@particle-academy/react-fancy 5.49.0 → 5.50.0

package/CHANGELOG.md

@@ -11,6 +11,42 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [5.50.0] - 2026-10-19
+
+### Added
+
+- **`sanitizeHtml(html, options)` has an allowlist mode** (#35). Pass
+  `{ allowedTags, allowedAttributes, allowedSchemes, allowRelative }` and only
+  what is listed survives: unlisted tags are unwrapped (text kept), unlisted
+  attributes and URL schemes are removed, and comments go. `allowedAttributes`
+  is one list or a per-tag map with `"*"` for every tag, and `"data-*"`-style
+  prefixes. `allowedSchemes` defaults to `http:`, `https:`, `mailto:`;
+  `allowRelative` (default `false`) keeps same-site relative URLs and fragments
+  but never `//host`.
+  **An allowlist can only narrow.** Event handlers, `srcdoc`, `srcset`,
+  `javascript:` / `vbscript:` URLs and script-capable or foreign-content tags
+  (`script`, `style`, `iframe`, `object`, `embed`, `form`, `template`, `svg`,
+  `math`, ...) are removed even when listed. Without a DOM (SSR) allowlist mode
+  returns the input as escaped text rather than passing it through.
+- **`renderMarkdown(markdown, sanitize?)`**: the markdown `ContentRenderer`
+  renders, as a sanitised HTML string (blocklist by default, the allowlist when
+  given options), so a host no longer imports the markdown parser behind our
+  back. `ContentRenderer` now uses the same function, so the two cannot drift.
+- `SanitizeHtmlOptions` type export.
+
+**Nothing to do:** `sanitizeHtml(html)` with no options is unchanged, byte for
+byte.
+
+## [5.49.1] - 2026-10-19
+
+### Fixed
+
+- **A `FauxClient` with both `fill` and a logical `width` scrolls its content.**
+  Scaled mode pinned the body to the content's full scaled height, so a long
+  document in a frame that fills its parent was clipped at the frame's edge
+  instead of scrolling inside it. Found putting a real multi-page .docx in the
+  new fancy-docs viewer. **Nothing to do.**
+
 ## [5.49.0] - 2026-10-19
 
 ### Added

package/dist/button.cjs

@@ -1,8 +1,8 @@
 'use strict';
 
 require('./chunk-M5MUGSON.cjs');
-var chunk3XJKJQSY_cjs = require('./chunk-3XJKJQSY.cjs');
-require('./chunk-LRNWD26Z.cjs');
+var chunkFWA4PCW7_cjs = require('./chunk-FWA4PCW7.cjs');
+require('./chunk-X2FC7ODX.cjs');
 require('./chunk-XCZZVRBY.cjs');
 require('./chunk-QKFOJKVE.cjs');
 require('./chunk-ZU5Q77OT.cjs');
@@ -11,11 +11,11 @@ require('./chunk-ZU5Q77OT.cjs');
 
 Object.defineProperty(exports, "Action", {
   enumerable: true,
-  get: function () { return chunk3XJKJQSY_cjs.Action; }
+  get: function () { return chunkFWA4PCW7_cjs.Action; }
 });
 Object.defineProperty(exports, "Button", {
   enumerable: true,
-  get: function () { return chunk3XJKJQSY_cjs.Button; }
+  get: function () { return chunkFWA4PCW7_cjs.Button; }
 });
 //# sourceMappingURL=button.cjs.map
 //# sourceMappingURL=button.cjs.map

package/dist/button.js

@@ -1,6 +1,6 @@
 import './chunk-LQ4ICCN2.js';
-export { Action, Button } from './chunk-ZLYOMQ2J.js';
-import './chunk-QXYO76NZ.js';
+export { Action, Button } from './chunk-KODD54GT.js';
+import './chunk-6TBRBN7H.js';
 import './chunk-45BBNJQD.js';
 import './chunk-IVRYSSM7.js';
 import './chunk-MMW2JGKZ.js';

package/dist/{chunk-WBJRFWZE.cjs → chunk-2KZINS6D.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkDUOZSOSB_cjs = require('./chunk-DUOZSOSB.cjs');
+var chunkRU6ZTA4M_cjs = require('./chunk-RU6ZTA4M.cjs');
 var chunkT6YELZPJ_cjs = require('./chunk-T6YELZPJ.cjs');
 var chunkZU5Q77OT_cjs = require('./chunk-ZU5Q77OT.cjs');
 var react = require('react');
@@ -197,7 +197,7 @@ var ImageViewer = react.forwardRef(
     );
     if (!frame) return viewer;
     return /* @__PURE__ */ jsxRuntime.jsx(
-      chunkDUOZSOSB_cjs.FauxClient,
+      chunkRU6ZTA4M_cjs.FauxClient,
       {
         variant: "device",
         controls: true,
@@ -216,5 +216,5 @@ var ImageViewer = react.forwardRef(
 ImageViewer.displayName = "ImageViewer";
 
 exports.ImageViewer = ImageViewer;
-//# sourceMappingURL=chunk-WBJRFWZE.cjs.map
-//# sourceMappingURL=chunk-WBJRFWZE.cjs.map
+//# sourceMappingURL=chunk-2KZINS6D.cjs.map
+//# sourceMappingURL=chunk-2KZINS6D.cjs.map

