@openleaf-editor/core 0.1.0-beta.1 → 0.1.0-beta.2

package/dist/css.d.ts

@@ -26,9 +26,9 @@
  * `style` has a genuinely bad history: `expression()` in old IE executed
  * JavaScript, `url()` fetches, `position:fixed` lets pasted content cover the
  * page with something that looks like your UI. None of that is reachable
- * through a three-property allowlist whose values must match a colour or one of
- * four keywords -- and an allowlist stays safe against whatever CSS gains next,
- * which a list of known-bad functions does not.
+ * through a closed property allowlist whose values must match a colour, a
+ * length, a font name, or one of a few keywords -- and an allowlist stays safe
+ * against whatever CSS gains next, which a list of known-bad functions does not.
  */
 /** The four alignments a toolbar offers. */
 export type Align = 'left' | 'center' | 'right' | 'justify';
@@ -43,10 +43,22 @@ export declare const ALIGNMENTS: readonly Align[];
 export declare const MODELLED_PROPERTIES: readonly string[];
 /**
  * The subset a mark can represent, and therefore the subset the preservation
- * layer may unwrap a `<span>` for. `text-align` is deliberately absent: it is a
- * block attribute, so unwrapping the element that carries it loses it.
+ * layer may unwrap a `<span>` for. Block properties are deliberately absent:
+ * unwrapping the element that carries them would drop them.
  */
 export declare const COLOUR_PROPERTIES: readonly string[];
+export declare const INLINE_STYLE_PROPERTIES: readonly string[];
+/** Indent step written as `padding-inline-start`. Matches TinyMCE's 2em. */
+export declare const INDENT_EM = 2;
+export declare const MAX_INDENT = 8;
+/** List styles the toolbar offers. `decimal` is the ordered-list default. */
+export type ListStyle = 'disc' | 'circle' | 'square' | 'decimal' | 'lower-roman' | 'upper-roman' | 'lower-alpha' | 'upper-alpha' | 'lower-greek';
+export declare const LIST_STYLES: readonly ListStyle[];
+export type Dir = 'ltr' | 'rtl';
+export declare const FONT_FAMILIES: readonly string[];
+/** Preset sizes the toolbar lists, in pixels. The number input accepts any in range. */
+export declare const FONT_SIZE_PRESETS: readonly number[];
+export declare const LINE_HEIGHT_PRESETS: readonly string[];
 /**
  * Split a `style` attribute into declarations.
  *
@@ -77,6 +89,47 @@ export declare function serializeDeclarations(declarations: Map<string, string>)
  */
 export declare function safeAlign(value: string | null | undefined, dir?: string | null): Align | null;
 export declare function safeColor(value: string | null | undefined): string | null;
+export declare function safeDir(value: string | null | undefined): Dir | null;
+/**
+ * A font stack, or null.
+ *
+ * Names are identifiers or quoted strings of letters, digits, spaces and
+ * hyphens. Anything that can reach outside the declaration -- `url()`,
+ * `expression()`, `var()`, a quote that does not match -- is refused. A stack
+ * is a comma-separated list of those names, capped so a paste cannot dump a
+ * novel into the attribute.
+ */
+export declare function safeFontFamily(value: string | null | undefined): string | null;
+/**
+ * A font size, or null.
+ *
+ * Keywords and a closed set of length units. Values are clamped so a pasted
+ * `font-size: 400px` cannot blow the layout out; the toolbar's number input
+ * writes pixels inside the same range.
+ */
+export declare function safeFontSize(value: string | null | undefined): string | null;
+/** A line height: `normal`, a unitless multiplier, or a short length. */
+export declare function safeLineHeight(value: string | null | undefined): string | null;
+/**
+ * How many indent steps this declaration means, or null.
+ *
+ * Written as `padding-inline-start: 2em` per step. Inherited `padding-left`
+ * and `margin-left` in 40px or 2em multiples are read as the same thing, which
+ * is what TinyMCE and CKEditor stored for years.
+ */
+export declare function indentLevels(value: string | null | undefined): number | null;
+export declare function indentCss(levels: number): string;
+export declare function safeListStyle(value: string | null | undefined): ListStyle | null;
+/**
+ * A BCP 47-shaped language tag, or null.
