@p4ulcristian/iris-layout 0.2.0 → 0.2.2

package/dist/cljs-runtime/goog.html.safeurl.js.map

@@ -0,0 +1,9 @@
+{
+"version":3,
+"file":"goog.html.safeurl.js",
+"lineCount":223,
+"mappings":"AAYAA,IAAKC,CAAAA,OAAL,CAAa,mBAAb,CAAA;AAEAD,IAAKE,CAAAA,OAAL,CAAa,cAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,aAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,8BAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,mBAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,yBAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,sBAAb,CAAA;AAyCAF,IAAKG,CAAAA,IAAKC,CAAAA,OAAV,GAAoB,KAAA;AAKlBC,aAAW,CAACC,KAAD,EAAQC,KAAR,CAAe;AAOxB,QAAKC,CAAAA,4CAAL,GACKD,KAAD,KAAWP,IAAKG,CAAAA,IAAKC,CAAAA,OAAQK,CAAAA,0BAA7B,GAA2DH,KAA3D,GAAmE,EADvE;AAPwB;AAqB1BI,UAAQ,EAAG;AACT,WAAO,IAAKF,CAAAA,4CAA6CE,CAAAA,QAAlD,EAAP;AADS;AA1BO,CAApB;AAoDAV,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAAlB,GAAqC,yBAArC;AAOAX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQQ,CAAAA,SAAUC,CAAAA,+BAA5B,GAA8D,IAA9D;AAsBAb,IAAKG,CAAAA,IAAKC,CAAAA,OAAQQ,CAAAA,SAAUE,CAAAA,mBAA5B,GAAkDC,QAAQ,EAAG;AAE3D,SAAO,IAAKP,CAAAA,4CAA6CE,CAAAA,QAAlD,EAAP;AAF2D,CAA7D;AAsBAV,IAAKG,CAAAA,IAAKC,CAAAA,OAAQY,CAAAA,MAAlB,GAA2BC,QAAQ,CAACC,OAAD,CAAU;AAQ3C,MAAIA,OAAJ,YAAuBlB,IAAKG,CAAAA,IAAKC,CAAAA,OAAjC,IACIc,OAAQb,CAAAA,WADZ,KAC4BL,IAAKG,CAAAA,IAAKC,CAAAA,OADtC;AAEE,WAAOc,OAAQV,CAAAA,4CAAf;AAFF,QAGO;AACLR,QAAKmB,CAAAA,OAAQC,CAAAA,IAAb,CACI,wCADJ,GACgDF,OADhD,GAC0D,YAD1D,GAEIlB,IAAKqB,CAAAA,MAAL,CAAYH,OAAZ,CAFJ,CAAA;AAGA,WAAO,oBAAP;AAJK;AAXoC,CAA7C;AA8BAlB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQkB,CAAAA,YAAlB,GAAiCC,QAAQ,CAACC,GAAD,CAAM;AAE7C,SAAOxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CACHzB,IAAK0B,CAAAA,MAAOC,CAAAA,KAAMX,CAAAA,MAAlB,CAAyBQ,GAAzB,CADG,CAAP;AAF6C,CAA/C;AAuBAxB,IAAKG,CAAAA,IAAKyB,CAAAA,uBAAV,GAAoC,IAAIC,MAAJ,CAGhC,kGAHgC,GAI5B,YAJ4B,GAK5B,4DAL4B,GAM5B,mDAN4B,GAO5B,yCAP4B,EAQhC,GARgC,CAApC;AAiBA7B,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ0B,CAAAA,cAAlB,GAAmCC,QAAQ,CAACC,QAAD,CAAW;AAEpD,SAAOhC,IAAKG,CAAAA,IAAKyB,CAAAA,uBAAwBK,CAAAA,IAAlC,CAAuCD,QAAvC,CAAP;AAFoD,CAAtD;AAqBAhC,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ8B,CAAAA,QAAlB,GAA6BC,QAAQ,CAACC,IAAD,CAAO;AAE1C,MAAIZ,MAAMxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ0B,CAAAA,cAAlB,CAAiCM,IAAKC,CAAAA,IAAtC,CAAA,GACNrC,IAAKsC,CAAAA,EAAGd,CAAAA,GAAIe,CAAAA,eAAZ,CAA4BH,IAA5B,CADM,GAENpC,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAFtB;AAGA,SAAOX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CAAgED,GAAhE,CAAP;AAL0C,CAA5C;AAcAxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQoC,CAAAA,eAAlB,GAAoCC,QAAQ,CAACvB,OAAD,CAAU;AAEpD,MAAIM,MAAMN,OAAQJ,CAAAA,mBAAR,EAAV;AACA,MAAIU,GAAJ,KAAYxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAA9B;AACEX,QAAKsC,CAAAA,EAAGd,CAAAA,GAAIgB,CAAAA,eAAZ,CAA4BhB,GAA5B,CAAA;AADF;AAHoD,CAAtD;AAcAxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQsC,CAAAA,eAAlB,GAAoCC,QAAQ,CAACC,WAAD,CAAc;AAExD5C,MAAKmB,CAAAA,OAAQ0B,CAAAA,MAAb,CACI,aADJ,IACqB7C,IAAK8C,CAAAA,MAD1B,EACkC,4BADlC,CAAA;AAEA,QAAMtB,MAAMoB,WAAA,YAAuBG,WAAvB,GACR/C,IAAKsC,CAAAA,EAAGd,CAAAA,GAAIe,CAAAA,eAAZ,CAA4BK,WAA5B,CADQ,GAER5C,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAFtB;AAGA,SAAOX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CAAgED,GAAhE,CAAP;AAPwD,CAA1D;AAgBAxB,IAAKG,CAAAA,IAAK6C,CAAAA,iBAAV,GAA8B,oCAA9B;AAYAhD,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ6C,CAAAA,cAAlB,GAAmCC,QAAQ,CAACC,OAAD,CAAU;AAGnDA,SAAA,GAAUC,MAAA,CAAOD,OAAP,CAAV;AAIA,MAAIE,kBAAkBF,OAAQG,CAAAA,OAAR,CAAgB,YAAhB,EAA8B,EAA9B,CAAtB;AACA,MAAIC,QAAQF,eAAgBE,CAAAA,KAAhB,CAAsBvD,IAAKG,CAAAA,IAAK6C,CAAAA,iBAAhC,CAAZ;AAQA,MAAIO,KAAJ;AACE,WAAOvD,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CACH4B,eADG,CAAP;AADF;AAIA,SAAO,IAAP;AApBmD,CAArD;AAkCArD,IAAKG,CAAAA,IAAKC,CAAAA,OAAQoD,CAAAA,WAAlB,GAAgCC,QAAQ,CAACN,OAAD,CAAU;AAEhD,SAAOnD,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ6C,CAAAA,cAAlB,CAAiCE,OAAjC,CAAP,IACInD,IAAKG,CAAAA,IAAKC,CAAAA,OAAQsD,CAAAA,aADtB;AAFgD,CAAlD;AAcA1D,IAAKG,CAAAA,IAAKC,CAAAA,OAAQuD,CAAAA,UAAlB,GAA+BC,QAAQ,CAACC,MAAD,CAAS;AAK9C,MAAI,CAAC7D,IAAK0B,CAAAA,MAAOoC,CAAAA,QAASC,CAAAA,yBAArB,CAA+CF,MAA/C,EAAuD,MAAvD,CAAL;AACEA,UAAA,GAAS7D,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAA3B;AADF;AAGA,SAAOX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CACHoC,MADG,CAAP;AAR8C,CAAhD;AAoBA7D,IAAKG,CAAAA,IAAK6D,CAAAA,gBAAV,GAA6B,IAAInC,MAAJ,CACzB,8EADyB,EAEzB,GAFyB,CAA7B;AAcA7B,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ6D,CAAAA,UAAlB,GAA+BC,QAAQ,CAACC,MAAD,CAAS;AAE9C,MAAI,CAACnE,IAAKG,CAAAA,IAAK6D,CAAAA,gBAAiB/B,CAAAA,IAA3B,CAAgCmC,kBAAA,CAAmBD,MAAnB,CAAhC,CAAL;AACEA,UAAA,GAASnE,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAA3B;AADF;AAGA,SAAOX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CACH0C,MADG,CAAP;AAL8C,CAAhD;AAiBAnE,IAAKG,CAAAA,IAAKC,CAAAA,OAAQiE,CAAAA,wBAAlB,GAA6CC,QAAQ,CAACC,oBAAD,CAAuB;AAE1E,MAAI,CAACvE,IAAK0B,CAAAA,MAAOoC,CAAAA,QAASC,CAAAA,yBAArB,CACGQ,oBADH,EACyB,sBADzB,CAAL;AAEEA,wBAAA,GAAuBvE,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAAzC;AAFF;AAIA,SAAOX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CACH8C,oBADG,CAAP;AAN0E,CAA5E;AAiBAvE,IAAKG,CAAAA,IAAKC,CAAAA,OAAQoE,CAAAA,eAAlB,GAAoCC,QAAQ,CAACC,WAAD,CAAc;AAExD,MAAI,CAAC1E,IAAK0B,CAAAA,MAAOoC,CAAAA,QAASC,CAAAA,yBAArB,CACGW,WADH,EACgB,iBADhB,CAAL;AAEEA,eAAA,GAAc1E,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAAhC;AAFF;AAIA,SAAOX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CACHiD,WADG,CAAP;AANwD,CAA1D;AAiBA1E,IAAKG,CAAAA,IAAKC,CAAAA,OAAQuE,CAAAA,UAAlB,GAA+BC,QAAQ,CAACC,MAAD,CAAS;AAE9C,MAAI,CAAC7E,IAAK0B,CAAAA,MAAOoC,CAAAA,QAASC,CAAAA,yBAArB,CAA+Cc,MAA/C,EAAuD,MAAvD,CAAL,IACI,CAAC7E,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ0E,CAAAA,kBAAlB,CAAqCD,MAArC,CADL;AAEEA,UAAA,GAAS7E,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAA3B;AAFF;AAIA,SAAOX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CACHoD,MADG,CAAP;AAN8C,CAAhD;AAqBA7E,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ0E,CAAAA,kBAAlB,GAAuCC,QAAQ,CAACF,MAAD,CAAS;AAEtD,MAAIG,OAAOH,MAAOI,CAAAA,OAAP,CAAe,GAAf,CAAX;AACA,MAAID,IAAJ,GAAW,CAAX;AACEH,UAAA,GAASA,MAAOK,CAAAA,SAAP,CAAiB,CAAjB,EAAoBF,IAApB,CAAT;AADF;AAGA,MAAIG,aAAaN,MAAOtB,CAAAA,KAAP,CAAa,aAAb,CAAjB;AAEA,MAAI,CAAC4B,UAAL;AACE,WAAO,IAAP;AADF;AAIA,MAAIA,UAAWC,CAAAA,MAAf,GAAwB,CAAxB;AACE,WAAO,KAAP;AADF;AAIA,MAAIC,YAAYR,MAAOtB,CAAAA,KAAP,CAAa,kBAAb,CAAA,CAAiC,CAAjC,CAAhB;AACA,MAAI,CAAC8B,SAAL;AACE,WAAO,IAAP;AADF;AAGA,KAAI;AACFjB,sBAAA,CAAmBiB,SAAnB,CAAA;AADE,GAEF,QAAOC,KAAP,CAAc;AACd,WAAO,KAAP;AADc;AAGhB,SAAO,oCAAqCrD,CAAAA,IAArC,CAA0CoD,SAA1C,CAAP;AAzBsD,CAAxD;AAoCArF,IAAKG,CAAAA,IAAKC,CAAAA,OAAQmF,CAAAA,UAAlB,GAA+BC,QAAQ,CAACC,MAAD,CAAS;AAE9C,MAAI,CAACzF,IAAK0B,CAAAA,MAAOoC,CAAAA,QAASC,CAAAA,yBAArB,CAA+C0B,MAA/C,EAAuD,QAAvD,CAAL;AACEA,UAAA,GAASzF,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAA3B;AADF;AAGA,SAAOX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CACHgE,MADG,CAAP;AAL8C,CAAhD;AAqBAzF,IAAKG,CAAAA,IAAKC,CAAAA,OAAQsF,CAAAA,0BAAlB,GAA+CC,QAAQ,CAACnE,GAAD,EAAMoE,WAAN,CAAmB;AAExE,SAAO5F,IAAKG,CAAAA,IAAKC,CAAAA,OAAQyF,CAAAA,qBAAlB,CACH,kCADG,EACiCrE,GADjC,EACsCoE,WADtC,CAAP;AAFwE,CAA1E;AAkBA5F,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ0F,CAAAA,2BAAlB,GAAgDC,QAAQ,CAACvE,GAAD,EAAMoE,WAAN,CAAmB;AAEzE,SAAO5F,IAAKG,CAAAA,IAAKC,CAAAA,OAAQyF,CAAAA,qBAAlB,CACH,+BADG,EAC8BrE,GAD9B,EACmCoE,WADnC,CAAP;AAFyE,CAA3E;AAkBA5F,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ4F,CAAAA,wBAAlB,GAA6CC,QAAQ,CAACzE,GAAD,EAAMoE,WAAN,CAAmB;AAEtE,SAAO5F,IAAKG,CAAAA,IAAKC,CAAAA,OAAQyF,CAAAA,qBAAlB,CACH,sCADG,EACqCrE,GADrC,EAC0CoE,WAD1C,CAAP;AAFsE,CAAxE;AAuBA5F,IAAKG,CAAAA,IAAKC,CAAAA,OAAQyF,CAAAA,qBAAlB,GAA0CK,QAAQ,CAACC,MAAD,EAAS3E,GAAT,EAAcoE,WAAd,CAA2B;AAE3E,MAAIQ,UAAUD,MAAOE,CAAAA,IAAP,CAAY7E,GAAZ,CAAd;AACA,MAAI,CAAC4E,OAAL;AACE5E,OAAA,GAAMxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAAxB;AADF,QAEO;AACL,QAAI2F,uBAAuBF,OAAA,CAAQ,CAAR,CAA3B;AACA,QAAIG,oBAAJ;AACA,QAAIX,WAAJ,YAA2B5F,IAAK0B,CAAAA,MAAOC,CAAAA,KAAvC;AACE4E,0BAAA,GAAuB,CAACvG,IAAK0B,CAAAA,MAAOC,CAAAA,KAAMX,CAAAA,MAAlB,CAAyB4E,WAAzB,CAAD,CAAvB;AADF;AAGEW,0BAAA,GAAuBX,WAAYY,CAAAA,GAAZ,CAAgBxF,QAASA,OAAM,CAACyF,CAAD,CAAI;AAExD,eAAOzG,IAAK0B,CAAAA,MAAOC,CAAAA,KAAMX,CAAAA,MAAlB,CAAyByF,CAAzB,CAAP;AAFwD,OAAnC,CAAvB;AAHF;AAQA,QAAIF,oBAAqBtB,CAAAA,OAArB,CAA6BqB,oBAA7B,CAAJ,IAA0D,CAAC,CAA3D;AACE9E,SAAA,GAAMxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAAxB;AADF;AAXK;AAeP,SAAOX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CAAgED,GAAhE,CAAP;AApB2E,CAA7E;AA+BAxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQsG,CAAAA,sBAAlB,GAA2CC,QAAQ,CAACC,kBAAD,CAAqB;AAEtE,SAAO5G,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CACHzB,IAAKG,CAAAA,IAAK0G,CAAAA,kBAAmB7F,CAAAA,MAA7B,CAAoC4F,kBAApC,CADG,CAAP;AAFsE,CAAxE;AA2BA5G,IAAKG,CAAAA,IAAK2G,CAAAA,iBAAV,GACI,kDADJ;AAYA9G,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ2G,CAAAA,gBAAlB,GAAqC/G,IAAKG,CAAAA,IAAK2G,CAAAA,iBAA/C;AAgBA9G,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ4G,CAAAA,WAAlB,GAAgCC,QAAQ,CAACzF,GAAD,CAAM;AAE5C,MAAIA,GAAJ,YAAmBxB,IAAKG,CAAAA,IAAKC,CAAAA,OAA7B;AACE,WAAOoB,GAAP;AADF;AAGA,MAAI,MAAOA,IAAX,IAAkB,QAAlB,IAA8BA,GAAIX,CAAAA,+BAAlC;AACEW,OAAA,GAA+CA,GAAKV,CAAAA,mBAAN,EAA9C;AADF;AAIEU,OAAA,GAAM4B,MAAA,CAAO5B,GAAP,CAAN;AAJF;AAMA,MAAI,CAACxB,IAAKG,CAAAA,IAAK2G,CAAAA,iBAAkB7E,CAAAA,IAA5B,CAAiCT,GAAjC,CAAL;AACE,WAAOxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ6C,CAAAA,cAAlB,CAAiCzB,GAAjC,CAAP;AADF;AAGA,SAAOxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CAAgED,GAAhE,CAAP;AAd4C,CAA9C;AA+BAxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ8G,CAAAA,QAAlB,GAA6BC,QAAQ,CAAC3F,GAAD,CAAM;AAEzC,SAAOxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ4G,CAAAA,WAAlB,CAA8BxF,GAA9B,CAAP,IAA6CxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQsD,CAAAA,aAA/D;AAFyC,CAA3C;AAuBA1D,IAAKG,CAAAA,IAAKC,CAAAA,OAAQgH,CAAAA,uBAAlB,GAA4CC,QAAQ,CAAC7F,GAAD,EAAM8F,gBAAN,CAAwB;AAE1E,MAAI9F,GAAJ,YAAmBxB,IAAKG,CAAAA,IAAKC,CAAAA,OAA7B;AACE,WAAOoB,GAAP;AADF,QAEO,KAAI,MAAOA,IAAX,IAAkB,QAAlB,IAA8BA,GAAIX,CAAAA,+BAAlC;AACLW,OAAA,GAA+CA,GAAKV,CAAAA,mBAAN,EAA9C;AADK;AAGLU,OAAA,GAAM4B,MAAA,CAAO5B,GAAP,CAAN;AAHK;AAKP,MAAI8F,gBAAJ,IAAwB,SAAUrF,CAAAA,IAAV,CAAeT,GAAf,CAAxB,CAA6C;AAC3C,QAAIN,UAAUlB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQoD,CAAAA,WAAlB,CAA8BhC,GAA9B,CAAd;AACA,QAAIN,OAAQJ,CAAAA,mBAAR,EAAJ,IAAqCU,GAArC;AACE,aAAON,OAAP;AADF;AAF2C;AAM7C,MAAI,CAAClB,IAAKmB,CAAAA,OAAQ0B,CAAAA,MAAb,CACG7C,IAAKG,CAAAA,IAAK2G,CAAAA,iBAAkB7E,CAAAA,IAA5B,CAAiCT,GAAjC,CADH,EAEG,wCAFH,EAE6CA,GAF7C,CAAL;AAGEA,OAAA,GAAMxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAAxB;AAHF;AAKA,SAAOX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CAAgED,GAAhE,CAAP;AApB0E,CAA5E;AA6BAxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQmH,CAAAA,aAAlB,GAAkCC,QAAQ,CAAChG,GAAD,CAAM;AAC9C,MAAIiG,SAAJ;AACA,KAAI;AACFA,aAAA,GAAY,IAAIC,GAAJ,CAAQlG,GAAR,CAAZ;AADE,GAEF,QAAOmG,CAAP,CAAU;AAMV,WAAO,QAAP;AANU;AAQZ,SAAOF,SAAUG,CAAAA,QAAjB;AAZ8C,CAAhD;AA4BA5H,IAAKG,CAAAA,IAAKC,CAAAA,OAAQyH,CAAAA,oCAAlB,GAAyDC,QAAQ,CAACtG,GAAD,CAAM;AAErE,MAAIA,GAAJ,YAAmBxB,IAAKG,CAAAA,IAAKC,CAAAA,OAA7B;AACE,WAAOoB,GAAP;AADF,QAEO,KAAI,MAAOA,IAAX,IAAkB,QAAlB,IAA8BA,GAAIX,CAAAA,+BAAlC;AACLW,OAAA,GAA+CA,GAAKV,CAAAA,mBAAN,EAA9C;AADK;AAGLU,OAAA,GAAM4B,MAAA,CAAO5B,GAAP,CAAN;AAHK;AAMP,QAAMuG,eAAe/H,IAAKG,CAAAA,IAAKC,CAAAA,OAAQmH,CAAAA,aAAlB,CAAgC/F,GAAhC,CAArB;AACA,MAAI,CAACxB,IAAKmB,CAAAA,OAAQ0B,CAAAA,MAAb,CACGkF,YADH,KACoB,aADpB,EACmC,yBADnC,EAC8DvG,GAD9D,CAAL;AAEEA,OAAA,GAAMxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBAAxB;AAFF;AAIA,SAAOX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CAAgED,GAAhE,CAAP;AAfqE,CAAvE;AAwBAxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQK,CAAAA,0BAAlB,GAA+C,EAA/C;AASAT,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,GAAkEuG,QAAQ,CACtExG,GADsE,CACjE;AAEP,SAAO,IAAIxB,IAAKG,CAAAA,IAAKC,CAAAA,OAAd,CACHoB,GADG,EACExB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQK,CAAAA,0BADpB,CAAP;AAFO,CADT;AAYAT,IAAKG,CAAAA,IAAKC,CAAAA,OAAQsD,CAAAA,aAAlB,GACI1D,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CACIzB,IAAKG,CAAAA,IAAKC,CAAAA,OAAQO,CAAAA,gBADtB,CADJ;AASAX,IAAKG,CAAAA,IAAKC,CAAAA,OAAQ6H,CAAAA,WAAlB,GACIjI,IAAKG,CAAAA,IAAKC,CAAAA,OAAQqB,CAAAA,6CAAlB,CACI,aADJ,CADJ;;",
+"sources":["goog/html/safeurl.js"],