package/dist/{chunk-WBJRFWZE.cjs.map → chunk-2KZINS6D.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/components/ImageViewer/ImageViewer.tsx"],"names":["forwardRef","useRef","useState","useCallback","usePanZoom","jsxs","cn","jsx","FauxClient"],"mappings":";;;;;;;;AAYA,IAAM,mBAAwC,EAAE,IAAA,EAAM,GAAG,IAAA,EAAM,CAAA,EAAG,MAAM,CAAA,EAAE;AAE1E,IAAM,UAAA,GAAmE;AAAA,EACvE,OAAA,EAAS,8BAAA;AAAA,EACT,KAAA,EAAO,4BAAA;AAAA,EACP,IAAA,EAAM;AACR,CAAA;AAEA,SAAS,KAAA,CAAM,CAAA,EAAW,GAAA,EAAa,GAAA,EAAqB;AAC1D,EAAA,OAAO,KAAK,GAAA,CAAI,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA,EAAK,CAAC,CAAC,CAAA;AACvC;AAcO,IAAM,WAAA,GAAcA,gBAAA;AAAA,EACzB,CACE;AAAA,IACE,GAAA;AAAA,IACA,GAAA,GAAM,EAAA;AAAA,IACN,GAAA,GAAM,SAAA;AAAA,IACN,QAAA,GAAW,IAAA;AAAA,IACX,QAAA,GAAW,IAAA;AAAA,IACX,QAAA;AAAA,IACA,OAAA,GAAU,IAAA;AAAA,IACV,OAAA,GAAU,CAAA;AAAA,IACV,YAAA,GAAe,IAAA;AAAA,IACf,QAAA;AAAA,IACA,eAAA;AAAA,IACA,gBAAA;AAAA,IACA,MAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA,KAAA;AAAA,IACA,KAAA,GAAQ,KAAA;AAAA,IACR;AAAA,KAEF,GAAA,KACG;AACH,IAAA,MAAM,YAAA,GAAeC,aAAuB,IAAI,CAAA;AAChD,IAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAIC,eAAyC,SAAS,CAAA;AAG9E,IAAA,MAAM,eAAe,QAAA,KAAa,MAAA;AAClC,IAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAIA,cAAA;AAAA,MAC9B,eAAA,IAAmB;AAAA,KACrB;AACA,IAAA,MAAM,OAAA,GAAU,eAAe,QAAA,GAAY,QAAA;AAC3C,IAAA,MAAM,UAAA,GAAaD,aAAO,OAAO,CAAA;AACjC,IAAA,UAAA,CAAW,OAAA,GAAU,OAAA;AAErB,IAAA,MAAM,WAAA,GAAcE,iBAAA;AAAA,MAClB,CACE,IAAA,KAGG;AACH,QAAA,MAAM,WACJ,OAAO,IAAA,KAAS,aAAa,IAAA,CAAK,UAAA,CAAW,OAAO,CAAA,GAAI,IAAA;AAC1D,QAAA,IAAI,CAAC,YAAA,EAAc,WAAA,CAAY,QAAQ,CAAA;AACvC,QAAA,gBAAA,GAAmB,QAAQ,CAAA;AAAA,MAC7B,CAAA;AAAA,MACA,CAAC,cAAc,gBAAgB;AAAA,KACjC;AAEA,IAAA,MAAM,cAAc,MAAA,KAAW,QAAA;AAC/B,IAAA,MAAM,EAAE,cAAA,EAAgB,SAAA,EAAU,GAAIC,4BAAA,CAAW;AAAA,MAC/C,QAAA,EAAU,OAAA;AAAA,MACV,WAAA;AAAA,MACA,OAAA;AAAA,MACA,OAAA;AAAA,MACA,UAAU,QAAA,IAAY,WAAA;AAAA,MACtB,UAAU,QAAA,IAAY,WAAA;AAAA,MACtB;AAAA,KACD,CAAA;AAGD,IAAA,MAAM,MAAA,GAASD,iBAAA;AAAA,MACb,CAAC,MAAA,KAAmB;AAClB,QAAA,MAAM,KAAK,YAAA,CAAa,OAAA;AACxB,QAAA,IAAI,CAAC,EAAA,EAAI;AACT,QAAA,MAAM,IAAA,GAAO,GAAG,qBAAA,EAAsB;AACtC,QAAA,MAAM,EAAA,GAAK,KAAK,KAAA,GAAQ,CAAA;AACxB,QAAA,MAAM,EAAA,GAAK,KAAK,MAAA,GAAS,CAAA;AACzB,QAAA,WAAA,CAAY,CAAC,IAAA,KAAS;AACpB,UAAA,MAAM,UAAU,KAAA,CAAM,IAAA,CAAK,IAAA,GAAO,MAAA,EAAQ,SAAS,OAAO,CAAA;AAC1D,UAAA,MAAM,KAAA,GAAQ,UAAU,IAAA,CAAK,IAAA;AAC7B,UAAA,OAAO;AAAA,YACL,IAAA,EAAM,OAAA;AAAA,YACN,IAAA,EAAM,EAAA,GAAA,CAAM,EAAA,GAAK,IAAA,CAAK,IAAA,IAAQ,KAAA;AAAA,YAC9B,IAAA,EAAM,EAAA,GAAA,CAAM,EAAA,GAAK,IAAA,CAAK,IAAA,IAAQ;AAAA,WAChC;AAAA,QACF,CAAC,CAAA;AAAA,MACH,CAAA;AAAA,MACA,CAAC,WAAA,EAAa,OAAA,EAAS,OAAO;AAAA,KAChC;AAEA,IAAA,MAAM,KAAA,GAAQA,kBAAY,MAAM,WAAA,CAAY,gBAAgB,CAAA,EAAG,CAAC,WAAW,CAAC,CAAA;AAE5E,IAAA,MAAM,YAAA,GAAe,CAAC,KAAA,KAAU,QAAA,IAAY,QAAA,CAAA,IAAa,WAAA;AACzD,IAAA,MAAM,SAAA,GAAY,aAAa,OAAA,CAAQ,IAAI,OAAO,OAAA,CAAQ,IAAI,CAAA,UAAA,EAAa,OAAA,CAAQ,IAAI,CAAA,CAAA,CAAA;AAEvF,IAAA,MAAM,MAAA,mBACJE,eAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,GAAA;AAAA,QACA,+BAAA,EAA8B,EAAA;AAAA,QAC9B,SAAA,EAAWC,oBAAA;AAAA,UACT,yDAAA;AAAA;AAAA,UAEA,KAAA,IAAS,4BAAA;AAAA,UACT,eACI,oBAAA,GACA,8BAAA;AAAA,UACJ;AAAA,SACF;AAAA,QACA,KAAA;AAAA,QAEA,QAAA,EAAA;AAAA,0BAAAC,cAAA;AAAA,YAAC,KAAA;AAAA,YAAA;AAAA,cACC,GAAA,EAAK,YAAA;AAAA,cACL,gBAAA,EAAe,EAAA;AAAA,cACf,SAAA,EAAWD,oBAAA;AAAA,gBACT,mDAAA;AAAA,gBACA,SAAA,GACI,iBAAA,GACA,QAAA,IAAY,WAAA,GACV,aAAA,GACA;AAAA,eACR;AAAA,cACA,KAAA,EACE;AAAA,gBACE,SAAA;AAAA,gBACA,eAAA,EAAiB,KAAA;AAAA,gBACjB,UAAA,EAAY,WAAA;AAAA,gBACZ,WAAA,EAAa,QAAA,IAAY,QAAA,GAAW,MAAA,GAAS;AAAA,eAC/C;AAAA,cAEF,aAAA,EAAe,WAAW,KAAA,GAAQ,MAAA;AAAA,cACjC,GAAG,cAAA;AAAA,cAEJ,QAAA,kBAAAC,cAAA;AAAA,gBAAC,KAAA;AAAA,gBAAA;AAAA,kBACC,GAAA;AAAA,kBACA,GAAA;AAAA,kBACA,SAAA,EAAW,KAAA;AAAA,kBACX,QAAQ,MAAM;AACZ,oBAAA,SAAA,CAAU,QAAQ,CAAA;AAClB,oBAAA,MAAA,IAAS;AAAA,kBACX,CAAA;AAAA,kBACA,SAAS,MAAM;AACb,oBAAA,SAAA,CAAU,OAAO,CAAA;AACjB,oBAAA,OAAA,IAAU;AAAA,kBACZ,CAAA;AAAA,kBACA,SAAA,EAAWD,oBAAA;AAAA,oBACT,2BAAA;AAAA,oBACA,WAAW,OAAA,IAAW,QAAA;AAAA,oBACtB,WAAW,GAAG;AAAA;AAChB;AAAA;AACF;AAAA,WACF;AAAA,UAEC,WAAW,OAAA,oBACVD,eAAA;AAAA,YAAC,KAAA;AAAA,YAAA;AAAA,cACC,qCAAA,EAAoC,EAAA;AAAA,cACpC,SAAA,EAAU,2HAAA;AAAA,cAEV,QAAA,EAAA;AAAA,gCAAAE,cAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,aAAA,EAAc,QAAA,EAAA,qBAAA,EAAwB,CAAA;AAAA,gCACtDA,cAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,wCAAA,EAA0C,iBAAO,GAAA,EAAI;AAAA;AAAA;AAAA,WACvE;AAAA,UAGD,YAAA,oBACCF,eAAA;AAAA,YAAC,KAAA;AAAA,YAAA;AAAA,cACC,wCAAA,EAAuC,EAAA;AAAA,cACvC,SAAA,EAAU,2MAAA;AAAA,cAEV,QAAA,EAAA;AAAA,gCAAAE,cAAA;AAAA,kBAAC,QAAA;AAAA,kBAAA;AAAA,oBACC,IAAA,EAAK,QAAA;AAAA,oBACL,YAAA,EAAW,UAAA;AAAA,oBACX,OAAA,EAAS,MAAM,MAAA,CAAO,CAAA,GAAI,IAAI,CAAA;AAAA,oBAC9B,SAAA,EAAU,kHAAA;AAAA,oBACX,QAAA,EAAA;AAAA;AAAA,iBAED;AAAA,gCACAF,eAAA;AAAA,kBAAC,QAAA;AAAA,kBAAA;AAAA,oBACC,IAAA,EAAK,QAAA;AAAA,oBACL,YAAA,EAAW,YAAA;AAAA,oBACX,OAAA,EAAS,KAAA;AAAA,oBACT,SAAA,EAAU,qGAAA;AAAA,oBAET,QAAA,EAAA;AAAA,sBAAA,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,IAAA,GAAO,GAAG,CAAA;AAAA,sBAAE;AAAA;AAAA;AAAA,iBAClC;AAAA,gCACAE,cAAA;AAAA,kBAAC,QAAA;AAAA,kBAAA;AAAA,oBACC,IAAA,EAAK,QAAA;AAAA,oBACL,YAAA,EAAW,SAAA;AAAA,oBACX,OAAA,EAAS,MAAM,MAAA,CAAO,IAAI,CAAA;AAAA,oBAC1B,SAAA,EAAU,kHAAA;AAAA,oBACX,QAAA,EAAA;AAAA;AAAA;AAED;AAAA;AAAA;AACF;AAAA;AAAA,KAEJ;AAGF,IAAA,IAAI,CAAC,OAAO,OAAO,MAAA;AAInB,IAAA,uBACEA,cAAA;AAAA,MAACC,4BAAA;AAAA,MAAA;AAAA,QACC,OAAA,EAAQ,QAAA;AAAA,QACR,QAAA,EAAQ,IAAA;AAAA,QACR,IAAA,EAAI,IAAA;AAAA,QACJ,SAAA,EAAW,KAAA;AAAA,QACX,MAAM,OAAA,CAAQ,IAAA;AAAA,QACd,YAAA,EAAc,CAAC,CAAA,KAAO,CAAA,KAAM,CAAA,GAAI,OAAM,GAAI,MAAA,CAAO,CAAA,GAAI,OAAA,CAAQ,IAAI,CAAA;AAAA,QACjE,OAAA;AAAA,QACA,OAAA;AAAA,QACC,GAAG,UAAA;AAAA,QAEH,QAAA,EAAA;AAAA;AAAA,KACH;AAAA,EAEJ;AACF;AAEA,WAAA,CAAY,WAAA,GAAc,aAAA","file":"chunk-WBJRFWZE.cjs","sourcesContent":["import { FauxClient } from \"../FauxClient\";\nimport {\n  forwardRef,\n  useCallback,\n  useRef,\n  useState,\n  type CSSProperties,\n} from \"react\";\nimport { cn } from \"../../utils/cn\";\nimport { usePanZoom } from \"../../hooks/use-pan-zoom\";\nimport type { ImageViewerProps, ImageViewerViewport } from \"./ImageViewer.types\";\n\nconst DEFAULT_VIEWPORT: ImageViewerViewport = { panX: 0, panY: 0, zoom: 1 };\n\nconst fitClasses: Record<NonNullable<ImageViewerProps[\"fit\"]>, string> = {\n  contain: \"h-full w-full object-contain\",\n  cover: \"h-full w-full object-cover\",\n  none: \"max-w-none object-none\",\n};\n\nfunction clamp(n: number, min: number, max: number): number {\n  return Math.min(max, Math.max(min, n));\n}\n\n/**\n * A standalone image viewer: fits the image to its container, with optional\n * Ctrl/⌘+wheel zoom, click-drag panning, and a transparency checkerboard. Works\n * anywhere on its own and is also what `<MediaViewer>` renders for images.\n *\n * The pan/zoom viewport is controllable (`viewport` + `onViewportChange`) so an\n * agent bridge can drive it; it's uncontrolled by default.\n *\n * ```tsx\n * <ImageViewer src=\"/logo.png\" alt=\"logo.png\" style={{ height: 320 }} />\n * ```\n */\nexport const ImageViewer = forwardRef<HTMLDivElement, ImageViewerProps>(\n  (\n    {\n      src,\n      alt = \"\",\n      fit = \"contain\",\n      zoomable = true,\n      pannable = true,\n      controls,\n      minZoom = 0.25,\n      maxZoom = 8,\n      checkerboard = true,\n      viewport,\n      defaultViewport,\n      onViewportChange,\n      onLoad,\n      onError,\n      className,\n      style,\n      frame = false,\n      frameProps,\n    },\n    ref,\n  ) => {\n    const containerRef = useRef<HTMLDivElement>(null);\n    const [status, setStatus] = useState<\"loading\" | \"loaded\" | \"error\">(\"loading\");\n\n    // Controllable viewport supporting functional updates (usePanZoom needs them).\n    const isControlled = viewport !== undefined;\n    const [internal, setInternal] = useState<ImageViewerViewport>(\n      defaultViewport ?? DEFAULT_VIEWPORT,\n    );\n    const current = isControlled ? viewport! : internal;\n    const currentRef = useRef(current);\n    currentRef.current = current;\n\n    const setViewport = useCallback(\n      (\n        next:\n          | ImageViewerViewport\n          | ((prev: ImageViewerViewport) => ImageViewerViewport),\n      ) => {\n        const resolved =\n          typeof next === \"function\" ? next(currentRef.current) : next;\n        if (!isControlled) setInternal(resolved);\n        onViewportChange?.(resolved);\n      },\n      [isControlled, onViewportChange],\n    );\n\n    const interactive = status === \"loaded\";\n    const { containerProps, isPanning } = usePanZoom({\n      viewport: current,\n      setViewport,\n      minZoom,\n      maxZoom,\n      pannable: pannable && interactive,\n      zoomable: zoomable && interactive,\n      containerRef,\n    });\n\n    // Zoom about the container centre — used by the +/− buttons.