@nocios/crudify-ui 3.0.58 → 3.0.62

package/dist/index.d.mts

@@ -399,6 +399,7 @@ type NotificationOptions = {
         vertical: "top" | "bottom";
         horizontal: "left" | "center" | "right";
     };
+    allowHtml?: boolean;
 };
 type SessionProviderProps = {
     children: ReactNode;
@@ -751,11 +752,13 @@ interface Notification {
     severity: NotificationSeverity;
     autoHideDuration?: number;
     persistent?: boolean;
+    allowHtml?: boolean;
 }
 interface GlobalNotificationContextValue {
     showNotification: (message: string, severity?: NotificationSeverity, options?: {
         autoHideDuration?: number;
         persistent?: boolean;
+        allowHtml?: boolean;
     }) => string;
     hideNotification: (id: string) => void;
     clearAllNotifications: () => void;
@@ -769,6 +772,7 @@ interface GlobalNotificationProviderProps {
         horizontal: "left" | "center" | "right";
     };
     enabled?: boolean;
+    allowHtml?: boolean;
 }
 declare const GlobalNotificationProvider: React.FC<GlobalNotificationProviderProps>;
 declare const useGlobalNotification: () => GlobalNotificationContextValue;

package/dist/index.d.ts

@@ -399,6 +399,7 @@ type NotificationOptions = {
         vertical: "top" | "bottom";
         horizontal: "left" | "center" | "right";
     };
+    allowHtml?: boolean;
 };
 type SessionProviderProps = {
     children: ReactNode;
@@ -751,11 +752,13 @@ interface Notification {
     severity: NotificationSeverity;
     autoHideDuration?: number;
     persistent?: boolean;
+    allowHtml?: boolean;
 }
 interface GlobalNotificationContextValue {
     showNotification: (message: string, severity?: NotificationSeverity, options?: {
         autoHideDuration?: number;
         persistent?: boolean;
+        allowHtml?: boolean;
     }) => string;
     hideNotification: (id: string) => void;
     clearAllNotifications: () => void;
@@ -769,6 +772,7 @@ interface GlobalNotificationProviderProps {
         horizontal: "left" | "center" | "right";
     };
     enabled?: boolean;
+    allowHtml?: boolean;
 }
 declare const GlobalNotificationProvider: React.FC<GlobalNotificationProviderProps>;
 declare const useGlobalNotification: () => GlobalNotificationContextValue;

