@lwrjs/client-modules 0.11.0-alpha.12 → 0.11.0-alpha.13

package/build/modules/lwr/lockerDefine/lockerDefine.js

@@ -1453,7 +1453,7 @@ const {
 } = PromiseCtor$LWS.prototype;
 const PromiseResolve$LWS = PromiseCtor$LWS.resolve.bind(PromiseCtor$LWS);
 const PromiseReject$LWS = PromiseCtor$LWS.reject.bind(PromiseCtor$LWS);
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -2112,7 +2112,7 @@ const {
 const XhrProtoResponseTextGetter$LWS = ObjectLookupOwnGetter$LWS$1(XhrProto$LWS, 'responseText');
 const XhrProtoStatusGetter$LWS = ObjectLookupOwnGetter$LWS$1(XhrProto$LWS, 'status');
 ObjectLookupOwnSetter$LWS(XhrProto$LWS, 'withCredentials');
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -2171,7 +2171,7 @@ function sanitizeURLForElement$LWS(url$LWS) {
 function sanitizeURLString$LWS(urlString$LWS) {
   return urlString$LWS === '' ? urlString$LWS : ReflectApply$LWS$1(StringProtoReplace$LWS, urlString$LWS, [newlinesAndTabsRegExp$LWS, '']);
 }
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*! @license DOMPurify 3.0.5 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.0.5/LICENSE */
 
@@ -3857,7 +3857,7 @@ try {
   // swallow
 }
 const trusted = createPolicy('trusted', policyOptions);
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -4106,7 +4106,7 @@ function blobSanitizer$LWS(sandboxKey$LWS) {
   }
   return getSanitizerForConfig$LWS(sandboxKey$LWS, 'STRING_BLOB_HTML');
 }
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*!
  * Copyright (C) 2023 salesforce.com, inc.
@@ -4304,7 +4304,7 @@ function encloseSrcSetter$LWS(targetElement$LWS) {
     ReflectApply$LWS$1(ElementProtoSetAttributeNS$LWS, targetElement$LWS, [attributeNamespaceURI$LWS, attributeName$LWS, src$LWS]);
   };
 }
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -4492,7 +4492,7 @@ class VirtualRegistry$LWS {
       this._pendingRegistryByElement.set(instance$LWS, originalDefinition$LWS);
       // We need to install the minimum HTMLElement prototype so that
       // this instance works like a regular element without a registered
-      // definition. `this.instanceRegistry.upgrade()` will eventually
+      // definition. `instanceRegistryMap.get(this)!.upgrade()` will eventually
       // install the full custom element prototype.
       ReflectSetPrototypeOf$LWS$1(instance$LWS, this._originalHTMLElementCtor.prototype);
     }
@@ -4597,6 +4597,7 @@ function createDefinitionRecord$LWS(LocalCtor$LWS) {
     formStateRestoreCallback: typeof formStateRestoreCallback$LWS === 'function' ? formStateRestoreCallback$LWS : undefined
   };
 }
+const instanceRegistryMap$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1());
 // Helper to create stand-in element for each tagName registered that delegates
 // out to the registry for the given element.
 function createPivotingClass$LWS(document$LWS, originalHTMLElementCtor$LWS,
@@ -4612,11 +4613,12 @@ originalDefinition$LWS, tagName$LWS) {
       // b) A `new LocalCtor()` call from the blue realm (system mode).
