@paydock/client-sdk 1.122.3-beta → 1.123.2-beta

package/bundles/index.mjs

@@ -497,10 +497,10 @@ function _superPropBase(t, o) {
   for (; !{}.hasOwnProperty.call(t, o) && null !== (t = _getPrototypeOf(t)););
   return t;
 }
-function _superPropGet(t, e, o, r) {
-  var p = _get(_getPrototypeOf(t.prototype ), e, o);
+function _superPropGet(t, o, e, r) {
+  var p = _get(_getPrototypeOf(t.prototype ), o, e);
   return "function" == typeof p ? function (t) {
-    return p.apply(o, t);
+    return p.apply(e, t);
   } : p;
 }
 function _toConsumableArray(r) {
@@ -863,46 +863,75 @@ var DEFAULT_ALIAS = {
   PAYDOCK: 'paydock.com',
   KOVENA: 'kovena.com'
 };
+// TODO @ingeniousraccoons we should take advantage of TypeScript mechanism for static environmentId checking and simplified runtime validation
+// TODO @ingeniousraccoons unify `environment.paydock.ts` and `environment.cba.ts` making them configuration driven
 var Env = /*#__PURE__*/function () {
   function Env(configs) {
     var defaultEnv = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_ENV;
     _classCallCheck(this, Env);
-    this.configs = configs;
+    this.environmentConfigurations = configs;
     this.setEnv(defaultEnv);
   }
   return _createClass(Env, [{
     key: "setEnv",
-    value: function setEnv(env, alias) {
-      if (!this.isValidMode(this.configs, env)) throw new Error("unknown env: ".concat(env));
-      this.env = env;
-      if (alias && !alias.match(REGEX_ALIAS)) throw new Error("invalid: ".concat(alias));
-      if (alias) this.alias = alias;else if (ADDITIONAL_ENV.indexOf(this.env) !== -1) this.alias = DEFAULT_ALIAS.KOVENA;else this.alias = DEFAULT_ALIAS.PAYDOCK;
+    value: function setEnv(environmentId, alias) {
+      this.validateAlias(alias);
+      this.validateEnvironmentId(environmentId);
+      this.environmentId = environmentId;
+      if (alias) {
+        this.alias = alias;
+      } else if (ADDITIONAL_ENV.includes(this.environmentId)) {
+        this.alias = DEFAULT_ALIAS.KOVENA;
+      } else {
+        this.alias = DEFAULT_ALIAS.PAYDOCK;
+      }
     }
   }, {
     key: "getEnv",
     value: function getEnv() {
-      return this.env;
+      return this.environmentId;
     }
   }, {
     key: "getConf",
     value: function getConf() {
-      for (var index in this.configs) {
-        if (!this.configs.hasOwnProperty(index)) continue;
-        if (this.configs[index].env === this.getEnv()) return {
-          url: this.configs[index].url.indexOf('localhost') !== -1 ? this.configs[index].url : this.configs[index].url + this.alias,
-          env: this.configs[index].env
-        };
+      for (var index in this.environmentConfigurations) {
+        if (!Object.hasOwn(this.environmentConfigurations, index)) {
+          continue;
+        }
+        if (this.environmentConfigurations[index].env === this.getEnv()) {
+          return {
+            url: this.environmentConfigurations[index].url.indexOf('localhost') !== -1 ? this.environmentConfigurations[index].url : this.environmentConfigurations[index].url + this.alias,
+            env: this.environmentConfigurations[index].env
+          };
+        }
       }
-      throw new Error('invalid env');
+      throw new Error('Env could not obtain configuration. Unknown environmentId.');
     }
   }, {
-    key: "isValidMode",
-    value: function isValidMode(configs, env) {
-      for (var index in configs) {
-        if (!configs.hasOwnProperty(index)) continue;
-        if (configs[index].env === env) return true;
+    key: "validateAlias",
+    value: function validateAlias(alias) {
+      if (typeof alias === 'undefined') {
+        return;
+      }
+      if (typeof alias !== 'string') {
+        throw new TypeError("Env expects parameter 'alias' to be of type 'string' or 'undefined'.");
+      }
+      if (!alias.match(REGEX_ALIAS)) {
+        throw new Error("Env received malformed alias: ".concat(alias, ". Ensure it satisfies the regex: '").concat(REGEX_ALIAS, "'."));
       }
-      return false;
+    }
+  }, {
+    key: "validateEnvironmentId",
+    value: function validateEnvironmentId(environmentId) {
+      for (var index in this.environmentConfigurations) {
+        if (!Object.hasOwn(this.environmentConfigurations, index)) {
+          continue;
+        }
+        if (this.environmentConfigurations[index].env === environmentId) {
+          return;
+        }
+      }
+      throw new TypeError("Env received unknown environmentId: ".concat(environmentId));
     }
   }]);
 }();
@@ -923,7 +952,7 @@ SDK.headerKeys = Object.freeze({
   version: 'x-sdk-version',
   type: 'x-sdk-type'
 });
-SDK._version = 'v1.122.3-beta';
+SDK._version = 'v1.123.2-beta';
 
 /******************************************************************************
 Copyright (c) Microsoft Corporation.
@@ -1787,6 +1816,12 @@ var AccessToken = /*#__PURE__*/function () {
     value: function getAccessHeaderNameByToken(token) {
       return !!AccessToken.validateJWT(token) ? ACCESS_HEADER_NAME.accessToken : ACCESS_HEADER_NAME.publicKey;
     }
+  }, {
+    key: "isJwt",
+    value: function isJwt(value) {
+      var jwtPattern = /^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$/;
+      return jwtPattern.test(value);
+    }
   }]);
 }();
 
@@ -4321,7 +4356,7 @@ var ActionRepository = /*#__PURE__*/function () {
         return _regeneratorRuntime().wrap(function _callee$(_context) {
           while (1) switch (_context.prev = _context.next) {
             case 0:
-              (_this$agent = this.agent).addPageAction.apply(_this$agent, args);
+              (_this$agent = this.agent).call.apply(_this$agent, ['addPageAction'].concat(args));
             case 1:
             case "end":
               return _context.stop();
@@ -4349,7 +4384,7 @@ var ErrorRepository = /*#__PURE__*/function () {
         return _regeneratorRuntime().wrap(function _callee$(_context) {
           while (1) switch (_context.prev = _context.next) {
             case 0:
-              (_this$agent = this.agent).noticeError.apply(_this$agent, args);
+              (_this$agent = this.agent).call.apply(_this$agent, ['noticeError'].concat(args));
             case 1:
             case "end":
               return _context.stop();
@@ -4377,7 +4412,7 @@ var EventRepository = /*#__PURE__*/function () {
         return _regeneratorRuntime().wrap(function _callee$(_context) {
           while (1) switch (_context.prev = _context.next) {
             case 0:
-              (_this$agent = this.agent).addPageAction.apply(_this$agent, args);
+              (_this$agent = this.agent).call.apply(_this$agent, ['addPageAction'].concat(args));
             case 1:
             case "end":
               return _context.stop();
@@ -8943,6 +8978,829 @@ var PaypalCheckoutButton = /*#__PURE__*/function (_CheckoutButton) {
   return _createClass(PaypalCheckoutButton);
 }(CheckoutButton);
 
+var MODES = ['live', 'test'];
+function isValidMode(val) {
+  return MODES.includes(val);
+}
+var PROVIDERS = {
+  FORTER: 'forter'
+};
+
+var NAMESPACE = 'fraudPrevention';
+var TYPES = {
+  FINGERPRINT_TOKEN_ERROR: 'fingerprint-token-error',
+  FINTERPRINT_TOKEN_READY: 'fingerprint-token-ready'
+};
+var FRAUD_PREVENTION_EVENTS = {
+  NAMESPACE: NAMESPACE,
+  TYPES: TYPES,
+  PROVIDERS: PROVIDERS
+};
+
+var AuthorizationStrategy = /*#__PURE__*/_createClass(function AuthorizationStrategy() {
+  _classCallCheck(this, AuthorizationStrategy);
+});
+/**
+ * Implementation of AuthorizationStrategy that uses an access token for authorization.
+ *
+ * This strategy configures the SDK Services and Widgets to use access token authentication.
+ */
+var AccessTokenStrategy = /*#__PURE__*/function (_AuthorizationStrateg) {
+  /**
+   * @constructor Creates an instance of AuthorizationStrategy which enables authorization by access token
+   *
+   * @param accessToken
+   */
+  function AccessTokenStrategy(accessToken) {
+    var _this;
+    _classCallCheck(this, AccessTokenStrategy);
+    _this = _callSuper(this, AccessTokenStrategy);
+    _this.accessToken = accessToken;
+    if (typeof accessToken !== 'string') {
+      throw new TypeError("AccessTokenStrategy expects parameter 'accessToken' to be of type string.");
+    }
+    return _this;
+  }
+  _inherits(AccessTokenStrategy, _AuthorizationStrateg);
+  return _createClass(AccessTokenStrategy, [{
+    key: "apply",
+    value: function apply(httpFetch) {
+      httpFetch.setAccessToken(this.accessToken);
+    }
+  }]);
+}(AuthorizationStrategy);
+/**
+ * Implementation of AuthorizationStrategy that preserves Services and Widgets in an anonymous state.
+ */
+var AnonymousStrategy = /*#__PURE__*/function (_AuthorizationStrateg2) {
+  function AnonymousStrategy() {
+    _classCallCheck(this, AnonymousStrategy);
+    return _callSuper(this, AnonymousStrategy, arguments);
+  }
+  _inherits(AnonymousStrategy, _AuthorizationStrateg2);
+  return _createClass(AnonymousStrategy, [{
+    key: "apply",
+    value: function apply(_) {
+      // no-op
+    }
+  }]);
+}(AuthorizationStrategy);
+/**
+ * Implementation of AuthorizationStrategy that uses a public key for authorization.
+ *
+ * This strategy configures the SDK Services and Widgets to use public key authentication.
+ */
+var PublicKeyStrategy = /*#__PURE__*/function (_AuthorizationStrateg3) {
+  /**
+   * @constructor Creates an instance of AuthorizationStrategy which enables authorization by public key
+   *
+   * @param publicKey
+   */
+  function PublicKeyStrategy(publicKey) {
+    var _this2;
+    _classCallCheck(this, PublicKeyStrategy);
+    _this2 = _callSuper(this, PublicKeyStrategy);
+    _this2.publicKey = publicKey;
+    if (typeof publicKey !== 'string') {
+      throw new TypeError("AccessTokenStrategy expects parameter 'publicKey' to be of type string.");
+    }
+    return _this2;
+  }
+  _inherits(PublicKeyStrategy, _AuthorizationStrateg3);
+  return _createClass(PublicKeyStrategy, [{
+    key: "apply",
+    value: function apply(httpFetch) {
+      httpFetch.setPublicKey(this.publicKey);
+    }
+  }]);
+}(AuthorizationStrategy);
+
+/**
+ * Deep clones a value.
+ *
+ * @param value - The value to clone.
+ * @param visited - A WeakMap to track visited objects.
+ * @returns A deep clone of the value.
+ *
+ * Warning: Only own enumerable properties of objects are cloned. Thus, not suitable for cloning custom instances with getters, setters, methods or static properties.
+ * Warning: Functions are cloned by reference.
+ * Warning: Circular references are cloned by reference.
+ */
+function deepClone(value) {
+  var visited = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : new WeakMap();
+  // Handle null, undefined, and primitive types
+  if (value === null || value === undefined || _typeof$1(value) !== 'object') {
+    return value;
+  }
+  // Handle circular references - Copy by reference if already visited
+  if (visited.has(value)) {
+    return visited.get(value);
+  }
+  // Handle Date objects
+  if (value instanceof Date) {
+    return new Date(value.getTime());
+  }
+  // Handle Array objects
+  if (Array.isArray(value)) {
+    var _clone = [];
+    visited.set(value, _clone);
+    _clone.push.apply(_clone, _toConsumableArray(value.map(function (item) {
+      return deepClone(item, visited);
+    })));
+    return _clone;
+  }
+  // Handle Map objects
+  if (value instanceof Map) {
+    var _clone2 = new Map();
+    visited.set(value, _clone2);
+    value.forEach(function (val, key) {
+      _clone2.set(deepClone(key, visited), deepClone(val, visited));
+    });
+    return _clone2;
+  }
+  // Handle Set objects
+  if (value instanceof Set) {
+    var _clone3 = new Set();
+    visited.set(value, _clone3);
+    var _iterator = _createForOfIteratorHelper(value),
+      _step;
+    try {
+      for (_iterator.s(); !(_step = _iterator.n()).done;) {
+        var val = _step.value;
+        _clone3.add(deepClone(val, visited));
+      }
+    } catch (err) {
+      _iterator.e(err);
+    } finally {
+      _iterator.f();
+    }
+    return _clone3;
+  }
+  // For objects, create a plain object (ignoring prototype, getters, setters and methods) and clone own enumerable properties
+  var clone = {};
+  var keys = Object.keys(value);
+  visited.set(value, clone);
+  for (var _i = 0, _keys = keys; _i < _keys.length; _i++) {
+    var key = _keys[_i];
+    clone[key] = deepClone(value[key], visited);
+  }
+  return clone;
+}
+
+var failureResult = function failureResult(data) {
+  return [null, data];
+};
+var successResult = function successResult(data) {
+  return [data, null];
+};
+
+var HttpFetcher = /*#__PURE__*/function () {
+  function HttpFetcher() {
+    _classCallCheck(this, HttpFetcher);
+    this.reportError = function (repository, err, ctx) {
+      repository.createError(err, ctx);
+    };
+    this.baseUrl = '';
+    this.headers = {};
+  }
+  return _createClass(HttpFetcher, [{
+    key: "setAccessToken",
+    value: function setAccessToken(accessToken) {
+      this.headers['x-access-token'] = accessToken;
+      return this;
+    }
+  }, {
+    key: "setBaseUrl",
+    value: function setBaseUrl(baseUrl) {
+      this.baseUrl = baseUrl;
+      return this;
+    }
+  }, {
+    key: "setBody",
+    value: function setBody(body) {
+      if (_typeof$1(body) === 'symbol' || typeof body === 'function' || typeof body === 'undefined') {
+        throw new TypeError("HttpFetcher setBody: expected parameter 'body' to be serializable.");
+      }
+      this.body = body;
+      return this;
+    }
+  }, {
+    key: "setContentTypeJson",
+    value: function setContentTypeJson() {
+      this.headers['Content-Type'] = 'application/json; charset=UTF-8';
+      return this;
+    }
+  }, {
+    key: "setContentTypeText",
+    value: function setContentTypeText() {
+      this.headers['Content-Type'] = 'text/plain; charset=UTF-8';
+      return this;
+    }
+  }, {
+    key: "setHeaders",
+    value: function setHeaders(headers) {
+      _extends(this.headers, headers);
+      return this;
+    }
+  }, {
+    key: "setPublicKey",
+    value: function setPublicKey(publicKey) {
+      this.headers['x-user-public-key'] = publicKey;
+      return this;
+    }
+  }, {
+    key: "setSdkVersion",
+    value: function setSdkVersion() {
+      if (SDK.version) {
+        this.headers[SDK.headerKeys.version] = SDK.version;
+        this.headers[SDK.headerKeys.type] = SDK.type;
+      }
+      return this;
+    }
+  }, {
+    key: "execute",
+    value: function execute(method, path) {
+      return __awaiter(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
+        var url, response, responseContentType, text, json;
+        return _regeneratorRuntime().wrap(function _callee$(_context) {
+          while (1) switch (_context.prev = _context.next) {
+            case 0:
+              url = "".concat(this.baseUrl).concat(path);
+              _context.prev = 1;
+              _context.next = 4;
+              return fetch(url, {
+                method: method,
+                body: this.body ? JSON.stringify(this.body) : undefined,
+                headers: this.headers
+              });
+            case 4:
+              response = _context.sent;
+              responseContentType = response.headers.get('Content-Type') || '';
+              if (!responseContentType.includes('text/plain')) {
+                _context.next = 11;
+                break;
+              }
+              _context.next = 9;
+              return response.text();
+            case 9:
+              text = _context.sent;
+              return _context.abrupt("return", successResult({
+                statusCode: response.status,
+                body: text
+              }));
+            case 11:
+              _context.next = 13;
+              return response.json();
+            case 13:
+              json = _context.sent;
+              if (response.ok) {
+                _context.next = 16;
+                break;
+              }
+              return _context.abrupt("return", failureResult({
+                statusCode: response.status,
+                body: json
+              }));
+            case 16:
+              if (!('error' in json && json.error !== null)) {
+                _context.next = 18;
+                break;
+              }
+              return _context.abrupt("return", failureResult({
+                statusCode: response.status,
+                body: json
+              }));
+            case 18:
+              return _context.abrupt("return", successResult({
+                statusCode: response.status,
+                body: json
+              }));
+            case 21:
+              _context.prev = 21;
+              _context.t0 = _context["catch"](1);
+              this.reportError(errorRepository, _context.t0, {
+                sdkVersion: SDK.version,
+                className: HttpFetcher.name,
+                classMethod: 'send',
+                environment: this.baseUrl
+              });
+              throw _context.t0;
+            case 25:
+            case "end":
+              return _context.stop();
+          }
+        }, _callee, this, [[1, 21]]);
+      }));
+    }
+  }, {
+    key: "value",
+    value: function value() {
+      return {
+        baseUrl: this.baseUrl,
+        headers: deepClone(this.headers),
+        body: deepClone(this.body)
+      };
+    }
+  }]);
+}();
+
+var HttpFetcherFactory = /*#__PURE__*/function () {