+ *
+ * Not a complete parser: it admits `en`, `en-GB`, `zh-Hans-CN` and refuses
+ * anything that could not be a language tag. The point is to keep `lang`
+ * from becoming a free-form attribute for whatever a paste stuffed in it.
+ */
+export declare function safeLang(value: string | null | undefined): string | null;
+/** The canonical value for a modelled declaration, or null if it is not one. */
+export declare function modelledValue(property: string, value: string): string | null;
 /**
  * Put CSS on an element without losing the author's spelling.
  *
@@ -115,10 +168,9 @@ export declare function applyStyleAttribute(el: Element, css: string): void;
  * Is every declaration in this `style` attribute one the schema models?
  *
  * The preservation layer asks this before unwrapping a `<span style>`. A span
- * carrying only colour is fully representable as marks, so unwrapping it loses
- * nothing and the text inside stays editable. One carrying `font-family` as well
- * is not, and it must stay an opaque preserved atom -- faithful, uneditable, and
- * exactly what happens today rather than a regression.
+ * carrying only colour and font is fully representable as marks, so unwrapping
+ * it loses nothing and the text inside stays editable. One carrying
+ * `letter-spacing` as well is not, and it must stay an opaque preserved atom.
  */
 export declare function isFullyModelledStyle(style: string | null | undefined, properties?: readonly string[]): boolean;
 //# sourceMappingURL=css.d.ts.map

package/dist/css.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"css.d.ts","sourceRoot":"","sources":["../src/css.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,4CAA4C;AAC5C,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAA;AAE3D,eAAO,MAAM,UAAU,EAAE,SAAS,KAAK,EAA2C,CAAA;AAElF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAAgD,CAAA;AAEjG;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAAkC,CAAA;AAEjF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAYvF;AAED,iFAAiF;AACjF,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,CAGtF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAO7F;AAoBD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAyBzE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAOlE;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,UAAU,GAAE,SAAS,MAAM,EAAsB,GAChD,OAAO,CAST"}
+{"version":3,"file":"css.d.ts","sourceRoot":"","sources":["../src/css.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,4CAA4C;AAC5C,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAA;AAE3D,eAAO,MAAM,UAAU,EAAE,SAAS,KAAK,EAA2C,CAAA;AAElF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAShD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAAkC,CAAA;AAEjF,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAKpD,CAAA;AAED,4EAA4E;AAC5E,eAAO,MAAM,SAAS,IAAI,CAAA;AAC1B,eAAO,MAAM,UAAU,IAAI,CAAA;AAE3B,6EAA6E;AAC7E,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,aAAa,GACb,aAAa,GACb,aAAa,GACb,aAAa,GACb,aAAa,CAAA;AAEjB,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAU3C,CAAA;AAED,MAAM,MAAM,GAAG,GAAG,KAAK,GAAG,KAAK,CAAA;AAE/B,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAc1C,CAAA;AAED,wFAAwF;AACxF,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAA4D,CAAA;AAE3G,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAAqC,CAAA;AAEtF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAYvF;AAED,iFAAiF;AACjF,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,CAGtF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAO7F;AAoBD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAyBzE;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,GAAG,GAAG,IAAI,CAIpE;AAkBD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAsC9E;AA+BD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAa5E;AAID,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAkB9E;AAMD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAQ5E;AASD,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhD;AAsBD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,GAAG,IAAI,CAIhF;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAMxE;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAyB5E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAOlE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,UAAU,GAAE,SAAS,MAAM,EAA4B,GACtD,OAAO,CAQT"}

package/dist/css.js

@@ -26,9 +26,9 @@
  * `style` has a genuinely bad history: `expression()` in old IE executed
  * JavaScript, `url()` fetches, `position:fixed` lets pasted content cover the
  * page with something that looks like your UI. None of that is reachable
- * through a three-property allowlist whose values must match a colour or one of
- * four keywords -- and an allowlist stays safe against whatever CSS gains next,
- * which a list of known-bad functions does not.
+ * through a closed property allowlist whose values must match a colour, a
+ * length, a font name, or one of a few keywords -- and an allowlist stays safe
+ * against whatever CSS gains next, which a list of known-bad functions does not.