       // c) A `new LocalCtor()` call from the red realm (sandbox).
       super();
+      let instanceRegistry$LWS;
       if (localRegistry$LWS && definition$LWS) {
-        this.instanceRegistry = localRegistry$LWS;
+        instanceRegistry$LWS = localRegistry$LWS;
         localRegistry$LWS.setDefinition(this, definition$LWS);
       } else {
-        this.instanceRegistry =
+        instanceRegistry$LWS =
         // Usually `el.innerHTML` or any other parsing driven
         // initialization.
         getNodeRegistry$LWS(document$LWS, this) ||
@@ -4627,11 +4629,12 @@ originalDefinition$LWS, tagName$LWS) {
         getCurrentRegistry$LWS() ||
         // Global stuff.
         getGlobalCustomElementRegistry$LWS(document$LWS, originalHTMLElementCtor$LWS);
-        this.instanceRegistry.scheduleOrUpgrade(this, tagName$LWS, originalDefinition$LWS);
+        instanceRegistry$LWS.scheduleOrUpgrade(this, tagName$LWS, originalDefinition$LWS);
       }
+      instanceRegistryMap$LWS.set(this, instanceRegistry$LWS);
     }
     adoptedCallback() {
-      const definition$LWS = this.instanceRegistry.getDefinition(this);
+      const definition$LWS = instanceRegistryMap$LWS.get(this).getDefinition(this);
       const adoptedCallback$LWS = definition$LWS && definition$LWS.adoptedCallback;
       // istanbul ignore else: currently unreachable via tests
       if (adoptedCallback$LWS) {
@@ -4639,7 +4642,7 @@ originalDefinition$LWS, tagName$LWS) {
       }
     }
     attributeChangedCallback(attrName$LWS, oldValue$LWS, newValue$LWS) {
-      const definition$LWS = this.instanceRegistry.getDefinition(this);
+      const definition$LWS = instanceRegistryMap$LWS.get(this).getDefinition(this);
       const attributeChangedCallback$LWS = definition$LWS && definition$LWS.attributeChangedCallback;
       if (attributeChangedCallback$LWS && (
       // If both definitions are the same, then the observedAttributes
@@ -4651,9 +4654,7 @@ originalDefinition$LWS, tagName$LWS) {
       }
     }
     connectedCallback() {
-      const {
-        instanceRegistry: instanceRegistry$LWS
-      } = this;
+      const instanceRegistry$LWS = instanceRegistryMap$LWS.get(this);
       const definition$LWS = instanceRegistry$LWS.getDefinition(this);
       if (definition$LWS) {
         const {
@@ -4667,9 +4668,7 @@ originalDefinition$LWS, tagName$LWS) {
       }
     }
     disconnectedCallback() {
-      const {
-        instanceRegistry: instanceRegistry$LWS
-      } = this;
+      const instanceRegistry$LWS = instanceRegistryMap$LWS.get(this);
       const definition$LWS = instanceRegistry$LWS.getDefinition(this);
       if (definition$LWS) {
         const {
@@ -4683,21 +4682,21 @@ originalDefinition$LWS, tagName$LWS) {
       }
     }
     formAssociatedCallback(form$LWS) {
-      const definition$LWS = this.instanceRegistry.getDefinition(this);
+      const definition$LWS = instanceRegistryMap$LWS.get(this).getDefinition(this);
       const formAssociatedCallback$LWS = definition$LWS && definition$LWS.formAssociatedCallback;
       if (formAssociatedCallback$LWS) {
         ReflectApply$LWS$1(formAssociatedCallback$LWS, this, [form$LWS]);
       }
     }
     formDisabledCallback(disabled$LWS) {
-      const definition$LWS = this.instanceRegistry.getDefinition(this);
+      const definition$LWS = instanceRegistryMap$LWS.get(this).getDefinition(this);
       const formDisabledCallback$LWS = definition$LWS && definition$LWS.formDisabledCallback;
       if (formDisabledCallback$LWS) {
         ReflectApply$LWS$1(formDisabledCallback$LWS, this, [disabled$LWS]);
       }
     }
     formResetCallback() {
-      const definition$LWS = this.instanceRegistry.getDefinition(this);
+      const definition$LWS = instanceRegistryMap$LWS.get(this).getDefinition(this);
       const formResetCallback$LWS = definition$LWS && definition$LWS.formResetCallback;
       if (formResetCallback$LWS) {
         ReflectApply$LWS$1(formResetCallback$LWS, this, []);
@@ -4705,7 +4704,7 @@ originalDefinition$LWS, tagName$LWS) {
     }
     // istanbul ignore next: currently unreachable via tests because the browser mechanics that would result in its execution cannot be simulated or reproduced.