+"sourcesContent":["/**\n * @license\n * Copyright The Closure Library Authors.\n * SPDX-License-Identifier: Apache-2.0\n */\n\n/**\n * @fileoverview The SafeUrl type and its builders.\n *\n * TODO(xtof): Link to document stating type contract.\n */\n\ngoog.provide('goog.html.SafeUrl');\n\ngoog.require('goog.asserts');\ngoog.require('goog.fs.url');\ngoog.require('goog.html.TrustedResourceUrl');\ngoog.require('goog.string.Const');\ngoog.require('goog.string.TypedString');\ngoog.require('goog.string.internal');\n\n\n\n/**\n * A string that is safe to use in URL context in DOM APIs and HTML documents.\n *\n * A SafeUrl is a string-like object that carries the security type contract\n * that its value as a string will not cause untrusted script execution\n * when evaluated as a hyperlink URL in a browser.\n *\n * Values of this type are guaranteed to be safe to use in URL/hyperlink\n * contexts, such as assignment to URL-valued DOM properties, in the sense that\n * the use will not result in a Cross-Site-Scripting vulnerability. Similarly,\n * SafeUrls can be interpolated into the URL context of an HTML template (e.g.,\n * inside a href attribute). However, appropriate HTML-escaping must still be\n * applied.\n *\n * Note that, as documented in `goog.html.SafeUrl.unwrap`, this type's\n * contract does not guarantee that instances are safe to interpolate into HTML\n * without appropriate escaping.\n *\n * Note also that this type's contract does not imply any guarantees regarding\n * the resource the URL refers to.  In particular, SafeUrls are <b>not</b>\n * safe to use in a context where the referred-to resource is interpreted as\n * trusted code, e.g., as the src of a script tag.\n *\n * Instances of this type must be created via the factory methods\n * (`goog.html.SafeUrl.fromConstant`, `goog.html.SafeUrl.sanitize`),\n * etc and not by invoking its constructor. The constructor intentionally takes\n * an extra parameter that cannot be constructed outside of this file and the\n * type is immutable; hence only a default instance corresponding to the empty\n * string can be obtained via constructor invocation.\n *\n * @see goog.html.SafeUrl#fromConstant\n * @see goog.html.SafeUrl#from\n * @see goog.html.SafeUrl#sanitize\n * @final\n * @struct\n * @implements {goog.string.TypedString}\n */\ngoog.html.SafeUrl = class {\n  /**\n   * @param {string} value\n   * @param {!Object} token package-internal implementation detail.\n   */\n  constructor(value, token) {\n    /**\n     * The contained value of this SafeUrl.  The field has a purposely ugly\n     * name to make (non-compiled) code that attempts to directly access this\n     * field stand out.\n     * @private {string}\n     */\n    this.privateDoNotAccessOrElseSafeUrlWrappedValue_ =\n        (token === goog.html.SafeUrl.CONSTRUCTOR_TOKEN_PRIVATE_) ? value : '';\n  }\n\n  /**\n   * Returns a string-representation of this value.\n   *\n   * To obtain the actual string value wrapped in a SafeUrl, use\n   * `goog.html.SafeUrl.unwrap`.\n   *\n   * @return {string}\n   * @see goog.html.SafeUrl#unwrap\n   * @override\n   */\n  toString() {\n    return this.privateDoNotAccessOrElseSafeUrlWrappedValue_.toString();\n  }\n};\n\n\n/**\n * The innocuous string generated by goog.html.SafeUrl.sanitize when passed\n * an unsafe URL.\n *\n * about:invalid is registered in\n * http://www.w3.org/TR/css3-values/#about-invalid.\n * http://tools.ietf.org/html/rfc6694#section-2.2.1 permits about URLs to\n * contain a fragment, which is not to be considered when determining if an\n * about URL is well-known.\n *\n * Using about:invalid seems preferable to using a fixed data URL, since\n * browsers might choose to not report CSP violations on it, as legitimate\n * CSS function calls to attr() can result in this URL being produced. It is\n * also a standard URL which matches exactly the semantics we need:\n * \"The about:invalid URI references a non-existent document with a generic\n * error condition. It can be used when a URI is necessary, but the default\n * value shouldn't be resolveable as any type of document\".\n *\n * @const {string}\n */\ngoog.html.SafeUrl.INNOCUOUS_STRING = 'about:invalid#zClosurez';\n\n\n/**\n * @override\n * @const\n */\ngoog.html.SafeUrl.prototype.implementsGoogStringTypedString = true;\n\n\n/**\n * Returns this SafeUrl's value as a string.\n *\n * IMPORTANT: In code where it is security relevant that an object's type is\n * indeed `SafeUrl`, use `goog.html.SafeUrl.unwrap` instead of this\n * method. If in doubt, assume that it's security relevant. In particular, note\n * that goog.html functions which return a goog.html type do not guarantee that\n * the returned instance is of the right type.\n *\n * IMPORTANT: The guarantees of the SafeUrl type contract only extend to the\n * behavior of browsers when interpreting URLs. Values of SafeUrl objects MUST\n * be appropriately escaped before embedding in a HTML document. Note that the\n * required escaping is context-sensitive (e.g. a different escaping is\n * required for embedding a URL in a style property within a style\n * attribute, as opposed to embedding in a href attribute).\n *\n * @see goog.html.SafeUrl#unwrap\n * @override\n */\ngoog.html.SafeUrl.prototype.getTypedStringValue = function() {\n  'use strict';\n  return this.privateDoNotAccessOrElseSafeUrlWrappedValue_.toString();\n};\n\n/**\n * Performs a runtime check that the provided object is indeed a SafeUrl\n * object, and returns its value.\n *\n * IMPORTANT: The guarantees of the SafeUrl type contract only extend to the\n * behavior of  browsers when interpreting URLs. Values of SafeUrl objects MUST\n * be appropriately escaped before embedding in a HTML document. Note that the\n * required escaping is context-sensitive (e.g. a different escaping is\n * required for embedding a URL in a style property within a style\n * attribute, as opposed to embedding in a href attribute).\n *\n * @param {!goog.html.SafeUrl} safeUrl The object to extract from.\n * @return {string} The SafeUrl object's contained string, unless the run-time\n *     type check fails. In that case, `unwrap` returns an innocuous\n *     string, or, if assertions are enabled, throws\n *     `goog.asserts.AssertionError`.\n */\ngoog.html.SafeUrl.unwrap = function(safeUrl) {\n  'use strict';\n  // Perform additional Run-time type-checking to ensure that safeUrl is indeed\n  // an instance of the expected type.  This provides some additional protection\n  // against security bugs due to application code that disables type checks.\n  // Specifically, the following checks are performed:\n  // 1. The object is an instance of the expected type.\n  // 2. The object is not an instance of a subclass.\n  if (safeUrl instanceof goog.html.SafeUrl &&\n      safeUrl.constructor === goog.html.SafeUrl) {\n    return safeUrl.privateDoNotAccessOrElseSafeUrlWrappedValue_;\n  } else {\n    goog.asserts.fail(\n        'expected object of type SafeUrl, got \\'' + safeUrl + '\\' of type ' +\n        goog.typeOf(safeUrl));\n    return 'type_error:SafeUrl';\n  }\n};\n\n\n/**\n * Creates a SafeUrl object from a compile-time constant string.\n *\n * Compile-time constant strings are inherently program-controlled and hence\n * trusted.\n *\n * @param {!goog.string.Const} url A compile-time-constant string from which to\n *         create a SafeUrl.\n * @return {!goog.html.SafeUrl} A SafeUrl object initialized to `url`.\n */\ngoog.html.SafeUrl.fromConstant = function(url) {\n  'use strict';\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(\n      goog.string.Const.unwrap(url));\n};\n\n\n/**\n * A pattern that matches Blob or data types that can have SafeUrls created\n * from URL.createObjectURL(blob) or via a data: URI.\n *\n * This has some parameter support (most notably, we haven't implemented the\n * more complex parts like %-encoded characters or non-alphanumerical ones for\n * simplicity's sake). The specs are fairly complex, and they don't\n * always match Chrome's behavior: we settled on a subset where we're confident\n * all parties involved agree.\n *\n * The spec is available at https://mimesniff.spec.whatwg.org/ (and see\n * https://tools.ietf.org/html/rfc2397 for data: urls, which override some of\n * it).\n * @const\n * @private\n */\ngoog.html.SAFE_MIME_TYPE_PATTERN_ = new RegExp(\n    // Note: Due to content-sniffing concerns, only add MIME types for\n    // media formats.\n    '^(?:audio/(?:3gpp2|3gpp|aac|L16|midi|mp3|mp4|mpeg|oga|ogg|opus|x-m4a|x-matroska|x-wav|wav|webm)|' +\n        'font/\\\\w+|' +\n        'image/(?:bmp|gif|jpeg|jpg|png|tiff|webp|x-icon|heic|heif)|' +\n        'video/(?:mpeg|mp4|ogg|webm|quicktime|x-matroska))' +\n        '(?:;\\\\w+=(?:\\\\w+|\"[\\\\w;,= ]+\"))*$',  // MIME type parameters\n    'i');\n\n\n/**\n * @param {string} mimeType The MIME type to check if safe.\n * @return {boolean} True if the MIME type is safe and creating a Blob via\n *   `SafeUrl.fromBlob()` with that type will not fail due to the type. False\n *   otherwise.\n */\ngoog.html.SafeUrl.isSafeMimeType = function(mimeType) {\n  'use strict';\n  return goog.html.SAFE_MIME_TYPE_PATTERN_.test(mimeType);\n};\n\n\n/**\n * Creates a SafeUrl wrapping a blob URL for the given `blob`.\n *\n * The blob URL is created with `URL.createObjectURL`. If the MIME type\n * for `blob` is not of a known safe audio, image or video MIME type,\n * then the SafeUrl will wrap {@link #INNOCUOUS_STRING}.\n *\n * Note: Call {@link revokeObjectUrl} on the URL after it's used\n * to prevent memory leaks.\n *\n * @see http://www.w3.org/TR/FileAPI/#url\n * @param {!Blob} blob\n * @return {!goog.html.SafeUrl} The blob URL, or an innocuous string wrapped\n *   as a SafeUrl.\n */\ngoog.html.SafeUrl.fromBlob = function(blob) {\n  'use strict';\n  var url = goog.html.SafeUrl.isSafeMimeType(blob.type) ?\n      goog.fs.url.createObjectUrl(blob) :\n      goog.html.SafeUrl.INNOCUOUS_STRING;\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(url);\n};\n\n\n/**\n * Revokes an object URL created for a safe URL created {@link fromBlob()}.\n * @param {!goog.html.SafeUrl} safeUrl SafeUrl wrapping a blob object.\n * @return {void}\n */\ngoog.html.SafeUrl.revokeObjectUrl = function(safeUrl) {\n  'use strict';\n  var url = safeUrl.getTypedStringValue();\n  if (url !== goog.html.SafeUrl.INNOCUOUS_STRING) {\n    goog.fs.url.revokeObjectUrl(url);\n  }\n};\n\n\n/**\n * Creates a SafeUrl wrapping a blob URL created for a MediaSource.\n * @param {!MediaSource} mediaSource\n * @return {!goog.html.SafeUrl} The blob URL.\n */\ngoog.html.SafeUrl.fromMediaSource = function(mediaSource) {\n  'use strict';\n  goog.asserts.assert(\n      'MediaSource' in goog.global, 'No support for MediaSource');\n  const url = mediaSource instanceof MediaSource ?\n      goog.fs.url.createObjectUrl(mediaSource) :\n      goog.html.SafeUrl.INNOCUOUS_STRING;\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(url);\n};\n\n\n/**\n * Matches a base-64 data URL, with the first match group being the MIME type.\n * @const\n * @private\n */\ngoog.html.DATA_URL_PATTERN_ = /^data:(.*);base64,[a-z0-9+\\/]+=*$/i;\n\n\n/**\n * Attempts to create a SafeUrl wrapping a `data:` URL, after validating it\n * matches a known-safe media MIME type. If it doesn't match, return `null`.\n *\n * @param {string} dataUrl A valid base64 data URL with one of the whitelisted\n *     media MIME types.\n * @return {?goog.html.SafeUrl} A matching safe URL, or `null` if it does not\n *     pass.\n */\ngoog.html.SafeUrl.tryFromDataUrl = function(dataUrl) {\n  'use strict';\n  // For defensive purposes, in case users cast around the parameter type.\n  dataUrl = String(dataUrl);\n  // RFC4648 suggest to ignore CRLF in base64 encoding.\n  // See https://tools.ietf.org/html/rfc4648.\n  // Remove the CR (%0D) and LF (%0A) from the dataUrl.\n  var filteredDataUrl = dataUrl.replace(/(%0A|%0D)/g, '');\n  var match = filteredDataUrl.match(goog.html.DATA_URL_PATTERN_);\n  // Note: The only risk of XSS here is if the `data:` URL results in a\n  // same-origin document. In which case content-sniffing might cause the\n  // browser to interpret the contents as html.\n  // All modern browsers consider `data:` URL documents to have unique empty\n  // origins. Only Firefox for versions prior to v57 behaves differently:\n  // https://blog.mozilla.org/security/2017/10/04/treating-data-urls-unique-origins-firefox-57/\n  // Older versions of IE don't understand `data:` urls, so it is not an issue.\n  if (match) {\n    return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(\n        filteredDataUrl);\n  }\n  return null;\n};\n\n\n/**\n * Creates a SafeUrl wrapping a `data:` URL, after validating it matches a\n * known-safe media MIME type. If it doesn't match, return\n * `goog.html.SafeUrl.INNOCUOUS_URL`.\n *\n * @param {string} dataUrl A valid base64 data URL with one of the whitelisted\n *     media MIME types.\n * @return {!goog.html.SafeUrl} A matching safe URL, or\n *     `goog.html.SafeUrl.INNOCUOUS_URL` if it does not pass.