\n    const zoomBy = useCallback(\n      (factor: number) => {\n        const el = containerRef.current;\n        if (!el) return;\n        const rect = el.getBoundingClientRect();\n        const cx = rect.width / 2;\n        const cy = rect.height / 2;\n        setViewport((prev) => {\n          const newZoom = clamp(prev.zoom * factor, minZoom, maxZoom);\n          const ratio = newZoom / prev.zoom;\n          return {\n            zoom: newZoom,\n            panX: cx - (cx - prev.panX) * ratio,\n            panY: cy - (cy - prev.panY) * ratio,\n          };\n        });\n      },\n      [setViewport, minZoom, maxZoom],\n    );\n\n    const reset = useCallback(() => setViewport(DEFAULT_VIEWPORT), [setViewport]);\n\n    const showControls = !frame && (controls ?? zoomable) && interactive;\n    const transform = `translate(${current.panX}px, ${current.panY}px) scale(${current.zoom})`;\n\n    const viewer = (\n      <div\n        ref={ref}\n        data-react-fancy-image-viewer=\"\"\n        className={cn(\n          \"relative isolate overflow-hidden rounded-md select-none\",\n          // In the frame it fills the frame's body; standalone, the caller sizes it.\n          frame && \"h-full w-full rounded-none\",\n          checkerboard\n            ? \"fancy-checkerboard\"\n            : \"bg-zinc-100 dark:bg-zinc-900\",\n          className,\n        )}\n        style={style}\n      >\n        <div\n          ref={containerRef}\n          data-canvas-bg=\"\"\n          className={cn(\n            \"absolute inset-0 flex items-center justify-center\",\n            isPanning\n              ? \"cursor-grabbing\"\n              : pannable && interactive\n                ? \"cursor-grab\"\n                : \"\",\n          )}\n          style={\n            {\n              transform,\n              transformOrigin: \"0 0\",\n              willChange: \"transform\",\n              touchAction: zoomable || pannable ? \"none\" : undefined,\n            } as CSSProperties\n          }\n          onDoubleClick={zoomable ? reset : undefined}\n          {...containerProps}\n        >\n          <img\n            src={src}\n            alt={alt}\n            draggable={false}\n            onLoad={() => {\n              setStatus(\"loaded\");\n              onLoad?.();\n            }}\n            onError={() => {\n              setStatus(\"error\");\n              onError?.();\n            }}\n            className={cn(\n              \"pointer-events-none block\",\n              status === \"error\" && \"hidden\",\n              fitClasses[fit],\n            )}\n          />\n        </div>\n\n        {status === \"error\" && (\n          <div\n            data-react-fancy-image-viewer-error=\"\"\n            className=\"absolute inset-0 flex flex-col items-center justify-center gap-1 p-4 text-center text-sm text-zinc-500 dark:text-zinc-400\"\n          >\n            <span className=\"font-medium\">Couldn&apos;t load image</span>\n            <span className=\"max-w-full truncate text-xs opacity-70\">{alt || src}</span>\n          </div>\n        )}\n\n        {showControls && (\n          <div\n            data-react-fancy-image-viewer-controls=\"\"\n            className=\"absolute bottom-2 right-2 flex items-center gap-0.5 rounded-md border border-zinc-200 bg-white/90 p-0.5 text-zinc-700 shadow-sm backdrop-blur dark:border-zinc-700 dark:bg-zinc-900/90 dark:text-zinc-200\"\n          >\n            <button\n              type=\"button\"\n              aria-label=\"Zoom out\"\n              onClick={() => zoomBy(1 / 1.25)}\n              className=\"flex h-6 w-6 items-center justify-center rounded text-base leading-none hover:bg-zinc-100 dark:hover:bg-zinc-800\"\n            >\n              −\n            </button>\n            <button\n              type=\"button\"\n              aria-label=\"Reset zoom\"\n              onClick={reset}\n              className=\"min-w-[3rem] rounded px-1 text-center text-xs tabular-nums hover:bg-zinc-100 dark:hover:bg-zinc-800\"\n            >\n              {Math.round(current.zoom * 100)}%\n            </button>\n            <button\n              type=\"button\"\n              aria-label=\"Zoom in\"\n              onClick={() => zoomBy(1.25)}\n              className=\"flex h-6 w-6 items-center justify-center rounded text-base leading-none hover:bg-zinc-100 dark:hover:bg-zinc-800\"\n            >\n              +\n            </button>\n          </div>\n        )}\n      </div>\n    );\n\n    if (!frame) return viewer;\n\n    // The frame's bar drives the image's own zoom (about the centre), and the\n    // image's boxed bar steps aside: one set of controls, revealed on hover.\n    return (\n      <FauxClient\n        variant=\"device\"\n        controls\n        fill\n        applyZoom={false}\n        zoom={current.zoom}\n        onZoomChange={(z) => (z === 1 ? reset() : zoomBy(z / current.zoom))}\n        minZoom={minZoom}\n        maxZoom={maxZoom}\n        {...frameProps}\n      >\n        {viewer}\n      </FauxClient>\n    );\n  },\n);\n\nImageViewer.displayName = \"ImageViewer\";\n"]}
+{"version":3,"sources":["../src/components/ImageViewer/ImageViewer.tsx"],"names":["forwardRef","useRef","useState","useCallback","usePanZoom","jsxs","cn","jsx","FauxClient"],"mappings":";;;;;;;;AAYA,IAAM,mBAAwC,EAAE,IAAA,EAAM,GAAG,IAAA,EAAM,CAAA,EAAG,MAAM,CAAA,EAAE;AAE1E,IAAM,UAAA,GAAmE;AAAA,EACvE,OAAA,EAAS,8BAAA;AAAA,EACT,KAAA,EAAO,4BAAA;AAAA,EACP,IAAA,EAAM;AACR,CAAA;AAEA,SAAS,KAAA,CAAM,CAAA,EAAW,GAAA,EAAa,GAAA,EAAqB;AAC1D,EAAA,OAAO,KAAK,GAAA,CAAI,GAAA,EAAK,KAAK,GAAA,CAAI,GAAA,EAAK,CAAC,CAAC,CAAA;AACvC;AAcO,IAAM,WAAA,GAAcA,gBAAA;AAAA,EACzB,CACE;AAAA,IACE,GAAA;AAAA,IACA,GAAA,GAAM,EAAA;AAAA,IACN,GAAA,GAAM,SAAA;AAAA,IACN,QAAA,GAAW,IAAA;AAAA,IACX,QAAA,GAAW,IAAA;AAAA,IACX,QAAA;AAAA,IACA,OAAA,GAAU,IAAA;AAAA,IACV,OAAA,GAAU,CAAA;AAAA,IACV,YAAA,GAAe,IAAA;AAAA,IACf,QAAA;AAAA,IACA,eAAA;AAAA,IACA,gBAAA;AAAA,IACA,MAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA,KAAA;AAAA,IACA,KAAA,GAAQ,KAAA;AAAA,IACR;AAAA,KAEF,GAAA,KACG;AACH,IAAA,MAAM,YAAA,GAAeC,aAAuB,IAAI,CAAA;AAChD,IAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAIC,eAAyC,SAAS,CAAA;AAG9E,IAAA,MAAM,eAAe,QAAA,KAAa,MAAA;AAClC,IAAA,MAAM,CAAC,QAAA,EAAU,WAAW,CAAA,GAAIA,cAAA;AAAA,MAC9B,eAAA,IAAmB;AAAA,KACrB;AACA,IAAA,MAAM,OAAA,GAAU,eAAe,QAAA,GAAY,QAAA;AAC3C,IAAA,MAAM,UAAA,GAAaD,aAAO,OAAO,CAAA;AACjC,IAAA,UAAA,CAAW,OAAA,GAAU,OAAA;AAErB,IAAA,MAAM,WAAA,GAAcE,iBAAA;AAAA,MAClB,CACE,IAAA,KAGG;AACH,QAAA,MAAM,WACJ,OAAO,IAAA,KAAS,aAAa,IAAA,CAAK,UAAA,CAAW,OAAO,CAAA,GAAI,IAAA;AAC1D,QAAA,IAAI,CAAC,YAAA,EAAc,WAAA,CAAY,QAAQ,CAAA;AACvC,QAAA,gBAAA,GAAmB,QAAQ,CAAA;AAAA,MAC7B,CAAA;AAAA,MACA,CAAC,cAAc,gBAAgB;AAAA,KACjC;AAEA,IAAA,MAAM,cAAc,MAAA,KAAW,QAAA;AAC/B,IAAA,MAAM,EAAE,cAAA,EAAgB,SAAA,EAAU,GAAIC,4BAAA,CAAW;AAAA,MAC/C,QAAA,EAAU,OAAA;AAAA,MACV,WAAA;AAAA,MACA,OAAA;AAAA,MACA,OAAA;AAAA,MACA,UAAU,QAAA,IAAY,WAAA;AAAA,MACtB,UAAU,QAAA,IAAY,WAAA;AAAA,MACtB;AAAA,KACD,CAAA;AAGD,IAAA,MAAM,MAAA,GAASD,iBAAA;AAAA,MACb,CAAC,MAAA,KAAmB;AAClB,QAAA,MAAM,KAAK,YAAA,CAAa,OAAA;AACxB,QAAA,IAAI,CAAC,EAAA,EAAI;AACT,QAAA,MAAM,IAAA,GAAO,GAAG,qBAAA,EAAsB;AACtC,QAAA,MAAM,EAAA,GAAK,KAAK,KAAA,GAAQ,CAAA;AACxB,QAAA,MAAM,EAAA,GAAK,KAAK,MAAA,GAAS,CAAA;AACzB,QAAA,WAAA,CAAY,CAAC,IAAA,KAAS;AACpB,UAAA,MAAM,UAAU,KAAA,CAAM,IAAA,CAAK,IAAA,GAAO,MAAA,EAAQ,SAAS,OAAO,CAAA;AAC1D,UAAA,MAAM,KAAA,GAAQ,UAAU,IAAA,CAAK,IAAA;AAC7B,UAAA,OAAO;AAAA,YACL,IAAA,EAAM,OAAA;AAAA,YACN,IAAA,EAAM,EAAA,GAAA,CAAM,EAAA,GAAK,IAAA,CAAK,IAAA,IAAQ,KAAA;AAAA,YAC9B,IAAA,EAAM,EAAA,GAAA,CAAM,EAAA,GAAK,IAAA,CAAK,IAAA,IAAQ;AAAA,WAChC;AAAA,QACF,CAAC,CAAA;AAAA,MACH,CAAA;AAAA,MACA,CAAC,WAAA,EAAa,OAAA,EAAS,OAAO;AAAA,KAChC;AAEA,IAAA,MAAM,KAAA,GAAQA,kBAAY,MAAM,WAAA,CAAY,gBAAgB,CAAA,EAAG,CAAC,WAAW,CAAC,CAAA;AAE5E,IAAA,MAAM,YAAA,GAAe,CAAC,KAAA,KAAU,QAAA,IAAY,QAAA,CAAA,IAAa,WAAA;AACzD,IAAA,MAAM,SAAA,GAAY,aAAa,OAAA,CAAQ,IAAI,OAAO,OAAA,CAAQ,IAAI,CAAA,UAAA,EAAa,OAAA,CAAQ,IAAI,CAAA,CAAA,CAAA;AAEvF,IAAA,MAAM,MAAA,mBACJE,eAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,GAAA;AAAA,QACA,+BAAA,EAA8B,EAAA;AAAA,QAC9B,SAAA,EAAWC,oBAAA;AAAA,UACT,yDAAA;AAAA;AAAA,UAEA,KAAA,IAAS,4BAAA;AAAA,UACT,eACI,oBAAA,GACA,8BAAA;AAAA,UACJ;AAAA,SACF;AAAA,QACA,KAAA;AAAA,QAEA,QAAA,EAAA;AAAA,0BAAAC,cAAA;AAAA,YAAC,KAAA;AAAA,YAAA;AAAA,cACC,GAAA,EAAK,YAAA;AAAA,cACL,gBAAA,EAAe,EAAA;AAAA,cACf,SAAA,EAAWD,oBAAA;AAAA,gBACT,mDAAA;AAAA,gBACA,SAAA,GACI,iBAAA,GACA,QAAA,IAAY,WAAA,GACV,aAAA,GACA;AAAA,eACR;AAAA,cACA,KAAA,EACE;AAAA,gBACE,SAAA;AAAA,gBACA,eAAA,EAAiB,KAAA;AAAA,gBACjB,UAAA,EAAY,WAAA;AAAA,gBACZ,WAAA,EAAa,QAAA,IAAY,QAAA,GAAW,MAAA,GAAS;AAAA,eAC/C;AAAA,cAEF,aAAA,EAAe,WAAW,KAAA,GAAQ,MAAA;AAAA,cACjC,GAAG,cAAA;AAAA,cAEJ,QAAA,kBAAAC,cAAA;AAAA,gBAAC,KAAA;AAAA,gBAAA;AAAA,kBACC,GAAA;AAAA,kBACA,GAAA;AAAA,kBACA,SAAA,EAAW,KAAA;AAAA,kBACX,QAAQ,MAAM;AACZ,oBAAA,SAAA,CAAU,QAAQ,CAAA;AAClB,oBAAA,MAAA,IAAS;AAAA,kBACX,CAAA;AAAA,kBACA,SAAS,MAAM;AACb,oBAAA,SAAA,CAAU,OAAO,CAAA;AACjB,oBAAA,OAAA,IAAU;AAAA,kBACZ,CAAA;AAAA,kBACA,SAAA,EAAWD,oBAAA;AAAA,oBACT,2BAAA;AAAA,oBACA,WAAW,OAAA,IAAW,QAAA;AAAA,oBACtB,WAAW,GAAG;AAAA;AAChB;AAAA;AACF;AAAA,WACF;AAAA,UAEC,WAAW,OAAA,oBACVD,eAAA;AAAA,YAAC,KAAA;AAAA,YAAA;AAAA,cACC,qCAAA,EAAoC,EAAA;AAAA,cACpC,SAAA,EAAU,2HAAA;AAAA,cAEV,QAAA,EAAA;AAAA,gCAAAE,cAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,aAAA,EAAc,QAAA,EAAA,qBAAA,EAAwB,CAAA;AAAA,gCACtDA,cAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,wCAAA,EAA0C,iBAAO,GAAA,EAAI;AAAA;AAAA;AAAA,WACvE;AAAA,UAGD,YAAA,oBACCF,eAAA;AAAA,YAAC,KAAA;AAAA,YAAA;AAAA,cACC,wCAAA,EAAuC,EAAA;AAAA,cACvC,SAAA,EAAU,2MAAA;AAAA,cAEV,QAAA,EAAA;AAAA,gCAAAE,cAAA;AAAA,kBAAC,QAAA;AAAA,kBAAA;AAAA,oBACC,IAAA,EAAK,QAAA;AAAA,oBACL,YAAA,EAAW,UAAA;AAAA,oBACX,OAAA,EAAS,MAAM,MAAA,CAAO,CAAA,GAAI,IAAI,CAAA;AAAA,oBAC9B,SAAA,EAAU,kHAAA;AAAA,oBACX,QAAA,EAAA;AAAA;AAAA,iBAED;AAAA,gCACAF,eAAA;AAAA,kBAAC,QAAA;AAAA,kBAAA;AAAA,oBACC,IAAA,EAAK,QAAA;AAAA,oBACL,YAAA,EAAW,YAAA;AAAA,oBACX,OAAA,EAAS,KAAA;AAAA,oBACT,SAAA,EAAU,qGAAA;AAAA,oBAET,QAAA,EAAA;AAAA,sBAAA,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,IAAA,GAAO,GAAG,CAAA;AAAA,sBAAE;AAAA;AAAA;AAAA,iBAClC;AAAA,gCACAE,cAAA;AAAA,kBAAC,QAAA;AAAA,kBAAA;AAAA,oBACC,IAAA,EAAK,QAAA;AAAA,oBACL,YAAA,EAAW,SAAA;AAAA,oBACX,OAAA,EAAS,MAAM,MAAA,CAAO,IAAI,CAAA;AAAA,oBAC1B,SAAA,EAAU,kHAAA;AAAA,oBACX,QAAA,EAAA;AAAA;AAAA;AAED;AAAA;AAAA;AACF;AAAA;AAAA,KAEJ;AAGF,IAAA,IAAI,CAAC,OAAO,OAAO,MAAA;AAInB,IAAA,uBACEA,cAAA;AAAA,MAACC,4BAAA;AAAA,MAAA;AAAA,QACC,OAAA,EAAQ,QAAA;AAAA,QACR,QAAA,EAAQ,IAAA;AAAA,QACR,IAAA,EAAI,IAAA;AAAA,QACJ,SAAA,EAAW,KAAA;AAAA,QACX,MAAM,OAAA,CAAQ,IAAA;AAAA,QACd,YAAA,EAAc,CAAC,CAAA,KAAO,CAAA,KAAM,CAAA,GAAI,OAAM,GAAI,MAAA,CAAO,CAAA,GAAI,OAAA,CAAQ,IAAI,CAAA;AAAA,QACjE,OAAA;AAAA,QACA,OAAA;AAAA,QACC,GAAG,UAAA;AAAA,QAEH,QAAA,EAAA;AAAA;AAAA,KACH;AAAA,EAEJ;AACF;AAEA,WAAA,CAAY,WAAA,GAAc,aAAA","file":"chunk-2KZINS6D.cjs","sourcesContent":["import { FauxClient } from \"../FauxClient\";\nimport {\n  forwardRef,\n  useCallback,\n  useRef,\n  useState,\n  type CSSProperties,\n} from \"react\";\nimport { cn } from \"../../utils/cn\";\nimport { usePanZoom } from \"../../hooks/use-pan-zoom\";\nimport type { ImageViewerProps, ImageViewerViewport } from \"./ImageViewer.types\";\n\nconst DEFAULT_VIEWPORT: ImageViewerViewport = { panX: 0, panY: 0, zoom: 1 };\n\nconst fitClasses: Record<NonNullable<ImageViewerProps[\"fit\"]>, string> = {\n  contain: \"h-full w-full object-contain\",\n  cover: \"h-full w-full object-cover\",\n  none: \"max-w-none object-none\",\n};\n\nfunction clamp(n: number, min: number, max: number): number {\n  return Math.min(max, Math.max(min, n));\n}\n\n/**\n * A standalone image viewer: fits the image to its container, with optional\n * Ctrl/⌘+wheel zoom, click-drag panning, and a transparency checkerboard. Works\n * anywhere on its own and is also what `<MediaViewer>` renders for images.\n *\n * The pan/zoom viewport is controllable (`viewport` + `onViewportChange`) so an\n * agent bridge can drive it; it's uncontrolled by default.\n *\n * ```tsx\n * <ImageViewer src=\"/logo.png\" alt=\"logo.png\" style={{ height: 320 }} />\n * ```\n */\nexport const ImageViewer = forwardRef<HTMLDivElement, ImageViewerProps>(\n  (\n    {\n      src,\n      alt = \"\",\n      fit = \"contain\",\n      zoomable = true,\n      pannable = true,\n      controls,\n      minZoom = 0.25,\n      maxZoom = 8,\n      checkerboard = true,\n      viewport,\n      defaultViewport,\n      onViewportChange,\n      onLoad,\n      onError,\n      className,\n      style,\n      frame = false,\n      frameProps,\n    },\n    ref,\n  ) => {\n    const containerRef = useRef<HTMLDivElement>(null);\n    const [status, setStatus] = useState<\"loading\" | \"loaded\" | \"error\">(\"loading\");\n\n    // Controllable viewport supporting functional updates (usePanZoom needs them).\n    const isControlled = viewport !== undefined;\n    const [internal, setInternal] = useState<ImageViewerViewport>(\n      defaultViewport ?? DEFAULT_VIEWPORT,\n    );\n    const current = isControlled ? viewport! : internal;\n    const currentRef = useRef(current);\n    currentRef.current = current;\n\n    const setViewport = useCallback(\n      (\n        next:\n          | ImageViewerViewport\n          | ((prev: ImageViewerViewport) => ImageViewerViewport),\n      ) => {\n        const resolved =\n          typeof next === \"function\" ? next(currentRef.current) : next;\n        if (!isControlled) setInternal(resolved);\n        onViewportChange?.(resolved);\n      },\n      [isControlled, onViewportChange],\n    );\n\n    const interactive = status === \"loaded\";\n    const { containerProps, isPanning } = usePanZoom({\n      viewport: current,\n      setViewport,\n      minZoom,\n      maxZoom,\n      pannable: pannable && interactive,\n      zoomable: zoomable && interactive,\n      containerRef,\n    });\n\n    // Zoom about the container centre — used by the +/− buttons.\n    const zoomBy = useCallback(\n      (factor: number) => {\n        const el = containerRef.current;\n        if (!el) return;\n        const rect = el.getBoundingClientRect();\n        const cx = rect.width / 2;\n        const cy = rect.height / 2;\n        setViewport((prev) => {\n          const newZoom = clamp(prev.zoom * factor, minZoom, maxZoom);\n          const ratio = newZoom / prev.zoom;\n          return {\n            zoom: newZoom,\n            panX: cx - (cx - prev.panX) * ratio,\n            panY: cy - (cy - prev.panY) * ratio,\n          };\n        });\n      },\n      [setViewport, minZoom, maxZoom],\n    );\n\n    const reset = useCallback(() => setViewport(DEFAULT_VIEWPORT), [setViewport]);\n\n    const showControls = !frame && (controls ?? zoomable) && interactive;\n    const transform = `translate(${current.panX}px, ${current.panY}px) scale(${current.zoom})`;\n\n    const viewer = (\n      <div\n        ref={ref}\n        data-react-fancy-image-viewer=\"\"\n        className={cn(\n          \"relative isolate overflow-hidden rounded-md select-none\",\n          // In the frame it fills the frame's body; standalone, the caller sizes it.\n          frame && \"h-full w-full rounded-none\",\n          checkerboard\n            ? \"fancy-checkerboard\"\n            : \"bg-zinc-100 dark:bg-zinc-900\",\n          className,\n        )}\n        style={style}\n      >\n        <div\n          ref={containerRef}\n          data-canvas-bg=\"\"\n          className={cn(\n            \"absolute inset-0 flex items-center justify-center\",\n            isPanning\n              ? \"cursor-grabbing\"\n              : pannable && interactive\n                ? \"cursor-grab\"\n                : \"\",\n          )}\n          style={\n            {\n              transform,\n              transformOrigin: \"0 0\",\n              willChange: \"transform\",\n              touchAction: zoomable || pannable ? \"none\" : undefined,\n            } as CSSProperties\n          }\n          onDoubleClick={zoomable ? reset : undefined}\n          {...containerProps}\n        >\n          <img\n            src={src}\n            alt={alt}\n            draggable={false}\n            onLoad={() => {\n              setStatus(\"loaded\");\n              onLoad?.();\n            }}\n            onError={() => {\n              setStatus(\"error\");\n              onError?.();\n            }}\n            className={cn(\n              \"pointer-events-none block\",\n              status === \"error\" && \"hidden\",\n              fitClasses[fit],\n            )}\n          />\n        </div>\n\n        {status === \"error\" && (\n          <div\n            data-react-fancy-image-viewer-error=\"\"\n            className=\"absolute inset-0 flex flex-col items-center justify-center gap-1 p-4 text-center text-sm text-zinc-500 dark:text-zinc-400\"\n          >\n            <span className=\"font-medium\">Couldn&apos;t load image</span>\n            <span className=\"max-w-full truncate text-xs opacity-70\">{alt || src}</span>\n          </div>\n        )}\n\n        {showControls && (\n          <div\n            data-react-fancy-image-viewer-controls=\"\"\n            className=\"absolute bottom-2 right-2 flex items-center gap-0.5 rounded-md border border-zinc-200 bg-white/90 p-0.5 text-zinc-700 shadow-sm backdrop-blur dark:border-zinc-700 dark:bg-zinc-900/90 dark:text-zinc-200\"\n          >\n            <button\n              type=\"button\"\n              aria-label=\"Zoom out\"\n              onClick={() => zoomBy(1 / 1.25)}\n              className=\"flex h-6 w-6 items-center justify-center rounded text-base leading-none hover:bg-zinc-100 dark:hover:bg-zinc-800\"\n            >\n              −\n            </button>\n            <button\n              type=\"button\"\n              aria-label=\"Reset zoom\"\n              onClick={reset}\n              className=\"min-w-[3rem] rounded px-1 text-center text-xs tabular-nums hover:bg-zinc-100 dark:hover:bg-zinc-800\"\n            >\n              {Math.round(current.zoom * 100)}%\n            </button>\n            <button\n              type=\"button\"\n              aria-label=\"Zoom in\"\n              onClick={() => zoomBy(1.25)}\n              className=\"flex h-6 w-6 items-center justify-center rounded text-base leading-none hover:bg-zinc-100 dark:hover:bg-zinc-800\"\n            >\n              +\n            </button>\n          </div>\n        )}\n      </div>\n    );\n\n    if (!frame) return viewer;\n\n    // The frame's bar drives the image's own zoom (about the centre), and the\n    // image's boxed bar steps aside: one set of controls, revealed on hover.\n    return (\n      <FauxClient\n        variant=\"device\"\n        controls\n        fill\n        applyZoom={false}\n        zoom={current.zoom}\n        onZoomChange={(z) => (z === 1 ? reset() : zoomBy(z / current.zoom))}\n        minZoom={minZoom}\n        maxZoom={maxZoom}\n        {...frameProps}\n      >\n        {viewer}\n      </FauxClient>\n    );\n  },\n);\n\nImageViewer.displayName = \"ImageViewer\";\n"]}