     formStateRestoreCallback(state$LWS, reason$LWS) {
-      const definition$LWS = this.instanceRegistry.getDefinition(this);
+      const definition$LWS = instanceRegistryMap$LWS.get(this).getDefinition(this);
       const formStateRestoreCallback$LWS = definition$LWS && definition$LWS.formStateRestoreCallback;
       if (formStateRestoreCallback$LWS) {
         ReflectApply$LWS$1(formStateRestoreCallback$LWS, this, [state$LWS, reason$LWS]);
@@ -5861,6 +5860,9 @@ function initDistortionDocumentDomainSetter$LWS({
 const {
   isSharedElement: isSharedElement$r$LWS
 } = rootValidator$LWS;
+function throwLockerSecurityError$LWS(command$LWS, target$LWS) {
+  throw new LockerSecurityError$LWS(`Cannot execute command '${command$LWS}' on ${ReflectApply$LWS$1(NodeProtoNodeNameGetter$LWS, target$LWS, [])}.`);
+}
 function initDistortionDocumentExecCommand$LWS({
   document: document$LWS,
   globalObject: {
@@ -5879,29 +5881,38 @@ function initDistortionDocumentExecCommand$LWS({
     type: type$LWS
   }) {
     return [originalExecCommand$LWS, function execCommand$LWS(...args$LWS) {
-      if (args$LWS.length > 2) {
-        const {
-          2: unsanitizedValue$LWS
-        } = args$LWS;
-        // istanbul ignore else: needs default platform behavior test
-        if (unsanitizedValue$LWS !== null && unsanitizedValue$LWS !== undefined) {
-          const command$LWS = toString$LWS(args$LWS[0]);
-          // istanbul ignore else: LWS does not test for all possible commands
-          if (ReflectApply$LWS$1(StringProtoToLowerCase$LWS, command$LWS, []) === 'inserthtml') {
-            // istanbul ignore else: external is the default sandbox type for coverage runs
-            if (type$LWS === 0 /* SandboxType.External */) {
-              const activeElement$LWS = ReflectApply$LWS$1(originalActiveElement$LWS, this, []);
-              if (isSharedElement$r$LWS(activeElement$LWS) && ReflectApply$LWS$1(originalIsContentEditable$LWS, activeElement$LWS, [])) {
-                throw new LockerSecurityError$LWS(`Cannot execute command '${command$LWS}' on ${ReflectApply$LWS$1(NodeProtoNodeNameGetter$LWS, activeElement$LWS, [])}.`);
+      const {
+        length: length$LWS
+      } = args$LWS;
+      if (length$LWS >= 1) {
+        const command$LWS = toString$LWS(args$LWS[0]);
+        const loweredCommand$LWS = ReflectApply$LWS$1(StringProtoToLowerCase$LWS, command$LWS, []);
+        if (length$LWS === 1 && loweredCommand$LWS === 'selectall' && this === rootDocument$LWS) {
+          throwLockerSecurityError$LWS(command$LWS, this);
+        }
+        if (length$LWS > 2) {
+          const {
+            2: unsanitizedValue$LWS
+          } = args$LWS;
+          // istanbul ignore else: needs default platform behavior test
+          if (unsanitizedValue$LWS !== null && unsanitizedValue$LWS !== undefined) {
+            // istanbul ignore else: LWS does not test for all possible commands
+            if (loweredCommand$LWS === 'inserthtml') {
+              // istanbul ignore else: external is the default sandbox type for coverage runs
+              if (type$LWS === 0 /* SandboxType.External */) {
+                const activeElement$LWS = ReflectApply$LWS$1(originalActiveElement$LWS, this, []);
+                if (isSharedElement$r$LWS(activeElement$LWS) && ReflectApply$LWS$1(originalIsContentEditable$LWS, activeElement$LWS, [])) {
+                  throwLockerSecurityError$LWS(command$LWS, activeElement$LWS);
+                }
               }
+              // This must be called to signal to the virtual
+              // CustomElementRegistry that the next thing created
+              // MAY CONTAIN a custom element, which must be marked
+              // for association to this sandbox.