\n */\ngoog.html.SafeUrl.fromDataUrl = function(dataUrl) {\n  'use strict';\n  return goog.html.SafeUrl.tryFromDataUrl(dataUrl) ||\n      goog.html.SafeUrl.INNOCUOUS_URL;\n};\n\n\n/**\n * Creates a SafeUrl wrapping a tel: URL.\n *\n * @param {string} telUrl A tel URL.\n * @return {!goog.html.SafeUrl} A matching safe URL, or {@link INNOCUOUS_STRING}\n *     wrapped as a SafeUrl if it does not pass.\n */\ngoog.html.SafeUrl.fromTelUrl = function(telUrl) {\n  'use strict';\n  // There's a risk that a tel: URL could immediately place a call once\n  // clicked, without requiring user confirmation. For that reason it is\n  // handled in this separate function.\n  if (!goog.string.internal.caseInsensitiveStartsWith(telUrl, 'tel:')) {\n    telUrl = goog.html.SafeUrl.INNOCUOUS_STRING;\n  }\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(\n      telUrl);\n};\n\n\n/**\n * Matches a sip/sips URL. We only allow urls that consist of an email address.\n * The characters '?' and '#' are not allowed in the local part of the email\n * address.\n * @const\n * @private\n */\ngoog.html.SIP_URL_PATTERN_ = new RegExp(\n    '^sip[s]?:[+a-z0-9_.!$%&\\'*\\\\/=^`{|}~-]+@([a-z0-9-]+\\\\.)+[a-z0-9]{2,63}$',\n    'i');\n\n\n/**\n * Creates a SafeUrl wrapping a sip: URL. We only allow urls that consist of an\n * email address. The characters '?' and '#' are not allowed in the local part\n * of the email address.\n *\n * @param {string} sipUrl A sip URL.\n * @return {!goog.html.SafeUrl} A matching safe URL, or {@link INNOCUOUS_STRING}\n *     wrapped as a SafeUrl if it does not pass.\n */\ngoog.html.SafeUrl.fromSipUrl = function(sipUrl) {\n  'use strict';\n  if (!goog.html.SIP_URL_PATTERN_.test(decodeURIComponent(sipUrl))) {\n    sipUrl = goog.html.SafeUrl.INNOCUOUS_STRING;\n  }\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(\n      sipUrl);\n};\n\n\n/**\n * Creates a SafeUrl wrapping a fb-messenger://share URL.\n *\n * @param {string} facebookMessengerUrl A facebook messenger URL.\n * @return {!goog.html.SafeUrl} A matching safe URL, or {@link INNOCUOUS_STRING}\n *     wrapped as a SafeUrl if it does not pass.\n */\ngoog.html.SafeUrl.fromFacebookMessengerUrl = function(facebookMessengerUrl) {\n  'use strict';\n  if (!goog.string.internal.caseInsensitiveStartsWith(\n          facebookMessengerUrl, 'fb-messenger://share')) {\n    facebookMessengerUrl = goog.html.SafeUrl.INNOCUOUS_STRING;\n  }\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(\n      facebookMessengerUrl);\n};\n\n/**\n * Creates a SafeUrl wrapping a whatsapp://send URL.\n *\n * @param {string} whatsAppUrl A WhatsApp URL.\n * @return {!goog.html.SafeUrl} A matching safe URL, or {@link INNOCUOUS_STRING}\n *     wrapped as a SafeUrl if it does not pass.\n */\ngoog.html.SafeUrl.fromWhatsAppUrl = function(whatsAppUrl) {\n  'use strict';\n  if (!goog.string.internal.caseInsensitiveStartsWith(\n          whatsAppUrl, 'whatsapp://send')) {\n    whatsAppUrl = goog.html.SafeUrl.INNOCUOUS_STRING;\n  }\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(\n      whatsAppUrl);\n};\n\n/**\n * Creates a SafeUrl wrapping a sms: URL.\n *\n * @param {string} smsUrl A sms URL.\n * @return {!goog.html.SafeUrl} A matching safe URL, or {@link INNOCUOUS_STRING}\n *     wrapped as a SafeUrl if it does not pass.\n */\ngoog.html.SafeUrl.fromSmsUrl = function(smsUrl) {\n  'use strict';\n  if (!goog.string.internal.caseInsensitiveStartsWith(smsUrl, 'sms:') ||\n      !goog.html.SafeUrl.isSmsUrlBodyValid_(smsUrl)) {\n    smsUrl = goog.html.SafeUrl.INNOCUOUS_STRING;\n  }\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(\n      smsUrl);\n};\n\n\n/**\n * Validates SMS URL `body` parameter, which is optional and should appear at\n * most once and should be percent-encoded if present. Rejects many malformed\n * bodies, but may spuriously reject some URLs and does not reject all malformed\n * sms: URLs.\n *\n * @param {string} smsUrl A sms URL.\n * @return {boolean} Whether SMS URL has a valid `body` parameter if it exists.\n * @private\n */\ngoog.html.SafeUrl.isSmsUrlBodyValid_ = function(smsUrl) {\n  'use strict';\n  var hash = smsUrl.indexOf('#');\n  if (hash > 0) {\n    smsUrl = smsUrl.substring(0, hash);\n  }\n  var bodyParams = smsUrl.match(/[?&]body=/gi);\n  // \"body\" param is optional\n  if (!bodyParams) {\n    return true;\n  }\n  // \"body\" MUST only appear once\n  if (bodyParams.length > 1) {\n    return false;\n  }\n  // Get the encoded `body` parameter value.\n  var bodyValue = smsUrl.match(/[?&]body=([^&]*)/)[1];\n  if (!bodyValue) {\n    return true;\n  }\n  try {\n    decodeURIComponent(bodyValue);\n  } catch (error) {\n    return false;\n  }\n  return /^(?:[a-z0-9\\-_.~]|%[0-9a-f]{2})+$/i.test(bodyValue);\n};\n\n\n/**\n * Creates a SafeUrl wrapping a ssh: URL.\n *\n * @param {string} sshUrl A ssh URL.\n * @return {!goog.html.SafeUrl} A matching safe URL, or {@link INNOCUOUS_STRING}\n *     wrapped as a SafeUrl if it does not pass.\n */\ngoog.html.SafeUrl.fromSshUrl = function(sshUrl) {\n  'use strict';\n  if (!goog.string.internal.caseInsensitiveStartsWith(sshUrl, 'ssh://')) {\n    sshUrl = goog.html.SafeUrl.INNOCUOUS_STRING;\n  }\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(\n      sshUrl);\n};\n\n/**\n * Sanitizes a Chrome extension URL to SafeUrl, given a compile-time-constant\n * extension identifier. Can also be restricted to chrome extensions.\n *\n * @param {string} url The url to sanitize. Should start with the extension\n *     scheme and the extension identifier.\n * @param {!goog.string.Const|!Array<!goog.string.Const>} extensionId The\n *     extension id to accept, as a compile-time constant or an array of those.\n *\n * @return {!goog.html.SafeUrl} Either `url` if it's deemed safe, or\n *     `INNOCUOUS_STRING` if it's not.\n */\ngoog.html.SafeUrl.sanitizeChromeExtensionUrl = function(url, extensionId) {\n  'use strict';\n  return goog.html.SafeUrl.sanitizeExtensionUrl_(\n      /^chrome-extension:\\/\\/([^\\/]+)\\//, url, extensionId);\n};\n\n/**\n * Sanitizes a Firefox extension URL to SafeUrl, given a compile-time-constant\n * extension identifier. Can also be restricted to chrome extensions.\n *\n * @param {string} url The url to sanitize. Should start with the extension\n *     scheme and the extension identifier.\n * @param {!goog.string.Const|!Array<!goog.string.Const>} extensionId The\n *     extension id to accept, as a compile-time constant or an array of those.\n *\n * @return {!goog.html.SafeUrl} Either `url` if it's deemed safe, or\n *     `INNOCUOUS_STRING` if it's not.\n */\ngoog.html.SafeUrl.sanitizeFirefoxExtensionUrl = function(url, extensionId) {\n  'use strict';\n  return goog.html.SafeUrl.sanitizeExtensionUrl_(\n      /^moz-extension:\\/\\/([^\\/]+)\\//, url, extensionId);\n};\n\n/**\n * Sanitizes a Edge extension URL to SafeUrl, given a compile-time-constant\n * extension identifier. Can also be restricted to chrome extensions.\n *\n * @param {string} url The url to sanitize. Should start with the extension\n *     scheme and the extension identifier.\n * @param {!goog.string.Const|!Array<!goog.string.Const>} extensionId The\n *     extension id to accept, as a compile-time constant or an array of those.\n *\n * @return {!goog.html.SafeUrl} Either `url` if it's deemed safe, or\n *     `INNOCUOUS_STRING` if it's not.\n */\ngoog.html.SafeUrl.sanitizeEdgeExtensionUrl = function(url, extensionId) {\n  'use strict';\n  return goog.html.SafeUrl.sanitizeExtensionUrl_(\n      /^ms-browser-extension:\\/\\/([^\\/]+)\\//, url, extensionId);\n};\n\n/**\n * Private helper for converting extension URLs to SafeUrl, given the scheme for\n * that particular extension type. Use the sanitizeFirefoxExtensionUrl,\n * sanitizeChromeExtensionUrl or sanitizeEdgeExtensionUrl unless you're building\n * new helpers.\n *\n * @private\n * @param {!RegExp} scheme The scheme to accept as a RegExp extracting the\n *     extension identifier.\n * @param {string} url The url to sanitize. Should start with the extension\n *     scheme and the extension identifier.\n * @param {!goog.string.Const|!Array<!goog.string.Const>} extensionId The\n *     extension id to accept, as a compile-time constant or an array of those.\n *\n * @return {!goog.html.SafeUrl} Either `url` if it's deemed safe, or\n *     `INNOCUOUS_STRING` if it's not.\n */\ngoog.html.SafeUrl.sanitizeExtensionUrl_ = function(scheme, url, extensionId) {\n  'use strict';\n  var matches = scheme.exec(url);\n  if (!matches) {\n    url = goog.html.SafeUrl.INNOCUOUS_STRING;\n  } else {\n    var extractedExtensionId = matches[1];\n    var acceptedExtensionIds;\n    if (extensionId instanceof goog.string.Const) {\n      acceptedExtensionIds = [goog.string.Const.unwrap(extensionId)];\n    } else {\n      acceptedExtensionIds = extensionId.map(function unwrap(x) {\n        'use strict';\n        return goog.string.Const.unwrap(x);\n      });\n    }\n    if (acceptedExtensionIds.indexOf(extractedExtensionId) == -1) {\n      url = goog.html.SafeUrl.INNOCUOUS_STRING;\n    }\n  }\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(url);\n};\n\n\n/**\n * Creates a SafeUrl from TrustedResourceUrl. This is safe because\n * TrustedResourceUrl is more tightly restricted than SafeUrl.\n *\n * @param {!goog.html.TrustedResourceUrl} trustedResourceUrl\n * @return {!goog.html.SafeUrl}\n */\ngoog.html.SafeUrl.fromTrustedResourceUrl = function(trustedResourceUrl) {\n  'use strict';\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(\n      goog.html.TrustedResourceUrl.unwrap(trustedResourceUrl));\n};\n\n\n/**\n * A pattern that recognizes a commonly useful subset of URLs that satisfy\n * the SafeUrl contract.\n *\n * This regular expression matches a subset of URLs that will not cause script\n * execution if used in URL context within a HTML document. Specifically, this\n * regular expression matches if (comment from here on and regex copied from\n * Soy's EscapingConventions):\n * (1) Either a protocol in a whitelist (http, https, mailto or ftp).\n * (2) or no protocol.  A protocol must be followed by a colon. The below\n *     allows that by allowing colons only after one of the characters [/?#].\n *     A colon after a hash (#) must be in the fragment.\n *     Otherwise, a colon after a (?) must be in a query.\n *     Otherwise, a colon after a single solidus (/) must be in a path.\n *     Otherwise, a colon after a double solidus (//) must be in the authority\n *     (before port).\n *\n * @private\n * @const {!RegExp}\n */\ngoog.html.SAFE_URL_PATTERN_ =\n    /^(?:(?:https?|mailto|ftp):|[^:/?#]*(?:[/?#]|$))/i;\n\n/**\n * Public version of goog.html.SAFE_URL_PATTERN_. Updating\n * goog.html.SAFE_URL_PATTERN_ doesn't seem to be backward compatible.\n * Namespace is also changed to goog.html.SafeUrl so it can be imported using\n * goog.require('goog.dom.SafeUrl').\n *\n * TODO(bangert): Remove SAFE_URL_PATTERN_\n * @const {!RegExp}\n */\ngoog.html.SafeUrl.SAFE_URL_PATTERN = goog.html.SAFE_URL_PATTERN_;\n\n/**\n * Attempts to create a SafeUrl object from `url`. The input string is validated\n * to match a pattern of commonly used safe URLs. If validation fails, `null` is\n * returned.\n *\n * `url` may be a URL with the `http:`, `https:`, `mailto:`, `ftp:` or `data`\n * scheme, or a relative URL (i.e., a URL without a scheme; specifically, a\n * scheme-relative, absolute-path-relative, or path-relative URL).\n *\n * @see http://url.spec.whatwg.org/#concept-relative-url\n * @param {string|!goog.string.TypedString} url The URL to validate.\n * @return {?goog.html.SafeUrl} The validated URL, wrapped as a SafeUrl, or null\n *     if validation fails.\n */\ngoog.html.SafeUrl.trySanitize = function(url) {\n  'use strict';\n  if (url instanceof goog.html.SafeUrl) {\n    return url;\n  }\n  if (typeof url == 'object' && url.implementsGoogStringTypedString) {\n    url = /** @type {!goog.string.TypedString} */ (url).getTypedStringValue();\n  } else {\n    // For defensive purposes, in case users cast around the parameter type.\n    url = String(url);\n  }\n  if (!goog.html.SAFE_URL_PATTERN_.test(url)) {\n    return goog.html.SafeUrl.tryFromDataUrl(url);\n  }\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(url);\n};\n\n/**\n * Creates a SafeUrl object from `url`. If `url` is a\n * `goog.html.SafeUrl` then it is simply returned. Otherwise the input string is\n * validated to match a pattern of commonly used safe URLs. If validation fails,\n * `goog.html.SafeUrl.INNOCUOUS_URL` is returned.\n *\n * `url` may be a URL with the `http:`, `https:`, `mailto:`, `ftp:` or `data`\n * scheme, or a relative URL (i.e., a URL without a scheme; specifically, a\n * scheme-relative, absolute-path-relative, or path-relative URL).