+  function HttpFetcherFactory(config) {
+    _classCallCheck(this, HttpFetcherFactory);
+    this.authorizationStrategyReference = config.authorizationStrategy;
+    this.environment = config.environment;
+  }
+  return _createClass(HttpFetcherFactory, [{
+    key: "createFetcher",
+    value: function createFetcher() {
+      var baseUrl = this.environment.getConf().url;
+      var fetcher = new HttpFetcher().setBaseUrl(baseUrl).setContentTypeJson().setSdkVersion();
+      this.authorizationStrategyValue.apply(fetcher);
+      return fetcher;
+    }
+  }, {
+    key: "authorizationStrategyValue",
+    get: function get() {
+      return typeof this.authorizationStrategyReference === 'function' ? this.authorizationStrategyReference() : this.authorizationStrategyReference;
+    }
+  }]);
+}();
+
+var FORTER_SDK_SCRIPT_TEMPLATE = "\n(function () {\n  var merchantConfig = {\n    csp: %CSP%\n  };\n\n  var siteId = \"%SITE_ID%\";\n\n  function t(t,e){for(var n=t.split(\"\"),r=0;r<n.length;++r)n[r]=String.fromCharCode(n[r].charCodeAt(0)+e);return n.join(\"\")}function e(e){return t(e,-_).replace(/%SN%/g,siteId)}function n(t){try{if(\"number\"==typeof t&&window.location&&window.location.pathname){for(var e=window.location.pathname.split(\"/\"),n=[],r=0;r<=Math.min(e.length-1,Math.abs(t));r++)n.push(e[r]);return n.join(\"/\")||\"/\"}}catch(t){}return\"/\"}function r(t){try{Q.ex=t,o()&&-1===Q.ex.indexOf(X.uB)&&(Q.ex+=X.uB),i()&&-1===Q.ex.indexOf(X.uBr)&&(Q.ex+=X.uBr),a()&&-1===Q.ex.indexOf(X.nIL)&&(Q.ex+=X.nIL),window.ftr__snp_cwc||(Q.ex+=X.s),B(Q)}catch(t){}}function o(){var t=\"no\"+\"op\"+\"fn\",e=\"g\"+\"a\",n=\"n\"+\"ame\";return window[e]&&window[e][n]===t}function i(){return!(!navigator.brave||\"function\"!=typeof navigator.brave.isBrave)}function a(){return document.currentScript&&document.currentScript.src}function c(t,e){function n(o){try{o.blockedURI===t&&(e(),document.removeEventListener(r,n))}catch(t){document.removeEventListener(r,n)}}var r=\"securitypolicyviolation\";document.addEventListener(r,n),setTimeout(function(){document.removeEventListener(r,n)},2*60*1e3)}function u(t,e,n,r){var o=!1;t=\"https://\"+t,c(t,function(){r(!0),o=!0});var i=document.createElement(\"script\");i.onerror=function(){if(!o)try{r(!1),o=!0}catch(t){}},i.onload=n,i.type=\"text/javascript\",i.id=\"ftr__script\",i.async=!0,i.src=t;var a=document.getElementsByTagName(\"script\")[0];a.parentNode.insertBefore(i,a)}function f(){tt(X.uDF),setTimeout(w,N,X.uDF)}function s(t,e,n,r){var o=!1,i=new XMLHttpRequest;if(c(\"https:\"+t,function(){n(new Error(\"CSP Violation\"),!0),o=!0}),\"//\"===t.slice(0,2)&&(t=\"https:\"+t),\"withCredentials\"in i)i.open(\"GET\",t,!0);else{if(\"undefined\"==typeof XDomainRequest)return;i=new XDomainRequest,i.open(\"GET\",t)}Object.keys(r).forEach(function(t){i.setRequestHeader(t,r[t])}),i.onload=function(){\"function\"==typeof e&&e(i)},i.onerror=function(t){if(\"function\"==typeof n&&!o)try{n(t,!1),o=!0}catch(t){}},i.onprogress=function(){},i.ontimeout=function(){\"function\"==typeof n&&n(\"tim\"+\"eo\"+\"ut\",!1)},setTimeout(function(){i.send()},0)}function d(t,siteId,e){function n(t){var e=t.toString(16);return e.length%2?\"0\"+e:e}function r(t){if(t<=0)return\"\";for(var e=\"0123456789abcdef\",n=\"\",r=0;r<t;r++)n+=e[Math.floor(Math.random()*e.length)];return n}function o(t){for(var e=\"\",r=0;r<t.length;r++)e+=n(t.charCodeAt(r));return e}function i(t){for(var e=t.split(\"\"),n=0;n<e.length;++n)e[n]=String.fromCharCode(255^e[n].charCodeAt(0));return e.join(\"\")}e=e?\"1\":\"0\";var a=[];return a.push(t),a.push(siteId),a.push(e),function(t){var e=40,n=\"\";return t.length<e/2&&(n=\",\"+r(e/2-t.length-1)),o(i(t+n))}(a.join(\",\"))}function h(){function t(){F&&(tt(X.dUAL),setTimeout(w,N,X.dUAL))}function e(t,e){r(e?X.uAS+X.uF+X.cP:X.uAS+X.uF),F=\"F\"+\"T\"+\"R\"+\"A\"+\"U\",setTimeout(w,N,X.uAS)}window.ftr__fdad(t,e)}function l(){function t(){F&&setTimeout(w,N,X.uDAD)}function e(t,e){r(e?X.uDS+X.uF+X.cP:X.uDS+X.uF),F=\"F\"+\"T\"+\"R\"+\"A\"+\"U\",setTimeout(w,N,X.uDS)}window.ftr__radd(t,e)}function w(t){try{var e;switch(t){case X.uFP:e=O;break;case X.uDF:e=M;break;default:e=F}if(!e)return;var n=function(){try{et(),r(t+X.uS)}catch(t){}},o=function(e){try{et(),Q.td=1*new Date-Q.ts,r(e?t+X.uF+X.cP:t+X.uF),t===X.uFP&&f(),t===X.uDF&&(I?l():h()),t!==X.uAS&&t!==X.dUAL||I||l(),t!==X.uDS&&t!==X.uDAD||I&&h()}catch(t){r(X.eUoe)}};if(e===\"F\"+\"T\"+\"R\"+\"A\"+\"U\")return void o();u(e,void 0,n,o)}catch(e){r(t+X.eTlu)}}var g=\"22ge:t7mj8unkn;1forxgiurqw1qhw2vwdwxv\",v=\"fort\",p=\"erTo\",m=\"ken\",_=3;window.ftr__config={m:merchantConfig,s:\"24\",si:siteId};var y=!1,U=!1,T=v+p+m,x=400*24*60,A=10,S={write:function(t,e,r,o){void 0===o&&(o=!0);var i=0;window.ftr__config&&window.ftr__config.m&&window.ftr__config.m.ckDepth&&(i=window.ftr__config.m.ckDepth);var a,c,u=n(i);if(r?(a=new Date,a.setTime(a.getTime()+60*r*1e3),c=\"; expires=\"+a.toGMTString()):c=\"\",!o)return void(document.cookie=escape(t)+\"=\"+escape(e)+c+\"; path=\"+u);for(var f=1,s=document.domain.split(\".\"),d=A,h=!0;h&&s.length>=f&&d>0;){var l=s.slice(-f).join(\".\");document.cookie=escape(t)+\"=\"+escape(e)+c+\"; path=\"+u+\"; domain=\"+l;var w=S.read(t);null!=w&&w==e||(l=\".\"+l,document.cookie=escape(t)+\"=\"+escape(e)+c+\"; path=\"+u+\"; domain=\"+l),h=-1===document.cookie.indexOf(t+\"=\"+e),f++,d--}},read:function(t){var e=null;try{for(var n=escape(t)+\"=\",r=document.cookie.split(\";\"),o=32,i=0;i<r.length;i++){for(var a=r[i];a.charCodeAt(0)===o;)a=a.substring(1,a.length);0===a.indexOf(n)&&(e=unescape(a.substring(n.length,a.length)))}}finally{return e}}},D=window.ftr__config.s;D+=\"ck\";var L=function(t){var e=!1,n=null,r=function(){try{if(!n||!e)return;n.remove&&\"function\"==typeof n.remove?n.remove():document.head.removeChild(n),e=!1}catch(t){}};document.head&&(!function(){n=document.createElement(\"link\"),n.setAttribute(\"rel\",\"pre\"+\"con\"+\"nect\"),n.setAttribute(\"cros\"+\"sori\"+\"gin\",\"anonymous\"),n.onload=r,n.onerror=r,n.setAttribute(\"href\",t),document.head.appendChild(n),e=!0}(),setTimeout(r,3e3))},E=e(g||\"22ge:t7mj8unkn;1forxgiurqw1qhw2vwdwxv\"),C=t(\"[0Uhtxhvw0LG\",-_),R=t(\"[0Fruuhodwlrq0LG\",-_),P=t(\"Li0Qrqh0Pdwfk\",-_),k=e(\"dss1vlwhshuirupdqfhwhvw1qhw\"),q=e(\"2241414142gqv0txhu|\"),F,b=\"fgq71iruwhu1frp\",M=e(\"(VQ(1\"+b+\"2vq2(VQ(2vfulsw1mv\"),V=e(\"(VQ(1\"+b+\"2vqV2(VQ(2vfulsw1mv\"),O;window.ftr__config&&window.ftr__config.m&&window.ftr__config.m.fpi&&(O=window.ftr__config.m.fpi+e(\"2vq2(VQ(2vfulsw1mv\"));var I=!1,N=10;window.ftr__startScriptLoad=1*new Date;var j=function(t){var e=\"ft\"+\"r:tok\"+\"enR\"+\"eady\";window.ftr__tt&&clearTimeout(window.ftr__tt),window.ftr__tt=setTimeout(function(){try{delete window.ftr__tt,t+=\"_tt\";var n=document.createEvent(\"Event\");n.initEvent(e,!1,!1),n.detail=t,document.dispatchEvent(n)}catch(t){}},1e3)},B=function(t){var e=function(t){return t||\"\"},n=e(t.id)+\"_\"+e(t.ts)+\"_\"+e(t.td)+\"_\"+e(t.ex)+\"_\"+e(D),r=x;!isNaN(window.ftr__config.m.ckTTL)&&window.ftr__config.m.ckTTL&&(r=window.ftr__config.m.ckTTL),S.write(T,n,r,!0),j(n),window.ftr__gt=n},G=function(){var t=S.read(T)||\"\",e=t.split(\"_\"),n=function(t){return e[t]||void 0};return{id:n(0),ts:n(1),td:n(2),ex:n(3),vr:n(4)}},H=function(){for(var t={},e=\"fgu\",n=[],r=0;r<256;r++)n[r]=(r<16?\"0\":\"\")+r.toString(16);var o=function(t,e,r,o,i){var a=i?\"-\":\"\";return n[255&t]+n[t>>8&255]+n[t>>16&255]+n[t>>24&255]+a+n[255&e]+n[e>>8&255]+a+n[e>>16&15|64]+n[e>>24&255]+a+n[63&r|128]+n[r>>8&255]+a+n[r>>16&255]+n[r>>24&255]+n[255&o]+n[o>>8&255]+n[o>>16&255]+n[o>>24&255]},i=function(){if(window.Uint32Array&&window.crypto&&window.crypto.getRandomValues){var t=new window.Uint32Array(4);return window.crypto.getRandomValues(t),{d0:t[0],d1:t[1],d2:t[2],d3:t[3]}}return{d0:4294967296*Math.random()>>>0,d1:4294967296*Math.random()>>>0,d2:4294967296*Math.random()>>>0,d3:4294967296*Math.random()>>>0}},a=function(){var t=\"\",e=function(t,e){for(var n=\"\",r=t;r>0;--r)n+=e.charAt(1e3*Math.random()%e.length);return n};return t+=e(2,\"0123456789\"),t+=e(1,\"123456789\"),t+=e(8,\"0123456789\")};return t.safeGenerateNoDash=function(){try{var t=i();return o(t.d0,t.d1,t.d2,t.d3,!1)}catch(t){try{return e+a()}catch(t){}}},t.isValidNumericalToken=function(t){return t&&t.toString().length<=11&&t.length>=9&&parseInt(t,10).toString().length<=11&&parseInt(t,10).toString().length>=9},t.isValidUUIDToken=function(t){return t&&32===t.toString().length&&/^[a-z0-9]+$/.test(t)},t.isValidFGUToken=function(t){return 0==t.indexOf(e)&&t.length>=12},t}(),X={uDF:\"UDF\",dUAL:\"dUAL\",uAS:\"UAS\",uDS:\"UDS\",uDAD:\"UDAD\",uFP:\"UFP\",mLd:\"1\",eTlu:\"2\",eUoe:\"3\",uS:\"4\",uF:\"9\",tmos:[\"T5\",\"T10\",\"T15\",\"T30\",\"T60\"],tmosSecs:[5,10,15,30,60],bIR:\"43\",uB:\"u\",uBr:\"b\",cP:\"c\",nIL:\"i\",s:\"s\"};try{var Q=G();try{Q.id&&(H.isValidNumericalToken(Q.id)||H.isValidUUIDToken(Q.id)||H.isValidFGUToken(Q.id))?window.ftr__ncd=!1:(Q.id=H.safeGenerateNoDash(),window.ftr__ncd=!0),Q.ts=window.ftr__startScriptLoad,B(Q),window.ftr__snp_cwc=!!S.read(T),window.ftr__snp_cwc||(M=V);for(var $=\"for\"+\"ter\"+\".co\"+\"m\",z=\"ht\"+\"tps://c\"+\"dn9.\"+$,J=\"ht\"+\"tps://\"+Q.id+\"-\"+siteId+\".cd\"+\"n.\"+$,K=\"http\"+\"s://cd\"+\"n3.\"+$,W=[z,J,K],Y=0;Y<W.length;Y++)L(W[Y]);var Z=new Array(X.tmosSecs.length),tt=function(t){for(var e=0;e<X.tmosSecs.length;e++)Z[e]=setTimeout(r,1e3*X.tmosSecs[e],t+X.tmos[e])},et=function(){for(var t=0;t<X.tmosSecs.length;t++)clearTimeout(Z[t])};window.ftr__fdad=function(e,n){if(!y){y=!0;var r={};r[P]=d(window.ftr__config.s,siteId,window.ftr__config.m.csp),s(E,function(n){try{var r=n.getAllResponseHeaders().toLowerCase();if(r.indexOf(R.toLowerCase())>=0){var o=n.getResponseHeader(R);window.ftr__altd2=t(atob(o),-_-1)}if(r.indexOf(C.toLowerCase())<0)return;var i=n.getResponseHeader(C),a=t(atob(i),-_-1);if(a){var c=a.split(\":\");if(c&&2===c.length){for(var u=c[0],f=c[1],s=\"\",d=0,h=0;d<20;++d)s+=d%3>0&&h<12?siteId.charAt(h++):Q.id.charAt(d);var l=f.split(\",\");if(l.length>1){var w=l[0],g=l[1];F=u+\"/\"+w+\".\"+s+\".\"+g}}}e()}catch(t){}},function(t,e){n&&n(t,e)},r)}},window.ftr__radd=function(t,e){function n(e){try{var n=e.response,r=function(t){function e(t,o,i){try{if(i>=n)return{name:\"\",nextOffsetToProcess:o,error:\"Max pointer dereference depth exceeded\"};for(var a=[],c=o,u=t.getUint8(c),f=0;f<r;){if(f++,192==(192&u)){var s=(63&u)<<8|t.getUint8(c+1),d=e(t,s,i+1);if(d.error)return d;var h=d.name;return a.push(h),{name:a.join(\".\"),nextOffsetToProcess:c+2}}if(!(u>0)){if(0!==u)return{name:\"\",nextOffsetToProcess:c,error:\"Unexpected length at the end of name: \"+u.toString()};return{name:a.join(\".\"),nextOffsetToProcess:c+1}}for(var l=\"\",w=1;w<=u;w++)l+=String.fromCharCode(t.getUint8(c+w));a.push(l),c+=u+1,u=t.getUint8(c)}return{name:\"\",nextOffsetToProcess:c,error:\"Max iterations exceeded\"}}catch(t){return{name:\"\",nextOffsetToProcess:o,error:\"Unexpected error while parsing response: \"+t.toString()}}}for(var n=4,r=100,o=16,i=new DataView(t),a=i.getUint16(0),c=i.getUint16(2),u=i.getUint16(4),f=i.getUint16(6),s=i.getUint16(8),d=i.getUint16(10),h=12,l=[],w=0;w<u;w++){var g=e(i,h,0);if(g.error)throw new Error(g.error);if(h=g.nextOffsetToProcess,!Number.isInteger(h))throw new Error(\"invalid returned offset\");var v=g.name,p=i.getUint16(h);h+=2;var m=i.getUint16(h);h+=2,l.push({qname:v,qtype:p,qclass:m})}for(var _=[],w=0;w<f;w++){var g=e(i,h,0);if(g.error)throw new Error(g.error);if(h=g.nextOffsetToProcess,!Number.isInteger(h))throw new Error(\"invalid returned offset\");var y=g.name,U=i.getUint16(h);if(U!==o)throw new Error(\"Unexpected record type: \"+U.toString());h+=2;var T=i.getUint16(h);h+=2;var x=i.getUint32(h);h+=4;var A=i.getUint16(h);h+=2;for(var S=\"\",D=h,L=0;D<h+A&&L<r;){L++;var E=i.getUint8(D);D+=1;S+=(new TextDecoder).decode(t.slice(D,D+E)),D+=E}if(L>=r)throw new Error(\"Max iterations exceeded while reading TXT data\");h+=A,_.push({name:y,type:U,class:T,ttl:x,data:S})}return{transactionId:a,flags:c,questionCount:u,answerCount:f,authorityCount:s,additionalCount:d,questions:l,answers:_}}(n);if(!r)throw new Error(\"Error parsing DNS response\");if(!(\"answers\"in r))throw new Error(\"Unexpected response\");var o=r.answers;if(0===o.length)throw new Error(\"No answers found\");var i=o[0].data;if(i=i.replace(/^\"(.*)\"$/,\"$1\"),decodedVal=function(t){var e=40,n=32,r=126;try{for(var o=atob(t),i=\"\",a=0;a<o.length;a++)i+=function(t){var o=t.charCodeAt(0),i=o-e;return i<n&&(i=r-(n-i)+1),String.fromCharCode(i)}(o[a]);return atob(i)}catch(t){return}}(i),!decodedVal)throw new Error(\"failed to decode the value\");var a=function(t){var e=\"_\"+\"D\"+\"L\"+\"M\"+\"_\",n=t.split(e);if(!(n.length<2)){var r=n[0],o=n[1];if(!(r.split(\".\").length-1<1))return{jURL:r,eURL:o}}}(decodedVal);if(!a)throw new Error(\"failed to parse the value\");var c=a.jURL,u=a.eURL;F=function(t){for(var e=\"\",n=0,r=0;n<20;++n)e+=n%3>0&&r<12?siteId.charAt(r++):Q.id.charAt(n);return t.replace(\"/PRM1\",\"\").replace(\"/PRM2\",\"/main.\").replace(\"/PRM3\",e).replace(\"/PRM4\",\".js\")}(c),window.ftr__altd3=u,t()}catch(t){}}function r(t,n){e&&e(t,n)}if(!U){window.ftr__config.m.dr===\"N\"+\"D\"+\"R\"&&e(new Error(\"N\"+\"D\"+\"R\"),!1),q&&k||e(new Error(\"D\"+\"P\"+\"P\"),!1),U=!0;try{var o=function(t){for(var e=new Uint8Array([0,0]),n=new Uint8Array([1,0]),r=new Uint8Array([0,1]),o=new Uint8Array([0,0]),i=new Uint8Array([0,0]),a=new Uint8Array([0,0]),c=t.split(\".\"),u=[],f=0;f<c.length;f++){var s=c[f];u.push(s.length);for(var d=0;d<s.length;d++)u.push(s.charCodeAt(d))}u.push(0);var h=16,l=new Uint8Array([0,h]),w=new Uint8Array([0,1]),g=new Uint8Array(e.length+n.length+r.length+o.length+i.length+a.length+u.length+l.length+w.length);return g.set(e,0),g.set(n,e.length),g.set(r,e.length+n.length),g.set(o,e.length+n.length+r.length),g.set(i,e.length+n.length+r.length+o.length),g.set(a,e.length+n.length+r.length+o.length+i.length),g.set(u,e.length+n.length+r.length+o.length+i.length+a.length),g.set(l,e.length+n.length+r.length+o.length+i.length+a.length+u.length),g.set(w,e.length+n.length+r.length+o.length+i.length+a.length+u.length+l.length),g}(k);!function(t,e,n,r,o){var i=!1,a=new XMLHttpRequest;if(c(\"https:\"+t,function(){o(new Error(\"CSP Violation\"),!0),i=!0}),\"//\"===t.slice(0,2)&&(t=\"https:\"+t),\"withCredentials\"in a)a.open(\"POST\",t,!0);else{if(\"undefined\"==typeof XDomainRequest)return;a=new XDomainRequest,a.open(\"POST\",t)}a.responseType=\"arraybuffer\",a.setRequestHeader(\"Content-Type\",e),a.onload=function(){\"function\"==typeof r&&r(a)},a.onerror=function(t){if(\"function\"==typeof o&&!i)try{o(t,!1),i=!0}catch(t){}},a.onprogress=function(){},a.ontimeout=function(){\"function\"==typeof o&&o(\"tim\"+\"eo\"+\"ut\",!1)},setTimeout(function(){a.send(n)},0)}(q,\"application/dns-message\",o,n,r)}catch(t){e(t,!1)}}};var nt=O?X.uFP:X.uDF;tt(nt),setTimeout(w,N,nt)}catch(t){r(X.mLd)}}catch(t){}}\n)();\n";
+
+var FORTER_SDK_EVENTS = {
+  TOKEN_READY: 'ftr:tokenReady'
+};
+/**
+ * A class that manages Forter's device fingerprinting integration.
+ * It handles script injection and token management.
+ *
+ * @example
+ *
+ * ```js
+ * const agent = new ForterDeviceAgent({
+ *   siteId: 'your-site-id',
+ *   csp: false,
+ *   mode: 'test'
+ * }).init();
+ *
+ * // Later, access the token
+ * const token = agent.token;
+ * ```
+ */
+var ForterDeviceAgent = /*#__PURE__*/function () {
+  /**
+   * Creates a new instance of ForterDeviceAgent
+   *
+   * @param {ForterDeviceAgentConfig} config - Configuration object for Forter integration
+   */
+  function ForterDeviceAgent(config) {
+    _classCallCheck(this, ForterDeviceAgent);
+    this.cookieToken = null;
+    this.validateCsp(config.csp);
+    this.validateMode(config.mode);
+    this.validateSiteId(config.siteId);
+    this.config = config;
+  }
+  /**
+   * Returns the current Forter token if available
+   *
+   * @returns {string | null} The Forter token or null if not yet available
+   *
+   * @example
+   *
+   * ```js
+   * const token = forterAgent.token;
+   * if (token) {
+   *   // Use the token
+   * }
+   * ```
+   */
+  return _createClass(ForterDeviceAgent, [{
+    key: "token",
+    get: function get() {
+      return this.cookieToken;
+    }
+    /**
+     * Initializes the Forter Device Agent by injecting the required script
+     * and setting up event listeners.
+     *
+     * @returns {ForterDeviceAgent} The current instance for method chaining
+     *
+     * @example
+     *
+     * ```js
+     * const agent = new ForterDeviceAgent(config).init();
+     * ```
+     */
+  }, {
+    key: "init",
+    value: function init() {
+      this.subscribeSdkEvents();
+      this.injectScript();
+      return this;
+    }
+  }, {
+    key: "emit",
+    value: function emit(detail) {
+      var evt = new CustomEvent(FRAUD_PREVENTION_EVENTS.NAMESPACE, {
+        detail: detail
+      });
+      document.dispatchEvent(evt);
+    }
+  }, {
+    key: "emitFingerprintTokenWrongTypeError",
+    value: function emitFingerprintTokenWrongTypeError() {
+      this.emit({
+        type: FRAUD_PREVENTION_EVENTS.TYPES.FINGERPRINT_TOKEN_ERROR,
+        provider: FRAUD_PREVENTION_EVENTS.PROVIDERS.FORTER,
+        payload: {
+          code: 'unexpected_token_type',
+          message: 'Forter JavaScript SDK created a fingerprint token but it was not of the expected string type. Please contact our support team if the issue persists.'