+              setCustomElementsRegistry$LWS(document$LWS, key$LWS);
+              args$LWS[0] = command$LWS;
+              args$LWS[2] = lwsInternalPolicy$LWS.createHTML(unsanitizedValue$LWS, key$LWS, ContentType$LWS.HTML);
             }
-            // This must be called to signal to the virtual
-            // CustomElementRegistry that the next thing created
-            // MAY CONTAIN a custom element, which must be marked
-            // for association to this sandbox.
-            setCustomElementsRegistry$LWS(document$LWS, key$LWS);
-            args$LWS[0] = command$LWS;
-            args$LWS[2] = lwsInternalPolicy$LWS.createHTML(unsanitizedValue$LWS, key$LWS, ContentType$LWS.HTML);
           }
         }
       }
@@ -9862,8 +9873,8 @@ const HTMLElementBlockedProperties$LWS = ['nonce', 'onrejectionhandled', 'onunha
 const HTMLEmbedElementBlockedProperties$LWS = ['getSVGDocument'];
 
 // https://www.w3schools.com/tags/tag_iframe.asp
-const HTMLIFrameElementBlockedAttributes$LWS = ['allowpaymentrequest', 'referrerpolicy', 'srcdoc'];
-const HTMLIFrameElementBlockedProperties$LWS = ['allowPaymentRequest', 'csp', 'featurePolicy', 'getSVGDocument', 'referrerPolicy', 'srcdoc'];
+const HTMLIFrameElementBlockedAttributes$LWS = ['srcdoc'];
+const HTMLIFrameElementBlockedProperties$LWS = ['getSVGDocument', 'srcdoc'];
 const HTMLObjectElementBlockedProperties$LWS = ['getSVGDocument'];
 const HTMLScriptElementBlockedAttributes$LWS = ['nonce'];
 const HTMLScriptElementBlockedProperties$LWS = ['nonce'];
@@ -9872,7 +9883,7 @@ const SVGElementBlockedProperties$LWS = ['nonce'];
 const UIEventBlockedProperties$LWS = ['rangeParent'];
 const WindowBlockedProperties$LWS = ['find'];
 const XSLTProcessorBlockedProperties$LWS = ['transformToDocument', 'transformToFragment'];
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -15724,7 +15735,7 @@ function wrapPlatformResourceLoader$LWS(dep$LWS, key$LWS) {
   depRegistry$LWS.set(dep$LWS, secureDep$LWS);
   return secureDep$LWS;
 }
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 const loaderDefine = globalThis.LWR.define;
 

package/build/modules/lwr/lockerSandbox/lockerSandbox.js

@@ -1453,7 +1453,7 @@ const {
 } = PromiseCtor$LWS.prototype;
 const PromiseResolve$LWS = PromiseCtor$LWS.resolve.bind(PromiseCtor$LWS);
 const PromiseReject$LWS = PromiseCtor$LWS.reject.bind(PromiseCtor$LWS);
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -2112,7 +2112,7 @@ const {
 const XhrProtoResponseTextGetter$LWS = ObjectLookupOwnGetter$LWS$1(XhrProto$LWS, 'responseText');
 const XhrProtoStatusGetter$LWS = ObjectLookupOwnGetter$LWS$1(XhrProto$LWS, 'status');
 ObjectLookupOwnSetter$LWS(XhrProto$LWS, 'withCredentials');
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -2171,7 +2171,7 @@ function sanitizeURLForElement$LWS(url$LWS) {
 function sanitizeURLString$LWS(urlString$LWS) {
   return urlString$LWS === '' ? urlString$LWS : ReflectApply$LWS$1(StringProtoReplace$LWS, urlString$LWS, [newlinesAndTabsRegExp$LWS, '']);
 }
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*! @license DOMPurify 3.0.5 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.0.5/LICENSE */
 
@@ -3857,7 +3857,7 @@ try {
   // swallow
 }
 const trusted = createPolicy('trusted', policyOptions);
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -4106,7 +4106,7 @@ function blobSanitizer$LWS(sandboxKey$LWS) {
   }
   return getSanitizerForConfig$LWS(sandboxKey$LWS, 'STRING_BLOB_HTML');
 }
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*!