\n *\n * @see http://url.spec.whatwg.org/#concept-relative-url\n * @param {string|!goog.string.TypedString} url The URL to validate.\n * @return {!goog.html.SafeUrl} The validated URL, wrapped as a SafeUrl.\n */\ngoog.html.SafeUrl.sanitize = function(url) {\n  'use strict';\n  return goog.html.SafeUrl.trySanitize(url) || goog.html.SafeUrl.INNOCUOUS_URL;\n};\n\n/**\n * Creates a SafeUrl object from `url`. If `url` is a\n * `goog.html.SafeUrl` then it is simply returned. Otherwise the input string is\n * validated to match a pattern of commonly used safe URLs.\n *\n * `url` may be a URL with the http, https, mailto or ftp scheme,\n * or a relative URL (i.e., a URL without a scheme; specifically, a\n * scheme-relative, absolute-path-relative, or path-relative URL).\n *\n * This function asserts (using goog.asserts) that the URL matches this pattern.\n * If it does not, in addition to failing the assert, an innocuous URL will be\n * returned.\n *\n * @see http://url.spec.whatwg.org/#concept-relative-url\n * @param {string|!goog.string.TypedString} url The URL to validate.\n * @param {boolean=} opt_allowDataUrl Whether to allow valid data: URLs.\n * @return {!goog.html.SafeUrl} The validated URL, wrapped as a SafeUrl.\n */\ngoog.html.SafeUrl.sanitizeAssertUnchanged = function(url, opt_allowDataUrl) {\n  'use strict';\n  if (url instanceof goog.html.SafeUrl) {\n    return url;\n  } else if (typeof url == 'object' && url.implementsGoogStringTypedString) {\n    url = /** @type {!goog.string.TypedString} */ (url).getTypedStringValue();\n  } else {\n    url = String(url);\n  }\n  if (opt_allowDataUrl && /^data:/i.test(url)) {\n    var safeUrl = goog.html.SafeUrl.fromDataUrl(url);\n    if (safeUrl.getTypedStringValue() == url) {\n      return safeUrl;\n    }\n  }\n  if (!goog.asserts.assert(\n          goog.html.SAFE_URL_PATTERN_.test(url),\n          '%s does not match the safe URL pattern', url)) {\n    url = goog.html.SafeUrl.INNOCUOUS_STRING;\n  }\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(url);\n};\n\n/**\n * Extracts the scheme from the given URL. If the URL is relative, https: is\n * assumed.\n * @param {string} url The URL to extract the scheme from.\n * @return {string|undefined} the URL scheme.\n */\ngoog.html.SafeUrl.extractScheme = function(url) {\n  let parsedUrl;\n  try {\n    parsedUrl = new URL(url);\n  } catch (e) {\n    // According to https://url.spec.whatwg.org/#constructors, the URL\n    // constructor with one parameter throws if `url` is not absolute. In this\n    // case, we are sure that no explicit scheme (javascript: ) is set.\n    // This can also be a URL parsing error, but in this case the URL won't be\n    // run anyway.\n    return 'https:';\n  }\n  return parsedUrl.protocol;\n};\n\n/**\n * Creates a SafeUrl object from `url`. If `url` is a\n * `goog.html.SafeUrl` then it is simply returned. Otherwise javascript: URLs\n * are rejected.\n *\n * This function asserts (using goog.asserts) that the URL scheme is not\n * javascript. If it is, in addition to failing the assert, an innocuous URL\n * will be returned.\n *\n * @see http://url.spec.whatwg.org/#concept-relative-url\n * @param {string|!goog.string.TypedString} url The URL to validate.\n * @return {!goog.html.SafeUrl} The validated URL, wrapped as a SafeUrl.\n */\ngoog.html.SafeUrl.sanitizeJavascriptUrlAssertUnchanged = function(url) {\n  'use strict';\n  if (url instanceof goog.html.SafeUrl) {\n    return url;\n  } else if (typeof url == 'object' && url.implementsGoogStringTypedString) {\n    url = /** @type {!goog.string.TypedString} */ (url).getTypedStringValue();\n  } else {\n    url = String(url);\n  }\n  // We don't rely on goog.url here to prevent a dependency cycle.\n  const parsedScheme = goog.html.SafeUrl.extractScheme(url);\n  if (!goog.asserts.assert(\n          parsedScheme !== 'javascript:', '%s is a javascript: URL', url)) {\n    url = goog.html.SafeUrl.INNOCUOUS_STRING;\n  }\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(url);\n};\n\n/**\n * Token used to ensure that object is created only from this file. No code\n * outside of this file can access this token.\n * @private {!Object}\n * @const\n */\ngoog.html.SafeUrl.CONSTRUCTOR_TOKEN_PRIVATE_ = {};\n\n/**\n * Package-internal utility method to create SafeUrl instances.\n *\n * @param {string} url The string to initialize the SafeUrl object with.\n * @return {!goog.html.SafeUrl} The initialized SafeUrl object.\n * @package\n */\ngoog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse = function(\n    url) {\n  'use strict';\n  return new goog.html.SafeUrl(\n      url, goog.html.SafeUrl.CONSTRUCTOR_TOKEN_PRIVATE_);\n};\n\n\n/**\n * `INNOCUOUS_STRING` wrapped in a `SafeUrl`.\n * @const {!goog.html.SafeUrl}\n */\ngoog.html.SafeUrl.INNOCUOUS_URL =\n    goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(\n        goog.html.SafeUrl.INNOCUOUS_STRING);\n\n\n/**\n * A SafeUrl corresponding to the special about:blank url.\n * @const {!goog.html.SafeUrl}\n */\ngoog.html.SafeUrl.ABOUT_BLANK =\n    goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(\n        'about:blank');\n"],
+"names":["goog","provide","require","html","SafeUrl","constructor","value","token","privateDoNotAccessOrElseSafeUrlWrappedValue_","CONSTRUCTOR_TOKEN_PRIVATE_","toString","INNOCUOUS_STRING","prototype","implementsGoogStringTypedString","getTypedStringValue","goog.html.SafeUrl.prototype.getTypedStringValue","unwrap","goog.html.SafeUrl.unwrap","safeUrl","asserts","fail","typeOf","fromConstant","goog.html.SafeUrl.fromConstant","url","createSafeUrlSecurityPrivateDoNotAccessOrElse","string","Const","SAFE_MIME_TYPE_PATTERN_","RegExp","isSafeMimeType","goog.html.SafeUrl.isSafeMimeType","mimeType","test","fromBlob","goog.html.SafeUrl.fromBlob","blob","type","fs","createObjectUrl","revokeObjectUrl","goog.html.SafeUrl.revokeObjectUrl","fromMediaSource","goog.html.SafeUrl.fromMediaSource","mediaSource","assert","global","MediaSource","DATA_URL_PATTERN_","tryFromDataUrl","goog.html.SafeUrl.tryFromDataUrl","dataUrl","String","filteredDataUrl","replace","match","fromDataUrl","goog.html.SafeUrl.fromDataUrl","INNOCUOUS_URL","fromTelUrl","goog.html.SafeUrl.fromTelUrl","telUrl","internal","caseInsensitiveStartsWith","SIP_URL_PATTERN_","fromSipUrl","goog.html.SafeUrl.fromSipUrl","sipUrl","decodeURIComponent","fromFacebookMessengerUrl","goog.html.SafeUrl.fromFacebookMessengerUrl","facebookMessengerUrl","fromWhatsAppUrl","goog.html.SafeUrl.fromWhatsAppUrl","whatsAppUrl","fromSmsUrl","goog.html.SafeUrl.fromSmsUrl","smsUrl","isSmsUrlBodyValid_","goog.html.SafeUrl.isSmsUrlBodyValid_","hash","indexOf","substring","bodyParams","length","bodyValue","error","fromSshUrl","goog.html.SafeUrl.fromSshUrl","sshUrl","sanitizeChromeExtensionUrl","goog.html.SafeUrl.sanitizeChromeExtensionUrl","extensionId","sanitizeExtensionUrl_","sanitizeFirefoxExtensionUrl","goog.html.SafeUrl.sanitizeFirefoxExtensionUrl","sanitizeEdgeExtensionUrl","goog.html.SafeUrl.sanitizeEdgeExtensionUrl","goog.html.SafeUrl.sanitizeExtensionUrl_","scheme","matches","exec","extractedExtensionId","acceptedExtensionIds","map","x","fromTrustedResourceUrl","goog.html.SafeUrl.fromTrustedResourceUrl","trustedResourceUrl","TrustedResourceUrl","SAFE_URL_PATTERN_","SAFE_URL_PATTERN","trySanitize","goog.html.SafeUrl.trySanitize","sanitize","goog.html.SafeUrl.sanitize","sanitizeAssertUnchanged","goog.html.SafeUrl.sanitizeAssertUnchanged","opt_allowDataUrl","extractScheme","goog.html.SafeUrl.extractScheme","parsedUrl","URL","e","protocol","sanitizeJavascriptUrlAssertUnchanged","goog.html.SafeUrl.sanitizeJavascriptUrlAssertUnchanged","parsedScheme","goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse","ABOUT_BLANK"]
+}

package/dist/cljs-runtime/goog.html.trustedresourceurl.js

@@ -0,0 +1,123 @@
+import "./cljs_env.js";
+import "./goog.asserts.asserts.js";
+import "./goog.fs.blob.js";
+import "./goog.fs.url.js";
+import "./goog.html.safescript.js";
+import "./goog.html.trustedtypes.js";
+import "./goog.string.const.js";
+import "./goog.string.typedstring.js";
+goog.provide("goog.html.TrustedResourceUrl");
+goog.require("goog.asserts");
+goog.require("goog.fs.blob");
+goog.require("goog.fs.url");
+goog.require("goog.html.SafeScript");
+goog.require("goog.html.trustedtypes");
+goog.require("goog.string.Const");
+goog.require("goog.string.TypedString");
+goog.html.TrustedResourceUrl = class {
+  constructor(value, token) {
+    this.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue_ = token === goog.html.TrustedResourceUrl.CONSTRUCTOR_TOKEN_PRIVATE_ ? value : "";
+  }
+  toString() {
+    return this.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue_ + "";
+  }
+};
+goog.html.TrustedResourceUrl.prototype.implementsGoogStringTypedString = true;
+goog.html.TrustedResourceUrl.prototype.getTypedStringValue = function() {
+  return this.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue_.toString();
+};
+goog.html.TrustedResourceUrl.prototype.cloneWithParams = function(searchParams, opt_hashParams) {
+  var url = goog.html.TrustedResourceUrl.unwrap(this);
+  var parts = goog.html.TrustedResourceUrl.URL_PARAM_PARSER_.exec(url);
+  var urlBase = parts[1];
+  var urlSearch = parts[2] || "";
+  var urlHash = parts[3] || "";
+  return goog.html.TrustedResourceUrl.createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse(urlBase + goog.html.TrustedResourceUrl.stringifyParams_("?", urlSearch, searchParams) + goog.html.TrustedResourceUrl.stringifyParams_("#", urlHash, opt_hashParams));
+};
+goog.html.TrustedResourceUrl.unwrap = function(trustedResourceUrl) {
+  return goog.html.TrustedResourceUrl.unwrapTrustedScriptURL(trustedResourceUrl).toString();
+};
+goog.html.TrustedResourceUrl.unwrapTrustedScriptURL = function(trustedResourceUrl) {
+  if (trustedResourceUrl instanceof goog.html.TrustedResourceUrl && trustedResourceUrl.constructor === goog.html.TrustedResourceUrl) {
+    return trustedResourceUrl.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue_;
+  } else {
+    goog.asserts.fail("expected object of type TrustedResourceUrl, got '" + trustedResourceUrl + "' of type " + goog.typeOf(trustedResourceUrl));
+    return "type_error:TrustedResourceUrl";
+  }
+};
+goog.html.TrustedResourceUrl.format = function(format, args) {
+  var formatStr = goog.string.Const.unwrap(format);
+  if (!goog.html.TrustedResourceUrl.BASE_URL_.test(formatStr)) {
+    throw new Error("Invalid TrustedResourceUrl format: " + formatStr);
+  }
+  var result = formatStr.replace(goog.html.TrustedResourceUrl.FORMAT_MARKER_, function(match, id) {
+    if (!Object.prototype.hasOwnProperty.call(args, id)) {
+      throw new Error('Found marker, "' + id + '", in format string, "' + formatStr + '", but no valid label mapping found ' + "in args: " + JSON.stringify(args));
+    }
+    var arg = args[id];
+    if (arg instanceof goog.string.Const) {
+      return goog.string.Const.unwrap(arg);
+    } else {
+      return encodeURIComponent(String(arg));
+    }
+  });
+  return goog.html.TrustedResourceUrl.createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse(result);
+};
+goog.html.TrustedResourceUrl.FORMAT_MARKER_ = /%{(\w+)}/g;
+goog.html.TrustedResourceUrl.BASE_URL_ = new RegExp("^((https:)?//[0-9a-z.:[\\]-]+/" + "|/[^/\\\\]" + "|[^:/\\\\%]+/" + "|[^:/\\\\%]*[?#]" + "|about:blank#" + ")", "i");
+goog.html.TrustedResourceUrl.URL_PARAM_PARSER_ = /^([^?#]*)(\?[^#]*)?(#[\s\S]*)?/;
+goog.html.TrustedResourceUrl.formatWithParams = function(format, args, searchParams, opt_hashParams) {
+  var url = goog.html.TrustedResourceUrl.format(format, args);
+  return url.cloneWithParams(searchParams, opt_hashParams);
+};
+goog.html.TrustedResourceUrl.fromConstant = function(url) {
+  return goog.html.TrustedResourceUrl.createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse(goog.string.Const.unwrap(url));
+};
+goog.html.TrustedResourceUrl.fromConstants = function(parts) {
+  var unwrapped = "";
+  var i = 0;
+  for (; i < parts.length; i++) {
+    unwrapped = unwrapped + goog.string.Const.unwrap(parts[i]);
+  }
+  return goog.html.TrustedResourceUrl.createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse(unwrapped);
+};
+goog.html.TrustedResourceUrl.fromSafeScript = function(safeScript) {
+  var blob = goog.fs.blob.getBlobWithProperties([goog.html.SafeScript.unwrap(safeScript)], "text/javascript");
+  var url = goog.fs.url.createObjectUrl(blob);
+  return goog.html.TrustedResourceUrl.createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse(url);
+};
+goog.html.TrustedResourceUrl.CONSTRUCTOR_TOKEN_PRIVATE_ = {};