+        }
+      });
+    }
+  }, {
+    key: "emitFingerprintTokenReady",
+    value: function emitFingerprintTokenReady() {
+      this.emit({
+        type: FRAUD_PREVENTION_EVENTS.TYPES.FINTERPRINT_TOKEN_READY,
+        provider: FRAUD_PREVENTION_EVENTS.PROVIDERS.FORTER,
+        payload: {
+          token: this.cookieToken
+        }
+      });
+    }
+  }, {
+    key: "getScriptContent",
+    value: function getScriptContent() {
+      var template = FORTER_SDK_SCRIPT_TEMPLATE.replace('%CSP%', String(this.config.csp)).replace('%SITE_ID%', this.config.siteId);
+      return template;
+    }
+  }, {
+    key: "injectScript",
+    value: function injectScript() {
+      var script = document.createElement('script');
+      script.type = 'text/javascript';
+      script.id = this.config.siteId;
+      script.textContent = this.getScriptContent();
+      document.body.appendChild(script);
+    }
+  }, {
+    key: "subscribeSdkEvents",
+    value: function subscribeSdkEvents() {
+      var _this = this;
+      document.addEventListener(FORTER_SDK_EVENTS.TOKEN_READY, function (evt) {
+        if (typeof evt.detail === 'string') {
+          _this.cookieToken = evt.detail;
+          _this.emitFingerprintTokenReady();
+        } else {
+          _this.emitFingerprintTokenWrongTypeError();
+        }
+      });
+    }
+  }, {
+    key: "validateCsp",
+    value: function validateCsp(csp) {
+      if (typeof csp !== 'undefined' && typeof csp !== 'boolean') {
+        throw new TypeError("ForterDeviceAgent config 'csp' is optional, when set it must be of type boolean.");
+      }
+    }
+  }, {
+    key: "validateMode",
+    value: function validateMode(mode) {
+      if (!isValidMode(mode)) {
+        throw new TypeError("ForterDeviceAgent: forter integration can not be initiated with the provided mode '".concat(mode, "'"));
+      }
+    }
+  }, {
+    key: "validateSiteId",
+    value: function validateSiteId(siteId) {
+      if (typeof siteId !== 'string') {
+        throw new TypeError("ForterDeviceAgent config 'siteId' is required and must be of type string.");
+      }
+    }
+  }]);
+}();
+
+// TODO @ingeniousraccoons add more credentials types as more providers are supported
+// type SomeOtherProviderCredentials = {
+//   provider: typeof providers.someOther;
+//   someField: string;
+// };
+function findServiceConfig(httpFetcher, provider, providerId) {
+  return __awaiter(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
+    var _yield$httpFetcher$ex, _yield$httpFetcher$ex2, response, error;
+    return _regeneratorRuntime().wrap(function _callee$(_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          _context.next = 2;
+          return httpFetcher.execute('GET', "/v1/services/".concat(providerId, "/config"));
+        case 2:
+          _yield$httpFetcher$ex = _context.sent;
+          _yield$httpFetcher$ex2 = _slicedToArray(_yield$httpFetcher$ex, 2);
+          response = _yield$httpFetcher$ex2[0];
+          error = _yield$httpFetcher$ex2[1];
+          if (!error) {
+            _context.next = 8;
+            break;
+          }
+          return _context.abrupt("return", [null, error.body.error]);
+        case 8:
+          _context.t0 = provider;
+          _context.next = _context.t0 === PROVIDERS.FORTER ? 11 : 12;
+          break;
+        case 11:
+          return _context.abrupt("return", [{
+            provider: PROVIDERS.FORTER,
+            siteId: response.body.resource.data.username,
+            subsiteId: response.body.resource.data.merchant
+          }, null]);
+        case 12:
+          throw new Error("findServiceConfig does not support provider ".concat(provider, "."));
+        case 13:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+}
+
+/**
+ * A class to manage integration fraud prevention integrations.
+ *
+ * @example
+ *
+ * ```js
+ * const fps = new FraudPreventionService({
+ *   environmentId: 'production',
+ *   mode: 'live',
+ * });
+ * ```
+ */
+var FraudPreventionService = /*#__PURE__*/function () {
+  /**
+   * @constructs
+   *
+   * @param {Object} config - FraudPreventionService configuration object
+   * @param {string} config.mode - Environment mode, must be either 'test' or 'live'
+   * @param {string} config.environmentId - Environment identifier
+   * @param {string} [config.environmentAlias] - Optional environment alias for API requests
+   */
+  function FraudPreventionService(config) {
+    var _this = this;
+    _classCallCheck(this, FraudPreventionService);
+    this.authorizationStrategy = new AnonymousStrategy();
+    this.forterDeviceAgent = null;
+    this.validateEnvironmentId(config.environmentId);
+    this.validateEnvironmentAlias(config.environmentAlias);
+    this.environment = new Env(API_URL);
+    this.environment.setEnv(config.environmentId, config.environmentAlias);
+    this.validateMode(config.mode);
+    this.mode = config.mode;
+    /**
+     * Use lazy authorizationStrategy as some functionalities can work without Paydock
+     * configurations. E.g., forter device agent can initialized using just a `siteId`.
+     */
+    this.httpFetcherFactory = new HttpFetcherFactory({
+      authorizationStrategy: function authorizationStrategy() {
+        return _this.authorizationStrategy;
+      },
+      environment: this.environment
+    });
+  }
+  /**
+   * Automatically detects and sets the authorization strategy the service should use
+   * based on the shape of the provided string.
+   *
+   * If the value is a JWT token, it will use an access token strategy, otherwise it will use
+   * a public key strategy.
+   *
+   * @param value - The authorization value (either JWT token or public key)
+   *
+   * @returns The FraudPreventionService instance for method chaining
+   *
+   * @example
+   * ```ts
+   * // With JWT token
+   * fps.withAuthorization('eyJhbGciOiJIUzI1NiIs...');
+   *
+   * // With public key
+   * fps.withAuthorization('pk_example_...');
+   * ```
+   */
+  return _createClass(FraudPreventionService, [{
+    key: "withAuthorization",
+    value: function withAuthorization(value) {
+      if (AccessToken.isJwt(value)) {
+        return this.withAccessTokenStrategy(value);
+      }
+      return this.withPublicKeyStrategy(value);
+    }
+    /**
+     * Sets the authorization strategy to use access token authentication.
+     *
+     * @param accessToken - The JWT access token
+     * @returns The FraudPreventionService instance for method chaining
+     *
+     * @example
+     *
+     * ```ts
+     * fps.withAccessTokenStrategy('eyJhbGciOiJIUzI1NiIs...');
+     * ```
+     */
+  }, {
+    key: "withAccessTokenStrategy",
+    value: function withAccessTokenStrategy(accessToken) {
+      this.authorizationStrategy = new AccessTokenStrategy(accessToken);
+      return this;
+    }
+    /**
+     * Sets the authorization strategy to use public key authentication.
+     *
+     * @param publicKey - The public key
+     * @returns The FraudPreventionService instance for method chaining
+     *
+     * @example
+     *
+     * ```ts
+     * fps.withPublicKeyStrategy('pk_example_...');
+     * ```
+     */
+  }, {
+    key: "withPublicKeyStrategy",
+    value: function withPublicKeyStrategy(publicKey) {
+      this.authorizationStrategy = new PublicKeyStrategy(publicKey);
+      return this;
+    }
+    /**
+     * Initializes Forter integration with the provided configuration. This method injects
+     * Forter's JavaScript snippet into the page and starts tracking user behavior.
+     *
+     * @param {Object} config - Configuration object for Forter integration
+     * @param {string} [config.siteId] - Your Forter site ID or subsite merchant ID
+     * @param {string} [config.providerId] - Your Paydock integrated Forter Service ID.
+     * @param {boolean} [config.csp] - Set to true if your site uses Content-Security-Policies
+     *
+     * @throws If neither siteId nor providerId are provided in the configuration
+     * @throws If providerId fails to resolve to a siteId through Paydock integration services
+     *
+     * @returns Promise with existing FraudPreventionService instance
+     *
+     * @example
+     *
+     * ```js
+     * await fps.withForter({
+     *   providerId: 'your-paydock-forter-service-id'
+     * });
+     * ```
+     *
+     * @example
+     *
+     * ```js
+     * await fps.withForter({
+     *   siteId: 'your-forter-site-id',
+     * });
+     * ```
+     */
+  }, {
+    key: "withForter",
+    value: function withForter(config) {
+      return __awaiter(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee2() {
+        var _this2 = this;
+        var useForterDeviceAgent, usingOwnCredentials, usingIntegratedCredentials, _yield$this$getProvid, _yield$this$getProvid2, credentials, error;
+        return _regeneratorRuntime().wrap(function _callee2$(_context2) {
+          while (1) switch (_context2.prev = _context2.next) {
+            case 0:
+              useForterDeviceAgent = function useForterDeviceAgent(siteId, subsiteId) {
+                return __awaiter(_this2, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
+                  return _regeneratorRuntime().wrap(function _callee$(_context) {
+                    while (1) switch (_context.prev = _context.next) {
+                      case 0:
+                        this.forterDeviceAgent = new ForterDeviceAgent({
+                          csp: config.csp,
+                          mode: this.mode,
+                          siteId: siteId !== null && siteId !== void 0 ? siteId : subsiteId
+                        }).init();
+                        return _context.abrupt("return", Promise.resolve(this));
+                      case 2:
+                      case "end":
+                        return _context.stop();
+                    }
+                  }, _callee, this);
+                }));
+              };
+              usingOwnCredentials = 'siteId' in config && typeof config.siteId === 'string';
+              if (!usingOwnCredentials) {
+                _context2.next = 4;
+                break;
+              }
+              return _context2.abrupt("return", useForterDeviceAgent(config.siteId, undefined));
+            case 4:
+              usingIntegratedCredentials = 'providerId' in config && typeof config.providerId === 'string';
+              if (!(usingIntegratedCredentials && this.authorizationStrategy)) {
+                _context2.next = 15;
+                break;
+              }
+              _context2.next = 8;
+              return this.getProviderCredentials(PROVIDERS.FORTER, config.providerId);
+            case 8:
+              _yield$this$getProvid = _context2.sent;
+              _yield$this$getProvid2 = _slicedToArray(_yield$this$getProvid, 2);
+              credentials = _yield$this$getProvid2[0];
+              error = _yield$this$getProvid2[1];
+              if (!error) {
+                _context2.next = 14;
+                break;
+              }
+              throw new Error("FraudPreventionService could not obtain forter integration credentials from providerId '".concat(config.providerId, "'. Cause: ").concat(error instanceof Error ? error.message : JSON.stringify(error), ";"));
+            case 14:
+              return _context2.abrupt("return", useForterDeviceAgent(credentials.siteId, credentials.subsiteId));
+            case 15:
+              throw new TypeError("FraudPreventionService withForter expects either config 'siteId' or config 'providerId' to be of type string.");
+            case 16:
+            case "end":
+              return _context2.stop();
+          }
+        }, _callee2, this);
+      }));
+    }
+    /**
+     * Returns the initialized Forter device agent instance if available.
+     *
+     * Make sure to call withForter() before accessing this getter.
+     *
+     * @returns {ForterDeviceAgent | null} The Forter device agent instance or null if not initialized
+     *
+     * @example
+     *
+     * ```js
+     * const fps = new FraudPreventionService();
+     *
+     * fps.withForter({
+     *   siteId: 'your-site-id',
+     *   mode: 'test'
+     * });
+     *
+     * const token = fps.forter?.token;
+     * ```
+     */
+  }, {
+    key: "forter",
+    get: function get() {
+      return this.forterDeviceAgent;
+    }
+    /**
+     * Gets the credentials for a specific fraud prevention provider.
+     *
+     * Returns different credential types based on the selected provider.
+     *
+     * @param provider - The fraud prevention provider
+     * @param providerId - The ID of the provider instance
+     *
+     * @returns a tuple with shape [providerSpecificCredentials, error]
+     */
+  }, {
+    key: "getProviderCredentials",
+    value: function getProviderCredentials(provider, providerId) {
+      return __awaiter(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee3() {
+        var fetcher;
+        return _regeneratorRuntime().wrap(function _callee3$(_context3) {
+          while (1) switch (_context3.prev = _context3.next) {
+            case 0:
+              fetcher = this.httpFetcherFactory.createFetcher();
+              return _context3.abrupt("return", findServiceConfig(fetcher, provider, providerId));
+            case 2:
+            case "end":
+              return _context3.stop();
+          }
+        }, _callee3, this);
+      }));
+    }
+  }, {
+    key: "validateEnvironmentId",
+    value: function validateEnvironmentId(environmentId) {
+      if (typeof environmentId !== 'string') {
+        throw new TypeError("FraudPreventionService expects config 'environmentId' to be of type string.");
+      }
+    }
+  }, {
+    key: "validateEnvironmentAlias",
+    value: function validateEnvironmentAlias(environmentAlias) {
+      if (environmentAlias && typeof environmentAlias !== 'string') {
+        throw new TypeError("FraudPreventionService expects config 'domain' to be of type string when it is provided.");
+      }
+    }
+  }, {
+    key: "validateMode",
+    value: function validateMode(mode) {
+      if (!isValidMode(mode)) {
+        throw new TypeError("FraudPreventionService expects config 'mode' to be of type string and one of ".concat(MODES.join(','), "."));
+      }
+    }
+  }]);
+}();
+
 var ObjectHelper = /*#__PURE__*/function () {
   function ObjectHelper() {
     _classCallCheck(this, ObjectHelper);
@@ -10136,1580 +10994,1355 @@ var AfterPayWalletService = /*#__PURE__*/function (_WalletService) {
   }]);
 }(WalletService);
 
-var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};
-
-var purify = {exports: {}};
-
-/*! @license DOMPurify 3.1.6 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.1.6/LICENSE */
-
-var hasRequiredPurify;
-
-function requirePurify () {
-	if (hasRequiredPurify) return purify.exports;
-	hasRequiredPurify = 1;
-	(function (module, exports) {
-		(function (global, factory) {
-		  module.exports = factory() ;
-		})(commonjsGlobal, (function () {
-		  const {
-		    entries,
-		    setPrototypeOf,
-		    isFrozen,
-		    getPrototypeOf,
-		    getOwnPropertyDescriptor
-		  } = Object;
-		  let {
-		    freeze,
-		    seal,
-		    create
-		  } = Object; // eslint-disable-line import/no-mutable-exports
-		  let {
-		    apply,
-		    construct
-		  } = typeof Reflect !== 'undefined' && Reflect;
-		  if (!freeze) {
-		    freeze = function freeze(x) {
-		      return x;
-		    };
-		  }
-		  if (!seal) {
-		    seal = function seal(x) {
-		      return x;
-		    };
-		  }
-		  if (!apply) {
-		    apply = function apply(fun, thisValue, args) {
-		      return fun.apply(thisValue, args);
-		    };
-		  }
-		  if (!construct) {
-		    construct = function construct(Func, args) {
-		      return new Func(...args);
-		    };
-		  }
-		  const arrayForEach = unapply(Array.prototype.forEach);
-		  const arrayPop = unapply(Array.prototype.pop);
-		  const arrayPush = unapply(Array.prototype.push);
-		  const stringToLowerCase = unapply(String.prototype.toLowerCase);
-		  const stringToString = unapply(String.prototype.toString);
-		  const stringMatch = unapply(String.prototype.match);
-		  const stringReplace = unapply(String.prototype.replace);
-		  const stringIndexOf = unapply(String.prototype.indexOf);
-		  const stringTrim = unapply(String.prototype.trim);
-		  const objectHasOwnProperty = unapply(Object.prototype.hasOwnProperty);
-		  const regExpTest = unapply(RegExp.prototype.test);
-		  const typeErrorCreate = unconstruct(TypeError);
-
-		  /**
-		   * Creates a new function that calls the given function with a specified thisArg and arguments.
-		   *
-		   * @param {Function} func - The function to be wrapped and called.
-		   * @returns {Function} A new function that calls the given function with a specified thisArg and arguments.
-		   */
-		  function unapply(func) {
-		    return function (thisArg) {
-		      for (var _len = arguments.length, args = new Array(_len > 1 ? _len - 1 : 0), _key = 1; _key < _len; _key++) {
-		        args[_key - 1] = arguments[_key];
-		      }
-		      return apply(func, thisArg, args);
-		    };
-		  }
-
-		  /**
-		   * Creates a new function that constructs an instance of the given constructor function with the provided arguments.
-		   *
-		   * @param {Function} func - The constructor function to be wrapped and called.
-		   * @returns {Function} A new function that constructs an instance of the given constructor function with the provided arguments.
-		   */
-		  function unconstruct(func) {
-		    return function () {
-		      for (var _len2 = arguments.length, args = new Array(_len2), _key2 = 0; _key2 < _len2; _key2++) {
-		        args[_key2] = arguments[_key2];
-		      }
-		      return construct(func, args);
-		    };
-		  }
-
-		  /**
-		   * Add properties to a lookup table
-		   *
-		   * @param {Object} set - The set to which elements will be added.
-		   * @param {Array} array - The array containing elements to be added to the set.
-		   * @param {Function} transformCaseFunc - An optional function to transform the case of each element before adding to the set.
-		   * @returns {Object} The modified set with added elements.
-		   */
-		  function addToSet(set, array) {
-		    let transformCaseFunc = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : stringToLowerCase;
-		    if (setPrototypeOf) {
-		      // Make 'in' and truthy checks like Boolean(set.constructor)
-		      // independent of any properties defined on Object.prototype.
-		      // Prevent prototype setters from intercepting set as a this value.
-		      setPrototypeOf(set, null);
-		    }
-		    let l = array.length;
-		    while (l--) {
-		      let element = array[l];
-		      if (typeof element === 'string') {
-		        const lcElement = transformCaseFunc(element);
-		        if (lcElement !== element) {
-		          // Config presets (e.g. tags.js, attrs.js) are immutable.
-		          if (!isFrozen(array)) {
-		            array[l] = lcElement;
-		          }
-		          element = lcElement;
-		        }
-		      }
-		      set[element] = true;
-		    }
-		    return set;
-		  }
-
-		  /**
-		   * Clean up an array to harden against CSPP
-		   *
-		   * @param {Array} array - The array to be cleaned.
-		   * @returns {Array} The cleaned version of the array
-		   */
-		  function cleanArray(array) {
-		    for (let index = 0; index < array.length; index++) {
-		      const isPropertyExist = objectHasOwnProperty(array, index);
-		      if (!isPropertyExist) {
-		        array[index] = null;
-		      }
-		    }
-		    return array;
-		  }
-
-		  /**
-		   * Shallow clone an object
-		   *
-		   * @param {Object} object - The object to be cloned.
-		   * @returns {Object} A new object that copies the original.
-		   */
-		  function clone(object) {
-		    const newObject = create(null);
-		    for (const [property, value] of entries(object)) {
-		      const isPropertyExist = objectHasOwnProperty(object, property);
-		      if (isPropertyExist) {
-		        if (Array.isArray(value)) {
-		          newObject[property] = cleanArray(value);
-		        } else if (value && typeof value === 'object' && value.constructor === Object) {
-		          newObject[property] = clone(value);
-		        } else {
-		          newObject[property] = value;
-		        }
-		      }
-		    }
-		    return newObject;
-		  }
-
-		  /**
-		   * This method automatically checks if the prop is function or getter and behaves accordingly.
-		   *
-		   * @param {Object} object - The object to look up the getter function in its prototype chain.
-		   * @param {String} prop - The property name for which to find the getter function.
-		   * @returns {Function} The getter function found in the prototype chain or a fallback function.
-		   */
-		  function lookupGetter(object, prop) {
-		    while (object !== null) {
-		      const desc = getOwnPropertyDescriptor(object, prop);
-		      if (desc) {
-		        if (desc.get) {
-		          return unapply(desc.get);
-		        }
-		        if (typeof desc.value === 'function') {
-		          return unapply(desc.value);
-		        }
-		      }
-		      object = getPrototypeOf(object);
-		    }
-		    function fallbackValue() {
-		      return null;
-		    }
-		    return fallbackValue;
-		  }
-
-		  const html$1 = freeze(['a', 'abbr', 'acronym', 'address', 'area', 'article', 'aside', 'audio', 'b', 'bdi', 'bdo', 'big', 'blink', 'blockquote', 'body', 'br', 'button', 'canvas', 'caption', 'center', 'cite', 'code', 'col', 'colgroup', 'content', 'data', 'datalist', 'dd', 'decorator', 'del', 'details', 'dfn', 'dialog', 'dir', 'div', 'dl', 'dt', 'element', 'em', 'fieldset', 'figcaption', 'figure', 'font', 'footer', 'form', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'head', 'header', 'hgroup', 'hr', 'html', 'i', 'img', 'input', 'ins', 'kbd', 'label', 'legend', 'li', 'main', 'map', 'mark', 'marquee', 'menu', 'menuitem', 'meter', 'nav', 'nobr', 'ol', 'optgroup', 'option', 'output', 'p', 'picture', 'pre', 'progress', 'q', 'rp', 'rt', 'ruby', 's', 'samp', 'section', 'select', 'shadow', 'small', 'source', 'spacer', 'span', 'strike', 'strong', 'style', 'sub', 'summary', 'sup', 'table', 'tbody', 'td', 'template', 'textarea', 'tfoot', 'th', 'thead', 'time', 'tr', 'track', 'tt', 'u', 'ul', 'var', 'video', 'wbr']);
-
-		  // SVG
-		  const svg$1 = freeze(['svg', 'a', 'altglyph', 'altglyphdef', 'altglyphitem', 'animatecolor', 'animatemotion', 'animatetransform', 'circle', 'clippath', 'defs', 'desc', 'ellipse', 'filter', 'font', 'g', 'glyph', 'glyphref', 'hkern', 'image', 'line', 'lineargradient', 'marker', 'mask', 'metadata', 'mpath', 'path', 'pattern', 'polygon', 'polyline', 'radialgradient', 'rect', 'stop', 'style', 'switch', 'symbol', 'text', 'textpath', 'title', 'tref', 'tspan', 'view', 'vkern']);
-		  const svgFilters = freeze(['feBlend', 'feColorMatrix', 'feComponentTransfer', 'feComposite', 'feConvolveMatrix', 'feDiffuseLighting', 'feDisplacementMap', 'feDistantLight', 'feDropShadow', 'feFlood', 'feFuncA', 'feFuncB', 'feFuncG', 'feFuncR', 'feGaussianBlur', 'feImage', 'feMerge', 'feMergeNode', 'feMorphology', 'feOffset', 'fePointLight', 'feSpecularLighting', 'feSpotLight', 'feTile', 'feTurbulence']);
-
-		  // List of SVG elements that are disallowed by default.