  * Copyright (C) 2023 salesforce.com, inc.
@@ -4304,7 +4304,7 @@ function encloseSrcSetter$LWS(targetElement$LWS) {
     ReflectApply$LWS$1(ElementProtoSetAttributeNS$LWS, targetElement$LWS, [attributeNamespaceURI$LWS, attributeName$LWS, src$LWS]);
   };
 }
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -4492,7 +4492,7 @@ class VirtualRegistry$LWS {
       this._pendingRegistryByElement.set(instance$LWS, originalDefinition$LWS);
       // We need to install the minimum HTMLElement prototype so that
       // this instance works like a regular element without a registered
-      // definition. `this.instanceRegistry.upgrade()` will eventually
+      // definition. `instanceRegistryMap.get(this)!.upgrade()` will eventually
       // install the full custom element prototype.
       ReflectSetPrototypeOf$LWS$1(instance$LWS, this._originalHTMLElementCtor.prototype);
     }
@@ -4597,6 +4597,7 @@ function createDefinitionRecord$LWS(LocalCtor$LWS) {
     formStateRestoreCallback: typeof formStateRestoreCallback$LWS === 'function' ? formStateRestoreCallback$LWS : undefined
   };
 }
+const instanceRegistryMap$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1());
 // Helper to create stand-in element for each tagName registered that delegates
 // out to the registry for the given element.
 function createPivotingClass$LWS(document$LWS, originalHTMLElementCtor$LWS,
@@ -4612,11 +4613,12 @@ originalDefinition$LWS, tagName$LWS) {
       // b) A `new LocalCtor()` call from the blue realm (system mode).
       // c) A `new LocalCtor()` call from the red realm (sandbox).
       super();
+      let instanceRegistry$LWS;
       if (localRegistry$LWS && definition$LWS) {
-        this.instanceRegistry = localRegistry$LWS;
+        instanceRegistry$LWS = localRegistry$LWS;
         localRegistry$LWS.setDefinition(this, definition$LWS);
       } else {
-        this.instanceRegistry =
+        instanceRegistry$LWS =
         // Usually `el.innerHTML` or any other parsing driven
         // initialization.
         getNodeRegistry$LWS(document$LWS, this) ||
@@ -4627,11 +4629,12 @@ originalDefinition$LWS, tagName$LWS) {
         getCurrentRegistry$LWS() ||
         // Global stuff.