package/dist/chunk-6TBRBN7H.js

@@ -0,0 +1,212 @@
+// src/utils/sanitize.ts
+var DANGEROUS_TAGS = /* @__PURE__ */ new Set([
+  "script",
+  "style",
+  "iframe",
+  "object",
+  "embed",
+  "link",
+  "meta",
+  "base",
+  "form",
+  // A <title> anywhere in the document retitles the host's tab.
+  "title"
+]);
+var URL_ATTRS = /* @__PURE__ */ new Set(["href", "src", "action", "formaction", "xlink:href"]);
+var SAFE_PROTOCOL = /^(?:https?:|mailto:|tel:|sms:|ftp:|#|\/|\.\/|\.\.\/|[^:]*$)/i;
+function sanitizeHref(href) {
+  if (href == null) return void 0;
+  const trimmed = href.trim();
+  if (!trimmed) return void 0;
+  return SAFE_PROTOCOL.test(trimmed) ? trimmed : void 0;
+}
+function stripDangerousAttrs(el) {
+  const names = [];
+  for (let i = 0; i < el.attributes.length; i++) {
+    names.push(el.attributes[i].name);
+  }
+  for (const name of names) {
+    const lower = name.toLowerCase();
+    if (lower.startsWith("on")) {
+      el.removeAttribute(name);
+      continue;
+    }
+    if (URL_ATTRS.has(lower)) {
+      const sanitized = sanitizeHref(el.getAttribute(name));
+      if (sanitized === void 0) {
+        el.removeAttribute(name);
+      } else {
+        el.setAttribute(name, sanitized);
+      }
+      continue;
+    }
+    if (lower === "srcdoc") {
+      el.removeAttribute(name);
+    }
+  }
+}
+function walk(el, removeQueue) {
+  const tag = el.tagName.toLowerCase();
+  if (DANGEROUS_TAGS.has(tag)) {
+    removeQueue.push(el);
+    return;
+  }
+  stripDangerousAttrs(el);
+  const children = Array.from(el.children);
+  for (const child of children) {
+    walk(child, removeQueue);
+  }
+}
+var ALWAYS_REMOVED_TAGS = /* @__PURE__ */ new Set([
+  ...DANGEROUS_TAGS,
+  "frame",
+  "frameset",
+  "applet",
+  "template",
+  "noscript",
+  "noembed",
+  "noframes",
+  "xmp",
+  "plaintext",
+  // Foreign content: namespace confusion is how mutation XSS gets past
+  // sanitisers that re-serialise, as this one does.
+  "svg",
+  "math"
+]);
+var ALLOWLIST_URL_ATTRS = /* @__PURE__ */ new Set([
+  "href",
+  "src",
+  "action",
+  "formaction",
+  "cite",
+  "poster",
+  "background",
+  "ping",
+  "xlink:href"
+]);
+var NEVER_ALLOWED_ATTRS = /* @__PURE__ */ new Set(["srcdoc", "srcset"]);
+var NEVER_ALLOWED_SCHEMES = /* @__PURE__ */ new Set(["javascript:", "vbscript:"]);
+var DEFAULT_SCHEMES = ["http:", "https:", "mailto:"];
+var SCHEME = /^([a-z][a-z0-9+.-]*:)/i;
+var SLASH = 47;
+var BACKSLASH = 92;
+function lowerAll(list) {
+  return (list ?? []).map((s) => s.toLowerCase());
+}
+function toPolicy(options) {
+  const tagAttrs = /* @__PURE__ */ new Map();
+  let globalAttrs = [];
+  const attrs = options.allowedAttributes;
+  if (Array.isArray(attrs)) {
+    globalAttrs = lowerAll(attrs);
+  } else if (attrs) {
+    for (const [tag, list] of Object.entries(attrs)) {
+      if (tag === "*") globalAttrs = lowerAll(list);
+      else tagAttrs.set(tag.toLowerCase(), lowerAll(list));
+    }
+  }
+  return {
+    tags: new Set(lowerAll(options.allowedTags)),
+    globalAttrs,
+    tagAttrs,
+    schemes: new Set(lowerAll(options.allowedSchemes ?? DEFAULT_SCHEMES)),
+    allowRelative: options.allowRelative === true
+  };
+}
+function attrListed(name, list) {
+  if (!list) return false;
+  for (const entry of list) {
+    if (entry === name) return true;
+    if (entry.endsWith("*") && name.startsWith(entry.slice(0, -1))) return true;
+  }
+  return false;
+}
+function stripControlAndSpace(value) {
+  let out = "";
+  for (let i = 0; i < value.length; i++) {
+    if (value.charCodeAt(i) > 32) out += value[i];
+  }
+  return out;
+}
+function urlAllowed(value, policy) {
+  const url = stripControlAndSpace(value);
+  const match = SCHEME.exec(url);
+  if (match) {
+    const scheme = match[1].toLowerCase();
+    return !NEVER_ALLOWED_SCHEMES.has(scheme) && policy.schemes.has(scheme);
+  }
+  if (!policy.allowRelative) return false;
+  const a = url.charCodeAt(0);
+  const b = url.charCodeAt(1);
+  const isSlash = (c) => c === SLASH || c === BACKSLASH;
+  return !(isSlash(a) && isSlash(b));
+}
+function cleanAttributes(el, tag, policy) {
+  const names = [];
+  for (let i = 0; i < el.attributes.length; i++) {
+    names.push(el.attributes[i].name);
+  }
+  for (const name of names) {
+    const lower = name.toLowerCase();
+    const keep = !lower.startsWith("on") && !NEVER_ALLOWED_ATTRS.has(lower) && (attrListed(lower, policy.globalAttrs) || attrListed(lower, policy.tagAttrs.get(tag))) && (!ALLOWLIST_URL_ATTRS.has(lower) || urlAllowed(el.getAttribute(name) ?? "", policy));
+    if (!keep) el.removeAttribute(name);
+  }
+}
+function cleanChildren(parent, policy) {
+  for (const node of Array.from(parent.childNodes)) {
+    if (node.nodeType === 3) continue;
+    if (node.nodeType !== 1) {
+      parent.removeChild(node);
+      continue;
+    }
+    const el = node;
+    const tag = el.tagName.toLowerCase();
+    if (ALWAYS_REMOVED_TAGS.has(tag)) {
+      parent.removeChild(el);
+      continue;
+    }
+    cleanChildren(el, policy);
+    if (!policy.tags.has(tag)) {
+      while (el.firstChild) parent.insertBefore(el.firstChild, el);
+      parent.removeChild(el);
+      continue;
+    }
+    cleanAttributes(el, tag, policy);
+  }
+}
+function escapeText(text) {
+  return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function sanitizeAllowlist(html, options) {
+  if (typeof window === "undefined" || typeof DOMParser === "undefined") {
+    return escapeText(html);
+  }
+  const doc = new DOMParser().parseFromString(`<body>${html}</body>`, "text/html");
+  const body = doc.body;
+  if (!body) return "";
+  cleanChildren(body, toPolicy(options));
+  return body.innerHTML;
+}
+function sanitizeHtml(html, options) {
+  if (options !== void 0 && options !== null) {
+    return sanitizeAllowlist(html, options);
+  }
+  if (typeof window === "undefined" || typeof DOMParser === "undefined") {
+    return html;
+  }
+  const doc = new DOMParser().parseFromString(`<body>${html}</body>`, "text/html");
+  const body = doc.body;
+  if (!body) return html;
+  const removeQueue = [];
+  for (const child of Array.from(body.children)) {
+    walk(child, removeQueue);
+  }
+  for (const el of removeQueue) {
+    el.parentNode?.removeChild(el);
+  }
+  return body.innerHTML;
+}
+
+export { sanitizeHref, sanitizeHtml };
+//# sourceMappingURL=chunk-6TBRBN7H.js.map
+//# sourceMappingURL=chunk-6TBRBN7H.js.map