-		  // We still need to know them so that we can do namespace
-		  // checks properly in case one wants to add them to
-		  // allow-list.
-		  const svgDisallowed = freeze(['animate', 'color-profile', 'cursor', 'discard', 'font-face', 'font-face-format', 'font-face-name', 'font-face-src', 'font-face-uri', 'foreignobject', 'hatch', 'hatchpath', 'mesh', 'meshgradient', 'meshpatch', 'meshrow', 'missing-glyph', 'script', 'set', 'solidcolor', 'unknown', 'use']);
-		  const mathMl$1 = freeze(['math', 'menclose', 'merror', 'mfenced', 'mfrac', 'mglyph', 'mi', 'mlabeledtr', 'mmultiscripts', 'mn', 'mo', 'mover', 'mpadded', 'mphantom', 'mroot', 'mrow', 'ms', 'mspace', 'msqrt', 'mstyle', 'msub', 'msup', 'msubsup', 'mtable', 'mtd', 'mtext', 'mtr', 'munder', 'munderover', 'mprescripts']);
-
-		  // Similarly to SVG, we want to know all MathML elements,
-		  // even those that we disallow by default.
-		  const mathMlDisallowed = freeze(['maction', 'maligngroup', 'malignmark', 'mlongdiv', 'mscarries', 'mscarry', 'msgroup', 'mstack', 'msline', 'msrow', 'semantics', 'annotation', 'annotation-xml', 'mprescripts', 'none']);
-		  const text = freeze(['#text']);
-
-		  const html = freeze(['accept', 'action', 'align', 'alt', 'autocapitalize', 'autocomplete', 'autopictureinpicture', 'autoplay', 'background', 'bgcolor', 'border', 'capture', 'cellpadding', 'cellspacing', 'checked', 'cite', 'class', 'clear', 'color', 'cols', 'colspan', 'controls', 'controlslist', 'coords', 'crossorigin', 'datetime', 'decoding', 'default', 'dir', 'disabled', 'disablepictureinpicture', 'disableremoteplayback', 'download', 'draggable', 'enctype', 'enterkeyhint', 'face', 'for', 'headers', 'height', 'hidden', 'high', 'href', 'hreflang', 'id', 'inputmode', 'integrity', 'ismap', 'kind', 'label', 'lang', 'list', 'loading', 'loop', 'low', 'max', 'maxlength', 'media', 'method', 'min', 'minlength', 'multiple', 'muted', 'name', 'nonce', 'noshade', 'novalidate', 'nowrap', 'open', 'optimum', 'pattern', 'placeholder', 'playsinline', 'popover', 'popovertarget', 'popovertargetaction', 'poster', 'preload', 'pubdate', 'radiogroup', 'readonly', 'rel', 'required', 'rev', 'reversed', 'role', 'rows', 'rowspan', 'spellcheck', 'scope', 'selected', 'shape', 'size', 'sizes', 'span', 'srclang', 'start', 'src', 'srcset', 'step', 'style', 'summary', 'tabindex', 'title', 'translate', 'type', 'usemap', 'valign', 'value', 'width', 'wrap', 'xmlns', 'slot']);
-		  const svg = freeze(['accent-height', 'accumulate', 'additive', 'alignment-baseline', 'ascent', 'attributename', 'attributetype', 'azimuth', 'basefrequency', 'baseline-shift', 'begin', 'bias', 'by', 'class', 'clip', 'clippathunits', 'clip-path', 'clip-rule', 'color', 'color-interpolation', 'color-interpolation-filters', 'color-profile', 'color-rendering', 'cx', 'cy', 'd', 'dx', 'dy', 'diffuseconstant', 'direction', 'display', 'divisor', 'dur', 'edgemode', 'elevation', 'end', 'fill', 'fill-opacity', 'fill-rule', 'filter', 'filterunits', 'flood-color', 'flood-opacity', 'font-family', 'font-size', 'font-size-adjust', 'font-stretch', 'font-style', 'font-variant', 'font-weight', 'fx', 'fy', 'g1', 'g2', 'glyph-name', 'glyphref', 'gradientunits', 'gradienttransform', 'height', 'href', 'id', 'image-rendering', 'in', 'in2', 'k', 'k1', 'k2', 'k3', 'k4', 'kerning', 'keypoints', 'keysplines', 'keytimes', 'lang', 'lengthadjust', 'letter-spacing', 'kernelmatrix', 'kernelunitlength', 'lighting-color', 'local', 'marker-end', 'marker-mid', 'marker-start', 'markerheight', 'markerunits', 'markerwidth', 'maskcontentunits', 'maskunits', 'max', 'mask', 'media', 'method', 'mode', 'min', 'name', 'numoctaves', 'offset', 'operator', 'opacity', 'order', 'orient', 'orientation', 'origin', 'overflow', 'paint-order', 'path', 'pathlength', 'patterncontentunits', 'patterntransform', 'patternunits', 'points', 'preservealpha', 'preserveaspectratio', 'primitiveunits', 'r', 'rx', 'ry', 'radius', 'refx', 'refy', 'repeatcount', 'repeatdur', 'restart', 'result', 'rotate', 'scale', 'seed', 'shape-rendering', 'specularconstant', 'specularexponent', 'spreadmethod', 'startoffset', 'stddeviation', 'stitchtiles', 'stop-color', 'stop-opacity', 'stroke-dasharray', 'stroke-dashoffset', 'stroke-linecap', 'stroke-linejoin', 'stroke-miterlimit', 'stroke-opacity', 'stroke', 'stroke-width', 'style', 'surfacescale', 'systemlanguage', 'tabindex', 'targetx', 'targety', 'transform', 'transform-origin', 'text-anchor', 'text-decoration', 'text-rendering', 'textlength', 'type', 'u1', 'u2', 'unicode', 'values', 'viewbox', 'visibility', 'version', 'vert-adv-y', 'vert-origin-x', 'vert-origin-y', 'width', 'word-spacing', 'wrap', 'writing-mode', 'xchannelselector', 'ychannelselector', 'x', 'x1', 'x2', 'xmlns', 'y', 'y1', 'y2', 'z', 'zoomandpan']);
-		  const mathMl = freeze(['accent', 'accentunder', 'align', 'bevelled', 'close', 'columnsalign', 'columnlines', 'columnspan', 'denomalign', 'depth', 'dir', 'display', 'displaystyle', 'encoding', 'fence', 'frame', 'height', 'href', 'id', 'largeop', 'length', 'linethickness', 'lspace', 'lquote', 'mathbackground', 'mathcolor', 'mathsize', 'mathvariant', 'maxsize', 'minsize', 'movablelimits', 'notation', 'numalign', 'open', 'rowalign', 'rowlines', 'rowspacing', 'rowspan', 'rspace', 'rquote', 'scriptlevel', 'scriptminsize', 'scriptsizemultiplier', 'selection', 'separator', 'separators', 'stretchy', 'subscriptshift', 'supscriptshift', 'symmetric', 'voffset', 'width', 'xmlns']);
-		  const xml = freeze(['xlink:href', 'xml:id', 'xlink:title', 'xml:space', 'xmlns:xlink']);
-
-		  // eslint-disable-next-line unicorn/better-regex
-		  const MUSTACHE_EXPR = seal(/\{\{[\w\W]*|[\w\W]*\}\}/gm); // Specify template detection regex for SAFE_FOR_TEMPLATES mode
-		  const ERB_EXPR = seal(/<%[\w\W]*|[\w\W]*%>/gm);
-		  const TMPLIT_EXPR = seal(/\${[\w\W]*}/gm);
-		  const DATA_ATTR = seal(/^data-[\-\w.\u00B7-\uFFFF]/); // eslint-disable-line no-useless-escape
-		  const ARIA_ATTR = seal(/^aria-[\-\w]+$/); // eslint-disable-line no-useless-escape
-		  const IS_ALLOWED_URI = seal(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i // eslint-disable-line no-useless-escape
-		  );
-		  const IS_SCRIPT_OR_DATA = seal(/^(?:\w+script|data):/i);
-		  const ATTR_WHITESPACE = seal(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g // eslint-disable-line no-control-regex
-		  );
-		  const DOCTYPE_NAME = seal(/^html$/i);
-		  const CUSTOM_ELEMENT = seal(/^[a-z][.\w]*(-[.\w]+)+$/i);
-
-		  var EXPRESSIONS = /*#__PURE__*/Object.freeze({
-		    __proto__: null,
-		    MUSTACHE_EXPR: MUSTACHE_EXPR,
-		    ERB_EXPR: ERB_EXPR,
-		    TMPLIT_EXPR: TMPLIT_EXPR,
-		    DATA_ATTR: DATA_ATTR,
-		    ARIA_ATTR: ARIA_ATTR,
-		    IS_ALLOWED_URI: IS_ALLOWED_URI,
-		    IS_SCRIPT_OR_DATA: IS_SCRIPT_OR_DATA,
-		    ATTR_WHITESPACE: ATTR_WHITESPACE,
-		    DOCTYPE_NAME: DOCTYPE_NAME,
-		    CUSTOM_ELEMENT: CUSTOM_ELEMENT
-		  });
-
-		  // https://developer.mozilla.org/en-US/docs/Web/API/Node/nodeType
-		  const NODE_TYPE = {
-		    element: 1,
-		    attribute: 2,
-		    text: 3,
-		    cdataSection: 4,
-		    entityReference: 5,
-		    // Deprecated
-		    entityNode: 6,
-		    // Deprecated
-		    progressingInstruction: 7,
-		    comment: 8,
-		    document: 9,
-		    documentType: 10,
-		    documentFragment: 11,
-		    notation: 12 // Deprecated
-		  };
-		  const getGlobal = function getGlobal() {
-		    return typeof window === 'undefined' ? null : window;
-		  };
-
-		  /**
-		   * Creates a no-op policy for internal use only.
-		   * Don't export this function outside this module!
-		   * @param {TrustedTypePolicyFactory} trustedTypes The policy factory.
-		   * @param {HTMLScriptElement} purifyHostElement The Script element used to load DOMPurify (to determine policy name suffix).
-		   * @return {TrustedTypePolicy} The policy created (or null, if Trusted Types
-		   * are not supported or creating the policy failed).
-		   */
-		  const _createTrustedTypesPolicy = function _createTrustedTypesPolicy(trustedTypes, purifyHostElement) {
-		    if (typeof trustedTypes !== 'object' || typeof trustedTypes.createPolicy !== 'function') {
-		      return null;
-		    }
-
-		    // Allow the callers to control the unique policy name
-		    // by adding a data-tt-policy-suffix to the script element with the DOMPurify.
-		    // Policy creation with duplicate names throws in Trusted Types.
-		    let suffix = null;
-		    const ATTR_NAME = 'data-tt-policy-suffix';
-		    if (purifyHostElement && purifyHostElement.hasAttribute(ATTR_NAME)) {
-		      suffix = purifyHostElement.getAttribute(ATTR_NAME);
-		    }
-		    const policyName = 'dompurify' + (suffix ? '#' + suffix : '');
-		    try {
-		      return trustedTypes.createPolicy(policyName, {
-		        createHTML(html) {
-		          return html;
-		        },
-		        createScriptURL(scriptUrl) {
-		          return scriptUrl;
-		        }
-		      });
-		    } catch (_) {
-		      // Policy creation failed (most likely another DOMPurify script has
-		      // already run). Skip creating the policy, as this will only cause errors
-		      // if TT are enforced.
-		      console.warn('TrustedTypes policy ' + policyName + ' could not be created.');
-		      return null;
-		    }
-		  };
-		  function createDOMPurify() {
-		    let window = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : getGlobal();
-		    const DOMPurify = root => createDOMPurify(root);
-
-		    /**
-		     * Version label, exposed for easier checks
-		     * if DOMPurify is up to date or not
-		     */
-		    DOMPurify.version = '3.1.6';
-
-		    /**
-		     * Array of elements that DOMPurify removed during sanitation.
-		     * Empty if nothing was removed.
-		     */
-		    DOMPurify.removed = [];
-		    if (!window || !window.document || window.document.nodeType !== NODE_TYPE.document) {
-		      // Not running in a browser, provide a factory function
-		      // so that you can pass your own Window
-		      DOMPurify.isSupported = false;
-		      return DOMPurify;
-		    }
-		    let {
-		      document
-		    } = window;
-		    const originalDocument = document;
-		    const currentScript = originalDocument.currentScript;
-		    const {
-		      DocumentFragment,
-		      HTMLTemplateElement,
-		      Node,
-		      Element,
-		      NodeFilter,
-		      NamedNodeMap = window.NamedNodeMap || window.MozNamedAttrMap,
-		      HTMLFormElement,
-		      DOMParser,
-		      trustedTypes
-		    } = window;
-		    const ElementPrototype = Element.prototype;
-		    const cloneNode = lookupGetter(ElementPrototype, 'cloneNode');
-		    const remove = lookupGetter(ElementPrototype, 'remove');
-		    const getNextSibling = lookupGetter(ElementPrototype, 'nextSibling');
-		    const getChildNodes = lookupGetter(ElementPrototype, 'childNodes');
-		    const getParentNode = lookupGetter(ElementPrototype, 'parentNode');
-
-		    // As per issue #47, the web-components registry is inherited by a
-		    // new document created via createHTMLDocument. As per the spec
-		    // (http://w3c.github.io/webcomponents/spec/custom/#creating-and-passing-registries)
-		    // a new empty registry is used when creating a template contents owner
-		    // document, so we use that as our parent document to ensure nothing
-		    // is inherited.
-		    if (typeof HTMLTemplateElement === 'function') {
-		      const template = document.createElement('template');
-		      if (template.content && template.content.ownerDocument) {
-		        document = template.content.ownerDocument;
-		      }
-		    }
-		    let trustedTypesPolicy;
-		    let emptyHTML = '';
-		    const {
-		      implementation,
-		      createNodeIterator,
-		      createDocumentFragment,
-		      getElementsByTagName
-		    } = document;
-		    const {
-		      importNode
-		    } = originalDocument;
-		    let hooks = {};
-
-		    /**
-		     * Expose whether this browser supports running the full DOMPurify.
-		     */
-		    DOMPurify.isSupported = typeof entries === 'function' && typeof getParentNode === 'function' && implementation && implementation.createHTMLDocument !== undefined;
-		    const {
-		      MUSTACHE_EXPR,
-		      ERB_EXPR,
-		      TMPLIT_EXPR,
-		      DATA_ATTR,
-		      ARIA_ATTR,
-		      IS_SCRIPT_OR_DATA,
-		      ATTR_WHITESPACE,
-		      CUSTOM_ELEMENT
-		    } = EXPRESSIONS;
-		    let {
-		      IS_ALLOWED_URI: IS_ALLOWED_URI$1
-		    } = EXPRESSIONS;
-
-		    /**
-		     * We consider the elements and attributes below to be safe. Ideally
-		     * don't add any new ones but feel free to remove unwanted ones.
-		     */
-
-		    /* allowed element names */
-		    let ALLOWED_TAGS = null;
-		    const DEFAULT_ALLOWED_TAGS = addToSet({}, [...html$1, ...svg$1, ...svgFilters, ...mathMl$1, ...text]);
-
-		    /* Allowed attribute names */
-		    let ALLOWED_ATTR = null;
-		    const DEFAULT_ALLOWED_ATTR = addToSet({}, [...html, ...svg, ...mathMl, ...xml]);
-
-		    /*
-		     * Configure how DOMPUrify should handle custom elements and their attributes as well as customized built-in elements.
-		     * @property {RegExp|Function|null} tagNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any custom elements)
-		     * @property {RegExp|Function|null} attributeNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any attributes not on the allow list)
-		     * @property {boolean} allowCustomizedBuiltInElements allow custom elements derived from built-ins if they pass CUSTOM_ELEMENT_HANDLING.tagNameCheck. Default: `false`.
-		     */
-		    let CUSTOM_ELEMENT_HANDLING = Object.seal(create(null, {
-		      tagNameCheck: {
-		        writable: true,
-		        configurable: false,
-		        enumerable: true,
-		        value: null
-		      },
-		      attributeNameCheck: {
-		        writable: true,
-		        configurable: false,
-		        enumerable: true,
-		        value: null
-		      },
-		      allowCustomizedBuiltInElements: {
-		        writable: true,
-		        configurable: false,
-		        enumerable: true,
-		        value: false
-		      }
-		    }));
-
-		    /* Explicitly forbidden tags (overrides ALLOWED_TAGS/ADD_TAGS) */
-		    let FORBID_TAGS = null;
-
-		    /* Explicitly forbidden attributes (overrides ALLOWED_ATTR/ADD_ATTR) */
-		    let FORBID_ATTR = null;
-
-		    /* Decide if ARIA attributes are okay */
-		    let ALLOW_ARIA_ATTR = true;
-
-		    /* Decide if custom data attributes are okay */
-		    let ALLOW_DATA_ATTR = true;
-
-		    /* Decide if unknown protocols are okay */
-		    let ALLOW_UNKNOWN_PROTOCOLS = false;
-
-		    /* Decide if self-closing tags in attributes are allowed.
-		     * Usually removed due to a mXSS issue in jQuery 3.0 */
-		    let ALLOW_SELF_CLOSE_IN_ATTR = true;
-
-		    /* Output should be safe for common template engines.
-		     * This means, DOMPurify removes data attributes, mustaches and ERB
-		     */
-		    let SAFE_FOR_TEMPLATES = false;
-
-		    /* Output should be safe even for XML used within HTML and alike.
-		     * This means, DOMPurify removes comments when containing risky content.
-		     */
-		    let SAFE_FOR_XML = true;
-
-		    /* Decide if document with <html>... should be returned */
-		    let WHOLE_DOCUMENT = false;
-
-		    /* Track whether config is already set on this instance of DOMPurify. */
-		    let SET_CONFIG = false;
-
-		    /* Decide if all elements (e.g. style, script) must be children of
-		     * document.body. By default, browsers might move them to document.head */
-		    let FORCE_BODY = false;
-
-		    /* Decide if a DOM `HTMLBodyElement` should be returned, instead of a html
-		     * string (or a TrustedHTML object if Trusted Types are supported).
-		     * If `WHOLE_DOCUMENT` is enabled a `HTMLHtmlElement` will be returned instead
-		     */
-		    let RETURN_DOM = false;
-
-		    /* Decide if a DOM `DocumentFragment` should be returned, instead of a html
-		     * string  (or a TrustedHTML object if Trusted Types are supported) */
-		    let RETURN_DOM_FRAGMENT = false;
-
-		    /* Try to return a Trusted Type object instead of a string, return a string in
-		     * case Trusted Types are not supported  */
-		    let RETURN_TRUSTED_TYPE = false;
-
-		    /* Output should be free from DOM clobbering attacks?
-		     * This sanitizes markups named with colliding, clobberable built-in DOM APIs.
-		     */
-		    let SANITIZE_DOM = true;
-
-		    /* Achieve full DOM Clobbering protection by isolating the namespace of named
-		     * properties and JS variables, mitigating attacks that abuse the HTML/DOM spec rules.