         getGlobalCustomElementRegistry$LWS(document$LWS, originalHTMLElementCtor$LWS);
-        this.instanceRegistry.scheduleOrUpgrade(this, tagName$LWS, originalDefinition$LWS);
+        instanceRegistry$LWS.scheduleOrUpgrade(this, tagName$LWS, originalDefinition$LWS);
       }
+      instanceRegistryMap$LWS.set(this, instanceRegistry$LWS);
     }
     adoptedCallback() {
-      const definition$LWS = this.instanceRegistry.getDefinition(this);
+      const definition$LWS = instanceRegistryMap$LWS.get(this).getDefinition(this);
       const adoptedCallback$LWS = definition$LWS && definition$LWS.adoptedCallback;
       // istanbul ignore else: currently unreachable via tests
       if (adoptedCallback$LWS) {
@@ -4639,7 +4642,7 @@ originalDefinition$LWS, tagName$LWS) {
       }
     }
     attributeChangedCallback(attrName$LWS, oldValue$LWS, newValue$LWS) {
-      const definition$LWS = this.instanceRegistry.getDefinition(this);
+      const definition$LWS = instanceRegistryMap$LWS.get(this).getDefinition(this);
       const attributeChangedCallback$LWS = definition$LWS && definition$LWS.attributeChangedCallback;
       if (attributeChangedCallback$LWS && (
       // If both definitions are the same, then the observedAttributes
@@ -4651,9 +4654,7 @@ originalDefinition$LWS, tagName$LWS) {
       }
     }
     connectedCallback() {
-      const {
-        instanceRegistry: instanceRegistry$LWS
-      } = this;
+      const instanceRegistry$LWS = instanceRegistryMap$LWS.get(this);
       const definition$LWS = instanceRegistry$LWS.getDefinition(this);
       if (definition$LWS) {
         const {
@@ -4667,9 +4668,7 @@ originalDefinition$LWS, tagName$LWS) {
       }
     }
     disconnectedCallback() {
-      const {
-        instanceRegistry: instanceRegistry$LWS
-      } = this;
+      const instanceRegistry$LWS = instanceRegistryMap$LWS.get(this);
       const definition$LWS = instanceRegistry$LWS.getDefinition(this);
       if (definition$LWS) {
         const {
@@ -4683,21 +4682,21 @@ originalDefinition$LWS, tagName$LWS) {
       }
     }
     formAssociatedCallback(form$LWS) {
-      const definition$LWS = this.instanceRegistry.getDefinition(this);
+      const definition$LWS = instanceRegistryMap$LWS.get(this).getDefinition(this);
       const formAssociatedCallback$LWS = definition$LWS && definition$LWS.formAssociatedCallback;
       if (formAssociatedCallback$LWS) {
         ReflectApply$LWS$1(formAssociatedCallback$LWS, this, [form$LWS]);
       }
     }
     formDisabledCallback(disabled$LWS) {
-      const definition$LWS = this.instanceRegistry.getDefinition(this);
+      const definition$LWS = instanceRegistryMap$LWS.get(this).getDefinition(this);
       const formDisabledCallback$LWS = definition$LWS && definition$LWS.formDisabledCallback;
       if (formDisabledCallback$LWS) {
         ReflectApply$LWS$1(formDisabledCallback$LWS, this, [disabled$LWS]);
       }
     }
     formResetCallback() {
-      const definition$LWS = this.instanceRegistry.getDefinition(this);
+      const definition$LWS = instanceRegistryMap$LWS.get(this).getDefinition(this);
       const formResetCallback$LWS = definition$LWS && definition$LWS.formResetCallback;
       if (formResetCallback$LWS) {
         ReflectApply$LWS$1(formResetCallback$LWS, this, []);
@@ -4705,7 +4704,7 @@ originalDefinition$LWS, tagName$LWS) {
     }
     // istanbul ignore next: currently unreachable via tests because the browser mechanics that would result in its execution cannot be simulated or reproduced.