+goog.html.TrustedResourceUrl.createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse = function(url) {
+  const noinlineUrl = url;
+  const policy = goog.html.trustedtypes.getPolicyPrivateDoNotAccessOrElse();
+  const value = policy ? policy.createScriptURL(noinlineUrl) : noinlineUrl;
+  return new goog.html.TrustedResourceUrl(value, goog.html.TrustedResourceUrl.CONSTRUCTOR_TOKEN_PRIVATE_);
+};
+goog.html.TrustedResourceUrl.stringifyParams_ = function(prefix, currentString, params) {
+  if (params == null) {
+    return currentString;
+  }
+  if (typeof params === "string") {
+    return params ? prefix + encodeURIComponent(params) : "";
+  }
+  var key;
+  for (key in params) {
+    if (Object.prototype.hasOwnProperty.call(params, key)) {
+      var value = params[key];
+      var outputValues = Array.isArray(value) ? value : [value];
+      var i = 0;
+      for (; i < outputValues.length; i++) {
+        var outputValue = outputValues[i];
+        if (outputValue != null) {
+          if (!currentString) {
+            currentString = prefix;
+          }
+          currentString = currentString + ((currentString.length > prefix.length ? "\x26" : "") + encodeURIComponent(key) + "\x3d" + encodeURIComponent(String(outputValue)));
+        }
+      }
+    }
+  }
+  return currentString;
+};
+
+//# sourceMappingURL=goog.html.trustedresourceurl.js.map

package/dist/cljs-runtime/goog.html.trustedresourceurl.js.map

@@ -0,0 +1,9 @@
+{
+"version":3,
+"file":"goog.html.trustedresourceurl.js",
+"lineCount":114,
+"mappings":"AAYAA,IAAKC,CAAAA,OAAL,CAAa,8BAAb,CAAA;AAEAD,IAAKE,CAAAA,OAAL,CAAa,cAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,cAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,aAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,sBAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,wBAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,mBAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,yBAAb,CAAA;AA8BAF,IAAKG,CAAAA,IAAKC,CAAAA,kBAAV,GAA+B,KAAA;AAK7BC,aAAW,CAACC,KAAD,EAAQC,KAAR,CAAe;AAQxB,QAAKC,CAAAA,uDAAL,GACKD,KAAD,KAAWP,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBK,CAAAA,0BAAxC,GACAH,KADA,GAEA,EAHJ;AARwB;AAwB1BI,UAAQ,EAAG;AACT,WAAO,IAAKF,CAAAA,uDAAZ,GAAsE,EAAtE;AADS;AA7BkB,CAA/B;AAuCAR,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBO,CAAAA,SAAUC,CAAAA,+BAAvC,GAAyE,IAAzE;AAyBAZ,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBO,CAAAA,SAAUE,CAAAA,mBAAvC,GAA6DC,QAAQ,EAAG;AAEtE,SAAO,IAAKN,CAAAA,uDACPE,CAAAA,QADE,EAAP;AAFsE,CAAxE;AAmBAV,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBO,CAAAA,SAAUI,CAAAA,eAAvC,GAAyDC,QAAQ,CAC7DC,YAD6D,EAC/CC,cAD+C,CAC/B;AAEhC,MAAIC,MAAMnB,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBgB,CAAAA,MAA7B,CAAoC,IAApC,CAAV;AACA,MAAIC,QAAQrB,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBkB,CAAAA,iBAAkBC,CAAAA,IAA/C,CAAoDJ,GAApD,CAAZ;AACA,MAAIK,UAAUH,KAAA,CAAM,CAAN,CAAd;AACA,MAAII,YAAYJ,KAAA,CAAM,CAAN,CAAZI,IAAwB,EAA5B;AACA,MAAIC,UAAUL,KAAA,CAAM,CAAN,CAAVK,IAAsB,EAA1B;AAEA,SAAO1B,IAAKG,CAAAA,IAAKC,CAAAA,kBACZuB,CAAAA,wDADE,CAECH,OAFD,GAGCxB,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBwB,CAAAA,gBAA7B,CACI,GADJ,EACSH,SADT,EACoBR,YADpB,CAHD,GAKCjB,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBwB,CAAAA,gBAA7B,CACI,GADJ,EACSF,OADT,EACkBR,cADlB,CALD,CAAP;AARgC,CADlC;AA6BAlB,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBgB,CAAAA,MAA7B,GAAsCS,QAAQ,CAACC,kBAAD,CAAqB;AAEjE,SAAO9B,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmB2B,CAAAA,sBAA7B,CAAoDD,kBAApD,CACFpB,CAAAA,QADE,EAAP;AAFiE,CAAnE;AAaAV,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmB2B,CAAAA,sBAA7B,GAAsDC,QAAQ,CAC1DF,kBAD0D,CACtC;AAStB,MAAIA,kBAAJ,YAAkC9B,IAAKG,CAAAA,IAAKC,CAAAA,kBAA5C,IACI0B,kBAAmBzB,CAAAA,WADvB,KACuCL,IAAKG,CAAAA,IAAKC,CAAAA,kBADjD;AAEE,WAAO0B,kBACFtB,CAAAA,uDADL;AAFF,QAIO;AACLR,QAAKiC,CAAAA,OAAQC,CAAAA,IAAb,CAAkB,mDAAlB,GACIJ,kBADJ,GACyB,YADzB,GACyC9B,IAAKmC,CAAAA,MAAL,CAAYL,kBAAZ,CADzC,CAAA;AAEA,WAAO,+BAAP;AAHK;AAbe,CADxB;AA4DA9B,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBgC,CAAAA,MAA7B,GAAsCC,QAAQ,CAACD,MAAD,EAASE,IAAT,CAAe;AAE3D,MAAIC,YAAYvC,IAAKwC,CAAAA,MAAOC,CAAAA,KAAMrB,CAAAA,MAAlB,CAAyBgB,MAAzB,CAAhB;AACA,MAAI,CAACpC,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBsC,CAAAA,SAAUC,CAAAA,IAAvC,CAA4CJ,SAA5C,CAAL;AACE,UAAM,IAAIK,KAAJ,CAAU,qCAAV,GAAkDL,SAAlD,CAAN;AADF;AAGA,MAAIM,SAASN,SAAUO,CAAAA,OAAV,CACT9C,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmB2C,CAAAA,cADpB,EACoC,QAAQ,CAACC,KAAD,EAAQC,EAAR,CAAY;AAE/D,QAAI,CAACC,MAAOvC,CAAAA,SAAUwC,CAAAA,cAAeC,CAAAA,IAAhC,CAAqCd,IAArC,EAA2CW,EAA3C,CAAL;AACE,YAAM,IAAIL,KAAJ,CACF,iBADE,GACkBK,EADlB,GACuB,wBADvB,GACkDV,SADlD,GAEF,sCAFE,GAGF,WAHE,GAGYc,IAAKC,CAAAA,SAAL,CAAehB,IAAf,CAHZ,CAAN;AADF;AAMA,QAAIiB,MAAMjB,IAAA,CAAKW,EAAL,CAAV;AACA,QAAIM,GAAJ,YAAmBvD,IAAKwC,CAAAA,MAAOC,CAAAA,KAA/B;AACE,aAAOzC,IAAKwC,CAAAA,MAAOC,CAAAA,KAAMrB,CAAAA,MAAlB,CAAyBmC,GAAzB,CAAP;AADF;AAGE,aAAOC,kBAAA,CAAmBC,MAAA,CAAOF,GAAP,CAAnB,CAAP;AAHF;AAT+D,GADxD,CAAb;AAgBA,SAAOvD,IAAKG,CAAAA,IAAKC,CAAAA,kBACZuB,CAAAA,wDADE,CACuDkB,MADvD,CAAP;AAtB2D,CAA7D;AA8BA7C,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmB2C,CAAAA,cAA7B,GAA8C,WAA9C;AA8BA/C,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBsC,CAAAA,SAA7B,GAAyC,IAAIgB,MAAJ,CACrC,gCADqC,GAE/B,YAF+B,GAG/B,eAH+B,GAI/B,kBAJ+B,GAK/B,eAL+B,GAM/B,GAN+B,EAOrC,GAPqC,CAAzC;AAcA1D,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBkB,CAAAA,iBAA7B,GACI,gCADJ;AAgCAtB,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBuD,CAAAA,gBAA7B,GAAgDC,QAAQ,CACpDxB,MADoD,EAC5CE,IAD4C,EACtCrB,YADsC,EACxBC,cADwB,CACR;AAE9C,MAAIC,MAAMnB,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBgC,CAAAA,MAA7B,CAAoCA,MAApC,EAA4CE,IAA5C,CAAV;AACA,SAAOnB,GAAIJ,CAAAA,eAAJ,CAAoBE,YAApB,EAAkCC,cAAlC,CAAP;AAH8C,CADhD;AAmBAlB,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmByD,CAAAA,YAA7B,GAA4CC,QAAQ,CAAC3C,GAAD,CAAM;AAExD,SAAOnB,IAAKG,CAAAA,IAAKC,CAAAA,kBACZuB,CAAAA,wDADE,CAEC3B,IAAKwC,CAAAA,MAAOC,CAAAA,KAAMrB,CAAAA,MAAlB,CAAyBD,GAAzB,CAFD,CAAP;AAFwD,CAA1D;AAmBAnB,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmB2D,CAAAA,aAA7B,GAA6CC,QAAQ,CAAC3C,KAAD,CAAQ;AAE3D,MAAI4C,YAAY,EAAhB;AACK,MAAIC,IAAI,CAAR;AAAL,OAAA,EAAgBA,CAAhB,GAAoB7C,KAAM8C,CAAAA,MAA1B,EAAkCD,CAAA,EAAlC;AACED,aAAA,GAAAA,SAAA,GAAajE,IAAKwC,CAAAA,MAAOC,CAAAA,KAAMrB,CAAAA,MAAlB,CAAyBC,KAAA,CAAM6C,CAAN,CAAzB,CAAb;AADF;AAGA,SAAOlE,IAAKG,CAAAA,IAAKC,CAAAA,kBACZuB,CAAAA,wDADE,CACuDsC,SADvD,CAAP;AAN2D,CAA7D;AA0BAjE,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBgE,CAAAA,cAA7B,GAA8CC,QAAQ,CAACC,UAAD,CAAa;AAEjE,MAAIC,OAAOvE,IAAKwE,CAAAA,EAAGD,CAAAA,IAAKE,CAAAA,qBAAb,CACP,CAACzE,IAAKG,CAAAA,IAAKuE,CAAAA,UAAWtD,CAAAA,MAArB,CAA4BkD,UAA5B,CAAD,CADO,EACoC,iBADpC,CAAX;AAEA,MAAInD,MAAMnB,IAAKwE,CAAAA,EAAGrD,CAAAA,GAAIwD,CAAAA,eAAZ,CAA4BJ,IAA5B,CAAV;AACA,SAAOvE,IAAKG,CAAAA,IAAKC,CAAAA,kBACZuB,CAAAA,wDADE,CACuDR,GADvD,CAAP;AALiE,CAAnE;AAgBAnB,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBK,CAAAA,0BAA7B,GAA0D,EAA1D;AAYAT,IAAKG,CAAAA,IAAKC,CAAAA,kBACLuB,CAAAA,wDADL,GACgEiD,QAAQ,CAACzD,GAAD,CAAM;AAG5E,QAAM0D,cAAc1D,GAApB;AACA,QAAM2D,SAAS9E,IAAKG,CAAAA,IAAK4E,CAAAA,YAAaC,CAAAA,iCAAvB,EAAf;AACA,QAAM1E,QAAQwE,MAAA,GAASA,MAAOG,CAAAA,eAAP,CAAuBJ,WAAvB,CAAT,GAA+CA,WAA7D;AACA,SAAO,IAAI7E,IAAKG,CAAAA,IAAKC,CAAAA,kBAAd,CACHE,KADG,EACIN,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBK,CAAAA,0BADjC,CAAP;AAN4E,CAD9E;AAoCAT,IAAKG,CAAAA,IAAKC,CAAAA,kBAAmBwB,CAAAA,gBAA7B,GAAgDsD,QAAQ,CACpDC,MADoD,EAC5CC,aAD4C,EAC7BC,MAD6B,CACrB;AAEjC,MAAIA,MAAJ,IAAc,IAAd;AAEE,WAAOD,aAAP;AAFF;AAIA,MAAI,MAAOC,OAAX,KAAsB,QAAtB;AAEE,WAAOA,MAAA,GAASF,MAAT,GAAkB3B,kBAAA,CAAmB6B,MAAnB,CAAlB,GAA+C,EAAtD;AAFF;AAKK,MAAIC,GAAJ;AAAL,OAASA,GAAT,GAAgBD,OAAhB;AAEE,QAAInC,MAAOvC,CAAAA,SAAUwC,CAAAA,cAAeC,CAAAA,IAAhC,CAAqCiC,MAArC,EAA6CC,GAA7C,CAAJ,CAAuD;AACrD,UAAIhF,QAAQ+E,MAAA,CAAOC,GAAP,CAAZ;AACA,UAAIC,eAAeC,KAAMC,CAAAA,OAAN,CAAcnF,KAAd,CAAA,GAAuBA,KAAvB,GAA+B,CAACA,KAAD,CAAlD;AACK,UAAI4D,IAAI,CAAR;AAAL,WAAA,EAAgBA,CAAhB,GAAoBqB,YAAapB,CAAAA,MAAjC,EAAyCD,CAAA,EAAzC,CAA8C;AAC5C,YAAIwB,cAAcH,YAAA,CAAarB,CAAb,CAAlB;AACA,YAAIwB,WAAJ,IAAmB,IAAnB,CAAyB;AACvB,cAAI,CAACN,aAAL;AACEA,yBAAA,GAAgBD,MAAhB;AADF;AAGAC,uBAAA,GAAAA,aAAA,KAAkBA,aAAcjB,CAAAA,MAAd,GAAuBgB,MAAOhB,CAAAA,MAA9B,GAAuC,MAAvC,GAA6C,EAA/D,IACIX,kBAAA,CAAmB8B,GAAnB,CADJ,GAC8B,MAD9B,GAEI9B,kBAAA,CAAmBC,MAAA,CAAOiC,WAAP,CAAnB,CAFJ;AAJuB;AAFmB;AAHO;AAFzD;AAkBA,SAAON,aAAP;AA7BiC,CADnC;;",
+"sources":["goog/html/trustedresourceurl.js"],
+"sourcesContent":["/**\n * @license\n * Copyright The Closure Library Authors.\n * SPDX-License-Identifier: Apache-2.0\n */\n\n/**\n * @fileoverview The TrustedResourceUrl type and its builders.\n *\n * TODO(xtof): Link to document stating type contract.\n */\n\ngoog.provide('goog.html.TrustedResourceUrl');\n\ngoog.require('goog.asserts');\ngoog.require('goog.fs.blob');\ngoog.require('goog.fs.url');\ngoog.require('goog.html.SafeScript');\ngoog.require('goog.html.trustedtypes');\ngoog.require('goog.string.Const');\ngoog.require('goog.string.TypedString');\n\n\n\n/**\n * A URL which is under application control and from which script, CSS, and\n * other resources that represent executable code, can be fetched.\n *\n * Given that the URL can only be constructed from strings under application\n * control and is used to load resources, bugs resulting in a malformed URL\n * should not have a security impact and are likely to be easily detectable\n * during testing. Given the wide number of non-RFC compliant URLs in use,\n * stricter validation could prevent some applications from being able to use\n * this type.\n *\n * Instances of this type must be created via the factory method,\n * (`fromConstant`, `fromConstants`, `format` or `formatWithParams`), and not by\n * invoking its constructor. The constructor intentionally takes an extra\n * parameter that cannot be constructed outside of this file and the type is\n * immutable; hence only a default instance corresponding to the empty string\n * can be obtained via constructor invocation.\n *\n * Creating TrustedResourceUrl objects HAS SIDE-EFFECTS due to calling\n * Trusted Types Web API.\n *\n * @see goog.html.TrustedResourceUrl#fromConstant\n * @final\n * @struct\n * @implements {goog.string.TypedString}\n */\ngoog.html.TrustedResourceUrl = class {\n  /**\n   * @param {!TrustedScriptURL|string} value\n   * @param {!Object} token package-internal implementation detail.\n   */\n  constructor(value, token) {\n    /**\n     * The contained value of this TrustedResourceUrl.  The field has a\n     * purposely ugly name to make (non-compiled) code that attempts to directly\n     * access this field stand out.\n     * @const\n     * @private {!TrustedScriptURL|string}\n     */\n    this.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue_ =\n        (token === goog.html.TrustedResourceUrl.CONSTRUCTOR_TOKEN_PRIVATE_) ?\n        value :\n        '';\n  }\n\n  /**\n   * Returns a string-representation of this value.\n   *\n   * To obtain the actual string value wrapped in a TrustedResourceUrl, use\n   * `goog.html.TrustedResourceUrl.unwrap`.\n   *\n   * @return {string}\n   * @see goog.html.TrustedResourceUrl#unwrap\n   * @override\n   */\n  toString() {\n    return this.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue_ + '';\n  }\n};\n\n\n/**\n * @override\n * @const\n */\ngoog.html.TrustedResourceUrl.prototype.implementsGoogStringTypedString = true;\n\n\n/**\n * Returns this TrustedResourceUrl's value as a string.\n *\n * IMPORTANT: In code where it is security relevant that an object's type is\n * indeed `TrustedResourceUrl`, use\n * `goog.html.TrustedResourceUrl.unwrap` instead of this method. If in\n * doubt, assume that it's security relevant. In particular, note that\n * goog.html functions which return a goog.html type do not guarantee that\n * the returned instance is of the right type. For example:\n *\n * <pre>\n * var fakeSafeHtml = new String('fake');\n * fakeSafeHtml.__proto__ = goog.html.SafeHtml.prototype;\n * var newSafeHtml = goog.html.SafeHtml.htmlEscape(fakeSafeHtml);\n * // newSafeHtml is just an alias for fakeSafeHtml, it's passed through by\n * // goog.html.SafeHtml.htmlEscape() as fakeSafeHtml instanceof\n * // goog.html.SafeHtml.\n * </pre>\n *\n * @see goog.html.TrustedResourceUrl#unwrap\n * @override\n */\ngoog.html.TrustedResourceUrl.prototype.getTypedStringValue = function() {\n  'use strict';\n  return this.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue_\n      .toString();\n};\n\n\n/**\n * Creates a new TrustedResourceUrl with params added to URL. Both search and\n * hash params can be specified.\n *\n * @param {string|?Object<string, *>|undefined} searchParams Search parameters\n *     to add to URL. See goog.html.TrustedResourceUrl.stringifyParams_ for\n *     exact format definition.