@openui5/sap.ui.core 1.139.0 → 1.140.0

package/THIRDPARTY.txt

@@ -444,7 +444,7 @@ License: Apache-2.0
 License Text: https://github.com/UI5/openui5/blob/master/LICENSES/Apache-2.0.txt
 Contained in: lib/jsdoc/ui5/plugin.js
 
-Component: SAP Theming Base Content, version: 11.30.0
+Component: SAP Theming Base Content, version: 11.31.1
 Copyright: SAP SE or an SAP affiliate company and Theming Base Content contributors
 License: Apache-2.0
 License Text: https://github.com/UI5/openui5/blob/master/LICENSES/Apache-2.0.txt

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openui5/sap.ui.core",
-  "version": "1.139.0",
+  "version": "1.140.0",
   "description": "OpenUI5 Core Library sap.ui.core",
   "author": "SAP SE (https://www.sap.com)",
   "license": "Apache-2.0",

package/src/jquery.sap.global.js

@@ -151,7 +151,7 @@ sap.ui.define([
 	/**
 	 * Root Namespace for the jQuery plug-in provided by SAP SE.
 	 *
-	 * @version 1.139.0
+	 * @version 1.140.0
 	 * @namespace
 	 * @public
 	 * @static

package/src/jquery.sap.mobile.js

@@ -224,16 +224,12 @@ sap.ui.define([
 	 * <ul>
 	 * <li>viewport: whether to set the viewport in a way that disables zooming (default: true)</li>
 	 * <li>statusBar: the iOS status bar color, "default", "black" or "black-translucent" (default: "default")</li>
-	 * <li>hideBrowser: whether the browser UI should be hidden as far as possible to make the app feel more native
-	 * (default: true)</li>
 	 * <li>preventScroll: whether native scrolling should be disabled in order to prevent the "rubber-band" effect
 	 * where the whole window is moved (default: true)</li>
 	 * <li>preventPhoneNumberDetection: whether Safari Mobile should be prevented from transforming any numbers
 	 * that look like phone numbers into clickable links; this should be left as "true", otherwise it might break
 	 * controls because Safari actually changes the DOM. This only affects all page content which is created after
 	 * initMobile is called.</li>
-	 * <li>rootId: the ID of the root element that should be made fullscreen; only used when hideBrowser is set
-	 * (default: the document.body)</li>
 	 * <li>useFullScreenHeight: a boolean that defines whether the height of the html root element should be set to
 	 * 100%, which is required for other elements to cover the full height (default: true)</li>
 	 * <li>homeIcon: deprecated since 1.12, use {@link jQuery.sap.setIcons} instead.
@@ -245,14 +241,10 @@ sap.ui.define([
 	 * @param {boolean} [options.viewport=true] whether to set the viewport in a way that disables zooming
 	 * @param {string}  [options.statusBar='default'] the iOS status bar color, "default", "black" or
 	 *     "black-translucent"
-	 * @param {boolean} [options.hideBrowser=true] whether the browser UI should be hidden as far as possible to
-	 *     make the app feel more native
 	 * @param {boolean} [options.preventScroll=true] whether native scrolling should be disabled in order to
 	 *     prevent the "rubber-band" effect where the whole window is moved
 	 * @param {boolean} [options.preventPhoneNumberDetection=true] whether Safari mobile should be prevented from
 	 *     transforming any numbers that look like phone numbers into clickable links
-	 * @param {string}  [options.rootId] the ID of the root element that should be made fullscreen; only used when
-	 *     hideBrowser is set. If not set, the body is used
 	 * @param {boolean} [options.useFullScreenHeight=true] whether the height of the html root element should be
 	 *     set to 100%, which is required for other elements to cover the full height
 	 * @param {string}  [options.homeIcon=undefined] deprecated since 1.12, use {@link jQuery.sap.setIcons} instead.

package/src/jquery.sap.properties.js

@@ -73,7 +73,7 @@ sap.ui.define(['jquery.sap.global', 'sap/base/util/Properties'],
 	 * {@link #setProperty} to store or change a value for a key and {@link #getKeys}
 	 * can be used to retrieve an array of all keys that are currently stored in the collection.
 	 *
-	 * @version 1.139.0
+	 * @version 1.140.0
 	 * @since 0.9.0
 	 * @name jQuery.sap.util.Properties
 	 * @public

package/src/jquery.sap.resources.js

@@ -99,7 +99,7 @@ sap.ui.define([
 	 * Exception: Fallback for "zh_HK" is "zh_TW" before zh.
 	 *
 	 * @author SAP SE
-	 * @version 1.139.0
+	 * @version 1.140.0
 	 * @since 0.9.0
 	 * @name jQuery.sap.util.ResourceBundle
 	 * @public