  */
 export const ALIGNMENTS = ['left', 'center', 'right', 'justify'];
 /**
@@ -38,13 +38,60 @@ export const ALIGNMENTS = ['left', 'center', 'right', 'justify'];
  * property added here reaches the server-side policy rather than being stripped
  * from stored content by a policy that never heard of it.
  */
-export const MODELLED_PROPERTIES = ['text-align', 'color', 'background-color'];
+export const MODELLED_PROPERTIES = [
+    'text-align',
+    'color',
+    'background-color',
+    'font-family',
+    'font-size',
+    'line-height',
+    'padding-inline-start',
+    'list-style-type',
+];
 /**
  * The subset a mark can represent, and therefore the subset the preservation
- * layer may unwrap a `<span>` for. `text-align` is deliberately absent: it is a
- * block attribute, so unwrapping the element that carries it loses it.
+ * layer may unwrap a `<span>` for. Block properties are deliberately absent:
+ * unwrapping the element that carries them would drop them.
  */
 export const COLOUR_PROPERTIES = ['color', 'background-color'];
+export const INLINE_STYLE_PROPERTIES = [
+    'color',
+    'background-color',
+    'font-family',
+    'font-size',
+];
+/** Indent step written as `padding-inline-start`. Matches TinyMCE's 2em. */
+export const INDENT_EM = 2;
+export const MAX_INDENT = 8;
+export const LIST_STYLES = [
+    'disc',
+    'circle',
+    'square',
+    'decimal',
+    'lower-roman',
+    'upper-roman',
+    'lower-alpha',
+    'upper-alpha',
+    'lower-greek',
+];
+export const FONT_FAMILIES = [
+    'Arial',
+    'Georgia',
+    'Times New Roman',
+    'Courier New',
+    'Verdana',
+    'Tahoma',
+    'Trebuchet MS',
+    'Palatino',
+    'Garamond',
+    'system-ui',
+    'serif',
+    'sans-serif',
+    'monospace',
+];
+/** Preset sizes the toolbar lists, in pixels. The number input accepts any in range. */
+export const FONT_SIZE_PRESETS = [8, 10, 11, 12, 14, 16, 18, 20, 24, 28, 32, 36, 48, 72];
+export const LINE_HEIGHT_PRESETS = ['1', '1.15', '1.5', '2', '2.5'];
 /**
  * Split a `style` attribute into declarations.
  *
@@ -148,6 +195,263 @@ export function safeColor(value) {
         return candidate.toLowerCase();
     return null;
 }
+export function safeDir(value) {
+    if (!value)
+        return null;
+    const candidate = value.trim().toLowerCase();
+    return candidate === 'ltr' || candidate === 'rtl' ? candidate : null;
+}
+const GENERIC_FAMILIES = new Set([
+    'serif',
+    'sans-serif',
+    'monospace',
+    'cursive',
+    'fantasy',
+    'system-ui',
+    'ui-sans-serif',
+    'ui-serif',
+    'ui-monospace',
+    'ui-rounded',
+    'emoji',
+    'math',
+    'fangsong',
+]);
+/**
+ * A font stack, or null.
+ *
+ * Names are identifiers or quoted strings of letters, digits, spaces and
+ * hyphens. Anything that can reach outside the declaration -- `url()`,
+ * `expression()`, `var()`, a quote that does not match -- is refused. A stack
+ * is a comma-separated list of those names, capped so a paste cannot dump a
+ * novel into the attribute.