\n * @param {(string|?Object<string, *>)=} opt_hashParams Hash parameters to add\n *     to URL. See goog.html.TrustedResourceUrl.stringifyParams_ for exact\n *     format definition.\n * @return {!goog.html.TrustedResourceUrl} New TrustedResourceUrl with params.\n */\ngoog.html.TrustedResourceUrl.prototype.cloneWithParams = function(\n    searchParams, opt_hashParams) {\n  'use strict';\n  var url = goog.html.TrustedResourceUrl.unwrap(this);\n  var parts = goog.html.TrustedResourceUrl.URL_PARAM_PARSER_.exec(url);\n  var urlBase = parts[1];\n  var urlSearch = parts[2] || '';\n  var urlHash = parts[3] || '';\n\n  return goog.html.TrustedResourceUrl\n      .createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse(\n          urlBase +\n          goog.html.TrustedResourceUrl.stringifyParams_(\n              '?', urlSearch, searchParams) +\n          goog.html.TrustedResourceUrl.stringifyParams_(\n              '#', urlHash, opt_hashParams));\n};\n\n/**\n * Performs a runtime check that the provided object is indeed a\n * TrustedResourceUrl object, and returns its value.\n *\n * @param {!goog.html.TrustedResourceUrl} trustedResourceUrl The object to\n *     extract from.\n * @return {string} The trustedResourceUrl object's contained string, unless\n *     the run-time type check fails. In that case, `unwrap` returns an\n *     innocuous string, or, if assertions are enabled, throws\n *     `goog.asserts.AssertionError`.\n */\ngoog.html.TrustedResourceUrl.unwrap = function(trustedResourceUrl) {\n  'use strict';\n  return goog.html.TrustedResourceUrl.unwrapTrustedScriptURL(trustedResourceUrl)\n      .toString();\n};\n\n\n/**\n * Unwraps value as TrustedScriptURL if supported or as a string if not.\n * @param {!goog.html.TrustedResourceUrl} trustedResourceUrl\n * @return {!TrustedScriptURL|string}\n * @see goog.html.TrustedResourceUrl.unwrap\n */\ngoog.html.TrustedResourceUrl.unwrapTrustedScriptURL = function(\n    trustedResourceUrl) {\n  'use strict';\n  // Perform additional Run-time type-checking to ensure that\n  // trustedResourceUrl is indeed an instance of the expected type.  This\n  // provides some additional protection against security bugs due to\n  // application code that disables type checks.\n  // Specifically, the following checks are performed:\n  // 1. The object is an instance of the expected type.\n  // 2. The object is not an instance of a subclass.\n  if (trustedResourceUrl instanceof goog.html.TrustedResourceUrl &&\n      trustedResourceUrl.constructor === goog.html.TrustedResourceUrl) {\n    return trustedResourceUrl\n        .privateDoNotAccessOrElseTrustedResourceUrlWrappedValue_;\n  } else {\n    goog.asserts.fail('expected object of type TrustedResourceUrl, got \\'' +\n        trustedResourceUrl + '\\' of type ' + goog.typeOf(trustedResourceUrl));\n    return 'type_error:TrustedResourceUrl';\n  }\n};\n\n\n/**\n * Creates a TrustedResourceUrl from a format string and arguments.\n *\n * The arguments for interpolation into the format string map labels to values.\n * Values of type `goog.string.Const` are interpolated without modifcation.\n * Values of other types are cast to string and encoded with\n * encodeURIComponent.\n *\n * `%{<label>}` markers are used in the format string to indicate locations\n * to be interpolated with the valued mapped to the given label. `<label>`\n * must contain only alphanumeric and `_` characters.\n *\n * The format string must match goog.html.TrustedResourceUrl.BASE_URL_.\n *\n * Example usage:\n *\n *    var url = goog.html.TrustedResourceUrl.format(goog.string.Const.from(\n *        'https://www.google.com/search?q=%{query}'), {'query': searchTerm});\n *\n *    var url = goog.html.TrustedResourceUrl.format(goog.string.Const.from(\n *        '//www.youtube.com/v/%{videoId}?hl=en&fs=1%{autoplay}'), {\n *        'videoId': videoId,\n *        'autoplay': opt_autoplay ?\n *            goog.string.Const.from('&autoplay=1') : goog.string.Const.EMPTY\n *    });\n *\n * While this function can be used to create a TrustedResourceUrl from only\n * constants, fromConstant() and fromConstants() are generally preferable for\n * that purpose.\n *\n * @param {!goog.string.Const} format The format string.\n * @param {!Object<string, (string|number|!goog.string.Const)>} args Mapping\n *     of labels to values to be interpolated into the format string.\n *     goog.string.Const values are interpolated without encoding.\n * @return {!goog.html.TrustedResourceUrl}\n * @throws {!Error} On an invalid format string or if a label used in the\n *     the format string is not present in args.\n */\ngoog.html.TrustedResourceUrl.format = function(format, args) {\n  'use strict';\n  var formatStr = goog.string.Const.unwrap(format);\n  if (!goog.html.TrustedResourceUrl.BASE_URL_.test(formatStr)) {\n    throw new Error('Invalid TrustedResourceUrl format: ' + formatStr);\n  }\n  var result = formatStr.replace(\n      goog.html.TrustedResourceUrl.FORMAT_MARKER_, function(match, id) {\n        'use strict';\n        if (!Object.prototype.hasOwnProperty.call(args, id)) {\n          throw new Error(\n              'Found marker, \"' + id + '\", in format string, \"' + formatStr +\n              '\", but no valid label mapping found ' +\n              'in args: ' + JSON.stringify(args));\n        }\n        var arg = args[id];\n        if (arg instanceof goog.string.Const) {\n          return goog.string.Const.unwrap(arg);\n        } else {\n          return encodeURIComponent(String(arg));\n        }\n      });\n  return goog.html.TrustedResourceUrl\n      .createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse(result);\n};\n\n\n/**\n * @private @const {!RegExp}\n */\ngoog.html.TrustedResourceUrl.FORMAT_MARKER_ = /%{(\\w+)}/g;\n\n\n/**\n * The URL must be absolute, scheme-relative or path-absolute. So it must\n * start with:\n * - https:// followed by allowed origin characters.\n * - // followed by allowed origin characters.\n * - Any absolute or relative path.\n *\n * Based on\n * https://url.spec.whatwg.org/commit-snapshots/56b74ce7cca8883eab62e9a12666e2fac665d03d/#url-parsing\n * an initial / which is not followed by another / or \\ will end up in the \"path\n * state\" and from there it can only go to \"fragment state\" and \"query state\".\n *\n * We don't enforce a well-formed domain name. So '.' or '1.2' are valid.\n * That's ok because the origin comes from a compile-time constant.\n *\n * A regular expression is used instead of goog.uri for several reasons:\n * - Strictness. E.g. we don't want any userinfo component and we don't\n *   want '/./, nor \\' in the first path component.\n * - Small trusted base. goog.uri is generic and might need to change,\n *   reasoning about all the ways it can parse a URL now and in the future\n *   is error-prone.\n * - Code size. We expect many calls to .format(), many of which might\n *   not be using goog.uri.\n * - Simplicity. Using goog.uri would likely not result in simpler nor shorter\n *   code.\n * @private @const {!RegExp}\n */\ngoog.html.TrustedResourceUrl.BASE_URL_ = new RegExp(\n    '^((https:)?//[0-9a-z.:[\\\\]-]+/'  // Origin.\n        + '|/[^/\\\\\\\\]'                // Absolute path.\n        + '|[^:/\\\\\\\\%]+/'             // Relative path.\n        + '|[^:/\\\\\\\\%]*[?#]'          // Query string or fragment.\n        + '|about:blank#'             // about:blank with fragment.\n        + ')',\n    'i');\n\n/**\n * RegExp for splitting a URL into the base, search field, and hash field.\n *\n * @private @const {!RegExp}\n */\ngoog.html.TrustedResourceUrl.URL_PARAM_PARSER_ =\n    /^([^?#]*)(\\?[^#]*)?(#[\\s\\S]*)?/;\n\n\n/**\n * Formats the URL same as TrustedResourceUrl.format and then adds extra URL\n * parameters.\n *\n * Example usage:\n *\n *     // Creates '//www.youtube.com/v/abc?autoplay=1' for videoId='abc' and\n *     // opt_autoplay=1. Creates '//www.youtube.com/v/abc' for videoId='abc'\n *     // and opt_autoplay=undefined.\n *     var url = goog.html.TrustedResourceUrl.formatWithParams(\n *         goog.string.Const.from('//www.youtube.com/v/%{videoId}'),\n *         {'videoId': videoId},\n *         {'autoplay': opt_autoplay});\n *\n * @param {!goog.string.Const} format The format string.\n * @param {!Object<string, (string|number|!goog.string.Const)>} args Mapping\n *     of labels to values to be interpolated into the format string.\n *     goog.string.Const values are interpolated without encoding.\n * @param {string|?Object<string, *>|undefined} searchParams Parameters to add\n *     to URL. See goog.html.TrustedResourceUrl.stringifyParams_ for exact\n *     format definition.\n * @param {(string|?Object<string, *>)=} opt_hashParams Hash parameters to add\n *     to URL. See goog.html.TrustedResourceUrl.stringifyParams_ for exact\n *     format definition.\n * @return {!goog.html.TrustedResourceUrl}\n * @throws {!Error} On an invalid format string or if a label used in the\n *     the format string is not present in args.\n */\ngoog.html.TrustedResourceUrl.formatWithParams = function(\n    format, args, searchParams, opt_hashParams) {\n  'use strict';\n  var url = goog.html.TrustedResourceUrl.format(format, args);\n  return url.cloneWithParams(searchParams, opt_hashParams);\n};\n\n\n/**\n * Creates a TrustedResourceUrl object from a compile-time constant string.\n *\n * Compile-time constant strings are inherently program-controlled and hence\n * trusted.\n *\n * @param {!goog.string.Const} url A compile-time-constant string from which to\n *     create a TrustedResourceUrl.\n * @return {!goog.html.TrustedResourceUrl} A TrustedResourceUrl object\n *     initialized to `url`.\n */\ngoog.html.TrustedResourceUrl.fromConstant = function(url) {\n  'use strict';\n  return goog.html.TrustedResourceUrl\n      .createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse(\n          goog.string.Const.unwrap(url));\n};\n\n\n/**\n * Creates a TrustedResourceUrl object from a compile-time constant strings.\n *\n * Compile-time constant strings are inherently program-controlled and hence\n * trusted.\n *\n * @param {!Array<!goog.string.Const>} parts Compile-time-constant strings from\n *     which to create a TrustedResourceUrl.\n * @return {!goog.html.TrustedResourceUrl} A TrustedResourceUrl object\n *     initialized to concatenation of `parts`.\n */\ngoog.html.TrustedResourceUrl.fromConstants = function(parts) {\n  'use strict';\n  var unwrapped = '';\n  for (var i = 0; i < parts.length; i++) {\n    unwrapped += goog.string.Const.unwrap(parts[i]);\n  }\n  return goog.html.TrustedResourceUrl\n      .createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse(unwrapped);\n};\n\n/**\n * Creates a TrustedResourceUrl object by generating a Blob from a SafeScript\n * object and then calling createObjectURL with that blob.\n *\n * SafeScript objects are trusted to contain executable JavaScript code.\n *\n * Caller must call goog.fs.url.revokeObjectUrl() on the unwrapped url to\n * release the underlying blob.\n *\n * Throws if browser doesn't support blob construction.\n *\n * @param {!goog.html.SafeScript} safeScript A script from which to create a\n *     TrustedResourceUrl.\n * @return {!goog.html.TrustedResourceUrl} A TrustedResourceUrl object\n *     initialized to a new blob URL.\n */\ngoog.html.TrustedResourceUrl.fromSafeScript = function(safeScript) {\n  'use strict';\n  var blob = goog.fs.blob.getBlobWithProperties(\n      [goog.html.SafeScript.unwrap(safeScript)], 'text/javascript');\n  var url = goog.fs.url.createObjectUrl(blob);\n  return goog.html.TrustedResourceUrl\n      .createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse(url);\n};\n\n\n/**\n * Token used to ensure that object is created only from this file. No code\n * outside of this file can access this token.\n * @private {!Object}\n * @const\n */\ngoog.html.TrustedResourceUrl.CONSTRUCTOR_TOKEN_PRIVATE_ = {};\n\n\n/**\n * Package-internal utility method to create TrustedResourceUrl instances.\n *\n * @param {string} url The string to initialize the TrustedResourceUrl object\n *     with.\n * @return {!goog.html.TrustedResourceUrl} The initialized TrustedResourceUrl\n *     object.\n * @package\n */\ngoog.html.TrustedResourceUrl\n    .createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse = function(url) {\n  'use strict';\n  /** @noinline */\n  const noinlineUrl = url;\n  const policy = goog.html.trustedtypes.getPolicyPrivateDoNotAccessOrElse();\n  const value = policy ? policy.createScriptURL(noinlineUrl) : noinlineUrl;\n  return new goog.html.TrustedResourceUrl(\n      value, goog.html.TrustedResourceUrl.CONSTRUCTOR_TOKEN_PRIVATE_);\n};\n\n\n/**\n * Stringifies the passed params to be used as either a search or hash field of\n * a URL.