package/src/jquery.sap.script.js

@@ -267,7 +267,7 @@ sap.ui.define([
 	 * Use {@link jQuery.sap.getUriParameters} to create an instance of jQuery.sap.util.UriParameters.
 	 *
 	 * @author SAP SE
-	 * @version 1.139.0
+	 * @version 1.140.0
 	 * @since 0.9.0
 	 * @name jQuery.sap.util.UriParameters
 	 * @public

package/src/jquery.sap.storage.js

@@ -37,7 +37,7 @@ sap.ui.define([
 	 * @param {string} [sIdPrefix] Prefix used for the Ids. If not set a default prefix is used.
 	 * @returns {jQuery.sap.storage.Storage}
 	 *
-	 * @version 1.139.0
+	 * @version 1.140.0
 	 * @since 0.11.0
 	 * @namespace
 	 * @public
@@ -98,7 +98,7 @@ sap.ui.define([
 	 * should be deleted the method {@link #removeAll} should be used.
 	 *
 	 * @author SAP SE
-	 * @version 1.139.0
+	 * @version 1.140.0
 	 * @since 0.11.0
 	 * @public
 	 * @name jQuery.sap.storage.Storage
@@ -203,7 +203,7 @@ sap.ui.define([
 	 * Enumeration of the storage types supported by {@link jQuery.sap.storage.Storage}
 	 * @enum {string}
 	 * @public
-	 * @version 1.139.0
+	 * @version 1.140.0
 	 * @since 0.11.0
 	 * @deprecated as of version 1.120. Use {@link module:sap/ui/util/Storage.Type sap/ui/util/Storage.Type} instead.
 	 */

package/src/sap/base/Event.js

@@ -11,7 +11,7 @@ sap.ui.define(() => {
 
 	/**
 	 * @author SAP SE
-	 * @version 1.139.0
+	 * @version 1.140.0
 	 *
 	 * Creates an event with the given <code>sType</code>,
 	 * linked to the provided <code>oTarget</code> and enriched with the <code>oParameters</code>.

package/src/sap/base/Eventing.js

@@ -18,7 +18,7 @@ sap.ui.define([
 	 * @class A simple eventing implementation that manages listeners and can fire events.
 	 *
 	 * @author SAP SE
-	 * @version 1.139.0
+	 * @version 1.140.0
 	 *
 	 * @since 1.120.0
 	 * @private

package/src/sap/base/config.js

@@ -18,7 +18,7 @@ sap.ui.define([
 	 * The base Configuration.
 	 *
 	 * @author SAP SE
-	 * @version 1.139.0
+	 * @version 1.140.0
 	 * @private
 	 * @ui5-restricted sap.ui.core, sap.fl, sap.ui.intergration, sap.ui.export
 	 * @alias module:sap/base/config

package/src/sap/base/i18n/LanguageTag.js

@@ -36,7 +36,7 @@ sap.ui.define([
 	 * @param {string} sLanguageTag the language tag identifier, in format en-US or en_US.
 	 *
 	 * @author SAP SE
-	 * @version 1.139.0
+	 * @version 1.140.0
 	 * @public
 	 * @alias module:sap/base/i18n/LanguageTag
 	 */

package/src/sap/base/i18n/date/TimezoneUtils.js

@@ -10,7 +10,7 @@ sap.ui.define([], function() {
 	 * Static collection of utility functions to handle time zone related conversions
 	 *
 	 * @author SAP SE
-	 * @version 1.139.0
+	 * @version 1.140.0
 	 * @namespace
 	 * @alias module:sap/base/i18n/date/TimezoneUtils
 	 * @private