+ */
+export function safeFontFamily(value) {
+    if (!value)
+        return null;
+    const raw = value.trim();
+    if (raw === '' || raw.length > 160)
+        return null;
+    if (/url\s*\(|expression|var\s*\(|[@\\<>]/i.test(raw))
+        return null;
+    const parts = [];
+    let current = '';
+    let quote = null;
+    for (const char of raw) {
+        if (quote) {
+            if (char === quote)
+                quote = null;
+            current += char;
+            continue;
+        }
+        if (char === '"' || char === "'") {
+            quote = char;
+            current += char;
+            continue;
+        }
+        if (char === ',') {
+            parts.push(current);
+            current = '';
+            continue;
+        }
+        current += char;
+    }
+    if (quote !== null)
+        return null;
+    parts.push(current);
+    if (parts.length === 0 || parts.length > 6)
+        return null;
+    const out = [];
+    for (const part of parts) {
+        const family = oneFontFamily(part);
+        if (family === null)
+            return null;
+        out.push(family);
+    }
+    return out.join(',');
+}
+function oneFontFamily(part) {
+    const trimmed = part.trim();
+    if (trimmed === '' || trimmed.length > 64)
+        return null;
+    const quoted = /^(['"])(.*)\1$/.exec(trimmed);
+    // `?.[2]` rather than a ternary: a capture group is `string | undefined` to the
+    // type checker even when the match succeeded. `(.*)` matches the empty string,
+    // so a quoted empty name still reads as '' and is refused below -- the `??`
+    // only fires when there was no match at all.
+    const name = quoted?.[2] ?? trimmed;
+    if (name === '' || /[^a-zA-Z0-9 \-]/.test(name))
+        return null;
+    if (!/^[a-zA-Z]/.test(name))
+        return null;
+    const lower = name.toLowerCase();
+    if (GENERIC_FAMILIES.has(lower))
+        return lower;
+    return /\s/.test(name) ? `"${name}"` : name;
+}
+const FONT_SIZE_KEYWORDS = new Set([
+    'xx-small',
+    'x-small',
+    'small',
+    'medium',
+    'large',
+    'x-large',
+    'xx-large',
+    'xxx-large',
+]);
+const FONT_SIZE_LENGTH = /^(\d+(?:\.\d+)?)(px|pt|em|rem|%)$/i;
+/**
+ * A font size, or null.
+ *
+ * Keywords and a closed set of length units. Values are clamped so a pasted
+ * `font-size: 400px` cannot blow the layout out; the toolbar's number input
+ * writes pixels inside the same range.
+ */
+export function safeFontSize(value) {
+    if (!value)
+        return null;
+    const candidate = value.trim().toLowerCase().replace(/\s+/g, '');
+    if (FONT_SIZE_KEYWORDS.has(candidate))
+        return candidate;
+    const match = FONT_SIZE_LENGTH.exec(candidate);
+    if (!match)
+        return null;
+    const amount = Number(match[1]);
+    const unit = match[2];
+    const min = { px: 8, pt: 6, em: 0.5, rem: 0.5, '%': 50 };
+    const max = { px: 96, pt: 72, em: 6, rem: 6, '%': 300 };
+    if (!(amount >= min[unit] && amount <= max[unit]))
+        return null;
+    const rendered = Number.isInteger(amount) ? String(amount) : String(amount);
+    return `${rendered}${unit}`;
+}
+const LINE_HEIGHT_LENGTH = /^(\d+(?:\.\d+)?)(px|em|rem|%)?$/i;
+/** A line height: `normal`, a unitless multiplier, or a short length. */
+export function safeLineHeight(value) {
+    if (!value)
+        return null;
+    const candidate = value.trim().toLowerCase().replace(/\s+/g, '');
+    if (candidate === 'normal')
+        return 'normal';
+    const match = LINE_HEIGHT_LENGTH.exec(candidate);
+    if (!match)
+        return null;
+    const amount = Number(match[1]);
+    const unit = match[2] ?? '';
+    if (unit === '') {
+        if (!(amount >= 0.5 && amount <= 4))
+            return null;
+        return Number.isInteger(amount) ? String(amount) : String(amount);
+    }
+    if (unit === '%') {
+        if (!(amount >= 50 && amount <= 400))
+            return null;
+        return `${formatNumber(amount)}%`;
+    }
+    if (!(amount >= 0.5 && amount <= 96))
+        return null;
+    return `${formatNumber(amount)}${unit}`;
+}
+function formatNumber(amount) {
+    return Number.isInteger(amount) ? String(amount) : String(amount);
+}
+/**
+ * How many indent steps this declaration means, or null.
+ *
+ * Written as `padding-inline-start: 2em` per step. Inherited `padding-left`
+ * and `margin-left` in 40px or 2em multiples are read as the same thing, which
+ * is what TinyMCE and CKEditor stored for years.
