@lwc/synthetic-shadow 9.4.6-alpha.0 → 9.5.1

package/dist/env/shadow-root.d.ts

@@ -1,2 +1,8 @@
+export declare const NativeShadowRoot: {
+    new (): ShadowRoot;
+    prototype: ShadowRoot;
+};
 export declare const isInstanceOfNativeShadowRoot: (node: any) => node is ShadowRoot;
+export declare const nativeShadowRootInnerHTMLDescriptor: PropertyDescriptor | undefined;
+export declare const nativeShadowRootSetHTMLUnsafe: (html: string) => void;
 //# sourceMappingURL=shadow-root.d.ts.map

package/dist/index.cjs

@@ -194,7 +194,8 @@ const KEY__SHADOW_TOKEN_PRIVATE = '$$ShadowTokenKey$$';
 const KEY__SYNTHETIC_MODE = '$$lwc-synthetic-mode';
 const KEY__NATIVE_GET_ELEMENT_BY_ID = '$nativeGetElementById$';
 const KEY__NATIVE_QUERY_SELECTOR_ALL = '$nativeQuerySelectorAll$';
-/** version: 9.4.6-alpha.0 */
+const KEY__SANITIZE_HTML_CONTENT = '$sanitizeHtmlContent$';
+/** version: 9.5.1 */
 
 /**
  * Copyright (c) 2026 Salesforce, Inc.
@@ -202,7 +203,7 @@ const KEY__NATIVE_QUERY_SELECTOR_ALL = '$nativeQuerySelectorAll$';
 if (!globalThis.lwcRuntimeFlags) {
     Object.defineProperty(globalThis, 'lwcRuntimeFlags', { value: create(null) });
 }
-/** version: 9.4.6-alpha.0 */
+/** version: 9.5.1 */
 
 /*
  * Copyright (c) 2018, salesforce.com, inc.
@@ -360,6 +361,9 @@ const MutationObserverObserve = MO.prototype.observe;
 // Capture the global `ShadowRoot` since synthetic shadow will override it later
 const NativeShadowRoot = ShadowRoot;
 const isInstanceOfNativeShadowRoot = (node) => node instanceof NativeShadowRoot;
+// Captured before synthetic shadow overrides the prototype, so the wrappers wrap the real native accessors.
+const nativeShadowRootInnerHTMLDescriptor = getOwnPropertyDescriptor(NativeShadowRoot.prototype, 'innerHTML');
+const nativeShadowRootSetHTMLUnsafe = NativeShadowRoot.prototype.setHTMLUnsafe;
 
 /*
  * Copyright (c) 2023, Salesforce.com, inc.
@@ -2584,6 +2588,50 @@ Object.defineProperty(window, 'ShadowRoot', {
     writable: true,
 });
 
+/*
+ * Copyright (c) 2026, Salesforce, Inc.
+ * All rights reserved.
+ * SPDX-License-Identifier: MIT
+ * For full license text, see the LICENSE file in the repo root or https://opensource.org/licenses/MIT
+ */
+// This hook is set as a global because this package bundles a separate copy of `@lwc/shared` from the runtime,
+// so the `setHooks` it has access to is not the one where hooks are set.
+function maybeSanitize(value) {
+    if (lwcRuntimeFlags.DISABLE_NATIVE_SHADOWROOT_SINK_SANITIZATION) {
+        return value;
+    }
+    const sanitize = globalThis[KEY__SANITIZE_HTML_CONTENT];
+    return isFunction(sanitize) ? sanitize(value) : value;
+}
+// Our wrappers install as non-configurable, so a non-configurable descriptor already means one is
+// in place — use that as the idempotency signal instead of a separate marker property.
+function isLocked(proto, name) {
+    const descriptor = getOwnPropertyDescriptor(proto, name);
+    return descriptor?.configurable === false;
+}
+if (isFunction(nativeShadowRootInnerHTMLDescriptor?.set) &&
+    !isLocked(NativeShadowRoot.prototype, 'innerHTML')) {
+    const nativeInnerHTMLSetter = nativeShadowRootInnerHTMLDescriptor.set;
+    defineProperty(NativeShadowRoot.prototype, 'innerHTML', {
+        ...nativeShadowRootInnerHTMLDescriptor,
+        configurable: false,
+        set(value) {
+            nativeInnerHTMLSetter.call(this, maybeSanitize(value));
+        },
+    });
+}
+if (isFunction(nativeShadowRootSetHTMLUnsafe) &&
+    !isLocked(NativeShadowRoot.prototype, 'setHTMLUnsafe')) {
+    defineProperty(NativeShadowRoot.prototype, 'setHTMLUnsafe', {
+        writable: false,
+        enumerable: true,
+        configurable: false,
+        value(html) {
+            return nativeShadowRootSetHTMLUnsafe.call(this, maybeSanitize(html));
+        },
+    });
+}
+
 /*
  * Copyright (c) 2018, salesforce.com, inc.
  * All rights reserved.
@@ -4359,6 +4407,6 @@ defineProperty(Element.prototype, '$domManual$', {
     },
     configurable: true,
 });
-/** version: 9.4.6-alpha.0 */
+/** version: 9.5.1 */
 }
 //# sourceMappingURL=index.cjs.map

package/dist/index.js

@@ -192,7 +192,8 @@ const KEY__SHADOW_TOKEN_PRIVATE = '$$ShadowTokenKey$$';
 const KEY__SYNTHETIC_MODE = '$$lwc-synthetic-mode';
 const KEY__NATIVE_GET_ELEMENT_BY_ID = '$nativeGetElementById$';
 const KEY__NATIVE_QUERY_SELECTOR_ALL = '$nativeQuerySelectorAll$';
-/** version: 9.4.6-alpha.0 */
+const KEY__SANITIZE_HTML_CONTENT = '$sanitizeHtmlContent$';
+/** version: 9.5.1 */
 
