@nsshunt/stsuxvue 1.0.21 → 1.0.23

package/dist/stsuxvue.mjs

@@ -5787,7 +5787,7 @@ function requireAnsi_to_html() {
 }
 var ansi_to_htmlExports = requireAnsi_to_html();
 const Convert = /* @__PURE__ */ getDefaultExportFromCjs(ansi_to_htmlExports);
-/*! @license DOMPurify 3.2.2 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.2.2/LICENSE */
+/*! @license DOMPurify 3.2.3 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.2.3/LICENSE */
 const {
   entries,
   setPrototypeOf,
@@ -5929,8 +5929,8 @@ const mathMl = freeze(["accent", "accentunder", "align", "bevelled", "close", "c
 const xml = freeze(["xlink:href", "xml:id", "xlink:title", "xml:space", "xmlns:xlink"]);
 const MUSTACHE_EXPR = seal(/\{\{[\w\W]*|[\w\W]*\}\}/gm);
 const ERB_EXPR = seal(/<%[\w\W]*|[\w\W]*%>/gm);
-const TMPLIT_EXPR = seal(/\${[\w\W]*}/gm);
-const DATA_ATTR = seal(/^data-[\-\w.\u00B7-\uFFFF]/);
+const TMPLIT_EXPR = seal(/\$\{[\w\W]*}/gm);
+const DATA_ATTR = seal(/^data-[\-\w.\u00B7-\uFFFF]+$/);
 const ARIA_ATTR = seal(/^aria-[\-\w]+$/);
 const IS_ALLOWED_URI = seal(
   /^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i
@@ -6016,7 +6016,7 @@ const _createHooksMap = function _createHooksMap2() {
 function createDOMPurify() {
   let window2 = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : getGlobal();
   const DOMPurify = (root) => createDOMPurify(root);
-  DOMPurify.version = "3.2.2";
+  DOMPurify.version = "3.2.3";
   DOMPurify.removed = [];
   if (!window2 || !window2.document || window2.document.nodeType !== NODE_TYPE.document) {
     DOMPurify.isSupported = false;
@@ -6522,7 +6522,7 @@ function createDOMPurify() {
     const {
       attributes
     } = currentNode;
-    if (!attributes) {
+    if (!attributes || _isClobbered(currentNode)) {
       return;
     }
     const hookEvent = {
@@ -6613,13 +6613,11 @@ function createDOMPurify() {
     _executeHooks(hooks.beforeSanitizeShadowDOM, fragment, null);
     while (shadowNode = shadowIterator.nextNode()) {
       _executeHooks(hooks.uponSanitizeShadowNode, shadowNode, null);
-      if (_sanitizeElements(shadowNode)) {
-        continue;
-      }
+      _sanitizeElements(shadowNode);
+      _sanitizeAttributes(shadowNode);
       if (shadowNode.content instanceof DocumentFragment) {
         _sanitizeShadowDOM2(shadowNode.content);
       }
-      _sanitizeAttributes(shadowNode);
     }
     _executeHooks(hooks.afterSanitizeShadowDOM, fragment, null);
   };
@@ -6685,13 +6683,11 @@ function createDOMPurify() {
     }
     const nodeIterator = _createNodeIterator(IN_PLACE ? dirty : body);
     while (currentNode = nodeIterator.nextNode()) {
-      if (_sanitizeElements(currentNode)) {
-        continue;
-      }
+      _sanitizeElements(currentNode);
+      _sanitizeAttributes(currentNode);
       if (currentNode.content instanceof DocumentFragment) {
         _sanitizeShadowDOM(currentNode.content);
       }
-      _sanitizeAttributes(currentNode);
     }
     if (IN_PLACE) {
       return dirty;
@@ -9952,11 +9948,15 @@ function rng() {
 const randomUUID = typeof crypto !== "undefined" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
 const native = { randomUUID };
 function v4(options, buf, offset) {
+  var _a;
   if (native.randomUUID && !buf && !options) {
     return native.randomUUID();
   }
   options = options || {};
-  const rnds = options.random || (options.rng || rng)();
+  const rnds = options.random ?? ((_a = options.rng) == null ? void 0 : _a.call(options)) ?? rng();
+  if (rnds.length < 16) {
+    throw new Error("Random bytes length must be >= 16");
+  }
   rnds[6] = rnds[6] & 15 | 64;
   rnds[8] = rnds[8] & 63 | 128;
   return unsafeStringify(rnds);