+ */
+export function indentLevels(value) {
+    if (!value)
+        return null;
+    const candidate = value.trim().toLowerCase().replace(/\s+/g, '');
+    const em = /^(\d+(?:\.\d+)?)em$/.exec(candidate);
+    if (em)
+        return stepsFrom(Number(em[1]), INDENT_EM);
+    const px = /^(\d+(?:\.\d+)?)px$/.exec(candidate);
+    if (px)
+        return stepsFrom(Number(px[1]), 40);
+    return null;
+}
+function stepsFrom(amount, step) {
+    const steps = amount / step;
+    if (steps < 0.9 || steps > MAX_INDENT)
+        return null;
+    const rounded = Math.round(steps);
+    return Math.abs(steps - rounded) < 0.05 ? rounded : null;
+}
+export function indentCss(levels) {
+    return `${levels * INDENT_EM}em`;
+}
+const LIST_STYLE_ALIASES = {
+    disc: 'disc',
+    circle: 'circle',
+    square: 'square',
+    decimal: 'decimal',
+    'lower-roman': 'lower-roman',
+    'upper-roman': 'upper-roman',
+    'lower-alpha': 'lower-alpha',
+    'upper-alpha': 'upper-alpha',
+    'lower-latin': 'lower-alpha',
+    'upper-latin': 'upper-alpha',
+    'lower-greek': 'lower-greek',
+    // HTML `type` on <ol>.
+    a: 'lower-alpha',
+    A: 'upper-alpha',
+    i: 'lower-roman',
+    I: 'upper-roman',
+    '1': 'decimal',
+};
+export function safeListStyle(value) {
+    if (!value)
+        return null;
+    const candidate = value.trim();
+    return LIST_STYLE_ALIASES[candidate] ?? LIST_STYLE_ALIASES[candidate.toLowerCase()] ?? null;
+}
+/**
+ * A BCP 47-shaped language tag, or null.
+ *
+ * Not a complete parser: it admits `en`, `en-GB`, `zh-Hans-CN` and refuses
+ * anything that could not be a language tag. The point is to keep `lang`
+ * from becoming a free-form attribute for whatever a paste stuffed in it.
+ */
+export function safeLang(value) {
+    if (!value)
+        return null;
+    const candidate = value.trim();
+    if (candidate.length < 2 || candidate.length > 35)
+        return null;
+    if (!/^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{1,8}){0,4}$/.test(candidate))
+        return null;
+    return candidate;
+}
+/** The canonical value for a modelled declaration, or null if it is not one. */
+export function modelledValue(property, value) {
+    switch (property) {
+        case 'text-align':
+            return safeAlign(value);
+        case 'color':
+        case 'background-color':
+            return safeColor(value);
+        case 'font-family':
+            return safeFontFamily(value);
+        case 'font-size':
+            return safeFontSize(value);
+        case 'line-height':
+            return safeLineHeight(value);
+        case 'padding-inline-start':
+        case 'padding-left':
+        case 'margin-inline-start':
+        case 'margin-left': {
+            const steps = indentLevels(value);
+            return steps === null ? null : indentCss(steps);
+        }
+        case 'list-style-type':
+            return safeListStyle(value);
+        default:
+            return null;
+    }
+}
 /**
  * Put CSS on an element without losing the author's spelling.
  *
@@ -194,20 +498,18 @@ export function applyStyleAttribute(el, css) {
  * Is every declaration in this `style` attribute one the schema models?
  *
  * The preservation layer asks this before unwrapping a `<span style>`. A span
- * carrying only colour is fully representable as marks, so unwrapping it loses
- * nothing and the text inside stays editable. One carrying `font-family` as well
- * is not, and it must stay an opaque preserved atom -- faithful, uneditable, and
- * exactly what happens today rather than a regression.
+ * carrying only colour and font is fully representable as marks, so unwrapping
+ * it loses nothing and the text inside stays editable. One carrying
+ * `letter-spacing` as well is not, and it must stay an opaque preserved atom.
