@openui5/sap.ui.core 1.90.4 → 1.90.8

package/src/sap/ui/model/type/TimeInterval.js

@@ -19,7 +19,7 @@ sap.ui.define(['./DateInterval', 'sap/ui/core/format/DateFormat'],
 	 * @extends sap.ui.model.type.DateInterval
 	 *
 	 * @author SAP SE
-	 * @version 1.90.4
+	 * @version 1.90.8
 	 *
 	 * @public
 	 * @param {object} [oFormatOptions] Formatting options. For a list of all available options, see {@link sap.ui.core.format.DateFormat.getTimeInstance DateFormat}.

package/src/sap/ui/model/type/Unit.js

@@ -56,7 +56,7 @@ sap.ui.define([
 	 *
 	 *
 	 * @author SAP SE
-	 * @version 1.90.4
+	 * @version 1.90.8
 	 *
 	 * @public
 	 * @param {object} [oFormatOptions]

package/src/sap/ui/model/xml/XMLModel.js

@@ -45,7 +45,7 @@ sap.ui.define([
 	 * @extends sap.ui.model.ClientModel
 	 *
 	 * @author SAP SE
-	 * @version 1.90.4
+	 * @version 1.90.8
 	 *
 	 * @param {object} oData either the URL where to load the XML from or an XML
 	 * @public

package/src/sap/ui/qunit/utils/ControlIterator.js

@@ -53,7 +53,7 @@ sap.ui.define(['sap/ui/core/Core', "sap/ui/VersionInfo"],
 	 * @namespace
 	 *
 	 * @author SAP SE
-	 * @version 1.90.4
+	 * @version 1.90.8
 	 *
 	 * @public
 	 * @since 1.48.0

package/src/sap/ui/qunit/utils/MemoryLeakCheck.js

@@ -29,7 +29,7 @@ sap.ui.define([ 'jquery.sap.global', 'sap/ui/core/Element', 'sap/ui/core/Control
 	 * @namespace
 	 *
 	 * @author SAP SE
-	 * @version 1.90.4
+	 * @version 1.90.8
 	 *
 	 * @public
 	 * @since 1.48.0

package/src/sap/ui/thirdparty/IPv6.js

@@ -2,7 +2,7 @@
  * URI.js - Mutating URLs
  * IPv6 Support
  *
- * Version: 1.19.6
+ * Version: 1.19.7
  *
  * Author: Rodney Rehm
  * Web: http://medialize.github.io/URI.js/
@@ -182,4 +182,4 @@
     best: bestPresentation,
     noConflict: noConflict
   };
-}));
+}));

package/src/sap/ui/thirdparty/SecondLevelDomains.js

@@ -2,7 +2,7 @@
  * URI.js - Mutating URLs
  * Second Level Domain (SLD) Support
  *
- * Version: 1.19.6
+ * Version: 1.19.7
  *
  * Author: Rodney Rehm
  * Web: http://medialize.github.io/URI.js/
@@ -242,4 +242,4 @@
   };
 
   return SLD;
-}));
+}));

package/src/sap/ui/thirdparty/URI.js

@@ -1,7 +1,7 @@
 /*!
  * URI.js - Mutating URLs
  *
- * Version: 1.19.6
+ * Version: 1.19.7
  *
  * Author: Rodney Rehm
  * Web: http://medialize.github.io/URI.js/
@@ -90,7 +90,7 @@
     return /^[0-9]+$/.test(value);
   }
 
-  URI.version = '1.19.6';
+  URI.version = '1.19.7';
 
   var p = URI.prototype;
   var hasOwn = Object.prototype.hasOwnProperty;
@@ -521,6 +521,9 @@
       string = string.substring(0, pos);
     }
 
+    // slashes and backslashes have lost all meaning for the web protocols (https, http, wss, ws)
+    string = string.replace(/^(https?|ftp|wss?)?:[/\\]*/, '$1://');
+
     // extract protocol
     if (string.substring(0, 2) === '//') {
       // relative-scheme
@@ -667,7 +670,10 @@
       // no "=" is null according to http://dvcs.w3.org/hg/url/raw-file/tip/Overview.html#collect-url-parameters
       value = v.length ? URI.decodeQuery(v.join('='), escapeQuerySpace) : null;
 
-      if (hasOwn.call(items, name)) {
+      if (name === '__proto__') {
+        // ignore attempt at exploiting JavaScript internals
+        continue;
+      } else if (hasOwn.call(items, name)) {
         if (typeof items[name] === 'string' || items[name] === null) {
           items[name] = [items[name]];
         }
@@ -760,7 +766,10 @@
     var t = '';
     var unique, key, i, length;
     for (key in data) {
-      if (hasOwn.call(data, key)) {
+      if (key === '__proto__') {
+        // ignore attempt at exploiting JavaScript internals
+        continue;
+      } else if (hasOwn.call(data, key)) {
         if (isArray(data[key])) {
           unique = {};
           for (i = 0, length = data[key].length; i < length; i++) {
@@ -2351,4 +2360,4 @@
   };
 
   return URI;
-}));
+}));

package/src/sap/ui/thirdparty/URITemplate.js

@@ -2,7 +2,7 @@
  * URI.js - Mutating URLs
  * URI Template Support - http://tools.ietf.org/html/rfc6570
  *
- * Version: 1.19.6
+ * Version: 1.19.7
  *
  * Author: Rodney Rehm
  * Web: http://medialize.github.io/URI.js/
@@ -513,4 +513,4 @@
   };
 
   return URITemplate;
-}));
+}));

package/src/sap/ui/thirdparty/crossroads.js

@@ -530,9 +530,17 @@ var factory = function (signals) {
                     //the regex for slash which isn't fully optional based on the given pattern
                     //for example, given patterns foo/:bar: and foobar/:bar:, the slash isn't fully
                     //optional because if the slash is optional, hash "foobar" will also match foo/:bar:
-                    //with parameter bar set to "bar"
+                    //with parameter bar set to "bar".
+                    //
+                    //(?:\\/(?=(?:[^\\/?]+)?)):
+                    //A single slash will be matched because the positive lookahead is optional.
+                    //If there are some symbols after the slash, it must not be a slash '/' or question mark '?'.
+                    //
+                    //(?:\\/?(?=\\?)):
+                    //A single slash is optional, if the slash is followed by questions mark (query param).
+                    //
                     //arsbq stands for "after required slash or before query"
-                    res_arsbq : '(?:(?:\\/(?=(?:[^\\/?]+)?))|^\\/?|\\/?$)'
+                    res_arsbq : '(?:(?:\\/(?=(?:[^\\/?]+)?))|(?:\\/?(?=\\?))|^\\/?|\\/?$)'
                     // ##### END: MODIFIED BY SAP
                 },
                 'RS' : {

package/src/sap/ui/util/Storage.js

@@ -250,7 +250,7 @@ sap.ui.define(["sap/base/assert"], function (assert) {
 	 *
 	 * @enum {string}
 	 * @public
-	 * @version 1.90.4
+	 * @version 1.90.8
 	 */
 	Storage.Type = {
 		/**