 /**
  * Copyright (c) 2026 Salesforce, Inc.
@@ -200,7 +201,7 @@ const KEY__NATIVE_QUERY_SELECTOR_ALL = '$nativeQuerySelectorAll$';
 if (!globalThis.lwcRuntimeFlags) {
     Object.defineProperty(globalThis, 'lwcRuntimeFlags', { value: create(null) });
 }
-/** version: 9.4.6-alpha.0 */
+/** version: 9.5.1 */
 
 /*
  * Copyright (c) 2018, salesforce.com, inc.
@@ -358,6 +359,9 @@ const MutationObserverObserve = MO.prototype.observe;
 // Capture the global `ShadowRoot` since synthetic shadow will override it later
 const NativeShadowRoot = ShadowRoot;
 const isInstanceOfNativeShadowRoot = (node) => node instanceof NativeShadowRoot;
+// Captured before synthetic shadow overrides the prototype, so the wrappers wrap the real native accessors.
+const nativeShadowRootInnerHTMLDescriptor = getOwnPropertyDescriptor(NativeShadowRoot.prototype, 'innerHTML');
+const nativeShadowRootSetHTMLUnsafe = NativeShadowRoot.prototype.setHTMLUnsafe;
 
 /*
  * Copyright (c) 2023, Salesforce.com, inc.
@@ -2582,6 +2586,50 @@ Object.defineProperty(window, 'ShadowRoot', {
     writable: true,
 });
 
+/*
+ * Copyright (c) 2026, Salesforce, Inc.
+ * All rights reserved.
+ * SPDX-License-Identifier: MIT
+ * For full license text, see the LICENSE file in the repo root or https://opensource.org/licenses/MIT
+ */
+// This hook is set as a global because this package bundles a separate copy of `@lwc/shared` from the runtime,
+// so the `setHooks` it has access to is not the one where hooks are set.
+function maybeSanitize(value) {
+    if (lwcRuntimeFlags.DISABLE_NATIVE_SHADOWROOT_SINK_SANITIZATION) {
+        return value;
+    }
+    const sanitize = globalThis[KEY__SANITIZE_HTML_CONTENT];
+    return isFunction(sanitize) ? sanitize(value) : value;
+}
+// Our wrappers install as non-configurable, so a non-configurable descriptor already means one is
+// in place — use that as the idempotency signal instead of a separate marker property.
+function isLocked(proto, name) {
+    const descriptor = getOwnPropertyDescriptor(proto, name);
+    return descriptor?.configurable === false;
+}
+if (isFunction(nativeShadowRootInnerHTMLDescriptor?.set) &&
+    !isLocked(NativeShadowRoot.prototype, 'innerHTML')) {
+    const nativeInnerHTMLSetter = nativeShadowRootInnerHTMLDescriptor.set;
+    defineProperty(NativeShadowRoot.prototype, 'innerHTML', {
+        ...nativeShadowRootInnerHTMLDescriptor,
+        configurable: false,
+        set(value) {
+            nativeInnerHTMLSetter.call(this, maybeSanitize(value));
+        },
+    });
+}
+if (isFunction(nativeShadowRootSetHTMLUnsafe) &&
+    !isLocked(NativeShadowRoot.prototype, 'setHTMLUnsafe')) {
+    defineProperty(NativeShadowRoot.prototype, 'setHTMLUnsafe', {
+        writable: false,
+        enumerable: true,
+        configurable: false,
+        value(html) {
+            return nativeShadowRootSetHTMLUnsafe.call(this, maybeSanitize(html));
+        },
+    });
+}
+
 /*
  * Copyright (c) 2018, salesforce.com, inc.
  * All rights reserved.
@@ -4357,6 +4405,6 @@ defineProperty(Element.prototype, '$domManual$', {
     },
     configurable: true,
 });
-/** version: 9.4.6-alpha.0 */
+/** version: 9.5.1 */
 }
 //# sourceMappingURL=index.js.map

package/dist/polyfills/shadow-root/main.d.ts

@@ -1,2 +1,3 @@
 import './polyfill';
+import './sanitize-native-sink';
 //# sourceMappingURL=main.d.ts.map

package/dist/polyfills/shadow-root/sanitize-native-sink.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sanitize-native-sink.d.ts.map

package/package.json

@@ -4,7 +4,7 @@
         "You can safely modify dependencies, devDependencies, keywords, etc., but other props will be overwritten."
     ],
     "name": "@lwc/synthetic-shadow",
-    "version": "9.4.6-alpha.0",
+    "version": "9.5.1",
     "description": "Synthetic Shadow Root for LWC",
     "keywords": [
         "lwc"
@@ -51,8 +51,8 @@
         }
     },
     "devDependencies": {
-        "@lwc/features": "9.4.6-alpha.0",
-        "@lwc/shared": "9.4.6-alpha.0"
+        "@lwc/features": "9.5.1",
+        "@lwc/shared": "9.5.1"
     },
     "lwc": {
         "modules": [