package/dist/index.js

@@ -1401,15 +1401,33 @@ var isTokenExpired = (token) => {
 var import_react6 = require("react");
 var import_material = require("@mui/material");
 var import_uuid = require("uuid");
+var import_dompurify = __toESM(require("dompurify"));
 var import_jsx_runtime4 = require("react/jsx-runtime");
 var GlobalNotificationContext = (0, import_react6.createContext)(null);
+var sanitizeNotificationContent = (html) => {
+  return import_dompurify.default.sanitize(html, {
+    // Solo permitir tags seguros para notificaciones
+    ALLOWED_TAGS: ["b", "i", "em", "strong", "br", "span"],
+    ALLOWED_ATTR: ["class"],
+    // Remover scripts y eventos
+    FORBID_TAGS: ["script", "iframe", "object", "embed"],
+    FORBID_ATTR: ["onload", "onerror", "onclick", "onmouseover", "onfocus", "onblur"],
+    // Configuración adicional de seguridad
+    WHOLE_DOCUMENT: false,
+    RETURN_DOM: false,
+    RETURN_DOM_FRAGMENT: false,
+    RETURN_TRUSTED_TYPE: false
+  });
+};
 var GlobalNotificationProvider = ({
   children,
   maxNotifications = 5,
   defaultAutoHideDuration = 6e3,
   position = { vertical: "top", horizontal: "right" },
-  enabled = false
+  enabled = false,
   // ✅ Por defecto DESACTIVADO
+  allowHtml = false
+  // Por defecto no permitir HTML
 }) => {
   const [notifications, setNotifications] = (0, import_react6.useState)([]);
   const showNotification = (0, import_react6.useCallback)(
@@ -1417,13 +1435,23 @@ var GlobalNotificationProvider = ({
       if (!enabled) {
         return "";
       }
+      if (!message || typeof message !== "string") {
+        console.warn("\u26A0\uFE0F GlobalNotificationProvider: Invalid message provided");
+        return "";
+      }
+      if (message.length > 1e3) {
+        console.warn("\u26A0\uFE0F GlobalNotificationProvider: Message too long, truncating");
+        message = message.substring(0, 1e3) + "...";
+      }
       const id = (0, import_uuid.v4)();
       const newNotification = {
         id,
         message,
         severity,
         autoHideDuration: options?.autoHideDuration ?? defaultAutoHideDuration,
-        persistent: options?.persistent ?? false
+        persistent: options?.persistent ?? false,
+        allowHtml: options?.allowHtml ?? allowHtml
+        // Usar valor del provider por defecto
       };
       setNotifications((prev) => {
         const updatedNotifications = prev.length >= maxNotifications ? prev.slice(-(maxNotifications - 1)) : prev;
@@ -1431,7 +1459,7 @@ var GlobalNotificationProvider = ({
       });
       return id;
     },
-    [maxNotifications, defaultAutoHideDuration, enabled]
+    [maxNotifications, defaultAutoHideDuration, enabled, allowHtml]
   );
   const hideNotification = (0, import_react6.useCallback)((id) => {
     setNotifications((prev) => prev.filter((notification) => notification.id !== id));
@@ -1513,7 +1541,7 @@ var NotificationItem = ({ notification, onClose }) => {
             maxWidth: "400px",
             wordBreak: "break-word"
           },
-          children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { dangerouslySetInnerHTML: { __html: notification.message } })
+          children: notification.allowHtml ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { dangerouslySetInnerHTML: { __html: sanitizeNotificationContent(notification.message) } }) : /* @__PURE__ */ (0, import_jsx_runtime4.jsx)("span", { children: notification.message })
         }
       )
     }
@@ -1657,7 +1685,9 @@ function SessionProvider(props) {
     enabled: props.showNotifications,
     maxNotifications: props.notificationOptions?.maxNotifications || 5,
     defaultAutoHideDuration: props.notificationOptions?.defaultAutoHideDuration || 6e3,
-    position: props.notificationOptions?.position || { vertical: "top", horizontal: "right" }
+    position: props.notificationOptions?.position || { vertical: "top", horizontal: "right" },
+    allowHtml: props.notificationOptions?.allowHtml || false
+    // Pasar allowHtml desde notificationOptions
   };
   return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(GlobalNotificationProvider, { ...notificationConfig, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(InnerSessionProvider, { ...props }) });
 }
@@ -4778,10 +4808,7 @@ var useCrudifyWithNotifications = (options = {}) => {
             moduleKey = actionConfig.moduleKey;
           }
         }
-        if (operation === "validateAndResetPassword") {
-          const message = getSafeTranslation("resetPassword.successMessage", "Contrase\xF1a restablecida exitosamente");
-          showNotification(message, "success", { autoHideDuration });
-        } else if (shouldShowSuccessNotification(operation, moduleKey)) {
+        if (shouldShowSuccessNotification(operation, moduleKey)) {
           const message = getSuccessMessage(operation, moduleKey, actionConfig);
           showNotification(message, "success", { autoHideDuration });
         }