\n *\n * @param {string} prefix The prefix character for the given field ('?' or '#').\n * @param {string} currentString The existing field value (including the prefix\n *     character, if the field is present).\n * @param {string|?Object<string, *>|undefined} params The params to set or\n *     append to the field.\n * - If `undefined` or `null`, the field remains unchanged.\n * - If a string, then the string will be escaped and the field will be\n *   overwritten with that value.\n * - If an Object, that object is treated as a set of key-value pairs to be\n *   appended to the current field. Note that JavaScript doesn't guarantee the\n *   order of values in an object which might result in non-deterministic order\n *   of the parameters. However, browsers currently preserve the order. The\n *   rules for each entry:\n *   - If an array, it will be processed as if each entry were an additional\n *     parameter with exactly the same key, following the same logic below.\n *   - If `undefined` or `null`, it will be skipped.\n *   - Otherwise, it will be turned into a string, escaped, and appended.\n * @return {string}\n * @private\n */\ngoog.html.TrustedResourceUrl.stringifyParams_ = function(\n    prefix, currentString, params) {\n  'use strict';\n  if (params == null) {\n    // Do not modify the field.\n    return currentString;\n  }\n  if (typeof params === 'string') {\n    // Set field to the passed string.\n    return params ? prefix + encodeURIComponent(params) : '';\n  }\n  // Add on parameters to field from key-value object.\n  for (var key in params) {\n    // https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Object/hasOwnProperty#Using_hasOwnProperty_as_a_property_name\n    if (Object.prototype.hasOwnProperty.call(params, key)) {\n      var value = params[key];\n      var outputValues = Array.isArray(value) ? value : [value];\n      for (var i = 0; i < outputValues.length; i++) {\n        var outputValue = outputValues[i];\n        if (outputValue != null) {\n          if (!currentString) {\n            currentString = prefix;\n          }\n          currentString += (currentString.length > prefix.length ? '&' : '') +\n              encodeURIComponent(key) + '=' +\n              encodeURIComponent(String(outputValue));\n        }\n      }\n    }\n  }\n  return currentString;\n};\n"],
+"names":["goog","provide","require","html","TrustedResourceUrl","constructor","value","token","privateDoNotAccessOrElseTrustedResourceUrlWrappedValue_","CONSTRUCTOR_TOKEN_PRIVATE_","toString","prototype","implementsGoogStringTypedString","getTypedStringValue","goog.html.TrustedResourceUrl.prototype.getTypedStringValue","cloneWithParams","goog.html.TrustedResourceUrl.prototype.cloneWithParams","searchParams","opt_hashParams","url","unwrap","parts","URL_PARAM_PARSER_","exec","urlBase","urlSearch","urlHash","createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse","stringifyParams_","goog.html.TrustedResourceUrl.unwrap","trustedResourceUrl","unwrapTrustedScriptURL","goog.html.TrustedResourceUrl.unwrapTrustedScriptURL","asserts","fail","typeOf","format","goog.html.TrustedResourceUrl.format","args","formatStr","string","Const","BASE_URL_","test","Error","result","replace","FORMAT_MARKER_","match","id","Object","hasOwnProperty","call","JSON","stringify","arg","encodeURIComponent","String","RegExp","formatWithParams","goog.html.TrustedResourceUrl.formatWithParams","fromConstant","goog.html.TrustedResourceUrl.fromConstant","fromConstants","goog.html.TrustedResourceUrl.fromConstants","unwrapped","i","length","fromSafeScript","goog.html.TrustedResourceUrl.fromSafeScript","safeScript","blob","fs","getBlobWithProperties","SafeScript","createObjectUrl","goog.html.TrustedResourceUrl.createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse","noinlineUrl","policy","trustedtypes","getPolicyPrivateDoNotAccessOrElse","createScriptURL","goog.html.TrustedResourceUrl.stringifyParams_","prefix","currentString","params","key","outputValues","Array","isArray","outputValue"]
+}

package/dist/cljs-runtime/goog.html.trustedtypes.js

@@ -0,0 +1,16 @@
+import "./cljs_env.js";
+
+goog.provide("goog.html.trustedtypes");
+goog.html.trustedtypes.POLICY_NAME = goog.define("goog.html.trustedtypes.POLICY_NAME", goog.TRUSTED_TYPES_POLICY_NAME ? goog.TRUSTED_TYPES_POLICY_NAME + "#html" : "");
+goog.html.trustedtypes.cachedPolicy_;
+goog.html.trustedtypes.getPolicyPrivateDoNotAccessOrElse = function() {
+  if (!goog.html.trustedtypes.POLICY_NAME) {
+    return null;
+  }
+  if (goog.html.trustedtypes.cachedPolicy_ === undefined) {
+    goog.html.trustedtypes.cachedPolicy_ = goog.createTrustedTypesPolicy(goog.html.trustedtypes.POLICY_NAME);
+  }
+  return goog.html.trustedtypes.cachedPolicy_;
+};
+
+//# sourceMappingURL=goog.html.trustedtypes.js.map

package/dist/cljs-runtime/goog.html.trustedtypes.js.map

@@ -0,0 +1,9 @@
+{
+"version":3,
+"file":"goog.html.trustedtypes.js",
+"lineCount":13,
+"mappings":"AAWAA,IAAKC,CAAAA,OAAL,CAAa,wBAAb,CAAA;AAWAD,IAAKE,CAAAA,IAAKC,CAAAA,YAAaC,CAAAA,WAAvB,GAAqCJ,IAAKK,CAAAA,MAAL,CACjC,oCADiC,EAEjCL,IAAKM,CAAAA,yBAAL,GAAiCN,IAAKM,CAAAA,yBAAtC,GAAkE,OAAlE,GACiC,EAHA,CAArC;AAWAN,IAAKE,CAAAA,IAAKC,CAAAA,YAAaI,CAAAA,aAAvB;AAQAP,IAAKE,CAAAA,IAAKC,CAAAA,YAAaK,CAAAA,iCAAvB,GAA2DC,QAAQ,EAAG;AAEpE,MAAI,CAACT,IAAKE,CAAAA,IAAKC,CAAAA,YAAaC,CAAAA,WAA5B;AAEE,WAAO,IAAP;AAFF;AAKA,MAAIJ,IAAKE,CAAAA,IAAKC,CAAAA,YAAaI,CAAAA,aAA3B,KAA6CG,SAA7C;AACEV,QAAKE,CAAAA,IAAKC,CAAAA,YAAaI,CAAAA,aAAvB,GACIP,IAAKW,CAAAA,wBAAL,CAA8BX,IAAKE,CAAAA,IAAKC,CAAAA,YAAaC,CAAAA,WAArD,CADJ;AADF;AAKA,SAAOJ,IAAKE,CAAAA,IAAKC,CAAAA,YAAaI,CAAAA,aAA9B;AAZoE,CAAtE;;",
+"sources":["goog/html/trustedtypes.js"],
+"sourcesContent":["/**\n * @license\n * Copyright The Closure Library Authors.\n * SPDX-License-Identifier: Apache-2.0\n */\n\n/**\n * @fileoverview Policy to convert strings to Trusted Types. See\n * https://github.com/WICG/trusted-types for details.\n */\n\ngoog.provide('goog.html.trustedtypes');\n\n\n/**\n * @define {string} Name for the Trusted Types policy used in Closure Safe\n * Types. Differs from `goog.TRUSTED_TYPES_POLICY_NAME` in that the latter is\n * also used for other purposes like the debug loader. If empty, Closure Safe\n * Types will not use Trusted Types. Default is `goog.TRUSTED_TYPES_POLICY_NAME`\n * plus the suffix `#html`, unless `goog.TRUSTED_TYPES_POLICY_NAME` is empty.\n * @package\n */\ngoog.html.trustedtypes.POLICY_NAME = goog.define(\n    'goog.html.trustedtypes.POLICY_NAME',\n    goog.TRUSTED_TYPES_POLICY_NAME ? goog.TRUSTED_TYPES_POLICY_NAME + '#html' :\n                                     '');\n\n\n/**\n * Cached result of goog.createTrustedTypesPolicy.\n * @type {?TrustedTypePolicy|undefined}\n * @private\n */\ngoog.html.trustedtypes.cachedPolicy_;\n\n\n/**\n * Creates a (singleton) Trusted Type Policy for Safe HTML Types.\n * @return {?TrustedTypePolicy}\n * @package\n */\ngoog.html.trustedtypes.getPolicyPrivateDoNotAccessOrElse = function() {\n  'use strict';\n  if (!goog.html.trustedtypes.POLICY_NAME) {\n    // Binary not configured for Trusted Types.\n    return null;\n  }\n\n  if (goog.html.trustedtypes.cachedPolicy_ === undefined) {\n    goog.html.trustedtypes.cachedPolicy_ =\n        goog.createTrustedTypesPolicy(goog.html.trustedtypes.POLICY_NAME);\n  }\n\n  return goog.html.trustedtypes.cachedPolicy_;\n};\n"],
+"names":["goog","provide","html","trustedtypes","POLICY_NAME","define","TRUSTED_TYPES_POLICY_NAME","cachedPolicy_","getPolicyPrivateDoNotAccessOrElse","goog.html.trustedtypes.getPolicyPrivateDoNotAccessOrElse","undefined","createTrustedTypesPolicy"]
+}

package/dist/cljs-runtime/goog.html.uncheckedconversions.js

@@ -0,0 +1,52 @@
+import "./cljs_env.js";
+import "./goog.asserts.asserts.js";
+import "./goog.html.safehtml.js";
+import "./goog.html.safescript.js";
+import "./goog.html.safestyle.js";
+import "./goog.html.safestylesheet.js";
+import "./goog.html.safeurl.js";
+import "./goog.html.trustedresourceurl.js";
+import "./goog.string.const.js";
+import "./goog.string.internal.js";
+goog.provide("goog.html.uncheckedconversions");
+goog.require("goog.asserts");
+goog.require("goog.html.SafeHtml");
+goog.require("goog.html.SafeScript");
+goog.require("goog.html.SafeStyle");
+goog.require("goog.html.SafeStyleSheet");
+goog.require("goog.html.SafeUrl");
+goog.require("goog.html.TrustedResourceUrl");
+goog.require("goog.string.Const");
+goog.require("goog.string.internal");
+goog.html.uncheckedconversions.safeHtmlFromStringKnownToSatisfyTypeContract = function(justification, html) {
+  goog.asserts.assertString(goog.string.Const.unwrap(justification), "must provide justification");
+  goog.asserts.assert(!goog.string.internal.isEmptyOrWhitespace(goog.string.Const.unwrap(justification)), "must provide non-empty justification");
+  return goog.html.SafeHtml.createSafeHtmlSecurityPrivateDoNotAccessOrElse(html);
+};
+goog.html.uncheckedconversions.safeScriptFromStringKnownToSatisfyTypeContract = function(justification, script) {
+  goog.asserts.assertString(goog.string.Const.unwrap(justification), "must provide justification");
+  goog.asserts.assert(!goog.string.internal.isEmptyOrWhitespace(goog.string.Const.unwrap(justification)), "must provide non-empty justification");
+  return goog.html.SafeScript.createSafeScriptSecurityPrivateDoNotAccessOrElse(script);
+};
+goog.html.uncheckedconversions.safeStyleFromStringKnownToSatisfyTypeContract = function(justification, style) {
+  goog.asserts.assertString(goog.string.Const.unwrap(justification), "must provide justification");
+  goog.asserts.assert(!goog.string.internal.isEmptyOrWhitespace(goog.string.Const.unwrap(justification)), "must provide non-empty justification");
+  return goog.html.SafeStyle.createSafeStyleSecurityPrivateDoNotAccessOrElse(style);
+};
+goog.html.uncheckedconversions.safeStyleSheetFromStringKnownToSatisfyTypeContract = function(justification, styleSheet) {
+  goog.asserts.assertString(goog.string.Const.unwrap(justification), "must provide justification");
+  goog.asserts.assert(!goog.string.internal.isEmptyOrWhitespace(goog.string.Const.unwrap(justification)), "must provide non-empty justification");
+  return goog.html.SafeStyleSheet.createSafeStyleSheetSecurityPrivateDoNotAccessOrElse(styleSheet);
+};
+goog.html.uncheckedconversions.safeUrlFromStringKnownToSatisfyTypeContract = function(justification, url) {
+  goog.asserts.assertString(goog.string.Const.unwrap(justification), "must provide justification");
+  goog.asserts.assert(!goog.string.internal.isEmptyOrWhitespace(goog.string.Const.unwrap(justification)), "must provide non-empty justification");
+  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(url);
+};
+goog.html.uncheckedconversions.trustedResourceUrlFromStringKnownToSatisfyTypeContract = function(justification, url) {
+  goog.asserts.assertString(goog.string.Const.unwrap(justification), "must provide justification");
+  goog.asserts.assert(!goog.string.internal.isEmptyOrWhitespace(goog.string.Const.unwrap(justification)), "must provide non-empty justification");
+  return goog.html.TrustedResourceUrl.createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse(url);
+};
+
+//# sourceMappingURL=goog.html.uncheckedconversions.js.map

package/dist/cljs-runtime/goog.html.uncheckedconversions.js.map

@@ -0,0 +1,9 @@
+{
+"version":3,
+"file":"goog.html.uncheckedconversions.js",
+"lineCount":41,
