@mintlify/common 1.0.753 → 1.0.755

package/dist/mdx/replaceVariables.js

@@ -1,8 +1,28 @@
+import filterXSS from 'xss';
+const VARIABLE_REGEX = /\{\{\s*([\w.\-]+)\s*\}\}/g;
+const EXECUTABLE_TAGS = [
+    'script',
+    'style',
+    'iframe',
+    'object',
+    'embed',
+    'form',
+    'link',
+    'meta',
+    'base',
+];
+function sanitizeVariableValue(value) {
+    return filterXSS(value, {
+        whiteList: {},
+        stripIgnoreTag: true,
+        stripIgnoreTagBody: EXECUTABLE_TAGS,
+    });
+}
 export function replaceVariables(content, variables) {
     if (!variables || Object.keys(variables).length === 0 || !content.includes('{{'))
         return content;
-    return content.replace(/\{\{\s*([\w.\-]+)\s*\}\}/g, (match, key) => {
+    return content.replace(VARIABLE_REGEX, (match, key) => {
         const value = variables[key];
-        return value !== undefined ? value : match;
+        return value !== undefined ? sanitizeVariableValue(value) : match;
     });
 }

package/dist/mdx/server-only/getMdx/snippets.js

@@ -26,7 +26,7 @@ export function createSnippetTreeMap(snippets) {
         // TODO: Better error handling for cyclical references
         if (((_a = orderedSnippets[0]) === null || _a === void 0 ? void 0 : _a.numSnippetsInContent) === 0) {
             orderedSnippets.forEach((snippet) => {
-                treeMap = addSnippetTreeToMap(snippet, treeMap);
+                treeMap = parseSnippetContentToMap(snippet, treeMap);
             });
             return treeMap;
         }
@@ -34,7 +34,7 @@ export function createSnippetTreeMap(snippets) {
         orderedSnippets.forEach((snippet) => __awaiter(this, void 0, void 0, function* () {
             if (snippet.numSnippetsInContent === 0) {
                 // No need to remove references if none exist
-                treeMap = addSnippetTreeToMap(snippet, treeMap);
+                treeMap = parseSnippetContentToMap(snippet, treeMap);
             }
             if (failedParseArr.length > 0) {
                 let prevArrLength = failedParseArr.length + 1;
@@ -65,7 +65,7 @@ export function createSnippetTreeMap(snippets) {
         return treeMap;
     });
 }
-function addSnippetTreeToMap(snippet, map) {
+function parseSnippetContentToMap(snippet, map) {
     try {
         const tree = fromMarkdown(snippet.content, {
             extensions: [gfm(), mdxjs()],
@@ -82,7 +82,7 @@ function addSnippetTreeToMap(snippet, map) {
 function addParsedSnippetTreeToMap(snippet, treeMap) {
     return __awaiter(this, void 0, void 0, function* () {
         const parsedContent = yield preparseSnippet(snippet, treeMap);
-        return addSnippetTreeToMap(Object.assign(Object.assign({}, snippet), { content: parsedContent }), treeMap);
+        return parseSnippetContentToMap(Object.assign(Object.assign({}, snippet), { content: parsedContent }), treeMap);
     });
 }
 /*

package/dist/mdx/server-only/getMdx.d.ts

@@ -11,7 +11,7 @@ export type GetMdxType = {
     panelMdxSource?: SerializeSuccess;
     panelMdxSourceWithNoJs?: SerializeSuccess;
 };
-export declare function getMdx({ path, content, metadata, snippets, subdomain, codeStyling, config, tailwindSelectors, pageType, trace, customLanguages, }: {
+export declare function getMdx({ path, content, metadata, snippets, subdomain, codeStyling, config, tailwindSelectors, pageType, trace, customLanguages, variables, }: {
     path: string;
     content: string;
     metadata: PageMetaTags;
@@ -23,5 +23,6 @@ export declare function getMdx({ path, content, metadata, snippets, subdomain, c
     pageType?: PageType;
     trace?: RunWithTracingFn;
     customLanguages?: string[];
+    variables?: Record<string, string>;
 }): Promise<GetMdxType>;
 export { createSnippetTreeMap, type Snippet };

package/dist/mdx/server-only/getMdx.js

@@ -11,13 +11,16 @@ import { serialize } from '@mintlify/mdx/server';
 import { getTailwindSelectors } from '../../css/tailwind.js';
 import { getMDXOptions, remarkMdxRemoveJs, remarkExpandContent, remarkSplitCodeGroup, remarkSplitTabs, remarkValidateSteps, remarkValidateTabs, } from '../../index.js';
 import { codeStylingToThemeOrThemes } from '../getCodeStyling.js';
+import { replaceVariables } from '../replaceVariables.js';
 import { createSnippetTreeMap } from './getMdx/snippets.js';
 export function getMdx(_a) {
-    return __awaiter(this, arguments, void 0, function* ({ path, content, metadata, snippets, subdomain, codeStyling, config, tailwindSelectors = undefined, pageType = 'default', trace = undefined, customLanguages = [], }) {
+    return __awaiter(this, arguments, void 0, function* ({ path, content, metadata, snippets, subdomain, codeStyling, config, tailwindSelectors = undefined, pageType = 'default', trace = undefined, customLanguages = [], variables = undefined, }) {
         const traceFn = trace !== null && trace !== void 0 ? trace : ((_name, fn) => fn());
+        const processedContent = replaceVariables(content, variables);
+        const processedSnippets = snippets.map((snippet) => (Object.assign(Object.assign({}, snippet), { content: replaceVariables(snippet.content, variables) })));
         if (!tailwindSelectors)
-            tailwindSelectors = yield traceFn('getMdx.getTailwindSelectors', () => __awaiter(this, void 0, void 0, function* () { return getTailwindSelectors({ content }); }));
-        const snippetTreeMap = yield traceFn('getMdx.createSnippetTreeMap', () => __awaiter(this, void 0, void 0, function* () { return createSnippetTreeMap(snippets); }));
+            tailwindSelectors = yield traceFn('getMdx.getTailwindSelectors', () => __awaiter(this, void 0, void 0, function* () { return getTailwindSelectors({ content: processedContent }); }));
+        const snippetTreeMap = yield traceFn('getMdx.createSnippetTreeMap', () => __awaiter(this, void 0, void 0, function* () { return createSnippetTreeMap(processedSnippets); }));
         const mdxOptionsData = {
             subdomain,
             snippetTreeMap,
@@ -43,7 +46,7 @@ export function getMdx(_a) {
         };
         const { mdxSource, mdxSourceWithNoJs } = yield traceFn('getMdx.compileMdx.mainContent', () => __awaiter(this, void 0, void 0, function* () {
             return compileMdx({
-                content,
+                content: processedContent,
                 scope,
                 mdxOptions,
                 mdxOptionsNoJs,