     formStateRestoreCallback(state$LWS, reason$LWS) {
-      const definition$LWS = this.instanceRegistry.getDefinition(this);
+      const definition$LWS = instanceRegistryMap$LWS.get(this).getDefinition(this);
       const formStateRestoreCallback$LWS = definition$LWS && definition$LWS.formStateRestoreCallback;
       if (formStateRestoreCallback$LWS) {
         ReflectApply$LWS$1(formStateRestoreCallback$LWS, this, [state$LWS, reason$LWS]);
@@ -5861,6 +5860,9 @@ function initDistortionDocumentDomainSetter$LWS({
 const {
   isSharedElement: isSharedElement$r$LWS
 } = rootValidator$LWS;
+function throwLockerSecurityError$LWS(command$LWS, target$LWS) {
+  throw new LockerSecurityError$LWS(`Cannot execute command '${command$LWS}' on ${ReflectApply$LWS$1(NodeProtoNodeNameGetter$LWS, target$LWS, [])}.`);
+}
 function initDistortionDocumentExecCommand$LWS({
   document: document$LWS,
   globalObject: {
@@ -5879,29 +5881,38 @@ function initDistortionDocumentExecCommand$LWS({
     type: type$LWS
   }) {
     return [originalExecCommand$LWS, function execCommand$LWS(...args$LWS) {
-      if (args$LWS.length > 2) {
-        const {
-          2: unsanitizedValue$LWS
-        } = args$LWS;
-        // istanbul ignore else: needs default platform behavior test
-        if (unsanitizedValue$LWS !== null && unsanitizedValue$LWS !== undefined) {
-          const command$LWS = toString$LWS(args$LWS[0]);
-          // istanbul ignore else: LWS does not test for all possible commands
-          if (ReflectApply$LWS$1(StringProtoToLowerCase$LWS, command$LWS, []) === 'inserthtml') {
-            // istanbul ignore else: external is the default sandbox type for coverage runs
-            if (type$LWS === 0 /* SandboxType.External */) {
-              const activeElement$LWS = ReflectApply$LWS$1(originalActiveElement$LWS, this, []);
-              if (isSharedElement$r$LWS(activeElement$LWS) && ReflectApply$LWS$1(originalIsContentEditable$LWS, activeElement$LWS, [])) {
-                throw new LockerSecurityError$LWS(`Cannot execute command '${command$LWS}' on ${ReflectApply$LWS$1(NodeProtoNodeNameGetter$LWS, activeElement$LWS, [])}.`);
+      const {
+        length: length$LWS
+      } = args$LWS;
+      if (length$LWS >= 1) {
+        const command$LWS = toString$LWS(args$LWS[0]);
+        const loweredCommand$LWS = ReflectApply$LWS$1(StringProtoToLowerCase$LWS, command$LWS, []);
+        if (length$LWS === 1 && loweredCommand$LWS === 'selectall' && this === rootDocument$LWS) {
+          throwLockerSecurityError$LWS(command$LWS, this);
+        }
+        if (length$LWS > 2) {
+          const {
+            2: unsanitizedValue$LWS
+          } = args$LWS;
+          // istanbul ignore else: needs default platform behavior test
+          if (unsanitizedValue$LWS !== null && unsanitizedValue$LWS !== undefined) {
+            // istanbul ignore else: LWS does not test for all possible commands
+            if (loweredCommand$LWS === 'inserthtml') {
+              // istanbul ignore else: external is the default sandbox type for coverage runs
+              if (type$LWS === 0 /* SandboxType.External */) {
+                const activeElement$LWS = ReflectApply$LWS$1(originalActiveElement$LWS, this, []);
+                if (isSharedElement$r$LWS(activeElement$LWS) && ReflectApply$LWS$1(originalIsContentEditable$LWS, activeElement$LWS, [])) {
+                  throwLockerSecurityError$LWS(command$LWS, activeElement$LWS);
+                }
               }
+              // This must be called to signal to the virtual
+              // CustomElementRegistry that the next thing created
+              // MAY CONTAIN a custom element, which must be marked
+              // for association to this sandbox.
+              setCustomElementsRegistry$LWS(document$LWS, key$LWS);
+              args$LWS[0] = command$LWS;
+              args$LWS[2] = lwsInternalPolicy$LWS.createHTML(unsanitizedValue$LWS, key$LWS, ContentType$LWS.HTML);
             }
-            // This must be called to signal to the virtual
-            // CustomElementRegistry that the next thing created
-            // MAY CONTAIN a custom element, which must be marked
-            // for association to this sandbox.