-		     *
-		     * HTML/DOM spec rules that enable DOM Clobbering:
-		     *   - Named Access on Window (§7.3.3)
-		     *   - DOM Tree Accessors (§3.1.5)
-		     *   - Form Element Parent-Child Relations (§4.10.3)
-		     *   - Iframe srcdoc / Nested WindowProxies (§4.8.5)
-		     *   - HTMLCollection (§4.2.10.2)
-		     *
-		     * Namespace isolation is implemented by prefixing `id` and `name` attributes
-		     * with a constant string, i.e., `user-content-`
-		     */
-		    let SANITIZE_NAMED_PROPS = false;
-		    const SANITIZE_NAMED_PROPS_PREFIX = 'user-content-';
-
-		    /* Keep element content when removing element? */
-		    let KEEP_CONTENT = true;
-
-		    /* If a `Node` is passed to sanitize(), then performs sanitization in-place instead
-		     * of importing it into a new Document and returning a sanitized copy */
-		    let IN_PLACE = false;
-
-		    /* Allow usage of profiles like html, svg and mathMl */
-		    let USE_PROFILES = {};
-
-		    /* Tags to ignore content of when KEEP_CONTENT is true */
-		    let FORBID_CONTENTS = null;
-		    const DEFAULT_FORBID_CONTENTS = addToSet({}, ['annotation-xml', 'audio', 'colgroup', 'desc', 'foreignobject', 'head', 'iframe', 'math', 'mi', 'mn', 'mo', 'ms', 'mtext', 'noembed', 'noframes', 'noscript', 'plaintext', 'script', 'style', 'svg', 'template', 'thead', 'title', 'video', 'xmp']);
-
-		    /* Tags that are safe for data: URIs */
-		    let DATA_URI_TAGS = null;
-		    const DEFAULT_DATA_URI_TAGS = addToSet({}, ['audio', 'video', 'img', 'source', 'image', 'track']);
-
-		    /* Attributes safe for values like "javascript:" */
-		    let URI_SAFE_ATTRIBUTES = null;
-		    const DEFAULT_URI_SAFE_ATTRIBUTES = addToSet({}, ['alt', 'class', 'for', 'id', 'label', 'name', 'pattern', 'placeholder', 'role', 'summary', 'title', 'value', 'style', 'xmlns']);
-		    const MATHML_NAMESPACE = 'http://www.w3.org/1998/Math/MathML';
-		    const SVG_NAMESPACE = 'http://www.w3.org/2000/svg';
-		    const HTML_NAMESPACE = 'http://www.w3.org/1999/xhtml';
-		    /* Document namespace */
-		    let NAMESPACE = HTML_NAMESPACE;
-		    let IS_EMPTY_INPUT = false;
-
-		    /* Allowed XHTML+XML namespaces */
-		    let ALLOWED_NAMESPACES = null;
-		    const DEFAULT_ALLOWED_NAMESPACES = addToSet({}, [MATHML_NAMESPACE, SVG_NAMESPACE, HTML_NAMESPACE], stringToString);
-
-		    /* Parsing of strict XHTML documents */
-		    let PARSER_MEDIA_TYPE = null;
-		    const SUPPORTED_PARSER_MEDIA_TYPES = ['application/xhtml+xml', 'text/html'];
-		    const DEFAULT_PARSER_MEDIA_TYPE = 'text/html';
-		    let transformCaseFunc = null;
-
-		    /* Keep a reference to config to pass to hooks */
-		    let CONFIG = null;
-
-		    /* Ideally, do not touch anything below this line */
-		    /* ______________________________________________ */
-
-		    const formElement = document.createElement('form');
-		    const isRegexOrFunction = function isRegexOrFunction(testValue) {
-		      return testValue instanceof RegExp || testValue instanceof Function;
-		    };
-
-		    /**
-		     * _parseConfig
-		     *
-		     * @param  {Object} cfg optional config literal
-		     */
-		    // eslint-disable-next-line complexity
-		    const _parseConfig = function _parseConfig() {
-		      let cfg = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
-		      if (CONFIG && CONFIG === cfg) {
-		        return;
-		      }
-
-		      /* Shield configuration object from tampering */
-		      if (!cfg || typeof cfg !== 'object') {
-		        cfg = {};
-		      }
-
-		      /* Shield configuration object from prototype pollution */
-		      cfg = clone(cfg);
-		      PARSER_MEDIA_TYPE =
-		      // eslint-disable-next-line unicorn/prefer-includes
-		      SUPPORTED_PARSER_MEDIA_TYPES.indexOf(cfg.PARSER_MEDIA_TYPE) === -1 ? DEFAULT_PARSER_MEDIA_TYPE : cfg.PARSER_MEDIA_TYPE;
-
-		      // HTML tags and attributes are not case-sensitive, converting to lowercase. Keeping XHTML as is.
-		      transformCaseFunc = PARSER_MEDIA_TYPE === 'application/xhtml+xml' ? stringToString : stringToLowerCase;
-
-		      /* Set configuration parameters */
-		      ALLOWED_TAGS = objectHasOwnProperty(cfg, 'ALLOWED_TAGS') ? addToSet({}, cfg.ALLOWED_TAGS, transformCaseFunc) : DEFAULT_ALLOWED_TAGS;
-		      ALLOWED_ATTR = objectHasOwnProperty(cfg, 'ALLOWED_ATTR') ? addToSet({}, cfg.ALLOWED_ATTR, transformCaseFunc) : DEFAULT_ALLOWED_ATTR;
-		      ALLOWED_NAMESPACES = objectHasOwnProperty(cfg, 'ALLOWED_NAMESPACES') ? addToSet({}, cfg.ALLOWED_NAMESPACES, stringToString) : DEFAULT_ALLOWED_NAMESPACES;
-		      URI_SAFE_ATTRIBUTES = objectHasOwnProperty(cfg, 'ADD_URI_SAFE_ATTR') ? addToSet(clone(DEFAULT_URI_SAFE_ATTRIBUTES),
-		      // eslint-disable-line indent
-		      cfg.ADD_URI_SAFE_ATTR,
-		      // eslint-disable-line indent
-		      transformCaseFunc // eslint-disable-line indent
-		      ) // eslint-disable-line indent
-		      : DEFAULT_URI_SAFE_ATTRIBUTES;
-		      DATA_URI_TAGS = objectHasOwnProperty(cfg, 'ADD_DATA_URI_TAGS') ? addToSet(clone(DEFAULT_DATA_URI_TAGS),
-		      // eslint-disable-line indent
-		      cfg.ADD_DATA_URI_TAGS,
-		      // eslint-disable-line indent
-		      transformCaseFunc // eslint-disable-line indent
-		      ) // eslint-disable-line indent
-		      : DEFAULT_DATA_URI_TAGS;
-		      FORBID_CONTENTS = objectHasOwnProperty(cfg, 'FORBID_CONTENTS') ? addToSet({}, cfg.FORBID_CONTENTS, transformCaseFunc) : DEFAULT_FORBID_CONTENTS;
-		      FORBID_TAGS = objectHasOwnProperty(cfg, 'FORBID_TAGS') ? addToSet({}, cfg.FORBID_TAGS, transformCaseFunc) : {};
-		      FORBID_ATTR = objectHasOwnProperty(cfg, 'FORBID_ATTR') ? addToSet({}, cfg.FORBID_ATTR, transformCaseFunc) : {};
-		      USE_PROFILES = objectHasOwnProperty(cfg, 'USE_PROFILES') ? cfg.USE_PROFILES : false;
-		      ALLOW_ARIA_ATTR = cfg.ALLOW_ARIA_ATTR !== false; // Default true
-		      ALLOW_DATA_ATTR = cfg.ALLOW_DATA_ATTR !== false; // Default true
-		      ALLOW_UNKNOWN_PROTOCOLS = cfg.ALLOW_UNKNOWN_PROTOCOLS || false; // Default false
-		      ALLOW_SELF_CLOSE_IN_ATTR = cfg.ALLOW_SELF_CLOSE_IN_ATTR !== false; // Default true
-		      SAFE_FOR_TEMPLATES = cfg.SAFE_FOR_TEMPLATES || false; // Default false
-		      SAFE_FOR_XML = cfg.SAFE_FOR_XML !== false; // Default true
-		      WHOLE_DOCUMENT = cfg.WHOLE_DOCUMENT || false; // Default false
-		      RETURN_DOM = cfg.RETURN_DOM || false; // Default false
-		      RETURN_DOM_FRAGMENT = cfg.RETURN_DOM_FRAGMENT || false; // Default false
-		      RETURN_TRUSTED_TYPE = cfg.RETURN_TRUSTED_TYPE || false; // Default false
-		      FORCE_BODY = cfg.FORCE_BODY || false; // Default false
-		      SANITIZE_DOM = cfg.SANITIZE_DOM !== false; // Default true
-		      SANITIZE_NAMED_PROPS = cfg.SANITIZE_NAMED_PROPS || false; // Default false
-		      KEEP_CONTENT = cfg.KEEP_CONTENT !== false; // Default true
-		      IN_PLACE = cfg.IN_PLACE || false; // Default false
-		      IS_ALLOWED_URI$1 = cfg.ALLOWED_URI_REGEXP || IS_ALLOWED_URI;
-		      NAMESPACE = cfg.NAMESPACE || HTML_NAMESPACE;
-		      CUSTOM_ELEMENT_HANDLING = cfg.CUSTOM_ELEMENT_HANDLING || {};
-		      if (cfg.CUSTOM_ELEMENT_HANDLING && isRegexOrFunction(cfg.CUSTOM_ELEMENT_HANDLING.tagNameCheck)) {
-		        CUSTOM_ELEMENT_HANDLING.tagNameCheck = cfg.CUSTOM_ELEMENT_HANDLING.tagNameCheck;
-		      }
-		      if (cfg.CUSTOM_ELEMENT_HANDLING && isRegexOrFunction(cfg.CUSTOM_ELEMENT_HANDLING.attributeNameCheck)) {
-		        CUSTOM_ELEMENT_HANDLING.attributeNameCheck = cfg.CUSTOM_ELEMENT_HANDLING.attributeNameCheck;
-		      }
-		      if (cfg.CUSTOM_ELEMENT_HANDLING && typeof cfg.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements === 'boolean') {
-		        CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements = cfg.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements;
-		      }
-		      if (SAFE_FOR_TEMPLATES) {
-		        ALLOW_DATA_ATTR = false;
-		      }
-		      if (RETURN_DOM_FRAGMENT) {
-		        RETURN_DOM = true;
-		      }
-
-		      /* Parse profile info */
-		      if (USE_PROFILES) {
-		        ALLOWED_TAGS = addToSet({}, text);
-		        ALLOWED_ATTR = [];
-		        if (USE_PROFILES.html === true) {
-		          addToSet(ALLOWED_TAGS, html$1);
-		          addToSet(ALLOWED_ATTR, html);
-		        }
-		        if (USE_PROFILES.svg === true) {
-		          addToSet(ALLOWED_TAGS, svg$1);
-		          addToSet(ALLOWED_ATTR, svg);
-		          addToSet(ALLOWED_ATTR, xml);
-		        }
-		        if (USE_PROFILES.svgFilters === true) {
-		          addToSet(ALLOWED_TAGS, svgFilters);
-		          addToSet(ALLOWED_ATTR, svg);
-		          addToSet(ALLOWED_ATTR, xml);
-		        }
-		        if (USE_PROFILES.mathMl === true) {
-		          addToSet(ALLOWED_TAGS, mathMl$1);
-		          addToSet(ALLOWED_ATTR, mathMl);
-		          addToSet(ALLOWED_ATTR, xml);
-		        }
-		      }
-
-		      /* Merge configuration parameters */
-		      if (cfg.ADD_TAGS) {
-		        if (ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {
-		          ALLOWED_TAGS = clone(ALLOWED_TAGS);
-		        }
-		        addToSet(ALLOWED_TAGS, cfg.ADD_TAGS, transformCaseFunc);
-		      }
-		      if (cfg.ADD_ATTR) {
-		        if (ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {
-		          ALLOWED_ATTR = clone(ALLOWED_ATTR);
-		        }
-		        addToSet(ALLOWED_ATTR, cfg.ADD_ATTR, transformCaseFunc);
-		      }
-		      if (cfg.ADD_URI_SAFE_ATTR) {
-		        addToSet(URI_SAFE_ATTRIBUTES, cfg.ADD_URI_SAFE_ATTR, transformCaseFunc);
-		      }
-		      if (cfg.FORBID_CONTENTS) {
-		        if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {
-		          FORBID_CONTENTS = clone(FORBID_CONTENTS);
-		        }
-		        addToSet(FORBID_CONTENTS, cfg.FORBID_CONTENTS, transformCaseFunc);
-		      }
-
-		      /* Add #text in case KEEP_CONTENT is set to true */
-		      if (KEEP_CONTENT) {
-		        ALLOWED_TAGS['#text'] = true;
-		      }
-
-		      /* Add html, head and body to ALLOWED_TAGS in case WHOLE_DOCUMENT is true */
-		      if (WHOLE_DOCUMENT) {
-		        addToSet(ALLOWED_TAGS, ['html', 'head', 'body']);
-		      }
-
-		      /* Add tbody to ALLOWED_TAGS in case tables are permitted, see #286, #365 */
-		      if (ALLOWED_TAGS.table) {
-		        addToSet(ALLOWED_TAGS, ['tbody']);
-		        delete FORBID_TAGS.tbody;
-		      }
-		      if (cfg.TRUSTED_TYPES_POLICY) {
-		        if (typeof cfg.TRUSTED_TYPES_POLICY.createHTML !== 'function') {
-		          throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a "createHTML" hook.');
-		        }
-		        if (typeof cfg.TRUSTED_TYPES_POLICY.createScriptURL !== 'function') {
-		          throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a "createScriptURL" hook.');
-		        }
-
-		        // Overwrite existing TrustedTypes policy.
-		        trustedTypesPolicy = cfg.TRUSTED_TYPES_POLICY;
-
-		        // Sign local variables required by `sanitize`.
-		        emptyHTML = trustedTypesPolicy.createHTML('');
-		      } else {
-		        // Uninitialized policy, attempt to initialize the internal dompurify policy.
-		        if (trustedTypesPolicy === undefined) {
-		          trustedTypesPolicy = _createTrustedTypesPolicy(trustedTypes, currentScript);
-		        }
-
-		        // If creating the internal policy succeeded sign internal variables.
-		        if (trustedTypesPolicy !== null && typeof emptyHTML === 'string') {
-		          emptyHTML = trustedTypesPolicy.createHTML('');
-		        }
-		      }
-
-		      // Prevent further manipulation of configuration.
-		      // Not available in IE8, Safari 5, etc.
-		      if (freeze) {
-		        freeze(cfg);
-		      }
-		      CONFIG = cfg;
-		    };
-		    const MATHML_TEXT_INTEGRATION_POINTS = addToSet({}, ['mi', 'mo', 'mn', 'ms', 'mtext']);
-		    const HTML_INTEGRATION_POINTS = addToSet({}, ['foreignobject', 'annotation-xml']);
-
-		    // Certain elements are allowed in both SVG and HTML
-		    // namespace. We need to specify them explicitly
-		    // so that they don't get erroneously deleted from
-		    // HTML namespace.
-		    const COMMON_SVG_AND_HTML_ELEMENTS = addToSet({}, ['title', 'style', 'font', 'a', 'script']);
-
-		    /* Keep track of all possible SVG and MathML tags
-		     * so that we can perform the namespace checks
-		     * correctly. */
-		    const ALL_SVG_TAGS = addToSet({}, [...svg$1, ...svgFilters, ...svgDisallowed]);
-		    const ALL_MATHML_TAGS = addToSet({}, [...mathMl$1, ...mathMlDisallowed]);
-
-		    /**
-		     * @param  {Element} element a DOM element whose namespace is being checked
-		     * @returns {boolean} Return false if the element has a
-		     *  namespace that a spec-compliant parser would never
-		     *  return. Return true otherwise.
-		     */
-		    const _checkValidNamespace = function _checkValidNamespace(element) {
-		      let parent = getParentNode(element);
-
-		      // In JSDOM, if we're inside shadow DOM, then parentNode
-		      // can be null. We just simulate parent in this case.
-		      if (!parent || !parent.tagName) {
-		        parent = {
-		          namespaceURI: NAMESPACE,
-		          tagName: 'template'
-		        };
-		      }
-		      const tagName = stringToLowerCase(element.tagName);
-		      const parentTagName = stringToLowerCase(parent.tagName);
-		      if (!ALLOWED_NAMESPACES[element.namespaceURI]) {
-		        return false;
-		      }
-		      if (element.namespaceURI === SVG_NAMESPACE) {
-		        // The only way to switch from HTML namespace to SVG
-		        // is via <svg>. If it happens via any other tag, then
-		        // it should be killed.
-		        if (parent.namespaceURI === HTML_NAMESPACE) {
-		          return tagName === 'svg';
-		        }
-
-		        // The only way to switch from MathML to SVG is via`
-		        // svg if parent is either <annotation-xml> or MathML
-		        // text integration points.
-		        if (parent.namespaceURI === MATHML_NAMESPACE) {
-		          return tagName === 'svg' && (parentTagName === 'annotation-xml' || MATHML_TEXT_INTEGRATION_POINTS[parentTagName]);
-		        }
-
-		        // We only allow elements that are defined in SVG
-		        // spec. All others are disallowed in SVG namespace.
-		        return Boolean(ALL_SVG_TAGS[tagName]);
-		      }
-		      if (element.namespaceURI === MATHML_NAMESPACE) {
-		        // The only way to switch from HTML namespace to MathML
-		        // is via <math>. If it happens via any other tag, then
-		        // it should be killed.
-		        if (parent.namespaceURI === HTML_NAMESPACE) {
-		          return tagName === 'math';
-		        }
-
-		        // The only way to switch from SVG to MathML is via
-		        // <math> and HTML integration points
-		        if (parent.namespaceURI === SVG_NAMESPACE) {
-		          return tagName === 'math' && HTML_INTEGRATION_POINTS[parentTagName];
-		        }
-
-		        // We only allow elements that are defined in MathML
-		        // spec. All others are disallowed in MathML namespace.
-		        return Boolean(ALL_MATHML_TAGS[tagName]);
-		      }
-		      if (element.namespaceURI === HTML_NAMESPACE) {
-		        // The only way to switch from SVG to HTML is via
-		        // HTML integration points, and from MathML to HTML
-		        // is via MathML text integration points
-		        if (parent.namespaceURI === SVG_NAMESPACE && !HTML_INTEGRATION_POINTS[parentTagName]) {
-		          return false;
-		        }
-		        if (parent.namespaceURI === MATHML_NAMESPACE && !MATHML_TEXT_INTEGRATION_POINTS[parentTagName]) {
-		          return false;
-		        }
-
-		        // We disallow tags that are specific for MathML
-		        // or SVG and should never appear in HTML namespace
-		        return !ALL_MATHML_TAGS[tagName] && (COMMON_SVG_AND_HTML_ELEMENTS[tagName] || !ALL_SVG_TAGS[tagName]);
-		      }
-
-		      // For XHTML and XML documents that support custom namespaces
-		      if (PARSER_MEDIA_TYPE === 'application/xhtml+xml' && ALLOWED_NAMESPACES[element.namespaceURI]) {
-		        return true;
-		      }
-
-		      // The code should never reach this place (this means
-		      // that the element somehow got namespace that is not
-		      // HTML, SVG, MathML or allowed via ALLOWED_NAMESPACES).
-		      // Return false just in case.
-		      return false;
-		    };
-
-		    /**
-		     * _forceRemove
-		     *
-		     * @param  {Node} node a DOM node
-		     */
-		    const _forceRemove = function _forceRemove(node) {
-		      arrayPush(DOMPurify.removed, {
-		        element: node
-		      });
-		      try {
-		        // eslint-disable-next-line unicorn/prefer-dom-node-remove
-		        getParentNode(node).removeChild(node);
-		      } catch (_) {
-		        remove(node);
-		      }
-		    };
-
-		    /**
-		     * _removeAttribute
-		     *
-		     * @param  {String} name an Attribute name
-		     * @param  {Node} node a DOM node
-		     */
-		    const _removeAttribute = function _removeAttribute(name, node) {
-		      try {
-		        arrayPush(DOMPurify.removed, {
-		          attribute: node.getAttributeNode(name),
-		          from: node
-		        });
-		      } catch (_) {
-		        arrayPush(DOMPurify.removed, {
-		          attribute: null,
-		          from: node
-		        });
-		      }
-		      node.removeAttribute(name);
-
-		      // We void attribute values for unremovable "is"" attributes
-		      if (name === 'is' && !ALLOWED_ATTR[name]) {
-		        if (RETURN_DOM || RETURN_DOM_FRAGMENT) {
-		          try {
-		            _forceRemove(node);
-		          } catch (_) {}
-		        } else {
-		          try {
-		            node.setAttribute(name, '');
-		          } catch (_) {}
-		        }
-		      }
-		    };
-
-		    /**
-		     * _initDocument
-		     *
-		     * @param  {String} dirty a string of dirty markup
-		     * @return {Document} a DOM, filled with the dirty markup
-		     */
-		    const _initDocument = function _initDocument(dirty) {
-		      /* Create a HTML document */
-		      let doc = null;
-		      let leadingWhitespace = null;
-		      if (FORCE_BODY) {
-		        dirty = '<remove></remove>' + dirty;
-		      } else {
-		        /* If FORCE_BODY isn't used, leading whitespace needs to be preserved manually */
-		        const matches = stringMatch(dirty, /^[\r\n\t ]+/);
-		        leadingWhitespace = matches && matches[0];
-		      }
-		      if (PARSER_MEDIA_TYPE === 'application/xhtml+xml' && NAMESPACE === HTML_NAMESPACE) {
-		        // Root of XHTML doc must contain xmlns declaration (see https://www.w3.org/TR/xhtml1/normative.html#strict)
-		        dirty = '<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>' + dirty + '</body></html>';
-		      }
-		      const dirtyPayload = trustedTypesPolicy ? trustedTypesPolicy.createHTML(dirty) : dirty;
-		      /*
-		       * Use the DOMParser API by default, fallback later if needs be
-		       * DOMParser not work for svg when has multiple root element.
-		       */
-		      if (NAMESPACE === HTML_NAMESPACE) {
-		        try {
-		          doc = new DOMParser().parseFromString(dirtyPayload, PARSER_MEDIA_TYPE);
-		        } catch (_) {}
-		      }
-
-		      /* Use createHTMLDocument in case DOMParser is not available */
-		      if (!doc || !doc.documentElement) {
-		        doc = implementation.createDocument(NAMESPACE, 'template', null);
-		        try {
-		          doc.documentElement.innerHTML = IS_EMPTY_INPUT ? emptyHTML : dirtyPayload;
-		        } catch (_) {
-		          // Syntax error if dirtyPayload is invalid xml
-		        }
-		      }
-		      const body = doc.body || doc.documentElement;
-		      if (dirty && leadingWhitespace) {
-		        body.insertBefore(document.createTextNode(leadingWhitespace), body.childNodes[0] || null);
-		      }
-
-		      /* Work on whole document or just its body */
-		      if (NAMESPACE === HTML_NAMESPACE) {
-		        return getElementsByTagName.call(doc, WHOLE_DOCUMENT ? 'html' : 'body')[0];
-		      }
-		      return WHOLE_DOCUMENT ? doc.documentElement : body;
-		    };
-
-		    /**
-		     * Creates a NodeIterator object that you can use to traverse filtered lists of nodes or elements in a document.
