag) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(lcTag)) && (CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.attributeNameCheck, lcName) || CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.attributeNameCheck(lcName)) || // Alternative, second condition checks if it's an `is`-attribute, AND
       // the value passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
       lcName === 'is' && CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, value) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(value))) ; else {
         return false;
@@ -1148,14 +1189,16 @@ function createDOMPurify() {
     return true;
   };
   /**
-   * _basicCustomElementCheck
+   * _isBasicCustomElement
    * checks if at least one dash is included in tagName, and it's not the first char
    * for more sophisticated checking see https://github.com/sindresorhus/validate-element-name
+   *
    * @param {string} tagName name of the tag of the node to sanitize
+   * @returns {boolean} Returns true if the tag name meets the basic criteria for a custom element, otherwise false.
    */
 
 
-  const _basicCustomElementTest = function _basicCustomElementTest(tagName) {
+  const _isBasicCustomElement = function _isBasicCustomElement(tagName) {
     return tagName.indexOf('-') > 0;
   };
   /**
@@ -1171,12 +1214,7 @@ function createDOMPurify() {
 
 
   const _sanitizeAttributes = function _sanitizeAttributes(currentNode) {
-    let attr;
-    let value;
-    let lcName;
-    let l;
     /* Execute a hook if present */
-
     _executeHook('beforeSanitizeAttributes', currentNode, null);
 
     const {
@@ -1194,17 +1232,18 @@ function createDOMPurify() {
       keepAttr: true,
       allowedAttributes: ALLOWED_ATTR
     };
-    l = attributes.length;
+    let l = attributes.length;
     /* Go backwards over all attributes; safely remove bad ones */
 
     while (l--) {
-      attr = attributes[l];
+      const attr = attributes[l];
       const {
         name,
-        namespaceURI
+        namespaceURI,
+        value: attrValue
       } = attr;
-      value = name === 'value' ? attr.value : stringTrim(attr.value);
-      lcName = transformCaseFunc(name);
+      const lcName = transformCaseFunc(name);
+      let value = name === 'value' ? attrValue : stringTrim(attrValue);
       /* Execute a hook if present */
 
       hookEvent.attrName = lcName;
@@ -1242,9 +1281,9 @@ function createDOMPurify() {
 
 
       if (SAFE_FOR_TEMPLATES) {
-        value = stringReplace(value, MUSTACHE_EXPR, ' ');
-        value = stringReplace(value, ERB_EXPR, ' ');
-        value = stringReplace(value, TMPLIT_EXPR, ' ');
+        arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
+          value = stringReplace(value, expr, ' ');
+        });
       }
       /* Is `value` valid for this attribute? */
 
@@ -1313,9 +1352,9 @@ function createDOMPurify() {
 
 
   const _sanitizeShadowDOM = function _sanitizeShadowDOM(fragment) {
-    let shadowNode;
+    let shadowNode = null;
 
-    const shadowIterator = _createIterator(fragment);
+    const shadowIterator = _createNodeIterator(fragment);
     /* Execute a hook if present */
 
 
@@ -1351,17 +1390,17 @@ function createDOMPurify() {
    * Public method providing core sanitation functionality
    *
    * @param {String|Node} dirty string or DOM node
-   * @param {Object} configuration object
+   * @param {Object} cfg object
    */
   // eslint-disable-next-line complexity
 
 
   DOMPurify.sanitize = function (dirty) {
     let cfg = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
-    let body;
-    let importedNode;
-    let currentNode;
-    let returnNode;
+    let body = null;
+    let importedNode = null;
+    let currentNode = null;
+    let returnNode = null;
     /* Make sure we have a string to sanitize.
       DO NOT return early, as this will return the wrong type if
       the user has requested a DOM object rather than a string */
@@ -1456,7 +1495,7 @@ function createDOMPurify() {
     /* Get node iterator */
 
 
-    const nodeIterator = _createIterator(IN_PLACE ? dirty : body);
+    const nodeIterator = _createNodeIterator(IN_PLACE ? dirty : body);
     /* Now start iterating over the created document */
 
 
@@ -1521,9 +1560,9 @@ function createDOMPurify() {
 
 
     if (SAFE_FOR_TEMPLATES) {
-      serializedHTML = stringReplace(serializedHTML, MUSTACHE_EXPR, ' ');
-      serializedHTML = stringReplace(serializedHTML, ERB_EXPR, ' ');
-      serializedHTML = stringReplace(serializedHTML, TMPLIT_EXPR, ' ');
+      arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
+        serializedHTML = stringReplace(serializedHTML, expr, ' ');
+      });
     }
 
     return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? trustedTypesPolicy.createHTML(serializedHTML) : serializedHTML;
@@ -1536,7 +1575,9 @@ function createDOMPurify() {
    */
 
 
-  DOMPurify.setConfig = function (cfg) {
+  DOMPurify.setConfig = function () {
+    let cfg = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+
     _parseConfig(cfg);
 
     SET_CONFIG = true;
@@ -1557,9 +1598,9 @@ function createDOMPurify() {
    * Uses last set config, if any. Otherwise, uses config defaults.
    * isValidAttribute
    *
-   * @param  {string} tag Tag name of containing element.
-   * @param  {string} attr Attribute name.
-   * @param  {string} value Attribute value.
+   * @param  {String} tag Tag name of containing element.
+   * @param  {String} attr Attribute name.
+   * @param  {String} value Attribute value.
    * @return {Boolean} Returns true if `value` is valid. Otherwise, returns false.
    */
 
@@ -1622,7 +1663,6 @@ function createDOMPurify() {
   /**
    * RemoveAllHooks
    * Public method to remove all DOMPurify hooks
-   *
    */
 
 
@@ -1668,11 +1708,11 @@ exports.LuksoSanitize = class LuksoSanitize extends shared_tailwindElement_index
   }
 };
 __decorateClass([
-  queryAssignedElements.e({ type: String, attribute: "html-content" })
+  queryAssignedElements.n({ type: String, attribute: "html-content" })
 ], exports.LuksoSanitize.prototype, "htmlContent", 2);
 __decorateClass([
-  queryAssignedElements.e({ type: Boolean, attribute: "is-pre" })
+  queryAssignedElements.n({ type: Boolean, attribute: "is-pre" })
 ], exports.LuksoSanitize.prototype, "isPre", 2);
 exports.LuksoSanitize = __decorateClass([
-  queryAssignedElements.e$1("lukso-sanitize")
+  queryAssignedElements.e("lukso-sanitize")
 ], exports.LuksoSanitize);

package/dist/components/lukso-sanitize/index.d.ts

@@ -4,7 +4,7 @@ export declare class LuksoSanitize extends TailwindElement {
     isPre: boolean;
     private options;
     sanitize(): any;
-    render(): import("lit").TemplateResult<1>;
+    render(): import("lit-html").TemplateResult<1>;
 }
 declare global {
     interface HTMLElementTagNameMap {