-            setCustomElementsRegistry$LWS(document$LWS, key$LWS);
-            args$LWS[0] = command$LWS;
-            args$LWS[2] = lwsInternalPolicy$LWS.createHTML(unsanitizedValue$LWS, key$LWS, ContentType$LWS.HTML);
           }
         }
       }
@@ -9862,8 +9873,8 @@ const HTMLElementBlockedProperties$LWS = ['nonce', 'onrejectionhandled', 'onunha
 const HTMLEmbedElementBlockedProperties$LWS = ['getSVGDocument'];
 
 // https://www.w3schools.com/tags/tag_iframe.asp
-const HTMLIFrameElementBlockedAttributes$LWS = ['allowpaymentrequest', 'referrerpolicy', 'srcdoc'];
-const HTMLIFrameElementBlockedProperties$LWS = ['allowPaymentRequest', 'csp', 'featurePolicy', 'getSVGDocument', 'referrerPolicy', 'srcdoc'];
+const HTMLIFrameElementBlockedAttributes$LWS = ['srcdoc'];
+const HTMLIFrameElementBlockedProperties$LWS = ['getSVGDocument', 'srcdoc'];
 const HTMLObjectElementBlockedProperties$LWS = ['getSVGDocument'];
 const HTMLScriptElementBlockedAttributes$LWS = ['nonce'];
 const HTMLScriptElementBlockedProperties$LWS = ['nonce'];
@@ -9872,7 +9883,7 @@ const SVGElementBlockedProperties$LWS = ['nonce'];
 const UIEventBlockedProperties$LWS = ['rangeParent'];
 const WindowBlockedProperties$LWS = ['find'];
 const XSLTProcessorBlockedProperties$LWS = ['transformToDocument', 'transformToFragment'];
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -15756,7 +15767,7 @@ function wrapPlatformResourceLoader$LWS(dep$LWS, key$LWS) {
   depRegistry$LWS.set(dep$LWS, secureDep$LWS);
   return secureDep$LWS;
 }
-/*! version: 0.20.4 */
+/*! version: 0.20.5 */
 
 export { CORE_SANDBOX_KEY$LWS as CORE_SANDBOX_KEY, createRootWindowSandboxRecord$LWS as createRootWindowSandboxRecord, evaluateFunction$LWS as evaluateFunction, evaluateInCoreSandbox$LWS as evaluateInCoreSandbox, evaluateInSandbox$LWS as evaluateInSandbox, trusted, wrapDependency$LWS as wrapDependency };
 //# sourceMappingURL=lockerSandbox.js.map

package/package.json

@@ -4,7 +4,7 @@
     "publishConfig": {
         "access": "public"
     },
-    "version": "0.11.0-alpha.12",
+    "version": "0.11.0-alpha.13",
     "homepage": "https://developer.salesforce.com/docs/platform/lwr/overview",
     "repository": {
         "type": "git",
@@ -33,11 +33,11 @@
         "build:platform": "node scripts/strip-for-core.js"
     },
     "dependencies": {
-        "@locker/sandbox": "0.20.4",
-        "@lwrjs/shared-utils": "0.11.0-alpha.12"
+        "@locker/sandbox": "0.20.5",
+        "@lwrjs/shared-utils": "0.11.0-alpha.13"
     },
     "devDependencies": {
-        "@lwrjs/types": "0.11.0-alpha.12",
+        "@lwrjs/types": "0.11.0-alpha.13",
         "@rollup/plugin-node-resolve": "^15.0.2",
         "@rollup/plugin-sucrase": "^5.0.2",
         "@rollup/plugin-terser": "^0.4.4",
@@ -69,5 +69,5 @@
     "volta": {
         "extends": "../../../package.json"
     },
-    "gitHead": "e19ffe5a48dc2b2b6d74d8acfa9658bedb5dd1ff"
+    "gitHead": "101ac765e89de3b378b4c049cdeb0cfc635ae22a"
 }