package/dist/index.mjs

@@ -1328,15 +1328,33 @@ var isTokenExpired = (token) => {
 import { useState as useState4, createContext as createContext4, useContext as useContext4, useCallback as useCallback2, useEffect as useEffect5 } from "react";
 import { Snackbar, Alert, Box, Portal } from "@mui/material";
 import { v4 as uuidv4 } from "uuid";
+import DOMPurify from "dompurify";
 import { jsx as jsx4, jsxs } from "react/jsx-runtime";
 var GlobalNotificationContext = createContext4(null);
+var sanitizeNotificationContent = (html) => {
+  return DOMPurify.sanitize(html, {
+    // Solo permitir tags seguros para notificaciones
+    ALLOWED_TAGS: ["b", "i", "em", "strong", "br", "span"],
+    ALLOWED_ATTR: ["class"],
+    // Remover scripts y eventos
+    FORBID_TAGS: ["script", "iframe", "object", "embed"],
+    FORBID_ATTR: ["onload", "onerror", "onclick", "onmouseover", "onfocus", "onblur"],
+    // Configuración adicional de seguridad
+    WHOLE_DOCUMENT: false,
+    RETURN_DOM: false,
+    RETURN_DOM_FRAGMENT: false,
+    RETURN_TRUSTED_TYPE: false
+  });
+};
 var GlobalNotificationProvider = ({
   children,
   maxNotifications = 5,
   defaultAutoHideDuration = 6e3,
   position = { vertical: "top", horizontal: "right" },
-  enabled = false
+  enabled = false,
   // ✅ Por defecto DESACTIVADO
+  allowHtml = false
+  // Por defecto no permitir HTML
 }) => {
   const [notifications, setNotifications] = useState4([]);
   const showNotification = useCallback2(
@@ -1344,13 +1362,23 @@ var GlobalNotificationProvider = ({
       if (!enabled) {
         return "";
       }
+      if (!message || typeof message !== "string") {
+        console.warn("\u26A0\uFE0F GlobalNotificationProvider: Invalid message provided");
+        return "";
+      }
+      if (message.length > 1e3) {
+        console.warn("\u26A0\uFE0F GlobalNotificationProvider: Message too long, truncating");
+        message = message.substring(0, 1e3) + "...";
+      }
       const id = uuidv4();
       const newNotification = {
         id,
         message,
         severity,
         autoHideDuration: options?.autoHideDuration ?? defaultAutoHideDuration,
-        persistent: options?.persistent ?? false
+        persistent: options?.persistent ?? false,
+        allowHtml: options?.allowHtml ?? allowHtml
+        // Usar valor del provider por defecto
       };
       setNotifications((prev) => {
         const updatedNotifications = prev.length >= maxNotifications ? prev.slice(-(maxNotifications - 1)) : prev;
@@ -1358,7 +1386,7 @@ var GlobalNotificationProvider = ({
       });
       return id;
     },
-    [maxNotifications, defaultAutoHideDuration, enabled]
+    [maxNotifications, defaultAutoHideDuration, enabled, allowHtml]
   );
   const hideNotification = useCallback2((id) => {
     setNotifications((prev) => prev.filter((notification) => notification.id !== id));
@@ -1440,7 +1468,7 @@ var NotificationItem = ({ notification, onClose }) => {
             maxWidth: "400px",
             wordBreak: "break-word"
           },
-          children: /* @__PURE__ */ jsx4("span", { dangerouslySetInnerHTML: { __html: notification.message } })
+          children: notification.allowHtml ? /* @__PURE__ */ jsx4("span", { dangerouslySetInnerHTML: { __html: sanitizeNotificationContent(notification.message) } }) : /* @__PURE__ */ jsx4("span", { children: notification.message })
         }
       )
     }
@@ -1584,7 +1612,9 @@ function SessionProvider(props) {
     enabled: props.showNotifications,
     maxNotifications: props.notificationOptions?.maxNotifications || 5,
     defaultAutoHideDuration: props.notificationOptions?.defaultAutoHideDuration || 6e3,
-    position: props.notificationOptions?.position || { vertical: "top", horizontal: "right" }
+    position: props.notificationOptions?.position || { vertical: "top", horizontal: "right" },
+    allowHtml: props.notificationOptions?.allowHtml || false
+    // Pasar allowHtml desde notificationOptions
   };
   return /* @__PURE__ */ jsx5(GlobalNotificationProvider, { ...notificationConfig, children: /* @__PURE__ */ jsx5(InnerSessionProvider, { ...props }) });
 }
@@ -4764,10 +4794,7 @@ var useCrudifyWithNotifications = (options = {}) => {
             moduleKey = actionConfig.moduleKey;
           }
         }
-        if (operation === "validateAndResetPassword") {
-          const message = getSafeTranslation("resetPassword.successMessage", "Contrase\xF1a restablecida exitosamente");
-          showNotification(message, "success", { autoHideDuration });
-        } else if (shouldShowSuccessNotification(operation, moduleKey)) {
+        if (shouldShowSuccessNotification(operation, moduleKey)) {
           const message = getSuccessMessage(operation, moduleKey, actionConfig);
           showNotification(message, "success", { autoHideDuration });
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nocios/crudify-ui",
-  "version": "3.0.58",
+  "version": "3.0.62",
   "description": "Biblioteca de componentes UI para Crudify",
   "author": "Nocios",
   "license": "MIT",
@@ -26,8 +26,10 @@
     "@mui/material": "^7.1.0",
     "@mui/x-data-grid": "^8.5.1",
     "@nocios/crudify-browser": "^2.0.6",
+    "@types/dompurify": "^3.0.5",
     "@types/uuid": "^10.0.0",
     "crypto-js": "^4.2.0",
+    "dompurify": "^3.2.7",
     "i18next-browser-languagedetector": "^8.1.0",
     "i18next-http-backend": "^3.0.2",
     "react": "^19.1.0",