+"mappings":"AAqBAA,IAAKC,CAAAA,OAAL,CAAa,gCAAb,CAAA;AAEAD,IAAKE,CAAAA,OAAL,CAAa,cAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,oBAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,sBAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,qBAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,0BAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,mBAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,8BAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,mBAAb,CAAA;AACAF,IAAKE,CAAAA,OAAL,CAAa,sBAAb,CAAA;AAoBAF,IAAKG,CAAAA,IAAKC,CAAAA,oBAAqBC,CAAAA,4CAA/B,GACIC,QAAQ,CAACC,aAAD,EAAgBJ,IAAhB,CAAsB;AAIhCH,MAAKQ,CAAAA,OAAQC,CAAAA,YAAb,CACIT,IAAKU,CAAAA,MAAOC,CAAAA,KAAMC,CAAAA,MAAlB,CAAyBL,aAAzB,CADJ,EAC6C,4BAD7C,CAAA;AAEAP,MAAKQ,CAAAA,OAAQK,CAAAA,MAAb,CACI,CAACb,IAAKU,CAAAA,MAAOI,CAAAA,QAASC,CAAAA,mBAArB,CACGf,IAAKU,CAAAA,MAAOC,CAAAA,KAAMC,CAAAA,MAAlB,CAAyBL,aAAzB,CADH,CADL,EAGI,sCAHJ,CAAA;AAIA,SAAOP,IAAKG,CAAAA,IAAKa,CAAAA,QAASC,CAAAA,8CAAnB,CACHd,IADG,CAAP;AAVgC,CADlC;AAgCAH,IAAKG,CAAAA,IAAKC,CAAAA,oBAAqBc,CAAAA,8CAA/B,GACIC,QAAQ,CAACZ,aAAD,EAAgBa,MAAhB,CAAwB;AAIlCpB,MAAKQ,CAAAA,OAAQC,CAAAA,YAAb,CACIT,IAAKU,CAAAA,MAAOC,CAAAA,KAAMC,CAAAA,MAAlB,CAAyBL,aAAzB,CADJ,EAC6C,4BAD7C,CAAA;AAEAP,MAAKQ,CAAAA,OAAQK,CAAAA,MAAb,CACI,CAACb,IAAKU,CAAAA,MAAOI,CAAAA,QAASC,CAAAA,mBAArB,CACGf,IAAKU,CAAAA,MAAOC,CAAAA,KAAMC,CAAAA,MAAlB,CAAyBL,aAAzB,CADH,CADL,EAGI,sCAHJ,CAAA;AAIA,SAAOP,IAAKG,CAAAA,IAAKkB,CAAAA,UAAWC,CAAAA,gDAArB,CACHF,MADG,CAAP;AAVkC,CADpC;AAgCApB,IAAKG,CAAAA,IAAKC,CAAAA,oBAAqBmB,CAAAA,6CAA/B,GACIC,QAAQ,CAACjB,aAAD,EAAgBkB,KAAhB,CAAuB;AAIjCzB,MAAKQ,CAAAA,OAAQC,CAAAA,YAAb,CACIT,IAAKU,CAAAA,MAAOC,CAAAA,KAAMC,CAAAA,MAAlB,CAAyBL,aAAzB,CADJ,EAC6C,4BAD7C,CAAA;AAEAP,MAAKQ,CAAAA,OAAQK,CAAAA,MAAb,CACI,CAACb,IAAKU,CAAAA,MAAOI,CAAAA,QAASC,CAAAA,mBAArB,CACGf,IAAKU,CAAAA,MAAOC,CAAAA,KAAMC,CAAAA,MAAlB,CAAyBL,aAAzB,CADH,CADL,EAGI,sCAHJ,CAAA;AAIA,SAAOP,IAAKG,CAAAA,IAAKuB,CAAAA,SAAUC,CAAAA,+CAApB,CACHF,KADG,CAAP;AAViC,CADnC;AAgCAzB,IAAKG,CAAAA,IAAKC,CAAAA,oBACLwB,CAAAA,kDADL,GAC0DC,QAAQ,CAC9DtB,aAD8D,EAC/CuB,UAD+C,CACnC;AAI7B9B,MAAKQ,CAAAA,OAAQC,CAAAA,YAAb,CACIT,IAAKU,CAAAA,MAAOC,CAAAA,KAAMC,CAAAA,MAAlB,CAAyBL,aAAzB,CADJ,EAC6C,4BAD7C,CAAA;AAEAP,MAAKQ,CAAAA,OAAQK,CAAAA,MAAb,CACI,CAACb,IAAKU,CAAAA,MAAOI,CAAAA,QAASC,CAAAA,mBAArB,CACGf,IAAKU,CAAAA,MAAOC,CAAAA,KAAMC,CAAAA,MAAlB,CAAyBL,aAAzB,CADH,CADL,EAGI,sCAHJ,CAAA;AAIA,SAAOP,IAAKG,CAAAA,IAAK4B,CAAAA,cACZC,CAAAA,oDADE,CACmDF,UADnD,CAAP;AAV6B,CAF/B;AAiCA9B,IAAKG,CAAAA,IAAKC,CAAAA,oBAAqB6B,CAAAA,2CAA/B,GACIC,QAAQ,CAAC3B,aAAD,EAAgB4B,GAAhB,CAAqB;AAI/BnC,MAAKQ,CAAAA,OAAQC,CAAAA,YAAb,CACIT,IAAKU,CAAAA,MAAOC,CAAAA,KAAMC,CAAAA,MAAlB,CAAyBL,aAAzB,CADJ,EAC6C,4BAD7C,CAAA;AAEAP,MAAKQ,CAAAA,OAAQK,CAAAA,MAAb,CACI,CAACb,IAAKU,CAAAA,MAAOI,CAAAA,QAASC,CAAAA,mBAArB,CACGf,IAAKU,CAAAA,MAAOC,CAAAA,KAAMC,CAAAA,MAAlB,CAAyBL,aAAzB,CADH,CADL,EAGI,sCAHJ,CAAA;AAIA,SAAOP,IAAKG,CAAAA,IAAKiC,CAAAA,OAAQC,CAAAA,6CAAlB,CAAgEF,GAAhE,CAAP;AAV+B,CADjC;AA+BAnC,IAAKG,CAAAA,IAAKC,CAAAA,oBACLkC,CAAAA,sDADL,GAC8DC,QAAQ,CAClEhC,aADkE,EACnD4B,GADmD,CAC9C;AAItBnC,MAAKQ,CAAAA,OAAQC,CAAAA,YAAb,CACIT,IAAKU,CAAAA,MAAOC,CAAAA,KAAMC,CAAAA,MAAlB,CAAyBL,aAAzB,CADJ,EAC6C,4BAD7C,CAAA;AAEAP,MAAKQ,CAAAA,OAAQK,CAAAA,MAAb,CACI,CAACb,IAAKU,CAAAA,MAAOI,CAAAA,QAASC,CAAAA,mBAArB,CACGf,IAAKU,CAAAA,MAAOC,CAAAA,KAAMC,CAAAA,MAAlB,CAAyBL,aAAzB,CADH,CADL,EAGI,sCAHJ,CAAA;AAIA,SAAOP,IAAKG,CAAAA,IAAKqC,CAAAA,kBACZC,CAAAA,wDADE,CACuDN,GADvD,CAAP;AAVsB,CAFxB;;",
+"sources":["goog/html/uncheckedconversions.js"],
+"sourcesContent":["/**\n * @license\n * Copyright The Closure Library Authors.\n * SPDX-License-Identifier: Apache-2.0\n */\n\n/**\n * @fileoverview Unchecked conversions to create values of goog.html types from\n * plain strings.  Use of these functions could potentially result in instances\n * of goog.html types that violate their type contracts, and hence result in\n * security vulnerabilties.\n *\n * Therefore, all uses of the methods herein must be carefully security\n * reviewed.  Avoid use of the methods in this file whenever possible; instead\n * prefer to create instances of goog.html types using inherently safe builders\n * or template systems.\n *\n *\n */\n\n\ngoog.provide('goog.html.uncheckedconversions');\n\ngoog.require('goog.asserts');\ngoog.require('goog.html.SafeHtml');\ngoog.require('goog.html.SafeScript');\ngoog.require('goog.html.SafeStyle');\ngoog.require('goog.html.SafeStyleSheet');\ngoog.require('goog.html.SafeUrl');\ngoog.require('goog.html.TrustedResourceUrl');\ngoog.require('goog.string.Const');\ngoog.require('goog.string.internal');\n\n\n/**\n * Performs an \"unchecked conversion\" to SafeHtml from a plain string that is\n * known to satisfy the SafeHtml type contract.\n *\n * IMPORTANT: Uses of this method must be carefully security-reviewed to ensure\n * that the value of `html` satisfies the SafeHtml type contract in all\n * possible program states.\n *\n *\n * @param {!goog.string.Const} justification A constant string explaining why\n *     this use of this method is safe. May include a security review ticket\n *     number.\n * @param {string} html A string that is claimed to adhere to the SafeHtml\n *     contract.\n * @return {!goog.html.SafeHtml} The value of html, wrapped in a SafeHtml\n *     object.\n */\ngoog.html.uncheckedconversions.safeHtmlFromStringKnownToSatisfyTypeContract =\n    function(justification, html) {\n  'use strict';\n  // unwrap() called inside an assert so that justification can be optimized\n  // away in production code.\n  goog.asserts.assertString(\n      goog.string.Const.unwrap(justification), 'must provide justification');\n  goog.asserts.assert(\n      !goog.string.internal.isEmptyOrWhitespace(\n          goog.string.Const.unwrap(justification)),\n      'must provide non-empty justification');\n  return goog.html.SafeHtml.createSafeHtmlSecurityPrivateDoNotAccessOrElse(\n      html);\n};\n\n\n/**\n * Performs an \"unchecked conversion\" to SafeScript from a plain string that is\n * known to satisfy the SafeScript type contract.\n *\n * IMPORTANT: Uses of this method must be carefully security-reviewed to ensure\n * that the value of `script` satisfies the SafeScript type contract in\n * all possible program states.\n *\n *\n * @param {!goog.string.Const} justification A constant string explaining why\n *     this use of this method is safe. May include a security review ticket\n *     number.\n * @param {string} script The string to wrap as a SafeScript.\n * @return {!goog.html.SafeScript} The value of `script`, wrapped in a\n *     SafeScript object.\n */\ngoog.html.uncheckedconversions.safeScriptFromStringKnownToSatisfyTypeContract =\n    function(justification, script) {\n  'use strict';\n  // unwrap() called inside an assert so that justification can be optimized\n  // away in production code.\n  goog.asserts.assertString(\n      goog.string.Const.unwrap(justification), 'must provide justification');\n  goog.asserts.assert(\n      !goog.string.internal.isEmptyOrWhitespace(\n          goog.string.Const.unwrap(justification)),\n      'must provide non-empty justification');\n  return goog.html.SafeScript.createSafeScriptSecurityPrivateDoNotAccessOrElse(\n      script);\n};\n\n\n/**\n * Performs an \"unchecked conversion\" to SafeStyle from a plain string that is\n * known to satisfy the SafeStyle type contract.\n *\n * IMPORTANT: Uses of this method must be carefully security-reviewed to ensure\n * that the value of `style` satisfies the SafeStyle type contract in all\n * possible program states.\n *\n *\n * @param {!goog.string.Const} justification A constant string explaining why\n *     this use of this method is safe. May include a security review ticket\n *     number.\n * @param {string} style The string to wrap as a SafeStyle.\n * @return {!goog.html.SafeStyle} The value of `style`, wrapped in a\n *     SafeStyle object.\n */\ngoog.html.uncheckedconversions.safeStyleFromStringKnownToSatisfyTypeContract =\n    function(justification, style) {\n  'use strict';\n  // unwrap() called inside an assert so that justification can be optimized\n  // away in production code.\n  goog.asserts.assertString(\n      goog.string.Const.unwrap(justification), 'must provide justification');\n  goog.asserts.assert(\n      !goog.string.internal.isEmptyOrWhitespace(\n          goog.string.Const.unwrap(justification)),\n      'must provide non-empty justification');\n  return goog.html.SafeStyle.createSafeStyleSecurityPrivateDoNotAccessOrElse(\n      style);\n};\n\n\n/**\n * Performs an \"unchecked conversion\" to SafeStyleSheet from a plain string\n * that is known to satisfy the SafeStyleSheet type contract.\n *\n * IMPORTANT: Uses of this method must be carefully security-reviewed to ensure\n * that the value of `styleSheet` satisfies the SafeStyleSheet type\n * contract in all possible program states.\n *\n *\n * @param {!goog.string.Const} justification A constant string explaining why\n *     this use of this method is safe. May include a security review ticket\n *     number.\n * @param {string} styleSheet The string to wrap as a SafeStyleSheet.\n * @return {!goog.html.SafeStyleSheet} The value of `styleSheet`, wrapped\n *     in a SafeStyleSheet object.\n */\ngoog.html.uncheckedconversions\n    .safeStyleSheetFromStringKnownToSatisfyTypeContract = function(\n    justification, styleSheet) {\n  'use strict';\n  // unwrap() called inside an assert so that justification can be optimized\n  // away in production code.\n  goog.asserts.assertString(\n      goog.string.Const.unwrap(justification), 'must provide justification');\n  goog.asserts.assert(\n      !goog.string.internal.isEmptyOrWhitespace(\n          goog.string.Const.unwrap(justification)),\n      'must provide non-empty justification');\n  return goog.html.SafeStyleSheet\n      .createSafeStyleSheetSecurityPrivateDoNotAccessOrElse(styleSheet);\n};\n\n\n/**\n * Performs an \"unchecked conversion\" to SafeUrl from a plain string that is\n * known to satisfy the SafeUrl type contract.\n *\n * IMPORTANT: Uses of this method must be carefully security-reviewed to ensure\n * that the value of `url` satisfies the SafeUrl type contract in all\n * possible program states.\n *\n *\n * @param {!goog.string.Const} justification A constant string explaining why\n *     this use of this method is safe. May include a security review ticket\n *     number.\n * @param {string} url The string to wrap as a SafeUrl.\n * @return {!goog.html.SafeUrl} The value of `url`, wrapped in a SafeUrl\n *     object.\n */\ngoog.html.uncheckedconversions.safeUrlFromStringKnownToSatisfyTypeContract =\n    function(justification, url) {\n  'use strict';\n  // unwrap() called inside an assert so that justification can be optimized\n  // away in production code.\n  goog.asserts.assertString(\n      goog.string.Const.unwrap(justification), 'must provide justification');\n  goog.asserts.assert(\n      !goog.string.internal.isEmptyOrWhitespace(\n          goog.string.Const.unwrap(justification)),\n      'must provide non-empty justification');\n  return goog.html.SafeUrl.createSafeUrlSecurityPrivateDoNotAccessOrElse(url);\n};\n\n\n/**\n * Performs an \"unchecked conversion\" to TrustedResourceUrl from a plain string\n * that is known to satisfy the TrustedResourceUrl type contract.\n *\n * IMPORTANT: Uses of this method must be carefully security-reviewed to ensure\n * that the value of `url` satisfies the TrustedResourceUrl type contract\n * in all possible program states.\n *\n *\n * @param {!goog.string.Const} justification A constant string explaining why\n *     this use of this method is safe. May include a security review ticket\n *     number.\n * @param {string} url The string to wrap as a TrustedResourceUrl.\n * @return {!goog.html.TrustedResourceUrl} The value of `url`, wrapped in\n *     a TrustedResourceUrl object.\n */\ngoog.html.uncheckedconversions\n    .trustedResourceUrlFromStringKnownToSatisfyTypeContract = function(\n    justification, url) {\n  'use strict';\n  // unwrap() called inside an assert so that justification can be optimized\n  // away in production code.\n  goog.asserts.assertString(\n      goog.string.Const.unwrap(justification), 'must provide justification');\n  goog.asserts.assert(\n      !goog.string.internal.isEmptyOrWhitespace(\n          goog.string.Const.unwrap(justification)),\n      'must provide non-empty justification');\n  return goog.html.TrustedResourceUrl\n      .createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse(url);\n};\n"],
+"names":["goog","provide","require","html","uncheckedconversions","safeHtmlFromStringKnownToSatisfyTypeContract","goog.html.uncheckedconversions.safeHtmlFromStringKnownToSatisfyTypeContract","justification","asserts","assertString","string","Const","unwrap","assert","internal","isEmptyOrWhitespace","SafeHtml","createSafeHtmlSecurityPrivateDoNotAccessOrElse","safeScriptFromStringKnownToSatisfyTypeContract","goog.html.uncheckedconversions.safeScriptFromStringKnownToSatisfyTypeContract","script","SafeScript","createSafeScriptSecurityPrivateDoNotAccessOrElse","safeStyleFromStringKnownToSatisfyTypeContract","goog.html.uncheckedconversions.safeStyleFromStringKnownToSatisfyTypeContract","style","SafeStyle","createSafeStyleSecurityPrivateDoNotAccessOrElse","safeStyleSheetFromStringKnownToSatisfyTypeContract","goog.html.uncheckedconversions.safeStyleSheetFromStringKnownToSatisfyTypeContract","styleSheet","SafeStyleSheet","createSafeStyleSheetSecurityPrivateDoNotAccessOrElse","safeUrlFromStringKnownToSatisfyTypeContract","goog.html.uncheckedconversions.safeUrlFromStringKnownToSatisfyTypeContract","url","SafeUrl","createSafeUrlSecurityPrivateDoNotAccessOrElse","trustedResourceUrlFromStringKnownToSatisfyTypeContract","goog.html.uncheckedconversions.trustedResourceUrlFromStringKnownToSatisfyTypeContract","TrustedResourceUrl","createTrustedResourceUrlSecurityPrivateDoNotAccessOrElse"]
+}