@lwc/engine-core 7.2.4 → 7.2.5

package/dist/index.cjs.js

@@ -5856,6 +5856,12 @@ function getVMBeingRendered() {
 function setVMBeingRendered(vm) {
     vmBeingRendered = vm;
 }
+const VALID_SCOPE_TOKEN_REGEX = /^[a-zA-Z0-9\-_.]+$/;
+// See W-16614556
+// TODO [#2826]: freeze the template object
+function isValidScopeToken(token) {
+    return shared.isString(token) && VALID_SCOPE_TOKEN_REGEX.test(token);
+}
 function validateSlots(vm) {
     assertNotProd(); // this method should never leak to prod
     const { cmpSlots } = vm;
@@ -6008,9 +6014,9 @@ function buildParseFragmentFn(createFragmentFn) {
                 }
             }
             // See W-16614556
-            if ((hasStyleToken && !shared.isString(stylesheetToken)) ||
-                (hasLegacyToken && !shared.isString(legacyStylesheetToken))) {
-                throw new Error('stylesheet token must be a string');
+            if ((hasStyleToken && !isValidScopeToken(stylesheetToken)) ||
+                (hasLegacyToken && !isValidScopeToken(legacyStylesheetToken))) {
+                throw new Error('stylesheet token must be a valid string');
             }
             // If legacy stylesheet tokens are required, then add them to the rendered string
             const stylesheetTokenToRender = stylesheetToken + (hasLegacyToken ? ` ${legacyStylesheetToken}` : '');
@@ -8134,5 +8140,5 @@ exports.swapTemplate = swapTemplate;
 exports.track = track;
 exports.unwrap = unwrap;
 exports.wire = wire;
-/** version: 7.2.4 */
+/** version: 7.2.5 */
 //# sourceMappingURL=index.cjs.js.map