-		     *
-		     * @param  {Node} root The root element or node to start traversing on.
-		     * @return {NodeIterator} The created NodeIterator
-		     */
-		    const _createNodeIterator = function _createNodeIterator(root) {
-		      return createNodeIterator.call(root.ownerDocument || root, root,
-		      // eslint-disable-next-line no-bitwise
-		      NodeFilter.SHOW_ELEMENT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_TEXT | NodeFilter.SHOW_PROCESSING_INSTRUCTION | NodeFilter.SHOW_CDATA_SECTION, null);
-		    };
-
-		    /**
-		     * _isClobbered
-		     *
-		     * @param  {Node} elm element to check for clobbering attacks
-		     * @return {Boolean} true if clobbered, false if safe
-		     */
-		    const _isClobbered = function _isClobbered(elm) {
-		      return elm instanceof HTMLFormElement && (typeof elm.nodeName !== 'string' || typeof elm.textContent !== 'string' || typeof elm.removeChild !== 'function' || !(elm.attributes instanceof NamedNodeMap) || typeof elm.removeAttribute !== 'function' || typeof elm.setAttribute !== 'function' || typeof elm.namespaceURI !== 'string' || typeof elm.insertBefore !== 'function' || typeof elm.hasChildNodes !== 'function');
-		    };
-
-		    /**
-		     * Checks whether the given object is a DOM node.
-		     *
-		     * @param  {Node} object object to check whether it's a DOM node
-		     * @return {Boolean} true is object is a DOM node
-		     */
-		    const _isNode = function _isNode(object) {
-		      return typeof Node === 'function' && object instanceof Node;
-		    };
-
-		    /**
-		     * _executeHook
-		     * Execute user configurable hooks
-		     *
-		     * @param  {String} entryPoint  Name of the hook's entry point
-		     * @param  {Node} currentNode node to work on with the hook
-		     * @param  {Object} data additional hook parameters
-		     */
-		    const _executeHook = function _executeHook(entryPoint, currentNode, data) {
-		      if (!hooks[entryPoint]) {
-		        return;
-		      }
-		      arrayForEach(hooks[entryPoint], hook => {
-		        hook.call(DOMPurify, currentNode, data, CONFIG);
-		      });
-		    };
-
-		    /**
-		     * _sanitizeElements
-		     *
-		     * @protect nodeName
-		     * @protect textContent
-		     * @protect removeChild
-		     *
-		     * @param   {Node} currentNode to check for permission to exist
-		     * @return  {Boolean} true if node was killed, false if left alive
-		     */
-		    const _sanitizeElements = function _sanitizeElements(currentNode) {
-		      let content = null;
-
-		      /* Execute a hook if present */
-		      _executeHook('beforeSanitizeElements', currentNode, null);
-
-		      /* Check if element is clobbered or can clobber */
-		      if (_isClobbered(currentNode)) {
-		        _forceRemove(currentNode);
-		        return true;
-		      }
-
-		      /* Now let's check the element's type and name */
-		      const tagName = transformCaseFunc(currentNode.nodeName);
-
-		      /* Execute a hook if present */
-		      _executeHook('uponSanitizeElement', currentNode, {
-		        tagName,
-		        allowedTags: ALLOWED_TAGS
-		      });
-
-		      /* Detect mXSS attempts abusing namespace confusion */
-		      if (currentNode.hasChildNodes() && !_isNode(currentNode.firstElementChild) && regExpTest(/<[/\w]/g, currentNode.innerHTML) && regExpTest(/<[/\w]/g, currentNode.textContent)) {
-		        _forceRemove(currentNode);
-		        return true;
-		      }
-
-		      /* Remove any occurrence of processing instructions */
-		      if (currentNode.nodeType === NODE_TYPE.progressingInstruction) {
-		        _forceRemove(currentNode);
-		        return true;
-		      }
-
-		      /* Remove any kind of possibly harmful comments */
-		      if (SAFE_FOR_XML && currentNode.nodeType === NODE_TYPE.comment && regExpTest(/<[/\w]/g, currentNode.data)) {
-		        _forceRemove(currentNode);
-		        return true;
-		      }
-
-		      /* Remove element if anything forbids its presence */
-		      if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {
-		        /* Check if we have a custom element to handle */
-		        if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) {
-		          if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)) {
-		            return false;
-		          }
-		          if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(tagName)) {
-		            return false;
-		          }
-		        }
-
-		        /* Keep content except for bad-listed elements */
-		        if (KEEP_CONTENT && !FORBID_CONTENTS[tagName]) {
-		          const parentNode = getParentNode(currentNode) || currentNode.parentNode;
-		          const childNodes = getChildNodes(currentNode) || currentNode.childNodes;
-		          if (childNodes && parentNode) {
-		            const childCount = childNodes.length;
-		            for (let i = childCount - 1; i >= 0; --i) {
-		              const childClone = cloneNode(childNodes[i], true);
-		              childClone.__removalCount = (currentNode.__removalCount || 0) + 1;
-		              parentNode.insertBefore(childClone, getNextSibling(currentNode));
-		            }
-		          }
-		        }
-		        _forceRemove(currentNode);
-		        return true;
-		      }
-
-		      /* Check whether element has a valid namespace */
-		      if (currentNode instanceof Element && !_checkValidNamespace(currentNode)) {
-		        _forceRemove(currentNode);
-		        return true;
-		      }
-
-		      /* Make sure that older browsers don't get fallback-tag mXSS */
-		      if ((tagName === 'noscript' || tagName === 'noembed' || tagName === 'noframes') && regExpTest(/<\/no(script|embed|frames)/i, currentNode.innerHTML)) {
-		        _forceRemove(currentNode);
-		        return true;
-		      }
-
-		      /* Sanitize element content to be template-safe */
-		      if (SAFE_FOR_TEMPLATES && currentNode.nodeType === NODE_TYPE.text) {
-		        /* Get the element's text content */
-		        content = currentNode.textContent;
-		        arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
-		          content = stringReplace(content, expr, ' ');
-		        });
-		        if (currentNode.textContent !== content) {
-		          arrayPush(DOMPurify.removed, {
-		            element: currentNode.cloneNode()
-		          });
-		          currentNode.textContent = content;
-		        }
-		      }
-
-		      /* Execute a hook if present */
-		      _executeHook('afterSanitizeElements', currentNode, null);
-		      return false;
-		    };
-
-		    /**
-		     * _isValidAttribute
-		     *
-		     * @param  {string} lcTag Lowercase tag name of containing element.
-		     * @param  {string} lcName Lowercase attribute name.
-		     * @param  {string} value Attribute value.
-		     * @return {Boolean} Returns true if `value` is valid, otherwise false.
-		     */
-		    // eslint-disable-next-line complexity
-		    const _isValidAttribute = function _isValidAttribute(lcTag, lcName, value) {
-		      /* Make sure attribute cannot clobber */
-		      if (SANITIZE_DOM && (lcName === 'id' || lcName === 'name') && (value in document || value in formElement)) {
-		        return false;
-		      }
-
-		      /* Allow valid data-* attributes: At least one character after "-"
-		          (https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-*-attributes)
-		          XML-compatible (https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible and http://www.w3.org/TR/xml/#d0e804)
-		          We don't need to check the value; it's always URI safe. */
-		      if (ALLOW_DATA_ATTR && !FORBID_ATTR[lcName] && regExpTest(DATA_ATTR, lcName)) ; else if (ALLOW_ARIA_ATTR && regExpTest(ARIA_ATTR, lcName)) ; else if (!ALLOWED_ATTR[lcName] || FORBID_ATTR[lcName]) {
-		        if (
-		        // First condition does a very basic check if a) it's basically a valid custom element tagname AND
-		        // b) if the tagName passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
-		        // and c) if the attribute name passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.attributeNameCheck
-		        _isBasicCustomElement(lcTag) && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, lcTag) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(lcTag)) && (CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.attributeNameCheck, lcName) || CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.attributeNameCheck(lcName)) ||
-		        // Alternative, second condition checks if it's an `is`-attribute, AND
-		        // the value passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
-		        lcName === 'is' && CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, value) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(value))) ; else {
-		          return false;
-		        }
-		        /* Check value is safe. First, is attr inert? If so, is safe */
-		      } else if (URI_SAFE_ATTRIBUTES[lcName]) ; else if (regExpTest(IS_ALLOWED_URI$1, stringReplace(value, ATTR_WHITESPACE, ''))) ; else if ((lcName === 'src' || lcName === 'xlink:href' || lcName === 'href') && lcTag !== 'script' && stringIndexOf(value, 'data:') === 0 && DATA_URI_TAGS[lcTag]) ; else if (ALLOW_UNKNOWN_PROTOCOLS && !regExpTest(IS_SCRIPT_OR_DATA, stringReplace(value, ATTR_WHITESPACE, ''))) ; else if (value) {
-		        return false;
-		      } else ;
-		      return true;
-		    };
-
-		    /**
-		     * _isBasicCustomElement
-		     * checks if at least one dash is included in tagName, and it's not the first char
-		     * for more sophisticated checking see https://github.com/sindresorhus/validate-element-name
-		     *
-		     * @param {string} tagName name of the tag of the node to sanitize
-		     * @returns {boolean} Returns true if the tag name meets the basic criteria for a custom element, otherwise false.
-		     */
-		    const _isBasicCustomElement = function _isBasicCustomElement(tagName) {
-		      return tagName !== 'annotation-xml' && stringMatch(tagName, CUSTOM_ELEMENT);
-		    };
-
-		    /**
-		     * _sanitizeAttributes
-		     *
-		     * @protect attributes
-		     * @protect nodeName
-		     * @protect removeAttribute
-		     * @protect setAttribute
-		     *
-		     * @param  {Node} currentNode to sanitize
-		     */
-		    const _sanitizeAttributes = function _sanitizeAttributes(currentNode) {
-		      /* Execute a hook if present */
-		      _executeHook('beforeSanitizeAttributes', currentNode, null);
-		      const {
-		        attributes
-		      } = currentNode;
-
-		      /* Check if we have attributes; if not we might have a text node */
-		      if (!attributes) {
-		        return;
-		      }
-		      const hookEvent = {
-		        attrName: '',
-		        attrValue: '',
-		        keepAttr: true,
-		        allowedAttributes: ALLOWED_ATTR
-		      };
-		      let l = attributes.length;
-
-		      /* Go backwards over all attributes; safely remove bad ones */
-		      while (l--) {
-		        const attr = attributes[l];
-		        const {
-		          name,
-		          namespaceURI,
-		          value: attrValue
-		        } = attr;
-		        const lcName = transformCaseFunc(name);
-		        let value = name === 'value' ? attrValue : stringTrim(attrValue);
-
-		        /* Execute a hook if present */
-		        hookEvent.attrName = lcName;
-		        hookEvent.attrValue = value;
-		        hookEvent.keepAttr = true;
-		        hookEvent.forceKeepAttr = undefined; // Allows developers to see this is a property they can set
-		        _executeHook('uponSanitizeAttribute', currentNode, hookEvent);
-		        value = hookEvent.attrValue;
-
-		        /* Work around a security issue with comments inside attributes */
-		        if (SAFE_FOR_XML && regExpTest(/((--!?|])>)|<\/(style|title)/i, value)) {
-		          _removeAttribute(name, currentNode);
-		          continue;
-		        }
-
-		        /* Did the hooks approve of the attribute? */
-		        if (hookEvent.forceKeepAttr) {
-		          continue;
-		        }
-
-		        /* Remove attribute */
-		        _removeAttribute(name, currentNode);
-
-		        /* Did the hooks approve of the attribute? */
-		        if (!hookEvent.keepAttr) {
-		          continue;
-		        }
-
-		        /* Work around a security issue in jQuery 3.0 */
-		        if (!ALLOW_SELF_CLOSE_IN_ATTR && regExpTest(/\/>/i, value)) {
-		          _removeAttribute(name, currentNode);
-		          continue;
-		        }
-
-		        /* Sanitize attribute content to be template-safe */
-		        if (SAFE_FOR_TEMPLATES) {
-		          arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
-		            value = stringReplace(value, expr, ' ');
-		          });
-		        }
-
-		        /* Is `value` valid for this attribute? */
-		        const lcTag = transformCaseFunc(currentNode.nodeName);
-		        if (!_isValidAttribute(lcTag, lcName, value)) {
-		          continue;
-		        }
-
-		        /* Full DOM Clobbering protection via namespace isolation,
-		         * Prefix id and name attributes with `user-content-`
-		         */
-		        if (SANITIZE_NAMED_PROPS && (lcName === 'id' || lcName === 'name')) {
-		          // Remove the attribute with this value
-		          _removeAttribute(name, currentNode);
-
-		          // Prefix the value and later re-create the attribute with the sanitized value
-		          value = SANITIZE_NAMED_PROPS_PREFIX + value;
-		        }
-
-		        /* Handle attributes that require Trusted Types */
-		        if (trustedTypesPolicy && typeof trustedTypes === 'object' && typeof trustedTypes.getAttributeType === 'function') {
-		          if (namespaceURI) ; else {
-		            switch (trustedTypes.getAttributeType(lcTag, lcName)) {
-		              case 'TrustedHTML':
-		                {
-		                  value = trustedTypesPolicy.createHTML(value);
-		                  break;
-		                }
-		              case 'TrustedScriptURL':
-		                {
-		                  value = trustedTypesPolicy.createScriptURL(value);
-		                  break;
-		                }
-		            }
-		          }
-		        }
-
-		        /* Handle invalid data-* attribute set by try-catching it */
-		        try {
-		          if (namespaceURI) {
-		            currentNode.setAttributeNS(namespaceURI, name, value);
-		          } else {
-		            /* Fallback to setAttribute() for browser-unrecognized namespaces e.g. "x-schema". */
-		            currentNode.setAttribute(name, value);
-		          }
-		          if (_isClobbered(currentNode)) {
-		            _forceRemove(currentNode);
-		          } else {
-		            arrayPop(DOMPurify.removed);
-		          }
-		        } catch (_) {}
-		      }
-
-		      /* Execute a hook if present */
-		      _executeHook('afterSanitizeAttributes', currentNode, null);
-		    };
-
-		    /**
-		     * _sanitizeShadowDOM
-		     *
-		     * @param  {DocumentFragment} fragment to iterate over recursively
-		     */
-		    const _sanitizeShadowDOM = function _sanitizeShadowDOM(fragment) {
-		      let shadowNode = null;
-		      const shadowIterator = _createNodeIterator(fragment);
-
-		      /* Execute a hook if present */
-		      _executeHook('beforeSanitizeShadowDOM', fragment, null);
-		      while (shadowNode = shadowIterator.nextNode()) {
-		        /* Execute a hook if present */
-		        _executeHook('uponSanitizeShadowNode', shadowNode, null);
-
-		        /* Sanitize tags and elements */
-		        if (_sanitizeElements(shadowNode)) {
-		          continue;
-		        }
-
-		        /* Deep shadow DOM detected */
-		        if (shadowNode.content instanceof DocumentFragment) {
-		          _sanitizeShadowDOM(shadowNode.content);
-		        }
-
-		        /* Check attributes, sanitize if necessary */
-		        _sanitizeAttributes(shadowNode);
-		      }
-
-		      /* Execute a hook if present */
-		      _executeHook('afterSanitizeShadowDOM', fragment, null);
-		    };
-
-		    /**
-		     * Sanitize
-		     * Public method providing core sanitation functionality
-		     *
-		     * @param {String|Node} dirty string or DOM node
-		     * @param {Object} cfg object
-		     */
-		    // eslint-disable-next-line complexity
-		    DOMPurify.sanitize = function (dirty) {
-		      let cfg = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
-		      let body = null;
-		      let importedNode = null;
-		      let currentNode = null;
-		      let returnNode = null;
-		      /* Make sure we have a string to sanitize.
-		        DO NOT return early, as this will return the wrong type if
-		        the user has requested a DOM object rather than a string */
-		      IS_EMPTY_INPUT = !dirty;
-		      if (IS_EMPTY_INPUT) {
-		        dirty = '<!-->';
-		      }
-
-		      /* Stringify, in case dirty is an object */
-		      if (typeof dirty !== 'string' && !_isNode(dirty)) {
-		        if (typeof dirty.toString === 'function') {
-		          dirty = dirty.toString();
-		          if (typeof dirty !== 'string') {
-		            throw typeErrorCreate('dirty is not a string, aborting');
-		          }
-		        } else {
-		          throw typeErrorCreate('toString is not a function');
-		        }
-		      }
-
-		      /* Return dirty HTML if DOMPurify cannot run */
-		      if (!DOMPurify.isSupported) {
-		        return dirty;
-		      }
-
-		      /* Assign config vars */
-		      if (!SET_CONFIG) {
-		        _parseConfig(cfg);
-		      }
-
-		      /* Clean up removed elements */
-		      DOMPurify.removed = [];
-
-		      /* Check if dirty is correctly typed for IN_PLACE */
-		      if (typeof dirty === 'string') {
-		        IN_PLACE = false;
-		      }
-		      if (IN_PLACE) {
-		        /* Do some early pre-sanitization to avoid unsafe root nodes */
-		        if (dirty.nodeName) {
-		          const tagName = transformCaseFunc(dirty.nodeName);
-		          if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {
-		            throw typeErrorCreate('root node is forbidden and cannot be sanitized in-place');
-		          }
-		        }
-		      } else if (dirty instanceof Node) {
-		        /* If dirty is a DOM element, append to an empty document to avoid
-		           elements being stripped by the parser */
-		        body = _initDocument('<!---->');
-		        importedNode = body.ownerDocument.importNode(dirty, true);
-		        if (importedNode.nodeType === NODE_TYPE.element && importedNode.nodeName === 'BODY') {
-		          /* Node is already a body, use as is */
-		          body = importedNode;
-		        } else if (importedNode.nodeName === 'HTML') {
-		          body = importedNode;
-		        } else {
-		          // eslint-disable-next-line unicorn/prefer-dom-node-append
-		          body.appendChild(importedNode);
-		        }
-		      } else {
-		        /* Exit directly if we have nothing to do */
-		        if (!RETURN_DOM && !SAFE_FOR_TEMPLATES && !WHOLE_DOCUMENT &&
-		        // eslint-disable-next-line unicorn/prefer-includes
-		        dirty.indexOf('<') === -1) {
-		          return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? trustedTypesPolicy.createHTML(dirty) : dirty;
-		        }
-
-		        /* Initialize the document to work on */
-		        body = _initDocument(dirty);
-
-		        /* Check we have a DOM node from the data */
-		        if (!body) {
-		          return RETURN_DOM ? null : RETURN_TRUSTED_TYPE ? emptyHTML : '';
-		        }
-		      }
-
-		      /* Remove first element node (ours) if FORCE_BODY is set */
-		      if (body && FORCE_BODY) {
-		        _forceRemove(body.firstChild);
-		      }
-
-		      /* Get node iterator */
-		      const nodeIterator = _createNodeIterator(IN_PLACE ? dirty : body);
-
-		      /* Now start iterating over the created document */
-		      while (currentNode = nodeIterator.nextNode()) {
-		        /* Sanitize tags and elements */
-		        if (_sanitizeElements(currentNode)) {
-		          continue;
-		        }
-
-		        /* Shadow DOM detected, sanitize it */
-		        if (currentNode.content instanceof DocumentFragment) {
-		          _sanitizeShadowDOM(currentNode.content);
-		        }
-
-		        /* Check attributes, sanitize if necessary */
-		        _sanitizeAttributes(currentNode);
-		      }
-
-		      /* If we sanitized `dirty` in-place, return it. */
-		      if (IN_PLACE) {
-		        return dirty;
-		      }
-
-		      /* Return sanitized string or DOM */
-		      if (RETURN_DOM) {
-		        if (RETURN_DOM_FRAGMENT) {
-		          returnNode = createDocumentFragment.call(body.ownerDocument);
-		          while (body.firstChild) {
-		            // eslint-disable-next-line unicorn/prefer-dom-node-append
-		            returnNode.appendChild(body.firstChild);
-		          }
-		        } else {
-		          returnNode = body;
-		        }
-		        if (ALLOWED_ATTR.shadowroot || ALLOWED_ATTR.shadowrootmode) {
-		          /*
-		            AdoptNode() is not used because internal state is not reset
-		            (e.g. the past names map of a HTMLFormElement), this is safe
-		            in theory but we would rather not risk another attack vector.
-		            The state that is cloned by importNode() is explicitly defined
-		            by the specs.