package/dist/chunk-6TBRBN7H.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/sanitize.ts"],"names":[],"mappings":";AAaA,IAAM,cAAA,uBAAqB,GAAA,CAAI;AAAA,EAC7B,QAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA;AAAA,EAEA;AACF,CAAC,CAAA;AAED,IAAM,SAAA,uBAAgB,GAAA,CAAI,CAAC,QAAQ,KAAA,EAAO,QAAA,EAAU,YAAA,EAAc,YAAY,CAAC,CAAA;AAE/E,IAAM,aAAA,GAAgB,8DAAA;AAQf,SAAS,aAAa,IAAA,EAAqD;AAChF,EAAA,IAAI,IAAA,IAAQ,MAAM,OAAO,MAAA;AACzB,EAAA,MAAM,OAAA,GAAU,KAAK,IAAA,EAAK;AAC1B,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,OAAO,aAAA,CAAc,IAAA,CAAK,OAAO,CAAA,GAAI,OAAA,GAAU,MAAA;AACjD;AAEA,SAAS,oBAAoB,EAAA,EAAmB;AAE9C,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,EAAA,CAAG,UAAA,CAAW,QAAQ,CAAA,EAAA,EAAK;AAC7C,IAAA,KAAA,CAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,CAAC,EAAE,IAAI,CAAA;AAAA,EAClC;AAEA,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,KAAA,GAAQ,KAAK,WAAA,EAAY;AAG/B,IAAA,IAAI,KAAA,CAAM,UAAA,CAAW,IAAI,CAAA,EAAG;AAC1B,MAAA,EAAA,CAAG,gBAAgB,IAAI,CAAA;AACvB,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,SAAA,CAAU,GAAA,CAAI,KAAK,CAAA,EAAG;AACxB,MAAA,MAAM,SAAA,GAAY,YAAA,CAAa,EAAA,CAAG,YAAA,CAAa,IAAI,CAAC,CAAA;AACpD,MAAA,IAAI,cAAc,MAAA,EAAW;AAC3B,QAAA,EAAA,CAAG,gBAAgB,IAAI,CAAA;AAAA,MACzB,CAAA,MAAO;AACL,QAAA,EAAA,CAAG,YAAA,CAAa,MAAM,SAAS,CAAA;AAAA,MACjC;AACA,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,UAAU,QAAA,EAAU;AACtB,MAAA,EAAA,CAAG,gBAAgB,IAAI,CAAA;AAAA,IACzB;AAAA,EACF;AACF;AAEA,SAAS,IAAA,CAAK,IAAa,WAAA,EAA8B;AACvD,EAAA,MAAM,GAAA,GAAM,EAAA,CAAG,OAAA,CAAQ,WAAA,EAAY;AAEnC,EAAA,IAAI,cAAA,CAAe,GAAA,CAAI,GAAG,CAAA,EAAG;AAC3B,IAAA,WAAA,CAAY,KAAK,EAAE,CAAA;AACnB,IAAA;AAAA,EACF;AAEA,EAAA,mBAAA,CAAoB,EAAE,CAAA;AAEtB,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,EAAA,CAAG,QAAQ,CAAA;AACvC,EAAA,KAAA,MAAW,SAAS,QAAA,EAAU;AAC5B,IAAA,IAAA,CAAK,OAAO,WAAW,CAAA;AAAA,EACzB;AACF;AAgDA,IAAM,mBAAA,uBAA0B,GAAA,CAAI;AAAA,EAClC,GAAG,cAAA;AAAA,EACH,OAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,KAAA;AAAA,EACA,WAAA;AAAA;AAAA;AAAA,EAGA,KAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,IAAM,mBAAA,uBAA0B,GAAA,CAAI;AAAA,EAClC,MAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA;AAAA,EACA,YAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,YAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,IAAM,sCAAsB,IAAI,GAAA,CAAI,CAAC,QAAA,EAAU,QAAQ,CAAC,CAAA;AAExD,IAAM,wCAAwB,IAAI,GAAA,CAAI,CAAC,aAAA,EAAe,WAAW,CAAC,CAAA;AAElE,IAAM,eAAA,GAAkB,CAAC,OAAA,EAAS,QAAA,EAAU,SAAS,CAAA;AAErD,IAAM,MAAA,GAAS,wBAAA;AAEf,IAAM,KAAA,GAAQ,EAAA;AACd,IAAM,SAAA,GAAY,EAAA;AAUlB,SAAS,SAAS,IAAA,EAA+C;AAC/D,EAAA,OAAA,CAAQ,IAAA,IAAQ,EAAC,EAAG,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,CAAA;AAChD;AAEA,SAAS,SAAS,OAAA,EAAsC;AACtD,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAsB;AAC3C,EAAA,IAAI,cAAwB,EAAC;AAC7B,EAAA,MAAM,QAAQ,OAAA,CAAQ,iBAAA;AACtB,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,WAAA,GAAc,SAAS,KAAK,CAAA;AAAA,EAC9B,WAAW,KAAA,EAAO;AAChB,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,IAAI,KAAK,MAAA,CAAO,OAAA,CAAQ,KAA0C,CAAA,EAAG;AACpF,MAAA,IAAI,GAAA,KAAQ,GAAA,EAAK,WAAA,GAAc,QAAA,CAAS,IAAI,CAAA;AAAA,oBAC9B,GAAA,CAAI,GAAA,CAAI,aAAY,EAAG,QAAA,CAAS,IAAI,CAAC,CAAA;AAAA,IACrD;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,MAAM,IAAI,GAAA,CAAI,QAAA,CAAS,OAAA,CAAQ,WAAW,CAAC,CAAA;AAAA,IAC3C,WAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAS,IAAI,GAAA,CAAI,SAAS,OAAA,CAAQ,cAAA,IAAkB,eAAe,CAAC,CAAA;AAAA,IACpE,aAAA,EAAe,QAAQ,aAAA,KAAkB;AAAA,GAC3C;AACF;AAEA,SAAS,UAAA,CAAW,MAAc,IAAA,EAAqC;AACrE,EAAA,IAAI,CAAC,MAAM,OAAO,KAAA;AAClB,EAAA,KAAA,MAAW,SAAS,IAAA,EAAM;AACxB,IAAA,IAAI,KAAA,KAAU,MAAM,OAAO,IAAA;AAC3B,IAAA,IAAI,KAAA,CAAM,QAAA,CAAS,GAAG,CAAA,IAAK,IAAA,CAAK,UAAA,CAAW,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,EAAG,OAAO,IAAA;AAAA,EACzE;AACA,EAAA,OAAO,KAAA;AACT;AAMA,SAAS,qBAAqB,KAAA,EAAuB;AACnD,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,IAAA,IAAI,MAAM,UAAA,CAAW,CAAC,IAAI,EAAA,EAAI,GAAA,IAAO,MAAM,CAAC,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,UAAA,CAAW,OAAe,MAAA,EAAyB;AAC1D,EAAA,MAAM,GAAA,GAAM,qBAAqB,KAAK,CAAA;AACtC,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA;AAC7B,EAAA,IAAI,KAAA,EAAO;AACT,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,CAAC,CAAA,CAAE,WAAA,EAAY;AACpC,IAAA,OAAO,CAAC,sBAAsB,GAAA,CAAI,MAAM,KAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,MAAM,CAAA;AAAA,EACxE;AACA,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,EAAe,OAAO,KAAA;AAClC,EAAA,MAAM,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC1B,EAAA,MAAM,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC1B,EAAA,MAAM,OAAA,GAAU,CAAC,CAAA,KAAc,CAAA,KAAM,SAAS,CAAA,KAAM,SAAA;AAEpD,EAAA,OAAO,EAAE,OAAA,CAAQ,CAAC,CAAA,IAAK,QAAQ,CAAC,CAAA,CAAA;AAClC;AAEA,SAAS,eAAA,CAAgB,EAAA,EAAa,GAAA,EAAa,MAAA,EAAsB;AACvE,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,EAAA,CAAG,UAAA,CAAW,QAAQ,CAAA,EAAA,EAAK;AAC7C,IAAA,KAAA,CAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,CAAC,EAAE,IAAI,CAAA;AAAA,EAClC;AACA,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,KAAA,GAAQ,KAAK,WAAA,EAAY;AAC/B,IAAA,MAAM,IAAA,GACJ,CAAC,KAAA,CAAM,UAAA,CAAW,IAAI,CAAA,IACtB,CAAC,mBAAA,CAAoB,GAAA,CAAI,KAAK,CAAA,KAC7B,UAAA,CAAW,KAAA,EAAO,MAAA,CAAO,WAAW,CAAA,IAAK,UAAA,CAAW,KAAA,EAAO,MAAA,CAAO,SAAS,GAAA,CAAI,GAAG,CAAC,CAAA,CAAA,KACnF,CAAC,mBAAA,CAAoB,GAAA,CAAI,KAAK,CAAA,IAAK,WAAW,EAAA,CAAG,YAAA,CAAa,IAAI,CAAA,IAAK,IAAI,MAAM,CAAA,CAAA;AACpF,IAAA,IAAI,CAAC,IAAA,EAAM,EAAA,CAAG,eAAA,CAAgB,IAAI,CAAA;AAAA,EACpC;AACF;AAEA,SAAS,aAAA,CAAc,QAAc,MAAA,EAAsB;AACzD,EAAA,KAAA,MAAW,IAAA,IAAQ,KAAA,CAAM,IAAA,CAAK,MAAA,CAAO,UAAU,CAAA,EAAG;AAChD,IAAA,IAAI,IAAA,CAAK,aAAa,CAAA,EAAG;AACzB,IAAA,IAAI,IAAA,CAAK,aAAa,CAAA,EAAG;AAEvB,MAAA,MAAA,CAAO,YAAY,IAAI,CAAA;AACvB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,EAAA,GAAK,IAAA;AACX,IAAA,MAAM,GAAA,GAAM,EAAA,CAAG,OAAA,CAAQ,WAAA,EAAY;AACnC,IAAA,IAAI,mBAAA,CAAoB,GAAA,CAAI,GAAG,CAAA,EAAG;AAChC,MAAA,MAAA,CAAO,YAAY,EAAE,CAAA;AACrB,MAAA;AAAA,IACF;AACA,IAAA,aAAA,CAAc,IAAI,MAAM,CAAA;AACxB,IAAA,IAAI,CAAC,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,EAAG;AACzB,MAAA,OAAO,GAAG,UAAA,EAAY,MAAA,CAAO,YAAA,CAAa,EAAA,CAAG,YAAY,EAAE,CAAA;AAC3D,MAAA,MAAA,CAAO,YAAY,EAAE,CAAA;AACrB,MAAA;AAAA,IACF;AACA,IAAA,eAAA,CAAgB,EAAA,EAAI,KAAK,MAAM,CAAA;AAAA,EACjC;AACF;AAEA,SAAS,WAAW,IAAA,EAAsB;AACxC,EAAA,OAAO,KACJ,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA,CACrB,OAAA,CAAQ,MAAM,MAAM,CAAA,CACpB,QAAQ,IAAA,EAAM,MAAM,EACpB,OAAA,CAAQ,IAAA,EAAM,QAAQ,CAAA,CACtB,OAAA,CAAQ,MAAM,OAAO,CAAA;AAC1B;AAEA,SAAS,iBAAA,CAAkB,MAAc,OAAA,EAAsC;AAC7E,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,cAAc,WAAA,EAAa;AAGrE,IAAA,OAAO,WAAW,IAAI,CAAA;AAAA,EACxB;AACA,EAAA,MAAM,GAAA,GAAM,IAAI,SAAA,EAAU,CAAE,gBAAgB,CAAA,MAAA,EAAS,IAAI,WAAW,WAAW,CAAA;AAC/E,EAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,EAAA,IAAI,CAAC,MAAM,OAAO,EAAA;AAClB,EAAA,aAAA,CAAc,IAAA,EAAM,QAAA,CAAS,OAAO,CAAC,CAAA;AACrC,EAAA,OAAO,IAAA,CAAK,SAAA;AACd;AAmBO,SAAS,YAAA,CAAa,MAAc,OAAA,EAAuC;AAChF,EAAA,IAAI,OAAA,KAAY,MAAA,IAAa,OAAA,KAAY,IAAA,EAAM;AAC7C,IAAA,OAAO,iBAAA,CAAkB,MAAM,OAAO,CAAA;AAAA,EACxC;AACA,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,cAAc,WAAA,EAAa;AACrE,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,GAAA,GAAM,IAAI,SAAA,EAAU,CAAE,gBAAgB,CAAA,MAAA,EAAS,IAAI,WAAW,WAAW,CAAA;AAC/E,EAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,EAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,EAAA,MAAM,cAAyB,EAAC;AAChC,EAAA,KAAA,MAAW,KAAA,IAAS,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC7C,IAAA,IAAA,CAAK,OAAO,WAAW,CAAA;AAAA,EACzB;AAEA,EAAA,KAAA,MAAW,MAAM,WAAA,EAAa;AAC5B,IAAA,EAAA,CAAG,UAAA,EAAY,YAAY,EAAE,CAAA;AAAA,EAC/B;AAEA,EAAA,OAAO,IAAA,CAAK,SAAA;AACd","file":"chunk-6TBRBN7H.js","sourcesContent":["/**\n * HTML and URL sanitization utilities.\n *\n * Hand-rolled (no third-party deps) using browser-native `DOMParser`. Designed\n * for the trust model \"consumer passes user-generated markdown/HTML to a\n * react-fancy component\" — strips script tags, event handlers, and dangerous\n * URI schemes from `href`/`src` attributes.\n *\n * For server-side rendering (no `window`), `sanitizeHtml` returns the input\n * unchanged. Consumers SSR-rendering untrusted content should sanitize on the\n * server with their own pipeline.\n */\n\nconst DANGEROUS_TAGS = new Set([\n  \"script\",\n  \"style\",\n  \"iframe\",\n  \"object\",\n  \"embed\",\n  \"link\",\n  \"meta\",\n  \"base\",\n  \"form\",\n  // A <title> anywhere in the document retitles the host's tab.\n  \"title\",\n]);\n\nconst URL_ATTRS = new Set([\"href\", \"src\", \"action\", \"formaction\", \"xlink:href\"]);\n\nconst SAFE_PROTOCOL = /^(?:https?:|mailto:|tel:|sms:|ftp:|#|\\/|\\.\\/|\\.\\.\\/|[^:]*$)/i;\n\n/**\n * Validate a URL/href against an allow-list of safe protocols. Returns the\n * input if safe, or `undefined` if it begins with a dangerous scheme like\n * `javascript:`, `data:`, or `vbscript:`. Relative URLs and fragment links\n * are allowed.\n */\nexport function sanitizeHref(href: string | undefined | null): string | undefined {\n  if (href == null) return undefined;\n  const trimmed = href.trim();\n  if (!trimmed) return undefined;\n  return SAFE_PROTOCOL.test(trimmed) ? trimmed : undefined;\n}\n\nfunction stripDangerousAttrs(el: Element): void {\n  // Collect names first; mutating during iteration is awkward with NamedNodeMap.