  */
-export function isFullyModelledStyle(style, properties = COLOUR_PROPERTIES) {
+export function isFullyModelledStyle(style, properties = INLINE_STYLE_PROPERTIES) {
     const declarations = parseDeclarations(style);
     if (declarations.size === 0)
         return false;
     for (const [name, value] of declarations) {
         if (!properties.includes(name))
             return false;
-        const valid = name === 'text-align' ? safeAlign(value) : safeColor(value);
-        if (valid === null)
+        if (modelledValue(name, value) === null)
             return false;
     }
     return true;

package/dist/css.js.map

@@ -1 +1 @@
-{"version":3,"file":"css.js","sourceRoot":"","sources":["../src/css.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,MAAM,CAAC,MAAM,UAAU,GAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;AAElF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB,CAAC,YAAY,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAA;AAEjG;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;AAEjF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAgC;IAChE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAA;IACtB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,KAAK,GAAG,CAAC;YAAE,SAAQ;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC1C,IAAI,IAAI,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE;YAAE,SAAQ;QACzC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CAAC,YAAiC;IACrE,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACxC,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC/E,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,KAAgC,EAAE,GAAmB;IAC7E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC5C,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAA;IAC/C,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;IACxD,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;IACtD,OAAQ,UAAgC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAE,SAAmB,CAAC,CAAC,CAAC,IAAI,CAAA;AAC5F,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,GAAG,GAAG,+CAA+C,CAAA;AAC3D,MAAM,UAAU,GAAG,4CAA4C,CAAA;AAC/D,MAAM,OAAO,GAAG,gBAAgB,CAAA;AAEhC,0EAA0E;AAC1E,MAAM,YAAY,GAAG,mGAAmG,CAAA;AAExH,MAAM,UAAU,SAAS,CAAC,KAAgC;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,uEAAuE;IACvE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACnD,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAEjC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,uEAAuE;QACvE,SAAS;QACT,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC,CAAA;QACtF,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAA;QAC5E,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC,WAAW,EAAE,CAAA;IACvD,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC,WAAW,EAAE,CAAA;IAC9D,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC,WAAW,EAAE,CAAA;IAC3D,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAW,EAAE,GAAW;IAC1D,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,MAAM,KAAK,GAAI,EAAkB,CAAC,KAAK,CAAA;IACvC,+EAA+E;IAC/E,8EAA8E;IAC9E,qEAAqE;IACrE,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,OAAO,GAAG,GAAG,CAAA;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAgC,EAChC,aAAgC,iBAAiB;IAEjD,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC7C,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QAC5C,MAAM,KAAK,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACzE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;IAClC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"css.js","sourceRoot":"","sources":["../src/css.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,MAAM,CAAC,MAAM,UAAU,GAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;AAElF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,YAAY;IACZ,OAAO;IACP,kBAAkB;IAClB,aAAa;IACb,WAAW;IACX,aAAa;IACb,sBAAsB;IACtB,iBAAiB;CAClB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;AAEjF,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,OAAO;IACP,kBAAkB;IAClB,aAAa;IACb,WAAW;CACZ,CAAA;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAA;AAC1B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAA;AAc3B,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC/C,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,aAAa;IACb,aAAa;IACb,aAAa;IACb,aAAa;IACb,aAAa;CACd,CAAA;AAID,MAAM,CAAC,MAAM,aAAa,GAAsB;IAC9C,OAAO;IACP,SAAS;IACT,iBAAiB;IACjB,aAAa;IACb,SAAS;IACT,QAAQ;IACR,cAAc;IACd,UAAU;IACV,UAAU;IACV,WAAW;IACX,OAAO;IACP,YAAY;IACZ,WAAW;CACZ,CAAA;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AAE3G,MAAM,CAAC,MAAM,mBAAmB,GAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;AAEtF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAgC;IAChE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAA;IACtB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,KAAK,GAAG,CAAC;YAAE,SAAQ;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC1C,IAAI,IAAI,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE;YAAE,SAAQ;QACzC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CAAC,YAAiC;IACrE,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACxC,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC/E,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,KAAgC,EAAE,GAAmB;IAC7E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC5C,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAA;IAC/C,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;IACxD,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;IACtD,OAAQ,UAAgC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAE,SAAmB,CAAC,CAAC,CAAC,IAAI,CAAA;AAC5F,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,GAAG,GAAG,+CAA+C,CAAA;AAC3D,MAAM,UAAU,GAAG,4CAA4C,CAAA;AAC/D,MAAM,OAAO,GAAG,gBAAgB,CAAA;AAEhC,0EAA0E;AAC1E,MAAM,YAAY,GAAG,mGAAmG,CAAA;AAExH,MAAM,UAAU,SAAS,CAAC,KAAgC;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,uEAAuE;IACvE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACnD,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAEjC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,uEAAuE;QACvE,SAAS;QACT,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC,CAAA;QACtF,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAA;QAC5E,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC,WAAW,EAAE,CAAA;IACvD,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC,WAAW,EAAE,CAAA;IAC9D,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC,WAAW,EAAE,CAAA;IAC3D,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAgC;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC5C,OAAO,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAA;AACtE,CAAC;AAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,OAAO;IACP,YAAY;IACZ,WAAW;IACX,SAAS;IACT,SAAS;IACT,WAAW;IACX,eAAe;IACf,UAAU;IACV,cAAc;IACd,YAAY;IACZ,OAAO;IACP,MAAM;IACN,UAAU;CACX,CAAC,CAAA;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,KAAgC;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IACxB,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAA;IAC/C,IAAI,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAElE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,IAAI,KAAK,GAAkB,IAAI,CAAA;IAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,KAAK;gBAAE,KAAK,GAAG,IAAI,CAAA;YAChC,OAAO,IAAI,IAAI,CAAA;YACf,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAA;YACZ,OAAO,IAAI,IAAI,CAAA;YACf,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACnB,OAAO,GAAG,EAAE,CAAA;YACZ,SAAQ;QACV,CAAC;QACD,OAAO,IAAI,IAAI,CAAA;IACjB,CAAC;IACD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAEvD,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAChC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAA;IACtD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC7C,gFAAgF;IAChF,+EAA+E;IAC/E,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAA;IACnC,IAAI,IAAI,KAAK,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IAChC,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAC7C,CAAC;AAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,UAAU;IACV,SAAS;IACT,OAAO;IACP,QAAQ;IACR,OAAO;IACP,SAAS;IACT,UAAU;IACV,WAAW;CACZ,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,oCAAoC,CAAA;AAE7D;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAgC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAChE,IAAI,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IACvD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAqC,CAAA;IACzD,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAA;IACxD,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;IACvD,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3E,OAAO,GAAG,QAAQ,GAAG,IAAI,EAAE,CAAA;AAC7B,CAAC;AAED,MAAM,kBAAkB,GAAG,kCAAkC,CAAA;AAE7D,yEAAyE;AACzE,MAAM,UAAU,cAAc,CAAC,KAAgC;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAChE,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC3C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QAChD,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QACjD,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAA;IACnC,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,CAAA;IACjD,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACnE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAgC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAChE,MAAM,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChD,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IAClD,MAAM,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChD,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC3C,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY;IAC7C,MAAM,KAAK,GAAG,MAAM,GAAG,IAAI,CAAA;IAC3B,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,UAAU;QAAE,OAAO,IAAI,CAAA;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACjC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,OAAO,GAAG,MAAM,GAAG,SAAS,IAAI,CAAA;AAClC,CAAC;AAED,MAAM,kBAAkB,GAA8B;IACpD,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,aAAa,EAAE,aAAa;IAC5B,aAAa,EAAE,aAAa;IAC5B,aAAa,EAAE,aAAa;IAC5B,aAAa,EAAE,aAAa;IAC5B,aAAa,EAAE,aAAa;IAC5B,aAAa,EAAE,aAAa;IAC5B,aAAa,EAAE,aAAa;IAC5B,uBAAuB;IACvB,CAAC,EAAE,aAAa;IAChB,CAAC,EAAE,aAAa;IAChB,CAAC,EAAE,aAAa;IAChB,CAAC,EAAE,aAAa;IAChB,GAAG,EAAE,SAAS;CACf,CAAA;AAED,MAAM,UAAU,aAAa,CAAC,KAAgC;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC9B,OAAO,kBAAkB,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAA;AAC7F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAgC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC9B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAA;IAC9D,IAAI,CAAC,2CAA2C,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7E,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,KAAa;IAC3D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,YAAY;YACf,OAAO,SAAS,CAAC,KAAK,CAAC,CAAA;QACzB,KAAK,OAAO,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,SAAS,CAAC,KAAK,CAAC,CAAA;QACzB,KAAK,aAAa;YAChB,OAAO,cAAc,CAAC,KAAK,CAAC,CAAA;QAC9B,KAAK,WAAW;YACd,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;QAC5B,KAAK,aAAa;YAChB,OAAO,cAAc,CAAC,KAAK,CAAC,CAAA;QAC9B,KAAK,sBAAsB,CAAC;QAC5B,KAAK,cAAc,CAAC;QACpB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;YACjC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACjD,CAAC;QACD,KAAK,iBAAiB;YACpB,OAAO,aAAa,CAAC,KAAK,CAAC,CAAA;QAC7B;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAW,EAAE,GAAW;IAC1D,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC7B,MAAM,KAAK,GAAI,EAAkB,CAAC,KAAK,CAAA;IACvC,+EAA+E;IAC/E,8EAA8E;IAC9E,qEAAqE;IACrE,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,OAAO,GAAG,GAAG,CAAA;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAgC,EAChC,aAAgC,uBAAuB;IAEvD,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC7C,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QAC5C,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;IACvD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/embed.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Which `<iframe>` sources the schema will store.
+ *
+ * An iframe is a nested browsing context. Allowing an arbitrary `src` is
+ * allowing a third-party page to run in yours, which is why the preservation
+ * layer used to drop every iframe it saw. Modelling embeds at all means
+ * answering "which hosts, on which paths, over which scheme" in one place --
+ * here -- so the schema, the insert command and `@openleaf-editor/sanitize`
+ * cannot drift.
+ *
+ * Relative iframe URLs are refused: a CMS that later hosts an uploaded HTML
+ * file at a relative path would otherwise turn a stored embed into a stored
+ * XSS. `http:` is refused for the same reason every other URL check prefers
+ * an allowlist of schemes: mixed content is not an embed, it is a warning.
+ */
+export interface EmbedHostRule {
+    /** Hostname, compared case-insensitively, with a leading `www.` ignored. */
+    readonly host: string;
+    /** Path that must match. Absent means any path on that host. */
+    readonly path?: RegExp;
+}
+/**
+ * Hosts an author may embed.
+ *
+ * Each rule is a known player page, not a whole site. `youtube.com/` would
+ * let an author embed `youtube.com/watch` as a nested YouTube UI; `/embed/`
+ * is the documented iframe URL.
+ */
+export declare const EMBED_HOSTS: readonly EmbedHostRule[];
+/** True when this URL is an https embed the schema will store. */
+export declare function isAllowedEmbedSrc(value: string | null | undefined): boolean;
+/** The URL, or null when it must not be stored as an iframe `src`. */
+export declare function safeEmbedSrc(value: string | null | undefined): string | null;
+/**
+ * Permissions policy tokens an iframe may advertise.
+ *
+ * Anything not in the closed set is dropped rather than stored: `allow` is how
+ * an embed asks to skip the sandbox the rest of the page lives in.
+ *
+ * The attribute is a **semicolon**-delimited list of directives, each one a
+ * feature name followed by an optional origin allowlist -- `camera 'self';
+ * fullscreen *`. Splitting on whitespace instead read the standard YouTube
+ * string `allow="autoplay; fullscreen; picture-in-picture"` as the tokens
+ * "autoplay;" and "fullscreen;", so only the last survived, and a trailing
+ * semicolon lost every permission the author had.
+ *
+ * Only the feature name is kept. Dropping the origin allowlist leaves the
+ * attribute's default, which is the frame's own origin -- so `camera *` narrows
+ * to the embed itself rather than being stored as written.
+ */
+export declare function safeAllowList(value: string | null | undefined): string | null;
+//# sourceMappingURL=embed.d.ts.map

package/dist/embed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed.d.ts","sourceRoot":"","sources":["../src/embed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,gEAAgE;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,aAAa,EAS/C,CAAA;AA8BD,kEAAkE;AAClE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAY3E;AAED,sEAAsE;AACtE,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAE5E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAW7E"}