package/src/sap/base/security/URLListValidator.js

@@ -106,7 +106,8 @@ sap.ui.define([], function() {
 	 * @param {string} [protocol] The protocol of the URL, can be falsy to allow all protocols for an entry e.g. "", "http", "mailto"
 	 * @param {string} [host] The host of the URL, can be falsy to allow all hosts. A wildcard asterisk can be set at the beginning, e.g. "examples.com", "*.example.com"
 	 * @param {string} [port] The port of the URL, can be falsy to allow all ports, e.g. "", "8080"
-	 * @param {string} [path] the path of the URL, path of the url, can be falsy to allow all paths. A wildcard asterisk can be set at the end, e.g. "/my-example*", "/my-news"
+	 * @param {string} [path] the path of the URL, e.g. "/my-news". Can be falsy to allow all paths. A wildcard asterisk can be set at the end to ensure a path starts with the given string, e.g. "/my-example*".
+	 * 	When using wildcards, make sure to only provide normalized URLs to the validate function in order to mitigate the risk of path traversal attacks.
 	 * @public
 	 */
 	oURLListValidator.add = function(protocol, host, port, path) {
@@ -141,13 +142,16 @@ sap.ui.define([], function() {
 	 * Validates a URL. Check if it's not a script or other security issue.
 	 *
 	 * <b>Note</b>:
-	 * It is strongly recommended to validate only absolute URLs. There's almost no case
+	 * It is strongly recommended to validate only absolute, normalized URLs. There's almost no case
 	 * where checking only the path of a URL would allow to ensure its validity.
-	 * For compatibility reasons, this API cannot automatically resolve URLs relative to
+	 * For compatibility reasons, this API does not normalize URLs and cannot automatically resolve URLs relative to
 	 * <code>document.baseURI</code>, but callers should do so. In that case, and when the
 	 * allow list is not empty, an entry for the origin of <code>document.baseURI</code>
 	 * must be added to the allow list.
 	 *
+	 * Any measures to mitigate path traversal or similar attack vectors must be taken by the caller, e.g. by using the
+	 * {@link https://developer.mozilla.org/docs/Web/API/URL URL} API to normalize the URL beforehand.
+	 *
 	 * <h3>Details</h3>
 	 * Splits the given URL into components and checks for allowed characters according to RFC 3986:
 	 *

package/src/sap/base/util/restricted/_CancelablePromise.js

@@ -26,7 +26,7 @@
  * @alias module:sap/base/util/restricted/_CancelablePromise
  * @author SAP SE
  * @since 1.79
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_castArray.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_castArray
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_compact.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_compact
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_curry.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_curry
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_debounce.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_debounce
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_difference.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_difference
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_differenceBy.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_differenceBy
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_differenceWith.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_differenceWith
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_flatMap.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_flatMap
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_flatMapDeep.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_flatMapDeep
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_flatMapDepth.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_flatMapDepth
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_flatten.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_flatten
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_flattenDeep.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_flattenDeep
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_flattenDepth.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_flattenDepth
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_intersection.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_intersection
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_intersectionBy.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_intersectionBy
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_intersectionWith.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_intersectionWith
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_isEqual.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_isEqual
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_isEqualWith.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_isEqualWith
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_isNil.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_isNil
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_max.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_max
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_merge.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_merge
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_mergeWith.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_mergeWith
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_min.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_min
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_omit.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_omit
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_pick.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_pick
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_pickBy.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_pickBy
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_throttle.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_throttle
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_toArray.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_toArray
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_union.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_union
  * @author SAP SE
  * @since 1.81
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_unionBy.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_unionBy
  * @author SAP SE
  * @since 1.81
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_unionWith.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_unionWith
  * @author SAP SE
  * @since 1.81
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_uniq.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_uniq
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_uniqBy.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_uniqBy
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_uniqWith.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_uniqWith
  * @author SAP SE
  * @since 1.71
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_without.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_without
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_xor.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_xor
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_xorBy.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_xorBy
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_xorWith.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_xorWith
  * @author SAP SE
  * @since 1.80
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_zipObject.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_zipObject
  * @author SAP SE
  * @since 1.81
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/base/util/restricted/_zipObjectDeep.js

@@ -10,7 +10,7 @@
  * @alias module:sap/base/util/restricted/_zipObjectDeep
  * @author SAP SE
  * @since 1.81
- * @version 1.139.0
+ * @version 1.140.0
  * @private
  * @ui5-restricted
 */

package/src/sap/ui/Device.js

@@ -11,7 +11,7 @@
  * This API is independent from any other part of the UI5 framework. This allows it to be loaded beforehand, if it is needed, to create the UI5 bootstrap
  * dynamically depending on the capabilities of the browser or device.
  *
- * @version 1.139.0
+ * @version 1.140.0
  * @namespace
  * @name sap.ui.Device
  * @public
@@ -33,7 +33,7 @@ if (typeof window.sap.ui !== "object") {
 	// Skip initialization if API is already available
 	// ui5lint-disable no-globals
 	if (typeof window.sap.ui.Device === "object" || typeof window.sap.ui.Device === "function") {
-		var apiVersion = "1.139.0";
+		var apiVersion = "1.140.0";
 		window.sap.ui.Device._checkAPIVersion(apiVersion);
 		return;
 	}
@@ -107,7 +107,7 @@ if (typeof window.sap.ui !== "object") {
 
 	//Only used internal to make clear when Device API is loaded in wrong version
 	Device._checkAPIVersion = function(sVersion) {
-		var v = "1.139.0";
+		var v = "1.140.0";
 		if (v != sVersion) {
 			oLogger.log(WARNING, "Device API version differs: " + v + " <-> " + sVersion);
 		}