\n  const names: string[] = [];\n  for (let i = 0; i < el.attributes.length; i++) {\n    names.push(el.attributes[i].name);\n  }\n\n  for (const name of names) {\n    const lower = name.toLowerCase();\n\n    // All on* event handlers\n    if (lower.startsWith(\"on\")) {\n      el.removeAttribute(name);\n      continue;\n    }\n\n    // URL attributes — protocol-filter\n    if (URL_ATTRS.has(lower)) {\n      const sanitized = sanitizeHref(el.getAttribute(name));\n      if (sanitized === undefined) {\n        el.removeAttribute(name);\n      } else {\n        el.setAttribute(name, sanitized);\n      }\n      continue;\n    }\n\n    // srcdoc executes JS in the iframe — drop wholesale\n    if (lower === \"srcdoc\") {\n      el.removeAttribute(name);\n    }\n  }\n}\n\nfunction walk(el: Element, removeQueue: Element[]): void {\n  const tag = el.tagName.toLowerCase();\n\n  if (DANGEROUS_TAGS.has(tag)) {\n    removeQueue.push(el);\n    return;\n  }\n\n  stripDangerousAttrs(el);\n\n  const children = Array.from(el.children);\n  for (const child of children) {\n    walk(child, removeQueue);\n  }\n}\n\n/**\n * Allowlist options for {@link sanitizeHtml}. Passing ANY options object\n * (even `{}`) switches from the default blocklist to allowlist mode, where\n * everything not listed is removed.\n */\nexport interface SanitizeHtmlOptions {\n  /**\n   * Tags to keep, e.g. `[\"p\", \"a\", \"strong\"]`. A tag that is not listed is\n   * removed but its text and (cleaned) children are kept. Default: none, so\n   * only text survives.\n   *\n   * Some tags are removed WITH their content even when listed, because no\n   * attribute filtering makes them safe: `script`, `style`, `iframe`, `frame`,\n   * `frameset`, `object`, `embed`, `applet`, `link`, `meta`, `base`, `form`,\n   * `title`, `template`, `noscript`, `noembed`, `noframes`, `xmp`,\n   * `plaintext`, `svg` and `math`.\n   */\n  allowedTags?: readonly string[];\n  /**\n   * Attributes to keep. Either one list for every allowed tag, or a map from\n   * tag name to its list, where the key `\"*\"` applies to every tag. A trailing\n   * `*` matches a prefix (`\"data-*\"`, `\"aria-*\"`). Default: none.\n   *\n   * Never kept, even when listed: event handlers (`on*`), `srcdoc` and\n   * `srcset`.\n   */\n  allowedAttributes?: readonly string[] | Readonly<Record<string, readonly string[]>>;\n  /**\n   * URL schemes allowed in URL attributes (`href`, `src`, `action`,\n   * `formaction`, `cite`, `poster`, `background`, `ping`, `xlink:href`), with\n   * the colon: `[\"https:\", \"mailto:\"]`. A URL attribute whose scheme is not\n   * listed is removed. Default: `[\"http:\", \"https:\", \"mailto:\"]`.\n   *\n   * `javascript:` and `vbscript:` are never kept, even when listed.\n   */\n  allowedSchemes?: readonly string[];\n  /**\n   * Keep URLs with no scheme that stay on this site: `/x`, `x/y`, `../x`,\n   * `?q`, `#frag`. Protocol-relative URLs (`//host/x`, and the backslash\n   * spellings a browser treats the same way) leave the site and are always\n   * removed. Default: `false`.\n   */\n  allowRelative?: boolean;\n}\n\n/** Removed with their content in allowlist mode, whatever the options say. */\nconst ALWAYS_REMOVED_TAGS = new Set([\n  ...DANGEROUS_TAGS,\n  \"frame\",\n  \"frameset\",\n  \"applet\",\n  \"template\",\n  \"noscript\",\n  \"noembed\",\n  \"noframes\",\n  \"xmp\",\n  \"plaintext\",\n  // Foreign content: namespace confusion is how mutation XSS gets past\n  // sanitisers that re-serialise, as this one does.\n  \"svg\",\n  \"math\",\n]);\n\nconst ALLOWLIST_URL_ATTRS = new Set([\n  \"href\",\n  \"src\",\n  \"action\",\n  \"formaction\",\n  \"cite\",\n  \"poster\",\n  \"background\",\n  \"ping\",\n  \"xlink:href\",\n]);\n\nconst NEVER_ALLOWED_ATTRS = new Set([\"srcdoc\", \"srcset\"]);\n\nconst NEVER_ALLOWED_SCHEMES = new Set([\"javascript:\", \"vbscript:\"]);\n\nconst DEFAULT_SCHEMES = [\"http:\", \"https:\", \"mailto:\"];\n\nconst SCHEME = /^([a-z][a-z0-9+.-]*:)/i;\n\nconst SLASH = 47;\nconst BACKSLASH = 92;\n\ninterface Policy {\n  tags: Set<string>;\n  globalAttrs: string[];\n  tagAttrs: Map<string, string[]>;\n  schemes: Set<string>;\n  allowRelative: boolean;\n}\n\nfunction lowerAll(list: readonly string[] | undefined): string[] {\n  return (list ?? []).map((s) => s.toLowerCase());\n}\n\nfunction toPolicy(options: SanitizeHtmlOptions): Policy {\n  const tagAttrs = new Map<string, string[]>();\n  let globalAttrs: string[] = [];\n  const attrs = options.allowedAttributes;\n  if (Array.isArray(attrs)) {\n    globalAttrs = lowerAll(attrs);\n  } else if (attrs) {\n    for (const [tag, list] of Object.entries(attrs as Record<string, readonly string[]>)) {\n      if (tag === \"*\") globalAttrs = lowerAll(list);\n      else tagAttrs.set(tag.toLowerCase(), lowerAll(list));\n    }\n  }\n  return {\n    tags: new Set(lowerAll(options.allowedTags)),\n    globalAttrs,\n    tagAttrs,\n    schemes: new Set(lowerAll(options.allowedSchemes ?? DEFAULT_SCHEMES)),\n    allowRelative: options.allowRelative === true,\n  };\n}\n\nfunction attrListed(name: string, list: string[] | undefined): boolean {\n  if (!list) return false;\n  for (const entry of list) {\n    if (entry === name) return true;\n    if (entry.endsWith(\"*\") && name.startsWith(entry.slice(0, -1))) return true;\n  }\n  return false;\n}\n\n/**\n * Browsers ignore ASCII whitespace and control characters inside a URL's\n * scheme (`java<TAB>script:` runs), so judge the URL with them removed.\n */\nfunction stripControlAndSpace(value: string): string {\n  let out = \"\";\n  for (let i = 0; i < value.length; i++) {\n    if (value.charCodeAt(i) > 32) out += value[i];\n  }\n  return out;\n}\n\nfunction urlAllowed(value: string, policy: Policy): boolean {\n  const url = stripControlAndSpace(value);\n  const match = SCHEME.exec(url);\n  if (match) {\n    const scheme = match[1].toLowerCase();\n    return !NEVER_ALLOWED_SCHEMES.has(scheme) && policy.schemes.has(scheme);\n  }\n  if (!policy.allowRelative) return false;\n  const a = url.charCodeAt(0);\n  const b = url.charCodeAt(1);\n  const isSlash = (c: number) => c === SLASH || c === BACKSLASH;\n  // `//host`, and its backslash spellings, is another site.\n  return !(isSlash(a) && isSlash(b));\n}\n\nfunction cleanAttributes(el: Element, tag: string, policy: Policy): void {\n  const names: string[] = [];\n  for (let i = 0; i < el.attributes.length; i++) {\n    names.push(el.attributes[i].name);\n  }\n  for (const name of names) {\n    const lower = name.toLowerCase();\n    const keep =\n      !lower.startsWith(\"on\") &&\n      !NEVER_ALLOWED_ATTRS.has(lower) &&\n      (attrListed(lower, policy.globalAttrs) || attrListed(lower, policy.tagAttrs.get(tag))) &&\n      (!ALLOWLIST_URL_ATTRS.has(lower) || urlAllowed(el.getAttribute(name) ?? \"\", policy));\n    if (!keep) el.removeAttribute(name);\n  }\n}\n\nfunction cleanChildren(parent: Node, policy: Policy): void {\n  for (const node of Array.from(parent.childNodes)) {\n    if (node.nodeType === 3) continue; // text\n    if (node.nodeType !== 1) {\n      // comments, processing instructions, CDATA\n      parent.removeChild(node);\n      continue;\n    }\n    const el = node as Element;\n    const tag = el.tagName.toLowerCase();\n    if (ALWAYS_REMOVED_TAGS.has(tag)) {\n      parent.removeChild(el);\n      continue;\n    }\n    cleanChildren(el, policy);\n    if (!policy.tags.has(tag)) {\n      while (el.firstChild) parent.insertBefore(el.firstChild, el);\n      parent.removeChild(el);\n      continue;\n    }\n    cleanAttributes(el, tag, policy);\n  }\n}\n\nfunction escapeText(text: string): string {\n  return text\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n}\n\nfunction sanitizeAllowlist(html: string, options: SanitizeHtmlOptions): string {\n  if (typeof window === \"undefined\" || typeof DOMParser === \"undefined\") {\n    // Fail closed: with no parser we cannot tell markup from text, so the\n    // whole input is returned as escaped text rather than passed through.\n    return escapeText(html);\n  }\n  const doc = new DOMParser().parseFromString(`<body>${html}</body>`, \"text/html\");\n  const body = doc.body;\n  if (!body) return \"\";\n  cleanChildren(body, toPolicy(options));\n  return body.innerHTML;\n}\n\n/**\n * Sanitize an HTML string.\n *\n * **With no options** (the default blocklist): removes dangerous tags (script,\n * iframe, etc.), event-handler attributes (`onclick`, `onerror`, ...), and\n * dangerous URI schemes in `href`/`src` attributes. Everything else is kept.\n * In non-browser environments returns the input unchanged — sanitize on the\n * server in those cases.\n *\n * **With options** (allowlist mode): keeps ONLY the listed tags, attributes and\n * URL schemes; see {@link SanitizeHtmlOptions}. The allowlist can only narrow:\n * event handlers, `javascript:` URLs and script-capable tags never survive,\n * even when listed. In non-browser environments the input is returned as\n * escaped text (fail closed).\n *\n * Uses the browser's `DOMParser`.\n */\nexport function sanitizeHtml(html: string, options?: SanitizeHtmlOptions): string {\n  if (options !== undefined && options !== null) {\n    return sanitizeAllowlist(html, options);\n  }\n  if (typeof window === \"undefined\" || typeof DOMParser === \"undefined\") {\n    return html;\n  }\n\n  const doc = new DOMParser().parseFromString(`<body>${html}</body>`, \"text/html\");\n  const body = doc.body;\n  if (!body) return html;\n\n  const removeQueue: Element[] = [];\n  for (const child of Array.from(body.children)) {\n    walk(child, removeQueue);\n  }\n\n  for (const el of removeQueue) {\n    el.parentNode?.removeChild(el);\n  }\n\n  return body.innerHTML;\n}\n"]}