-		          */
-		          returnNode = importNode.call(originalDocument, returnNode, true);
-		        }
-		        return returnNode;
-		      }
-		      let serializedHTML = WHOLE_DOCUMENT ? body.outerHTML : body.innerHTML;
-
-		      /* Serialize doctype if allowed */
-		      if (WHOLE_DOCUMENT && ALLOWED_TAGS['!doctype'] && body.ownerDocument && body.ownerDocument.doctype && body.ownerDocument.doctype.name && regExpTest(DOCTYPE_NAME, body.ownerDocument.doctype.name)) {
-		        serializedHTML = '<!DOCTYPE ' + body.ownerDocument.doctype.name + '>\n' + serializedHTML;
-		      }
-
-		      /* Sanitize final string template-safe */
-		      if (SAFE_FOR_TEMPLATES) {
-		        arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
-		          serializedHTML = stringReplace(serializedHTML, expr, ' ');
-		        });
-		      }
-		      return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? trustedTypesPolicy.createHTML(serializedHTML) : serializedHTML;
-		    };
-
-		    /**
-		     * Public method to set the configuration once
-		     * setConfig
-		     *
-		     * @param {Object} cfg configuration object
-		     */
-		    DOMPurify.setConfig = function () {
-		      let cfg = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
-		      _parseConfig(cfg);
-		      SET_CONFIG = true;
-		    };
-
-		    /**
-		     * Public method to remove the configuration
-		     * clearConfig
-		     *
-		     */
-		    DOMPurify.clearConfig = function () {
-		      CONFIG = null;
-		      SET_CONFIG = false;
-		    };
-
-		    /**
-		     * Public method to check if an attribute value is valid.
-		     * Uses last set config, if any. Otherwise, uses config defaults.
-		     * isValidAttribute
-		     *
-		     * @param  {String} tag Tag name of containing element.
-		     * @param  {String} attr Attribute name.
-		     * @param  {String} value Attribute value.
-		     * @return {Boolean} Returns true if `value` is valid. Otherwise, returns false.
-		     */
-		    DOMPurify.isValidAttribute = function (tag, attr, value) {
-		      /* Initialize shared config vars if necessary. */
-		      if (!CONFIG) {
-		        _parseConfig({});
-		      }
-		      const lcTag = transformCaseFunc(tag);
-		      const lcName = transformCaseFunc(attr);
-		      return _isValidAttribute(lcTag, lcName, value);
-		    };
-
-		    /**
-		     * AddHook
-		     * Public method to add DOMPurify hooks
-		     *
-		     * @param {String} entryPoint entry point for the hook to add
-		     * @param {Function} hookFunction function to execute
-		     */
-		    DOMPurify.addHook = function (entryPoint, hookFunction) {
-		      if (typeof hookFunction !== 'function') {
-		        return;
-		      }
-		      hooks[entryPoint] = hooks[entryPoint] || [];
-		      arrayPush(hooks[entryPoint], hookFunction);
-		    };
-
-		    /**
-		     * RemoveHook
-		     * Public method to remove a DOMPurify hook at a given entryPoint
-		     * (pops it from the stack of hooks if more are present)
-		     *
-		     * @param {String} entryPoint entry point for the hook to remove
-		     * @return {Function} removed(popped) hook
-		     */
-		    DOMPurify.removeHook = function (entryPoint) {
-		      if (hooks[entryPoint]) {
-		        return arrayPop(hooks[entryPoint]);
-		      }
-		    };
-
-		    /**
-		     * RemoveHooks
-		     * Public method to remove all DOMPurify hooks at a given entryPoint
-		     *
-		     * @param  {String} entryPoint entry point for the hooks to remove
-		     */
-		    DOMPurify.removeHooks = function (entryPoint) {
-		      if (hooks[entryPoint]) {
-		        hooks[entryPoint] = [];
-		      }
-		    };
-
-		    /**
-		     * RemoveAllHooks
-		     * Public method to remove all DOMPurify hooks
-		     */
-		    DOMPurify.removeAllHooks = function () {
-		      hooks = {};
-		    };
-		    return DOMPurify;
-		  }
-		  var purify = createDOMPurify();
-
-		  return purify;
-
-		}));
-		
-	} (purify));
-	return purify.exports;
-}
-
-window.DOMPurify || (window.DOMPurify = requirePurify().default || requirePurify());
+/*! @license DOMPurify 3.2.4 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.2.4/LICENSE */
+
+var purify_cjs;
+var hasRequiredPurify_cjs;
+
+function requirePurify_cjs () {
+	if (hasRequiredPurify_cjs) return purify_cjs;
+	hasRequiredPurify_cjs = 1;
+
+	const {
+	  entries,
+	  setPrototypeOf,
+	  isFrozen,
+	  getPrototypeOf,
+	  getOwnPropertyDescriptor
+	} = Object;
+	let {
+	  freeze,
+	  seal,
+	  create
+	} = Object; // eslint-disable-line import/no-mutable-exports
+	let {
+	  apply,
+	  construct
+	} = typeof Reflect !== 'undefined' && Reflect;
+	if (!freeze) {
+	  freeze = function freeze(x) {
+	    return x;
+	  };
+	}
+	if (!seal) {
+	  seal = function seal(x) {
+	    return x;
+	  };
+	}
+	if (!apply) {
+	  apply = function apply(fun, thisValue, args) {
+	    return fun.apply(thisValue, args);
+	  };
+	}
+	if (!construct) {
+	  construct = function construct(Func, args) {
+	    return new Func(...args);
+	  };
+	}
+	const arrayForEach = unapply(Array.prototype.forEach);
+	const arrayLastIndexOf = unapply(Array.prototype.lastIndexOf);
+	const arrayPop = unapply(Array.prototype.pop);
+	const arrayPush = unapply(Array.prototype.push);
+	const arraySplice = unapply(Array.prototype.splice);
+	const stringToLowerCase = unapply(String.prototype.toLowerCase);
+	const stringToString = unapply(String.prototype.toString);
+	const stringMatch = unapply(String.prototype.match);
+	const stringReplace = unapply(String.prototype.replace);
+	const stringIndexOf = unapply(String.prototype.indexOf);
+	const stringTrim = unapply(String.prototype.trim);
+	const objectHasOwnProperty = unapply(Object.prototype.hasOwnProperty);
+	const regExpTest = unapply(RegExp.prototype.test);
+	const typeErrorCreate = unconstruct(TypeError);
+	/**
+	 * Creates a new function that calls the given function with a specified thisArg and arguments.
+	 *
+	 * @param func - The function to be wrapped and called.
+	 * @returns A new function that calls the given function with a specified thisArg and arguments.
+	 */
+	function unapply(func) {
+	  return function (thisArg) {
+	    for (var _len = arguments.length, args = new Array(_len > 1 ? _len - 1 : 0), _key = 1; _key < _len; _key++) {
+	      args[_key - 1] = arguments[_key];
+	    }
+	    return apply(func, thisArg, args);
+	  };
+	}
+	/**
+	 * Creates a new function that constructs an instance of the given constructor function with the provided arguments.
+	 *
+	 * @param func - The constructor function to be wrapped and called.
+	 * @returns A new function that constructs an instance of the given constructor function with the provided arguments.
+	 */
+	function unconstruct(func) {
+	  return function () {
+	    for (var _len2 = arguments.length, args = new Array(_len2), _key2 = 0; _key2 < _len2; _key2++) {
+	      args[_key2] = arguments[_key2];
+	    }
+	    return construct(func, args);
+	  };
+	}
+	/**
+	 * Add properties to a lookup table
+	 *
+	 * @param set - The set to which elements will be added.
+	 * @param array - The array containing elements to be added to the set.
+	 * @param transformCaseFunc - An optional function to transform the case of each element before adding to the set.
+	 * @returns The modified set with added elements.
+	 */
+	function addToSet(set, array) {
+	  let transformCaseFunc = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : stringToLowerCase;
+	  if (setPrototypeOf) {
+	    // Make 'in' and truthy checks like Boolean(set.constructor)
+	    // independent of any properties defined on Object.prototype.
+	    // Prevent prototype setters from intercepting set as a this value.
+	    setPrototypeOf(set, null);
+	  }
+	  let l = array.length;
+	  while (l--) {
+	    let element = array[l];
+	    if (typeof element === 'string') {
+	      const lcElement = transformCaseFunc(element);
+	      if (lcElement !== element) {
+	        // Config presets (e.g. tags.js, attrs.js) are immutable.
+	        if (!isFrozen(array)) {
+	          array[l] = lcElement;
+	        }
+	        element = lcElement;
+	      }
+	    }
+	    set[element] = true;
+	  }
+	  return set;
+	}
+	/**
+	 * Clean up an array to harden against CSPP
+	 *
+	 * @param array - The array to be cleaned.
+	 * @returns The cleaned version of the array
+	 */
+	function cleanArray(array) {
+	  for (let index = 0; index < array.length; index++) {
+	    const isPropertyExist = objectHasOwnProperty(array, index);
+	    if (!isPropertyExist) {
+	      array[index] = null;
+	    }
+	  }
+	  return array;
+	}
+	/**
+	 * Shallow clone an object
+	 *
+	 * @param object - The object to be cloned.
+	 * @returns A new object that copies the original.
+	 */
+	function clone(object) {
+	  const newObject = create(null);
+	  for (const [property, value] of entries(object)) {
+	    const isPropertyExist = objectHasOwnProperty(object, property);
+	    if (isPropertyExist) {
+	      if (Array.isArray(value)) {
+	        newObject[property] = cleanArray(value);
+	      } else if (value && typeof value === 'object' && value.constructor === Object) {
+	        newObject[property] = clone(value);
+	      } else {
+	        newObject[property] = value;
+	      }
+	    }
+	  }
+	  return newObject;
+	}
+	/**
+	 * This method automatically checks if the prop is function or getter and behaves accordingly.
+	 *
+	 * @param object - The object to look up the getter function in its prototype chain.
+	 * @param prop - The property name for which to find the getter function.
+	 * @returns The getter function found in the prototype chain or a fallback function.
+	 */
+	function lookupGetter(object, prop) {
+	  while (object !== null) {
+	    const desc = getOwnPropertyDescriptor(object, prop);
+	    if (desc) {
+	      if (desc.get) {
+	        return unapply(desc.get);
+	      }
+	      if (typeof desc.value === 'function') {
+	        return unapply(desc.value);
+	      }
+	    }
+	    object = getPrototypeOf(object);
+	  }
+	  function fallbackValue() {
+	    return null;
+	  }
+	  return fallbackValue;
+	}
+
+	const html$1 = freeze(['a', 'abbr', 'acronym', 'address', 'area', 'article', 'aside', 'audio', 'b', 'bdi', 'bdo', 'big', 'blink', 'blockquote', 'body', 'br', 'button', 'canvas', 'caption', 'center', 'cite', 'code', 'col', 'colgroup', 'content', 'data', 'datalist', 'dd', 'decorator', 'del', 'details', 'dfn', 'dialog', 'dir', 'div', 'dl', 'dt', 'element', 'em', 'fieldset', 'figcaption', 'figure', 'font', 'footer', 'form', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'head', 'header', 'hgroup', 'hr', 'html', 'i', 'img', 'input', 'ins', 'kbd', 'label', 'legend', 'li', 'main', 'map', 'mark', 'marquee', 'menu', 'menuitem', 'meter', 'nav', 'nobr', 'ol', 'optgroup', 'option', 'output', 'p', 'picture', 'pre', 'progress', 'q', 'rp', 'rt', 'ruby', 's', 'samp', 'section', 'select', 'shadow', 'small', 'source', 'spacer', 'span', 'strike', 'strong', 'style', 'sub', 'summary', 'sup', 'table', 'tbody', 'td', 'template', 'textarea', 'tfoot', 'th', 'thead', 'time', 'tr', 'track', 'tt', 'u', 'ul', 'var', 'video', 'wbr']);
+	const svg$1 = freeze(['svg', 'a', 'altglyph', 'altglyphdef', 'altglyphitem', 'animatecolor', 'animatemotion', 'animatetransform', 'circle', 'clippath', 'defs', 'desc', 'ellipse', 'filter', 'font', 'g', 'glyph', 'glyphref', 'hkern', 'image', 'line', 'lineargradient', 'marker', 'mask', 'metadata', 'mpath', 'path', 'pattern', 'polygon', 'polyline', 'radialgradient', 'rect', 'stop', 'style', 'switch', 'symbol', 'text', 'textpath', 'title', 'tref', 'tspan', 'view', 'vkern']);
+	const svgFilters = freeze(['feBlend', 'feColorMatrix', 'feComponentTransfer', 'feComposite', 'feConvolveMatrix', 'feDiffuseLighting', 'feDisplacementMap', 'feDistantLight', 'feDropShadow', 'feFlood', 'feFuncA', 'feFuncB', 'feFuncG', 'feFuncR', 'feGaussianBlur', 'feImage', 'feMerge', 'feMergeNode', 'feMorphology', 'feOffset', 'fePointLight', 'feSpecularLighting', 'feSpotLight', 'feTile', 'feTurbulence']);
+	// List of SVG elements that are disallowed by default.
+	// We still need to know them so that we can do namespace
+	// checks properly in case one wants to add them to
+	// allow-list.
+	const svgDisallowed = freeze(['animate', 'color-profile', 'cursor', 'discard', 'font-face', 'font-face-format', 'font-face-name', 'font-face-src', 'font-face-uri', 'foreignobject', 'hatch', 'hatchpath', 'mesh', 'meshgradient', 'meshpatch', 'meshrow', 'missing-glyph', 'script', 'set', 'solidcolor', 'unknown', 'use']);
+	const mathMl$1 = freeze(['math', 'menclose', 'merror', 'mfenced', 'mfrac', 'mglyph', 'mi', 'mlabeledtr', 'mmultiscripts', 'mn', 'mo', 'mover', 'mpadded', 'mphantom', 'mroot', 'mrow', 'ms', 'mspace', 'msqrt', 'mstyle', 'msub', 'msup', 'msubsup', 'mtable', 'mtd', 'mtext', 'mtr', 'munder', 'munderover', 'mprescripts']);
+	// Similarly to SVG, we want to know all MathML elements,
+	// even those that we disallow by default.
+	const mathMlDisallowed = freeze(['maction', 'maligngroup', 'malignmark', 'mlongdiv', 'mscarries', 'mscarry', 'msgroup', 'mstack', 'msline', 'msrow', 'semantics', 'annotation', 'annotation-xml', 'mprescripts', 'none']);
+	const text = freeze(['#text']);
+
+	const html = freeze(['accept', 'action', 'align', 'alt', 'autocapitalize', 'autocomplete', 'autopictureinpicture', 'autoplay', 'background', 'bgcolor', 'border', 'capture', 'cellpadding', 'cellspacing', 'checked', 'cite', 'class', 'clear', 'color', 'cols', 'colspan', 'controls', 'controlslist', 'coords', 'crossorigin', 'datetime', 'decoding', 'default', 'dir', 'disabled', 'disablepictureinpicture', 'disableremoteplayback', 'download', 'draggable', 'enctype', 'enterkeyhint', 'face', 'for', 'headers', 'height', 'hidden', 'high', 'href', 'hreflang', 'id', 'inputmode', 'integrity', 'ismap', 'kind', 'label', 'lang', 'list', 'loading', 'loop', 'low', 'max', 'maxlength', 'media', 'method', 'min', 'minlength', 'multiple', 'muted', 'name', 'nonce', 'noshade', 'novalidate', 'nowrap', 'open', 'optimum', 'pattern', 'placeholder', 'playsinline', 'popover', 'popovertarget', 'popovertargetaction', 'poster', 'preload', 'pubdate', 'radiogroup', 'readonly', 'rel', 'required', 'rev', 'reversed', 'role', 'rows', 'rowspan', 'spellcheck', 'scope', 'selected', 'shape', 'size', 'sizes', 'span', 'srclang', 'start', 'src', 'srcset', 'step', 'style', 'summary', 'tabindex', 'title', 'translate', 'type', 'usemap', 'valign', 'value', 'width', 'wrap', 'xmlns', 'slot']);
+	const svg = freeze(['accent-height', 'accumulate', 'additive', 'alignment-baseline', 'amplitude', 'ascent', 'attributename', 'attributetype', 'azimuth', 'basefrequency', 'baseline-shift', 'begin', 'bias', 'by', 'class', 'clip', 'clippathunits', 'clip-path', 'clip-rule', 'color', 'color-interpolation', 'color-interpolation-filters', 'color-profile', 'color-rendering', 'cx', 'cy', 'd', 'dx', 'dy', 'diffuseconstant', 'direction', 'display', 'divisor', 'dur', 'edgemode', 'elevation', 'end', 'exponent', 'fill', 'fill-opacity', 'fill-rule', 'filter', 'filterunits', 'flood-color', 'flood-opacity', 'font-family', 'font-size', 'font-size-adjust', 'font-stretch', 'font-style', 'font-variant', 'font-weight', 'fx', 'fy', 'g1', 'g2', 'glyph-name', 'glyphref', 'gradientunits', 'gradienttransform', 'height', 'href', 'id', 'image-rendering', 'in', 'in2', 'intercept', 'k', 'k1', 'k2', 'k3', 'k4', 'kerning', 'keypoints', 'keysplines', 'keytimes', 'lang', 'lengthadjust', 'letter-spacing', 'kernelmatrix', 'kernelunitlength', 'lighting-color', 'local', 'marker-end', 'marker-mid', 'marker-start', 'markerheight', 'markerunits', 'markerwidth', 'maskcontentunits', 'maskunits', 'max', 'mask', 'media', 'method', 'mode', 'min', 'name', 'numoctaves', 'offset', 'operator', 'opacity', 'order', 'orient', 'orientation', 'origin', 'overflow', 'paint-order', 'path', 'pathlength', 'patterncontentunits', 'patterntransform', 'patternunits', 'points', 'preservealpha', 'preserveaspectratio', 'primitiveunits', 'r', 'rx', 'ry', 'radius', 'refx', 'refy', 'repeatcount', 'repeatdur', 'restart', 'result', 'rotate', 'scale', 'seed', 'shape-rendering', 'slope', 'specularconstant', 'specularexponent', 'spreadmethod', 'startoffset', 'stddeviation', 'stitchtiles', 'stop-color', 'stop-opacity', 'stroke-dasharray', 'stroke-dashoffset', 'stroke-linecap', 'stroke-linejoin', 'stroke-miterlimit', 'stroke-opacity', 'stroke', 'stroke-width', 'style', 'surfacescale', 'systemlanguage', 'tabindex', 'tablevalues', 'targetx', 'targety', 'transform', 'transform-origin', 'text-anchor', 'text-decoration', 'text-rendering', 'textlength', 'type', 'u1', 'u2', 'unicode', 'values', 'viewbox', 'visibility', 'version', 'vert-adv-y', 'vert-origin-x', 'vert-origin-y', 'width', 'word-spacing', 'wrap', 'writing-mode', 'xchannelselector', 'ychannelselector', 'x', 'x1', 'x2', 'xmlns', 'y', 'y1', 'y2', 'z', 'zoomandpan']);
+	const mathMl = freeze(['accent', 'accentunder', 'align', 'bevelled', 'close', 'columnsalign', 'columnlines', 'columnspan', 'denomalign', 'depth', 'dir', 'display', 'displaystyle', 'encoding', 'fence', 'frame', 'height', 'href', 'id', 'largeop', 'length', 'linethickness', 'lspace', 'lquote', 'mathbackground', 'mathcolor', 'mathsize', 'mathvariant', 'maxsize', 'minsize', 'movablelimits', 'notation', 'numalign', 'open', 'rowalign', 'rowlines', 'rowspacing', 'rowspan', 'rspace', 'rquote', 'scriptlevel', 'scriptminsize', 'scriptsizemultiplier', 'selection', 'separator', 'separators', 'stretchy', 'subscriptshift', 'supscriptshift', 'symmetric', 'voffset', 'width', 'xmlns']);
+	const xml = freeze(['xlink:href', 'xml:id', 'xlink:title', 'xml:space', 'xmlns:xlink']);
+
+	// eslint-disable-next-line unicorn/better-regex
+	const MUSTACHE_EXPR = seal(/\{\{[\w\W]*|[\w\W]*\}\}/gm); // Specify template detection regex for SAFE_FOR_TEMPLATES mode
+	const ERB_EXPR = seal(/<%[\w\W]*|[\w\W]*%>/gm);
+	const TMPLIT_EXPR = seal(/\$\{[\w\W]*/gm); // eslint-disable-line unicorn/better-regex
+	const DATA_ATTR = seal(/^data-[\-\w.\u00B7-\uFFFF]+$/); // eslint-disable-line no-useless-escape
+	const ARIA_ATTR = seal(/^aria-[\-\w]+$/); // eslint-disable-line no-useless-escape
+	const IS_ALLOWED_URI = seal(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i // eslint-disable-line no-useless-escape
+	);
+	const IS_SCRIPT_OR_DATA = seal(/^(?:\w+script|data):/i);
+	const ATTR_WHITESPACE = seal(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g // eslint-disable-line no-control-regex
+	);
+	const DOCTYPE_NAME = seal(/^html$/i);
+	const CUSTOM_ELEMENT = seal(/^[a-z][.\w]*(-[.\w]+)+$/i);
+
+	var EXPRESSIONS = /*#__PURE__*/Object.freeze({
+	  __proto__: null,
+	  ARIA_ATTR: ARIA_ATTR,
+	  ATTR_WHITESPACE: ATTR_WHITESPACE,
+	  CUSTOM_ELEMENT: CUSTOM_ELEMENT,
+	  DATA_ATTR: DATA_ATTR,
+	  DOCTYPE_NAME: DOCTYPE_NAME,
+	  ERB_EXPR: ERB_EXPR,
+	  IS_ALLOWED_URI: IS_ALLOWED_URI,
+	  IS_SCRIPT_OR_DATA: IS_SCRIPT_OR_DATA,
+	  MUSTACHE_EXPR: MUSTACHE_EXPR,
+	  TMPLIT_EXPR: TMPLIT_EXPR
+	});
+
+	/* eslint-disable @typescript-eslint/indent */
+	// https://developer.mozilla.org/en-US/docs/Web/API/Node/nodeType
+	const NODE_TYPE = {
+	  element: 1,
+	  attribute: 2,
+	  text: 3,
+	  cdataSection: 4,
+	  entityReference: 5,
+	  // Deprecated
+	  entityNode: 6,
+	  // Deprecated
+	  progressingInstruction: 7,
+	  comment: 8,
+	  document: 9,
+	  documentType: 10,
+	  documentFragment: 11,
+	  notation: 12 // Deprecated
+	};
+	const getGlobal = function getGlobal() {
+	  return typeof window === 'undefined' ? null : window;
+	};
+	/**
+	 * Creates a no-op policy for internal use only.