package/dist/{chunk-VM5BNL4L.js → chunk-7MJ7VEKE.js}

@@ -7,7 +7,7 @@ import { DisplayValue } from './chunk-KKWNKBKR.js';
 import { resolveOption } from './chunk-GFYSELJF.js';
 import { ColorPicker } from './chunk-F2GAZZVS.js';
 import { Badge } from './chunk-6FCQD2KQ.js';
-import { Button } from './chunk-ZLYOMQ2J.js';
+import { Button } from './chunk-KODD54GT.js';
 import { Callout } from './chunk-ZXZJYVWP.js';
 import { Text } from './chunk-5RLP77KK.js';
 import { useInlineEdit } from './chunk-OL53XYHF.js';
@@ -1337,5 +1337,5 @@ function buildItems({
 }
 
 export { JSON_FIELD_TYPES, JsonEditor, applyJsonEdit, describeEdit, findJsonConflicts, getAtPath, inferType, parseKeyMap, parsePath, pathToString, resolveKeyRule, typeMatches };
-//# sourceMappingURL=chunk-VM5BNL4L.js.map
-//# sourceMappingURL=chunk-VM5BNL4L.js.map
+//# sourceMappingURL=chunk-7MJ7VEKE.js.map
+//# sourceMappingURL=chunk-7MJ7VEKE.js.map