+	 * Don't export this function outside this module!
+	 * @param trustedTypes The policy factory.
+	 * @param purifyHostElement The Script element used to load DOMPurify (to determine policy name suffix).
+	 * @return The policy created (or null, if Trusted Types
+	 * are not supported or creating the policy failed).
+	 */
+	const _createTrustedTypesPolicy = function _createTrustedTypesPolicy(trustedTypes, purifyHostElement) {
+	  if (typeof trustedTypes !== 'object' || typeof trustedTypes.createPolicy !== 'function') {
+	    return null;
+	  }
+	  // Allow the callers to control the unique policy name
+	  // by adding a data-tt-policy-suffix to the script element with the DOMPurify.
+	  // Policy creation with duplicate names throws in Trusted Types.
+	  let suffix = null;
+	  const ATTR_NAME = 'data-tt-policy-suffix';
+	  if (purifyHostElement && purifyHostElement.hasAttribute(ATTR_NAME)) {
+	    suffix = purifyHostElement.getAttribute(ATTR_NAME);
+	  }
+	  const policyName = 'dompurify' + (suffix ? '#' + suffix : '');
+	  try {
+	    return trustedTypes.createPolicy(policyName, {
+	      createHTML(html) {
+	        return html;
+	      },
+	      createScriptURL(scriptUrl) {
+	        return scriptUrl;
+	      }
+	    });
+	  } catch (_) {
+	    // Policy creation failed (most likely another DOMPurify script has
+	    // already run). Skip creating the policy, as this will only cause errors
+	    // if TT are enforced.
+	    console.warn('TrustedTypes policy ' + policyName + ' could not be created.');
+	    return null;
+	  }
+	};
+	const _createHooksMap = function _createHooksMap() {
+	  return {
+	    afterSanitizeAttributes: [],
+	    afterSanitizeElements: [],
+	    afterSanitizeShadowDOM: [],
+	    beforeSanitizeAttributes: [],
+	    beforeSanitizeElements: [],
+	    beforeSanitizeShadowDOM: [],
+	    uponSanitizeAttribute: [],
+	    uponSanitizeElement: [],
+	    uponSanitizeShadowNode: []
+	  };
+	};
+	function createDOMPurify() {
+	  let window = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : getGlobal();
+	  const DOMPurify = root => createDOMPurify(root);
+	  DOMPurify.version = '3.2.4';
+	  DOMPurify.removed = [];
+	  if (!window || !window.document || window.document.nodeType !== NODE_TYPE.document || !window.Element) {
+	    // Not running in a browser, provide a factory function
+	    // so that you can pass your own Window
+	    DOMPurify.isSupported = false;
+	    return DOMPurify;
+	  }
+	  let {
+	    document
+	  } = window;
+	  const originalDocument = document;
+	  const currentScript = originalDocument.currentScript;
+	  const {
+	    DocumentFragment,
+	    HTMLTemplateElement,
+	    Node,
+	    Element,
+	    NodeFilter,
+	    NamedNodeMap = window.NamedNodeMap || window.MozNamedAttrMap,
+	    HTMLFormElement,
+	    DOMParser,
+	    trustedTypes
+	  } = window;
+	  const ElementPrototype = Element.prototype;
+	  const cloneNode = lookupGetter(ElementPrototype, 'cloneNode');
+	  const remove = lookupGetter(ElementPrototype, 'remove');
+	  const getNextSibling = lookupGetter(ElementPrototype, 'nextSibling');
+	  const getChildNodes = lookupGetter(ElementPrototype, 'childNodes');
+	  const getParentNode = lookupGetter(ElementPrototype, 'parentNode');
+	  // As per issue #47, the web-components registry is inherited by a
+	  // new document created via createHTMLDocument. As per the spec
+	  // (http://w3c.github.io/webcomponents/spec/custom/#creating-and-passing-registries)
+	  // a new empty registry is used when creating a template contents owner
+	  // document, so we use that as our parent document to ensure nothing
+	  // is inherited.
+	  if (typeof HTMLTemplateElement === 'function') {
+	    const template = document.createElement('template');
+	    if (template.content && template.content.ownerDocument) {
+	      document = template.content.ownerDocument;
+	    }
+	  }
+	  let trustedTypesPolicy;
+	  let emptyHTML = '';
+	  const {
+	    implementation,
+	    createNodeIterator,
+	    createDocumentFragment,
+	    getElementsByTagName
+	  } = document;
+	  const {
+	    importNode
+	  } = originalDocument;
+	  let hooks = _createHooksMap();
+	  /**
+	   * Expose whether this browser supports running the full DOMPurify.
+	   */
+	  DOMPurify.isSupported = typeof entries === 'function' && typeof getParentNode === 'function' && implementation && implementation.createHTMLDocument !== undefined;
+	  const {
+	    MUSTACHE_EXPR,
+	    ERB_EXPR,
+	    TMPLIT_EXPR,
+	    DATA_ATTR,
+	    ARIA_ATTR,
+	    IS_SCRIPT_OR_DATA,
+	    ATTR_WHITESPACE,
+	    CUSTOM_ELEMENT
+	  } = EXPRESSIONS;
+	  let {
+	    IS_ALLOWED_URI: IS_ALLOWED_URI$1
+	  } = EXPRESSIONS;
+	  /**
+	   * We consider the elements and attributes below to be safe. Ideally
+	   * don't add any new ones but feel free to remove unwanted ones.
+	   */
+	  /* allowed element names */
+	  let ALLOWED_TAGS = null;
+	  const DEFAULT_ALLOWED_TAGS = addToSet({}, [...html$1, ...svg$1, ...svgFilters, ...mathMl$1, ...text]);
+	  /* Allowed attribute names */
+	  let ALLOWED_ATTR = null;
+	  const DEFAULT_ALLOWED_ATTR = addToSet({}, [...html, ...svg, ...mathMl, ...xml]);
+	  /*
+	   * Configure how DOMPurify should handle custom elements and their attributes as well as customized built-in elements.
+	   * @property {RegExp|Function|null} tagNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any custom elements)
+	   * @property {RegExp|Function|null} attributeNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any attributes not on the allow list)
+	   * @property {boolean} allowCustomizedBuiltInElements allow custom elements derived from built-ins if they pass CUSTOM_ELEMENT_HANDLING.tagNameCheck. Default: `false`.
+	   */
+	  let CUSTOM_ELEMENT_HANDLING = Object.seal(create(null, {
+	    tagNameCheck: {
+	      writable: true,
+	      configurable: false,
+	      enumerable: true,
+	      value: null
+	    },
+	    attributeNameCheck: {
+	      writable: true,
+	      configurable: false,
+	      enumerable: true,
+	      value: null
+	    },
+	    allowCustomizedBuiltInElements: {
+	      writable: true,
+	      configurable: false,
+	      enumerable: true,
+	      value: false
+	    }
+	  }));
+	  /* Explicitly forbidden tags (overrides ALLOWED_TAGS/ADD_TAGS) */
+	  let FORBID_TAGS = null;
+	  /* Explicitly forbidden attributes (overrides ALLOWED_ATTR/ADD_ATTR) */
+	  let FORBID_ATTR = null;
+	  /* Decide if ARIA attributes are okay */
+	  let ALLOW_ARIA_ATTR = true;
+	  /* Decide if custom data attributes are okay */
+	  let ALLOW_DATA_ATTR = true;
+	  /* Decide if unknown protocols are okay */
+	  let ALLOW_UNKNOWN_PROTOCOLS = false;
+	  /* Decide if self-closing tags in attributes are allowed.
+	   * Usually removed due to a mXSS issue in jQuery 3.0 */
+	  let ALLOW_SELF_CLOSE_IN_ATTR = true;
+	  /* Output should be safe for common template engines.
+	   * This means, DOMPurify removes data attributes, mustaches and ERB
+	   */
+	  let SAFE_FOR_TEMPLATES = false;
+	  /* Output should be safe even for XML used within HTML and alike.
+	   * This means, DOMPurify removes comments when containing risky content.
+	   */
+	  let SAFE_FOR_XML = true;
+	  /* Decide if document with <html>... should be returned */
+	  let WHOLE_DOCUMENT = false;
+	  /* Track whether config is already set on this instance of DOMPurify. */
+	  let SET_CONFIG = false;
+	  /* Decide if all elements (e.g. style, script) must be children of
+	   * document.body. By default, browsers might move them to document.head */
+	  let FORCE_BODY = false;
+	  /* Decide if a DOM `HTMLBodyElement` should be returned, instead of a html
+	   * string (or a TrustedHTML object if Trusted Types are supported).
+	   * If `WHOLE_DOCUMENT` is enabled a `HTMLHtmlElement` will be returned instead
+	   */
+	  let RETURN_DOM = false;
+	  /* Decide if a DOM `DocumentFragment` should be returned, instead of a html
+	   * string  (or a TrustedHTML object if Trusted Types are supported) */
+	  let RETURN_DOM_FRAGMENT = false;
+	  /* Try to return a Trusted Type object instead of a string, return a string in
+	   * case Trusted Types are not supported  */
+	  let RETURN_TRUSTED_TYPE = false;
+	  /* Output should be free from DOM clobbering attacks?
+	   * This sanitizes markups named with colliding, clobberable built-in DOM APIs.
+	   */
+	  let SANITIZE_DOM = true;
+	  /* Achieve full DOM Clobbering protection by isolating the namespace of named
+	   * properties and JS variables, mitigating attacks that abuse the HTML/DOM spec rules.
+	   *
+	   * HTML/DOM spec rules that enable DOM Clobbering:
+	   *   - Named Access on Window (§7.3.3)
+	   *   - DOM Tree Accessors (§3.1.5)
+	   *   - Form Element Parent-Child Relations (§4.10.3)
+	   *   - Iframe srcdoc / Nested WindowProxies (§4.8.5)
+	   *   - HTMLCollection (§4.2.10.2)
+	   *
+	   * Namespace isolation is implemented by prefixing `id` and `name` attributes
+	   * with a constant string, i.e., `user-content-`
+	   */
+	  let SANITIZE_NAMED_PROPS = false;
+	  const SANITIZE_NAMED_PROPS_PREFIX = 'user-content-';
+	  /* Keep element content when removing element? */
+	  let KEEP_CONTENT = true;
+	  /* If a `Node` is passed to sanitize(), then performs sanitization in-place instead
+	   * of importing it into a new Document and returning a sanitized copy */
+	  let IN_PLACE = false;
+	  /* Allow usage of profiles like html, svg and mathMl */
+	  let USE_PROFILES = {};
+	  /* Tags to ignore content of when KEEP_CONTENT is true */
+	  let FORBID_CONTENTS = null;
+	  const DEFAULT_FORBID_CONTENTS = addToSet({}, ['annotation-xml', 'audio', 'colgroup', 'desc', 'foreignobject', 'head', 'iframe', 'math', 'mi', 'mn', 'mo', 'ms', 'mtext', 'noembed', 'noframes', 'noscript', 'plaintext', 'script', 'style', 'svg', 'template', 'thead', 'title', 'video', 'xmp']);
+	  /* Tags that are safe for data: URIs */
+	  let DATA_URI_TAGS = null;
+	  const DEFAULT_DATA_URI_TAGS = addToSet({}, ['audio', 'video', 'img', 'source', 'image', 'track']);
+	  /* Attributes safe for values like "javascript:" */
+	  let URI_SAFE_ATTRIBUTES = null;
+	  const DEFAULT_URI_SAFE_ATTRIBUTES = addToSet({}, ['alt', 'class', 'for', 'id', 'label', 'name', 'pattern', 'placeholder', 'role', 'summary', 'title', 'value', 'style', 'xmlns']);
+	  const MATHML_NAMESPACE = 'http://www.w3.org/1998/Math/MathML';
+	  const SVG_NAMESPACE = 'http://www.w3.org/2000/svg';
+	  const HTML_NAMESPACE = 'http://www.w3.org/1999/xhtml';
+	  /* Document namespace */
+	  let NAMESPACE = HTML_NAMESPACE;
+	  let IS_EMPTY_INPUT = false;
+	  /* Allowed XHTML+XML namespaces */
+	  let ALLOWED_NAMESPACES = null;
+	  const DEFAULT_ALLOWED_NAMESPACES = addToSet({}, [MATHML_NAMESPACE, SVG_NAMESPACE, HTML_NAMESPACE], stringToString);
+	  let MATHML_TEXT_INTEGRATION_POINTS = addToSet({}, ['mi', 'mo', 'mn', 'ms', 'mtext']);
+	  let HTML_INTEGRATION_POINTS = addToSet({}, ['annotation-xml']);
+	  // Certain elements are allowed in both SVG and HTML
+	  // namespace. We need to specify them explicitly
+	  // so that they don't get erroneously deleted from
+	  // HTML namespace.
+	  const COMMON_SVG_AND_HTML_ELEMENTS = addToSet({}, ['title', 'style', 'font', 'a', 'script']);
+	  /* Parsing of strict XHTML documents */
+	  let PARSER_MEDIA_TYPE = null;
+	  const SUPPORTED_PARSER_MEDIA_TYPES = ['application/xhtml+xml', 'text/html'];
+	  const DEFAULT_PARSER_MEDIA_TYPE = 'text/html';
+	  let transformCaseFunc = null;
+	  /* Keep a reference to config to pass to hooks */
+	  let CONFIG = null;
+	  /* Ideally, do not touch anything below this line */
+	  /* ______________________________________________ */
+	  const formElement = document.createElement('form');
+	  const isRegexOrFunction = function isRegexOrFunction(testValue) {
+	    return testValue instanceof RegExp || testValue instanceof Function;
+	  };
+	  /**
+	   * _parseConfig
+	   *
+	   * @param cfg optional config literal
+	   */
+	  // eslint-disable-next-line complexity
+	  const _parseConfig = function _parseConfig() {
+	    let cfg = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+	    if (CONFIG && CONFIG === cfg) {
+	      return;
+	    }
+	    /* Shield configuration object from tampering */
+	    if (!cfg || typeof cfg !== 'object') {
+	      cfg = {};
+	    }
+	    /* Shield configuration object from prototype pollution */
+	    cfg = clone(cfg);
+	    PARSER_MEDIA_TYPE =
+	    // eslint-disable-next-line unicorn/prefer-includes
+	    SUPPORTED_PARSER_MEDIA_TYPES.indexOf(cfg.PARSER_MEDIA_TYPE) === -1 ? DEFAULT_PARSER_MEDIA_TYPE : cfg.PARSER_MEDIA_TYPE;
+	    // HTML tags and attributes are not case-sensitive, converting to lowercase. Keeping XHTML as is.
+	    transformCaseFunc = PARSER_MEDIA_TYPE === 'application/xhtml+xml' ? stringToString : stringToLowerCase;
+	    /* Set configuration parameters */
+	    ALLOWED_TAGS = objectHasOwnProperty(cfg, 'ALLOWED_TAGS') ? addToSet({}, cfg.ALLOWED_TAGS, transformCaseFunc) : DEFAULT_ALLOWED_TAGS;
+	    ALLOWED_ATTR = objectHasOwnProperty(cfg, 'ALLOWED_ATTR') ? addToSet({}, cfg.ALLOWED_ATTR, transformCaseFunc) : DEFAULT_ALLOWED_ATTR;
+	    ALLOWED_NAMESPACES = objectHasOwnProperty(cfg, 'ALLOWED_NAMESPACES') ? addToSet({}, cfg.ALLOWED_NAMESPACES, stringToString) : DEFAULT_ALLOWED_NAMESPACES;
+	    URI_SAFE_ATTRIBUTES = objectHasOwnProperty(cfg, 'ADD_URI_SAFE_ATTR') ? addToSet(clone(DEFAULT_URI_SAFE_ATTRIBUTES), cfg.ADD_URI_SAFE_ATTR, transformCaseFunc) : DEFAULT_URI_SAFE_ATTRIBUTES;
+	    DATA_URI_TAGS = objectHasOwnProperty(cfg, 'ADD_DATA_URI_TAGS') ? addToSet(clone(DEFAULT_DATA_URI_TAGS), cfg.ADD_DATA_URI_TAGS, transformCaseFunc) : DEFAULT_DATA_URI_TAGS;
+	    FORBID_CONTENTS = objectHasOwnProperty(cfg, 'FORBID_CONTENTS') ? addToSet({}, cfg.FORBID_CONTENTS, transformCaseFunc) : DEFAULT_FORBID_CONTENTS;
+	    FORBID_TAGS = objectHasOwnProperty(cfg, 'FORBID_TAGS') ? addToSet({}, cfg.FORBID_TAGS, transformCaseFunc) : {};
+	    FORBID_ATTR = objectHasOwnProperty(cfg, 'FORBID_ATTR') ? addToSet({}, cfg.FORBID_ATTR, transformCaseFunc) : {};
+	    USE_PROFILES = objectHasOwnProperty(cfg, 'USE_PROFILES') ? cfg.USE_PROFILES : false;
+	    ALLOW_ARIA_ATTR = cfg.ALLOW_ARIA_ATTR !== false; // Default true
+	    ALLOW_DATA_ATTR = cfg.ALLOW_DATA_ATTR !== false; // Default true
+	    ALLOW_UNKNOWN_PROTOCOLS = cfg.ALLOW_UNKNOWN_PROTOCOLS || false; // Default false
+	    ALLOW_SELF_CLOSE_IN_ATTR = cfg.ALLOW_SELF_CLOSE_IN_ATTR !== false; // Default true
+	    SAFE_FOR_TEMPLATES = cfg.SAFE_FOR_TEMPLATES || false; // Default false
+	    SAFE_FOR_XML = cfg.SAFE_FOR_XML !== false; // Default true
+	    WHOLE_DOCUMENT = cfg.WHOLE_DOCUMENT || false; // Default false
+	    RETURN_DOM = cfg.RETURN_DOM || false; // Default false
+	    RETURN_DOM_FRAGMENT = cfg.RETURN_DOM_FRAGMENT || false; // Default false
+	    RETURN_TRUSTED_TYPE = cfg.RETURN_TRUSTED_TYPE || false; // Default false
+	    FORCE_BODY = cfg.FORCE_BODY || false; // Default false
+	    SANITIZE_DOM = cfg.SANITIZE_DOM !== false; // Default true
+	    SANITIZE_NAMED_PROPS = cfg.SANITIZE_NAMED_PROPS || false; // Default false
+	    KEEP_CONTENT = cfg.KEEP_CONTENT !== false; // Default true
+	    IN_PLACE = cfg.IN_PLACE || false; // Default false
+	    IS_ALLOWED_URI$1 = cfg.ALLOWED_URI_REGEXP || IS_ALLOWED_URI;
+	    NAMESPACE = cfg.NAMESPACE || HTML_NAMESPACE;
+	    MATHML_TEXT_INTEGRATION_POINTS = cfg.MATHML_TEXT_INTEGRATION_POINTS || MATHML_TEXT_INTEGRATION_POINTS;
+	    HTML_INTEGRATION_POINTS = cfg.HTML_INTEGRATION_POINTS || HTML_INTEGRATION_POINTS;
+	    CUSTOM_ELEMENT_HANDLING = cfg.CUSTOM_ELEMENT_HANDLING || {};
+	    if (cfg.CUSTOM_ELEMENT_HANDLING && isRegexOrFunction(cfg.CUSTOM_ELEMENT_HANDLING.tagNameCheck)) {
+	      CUSTOM_ELEMENT_HANDLING.tagNameCheck = cfg.CUSTOM_ELEMENT_HANDLING.tagNameCheck;
+	    }
+	    if (cfg.CUSTOM_ELEMENT_HANDLING && isRegexOrFunction(cfg.CUSTOM_ELEMENT_HANDLING.attributeNameCheck)) {
+	      CUSTOM_ELEMENT_HANDLING.attributeNameCheck = cfg.CUSTOM_ELEMENT_HANDLING.attributeNameCheck;
+	    }
+	    if (cfg.CUSTOM_ELEMENT_HANDLING && typeof cfg.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements === 'boolean') {
+	      CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements = cfg.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements;
+	    }
+	    if (SAFE_FOR_TEMPLATES) {
+	      ALLOW_DATA_ATTR = false;
+	    }
+	    if (RETURN_DOM_FRAGMENT) {
+	      RETURN_DOM = true;
+	    }
+	    /* Parse profile info */
+	    if (USE_PROFILES) {
+	      ALLOWED_TAGS = addToSet({}, text);
+	      ALLOWED_ATTR = [];
+	      if (USE_PROFILES.html === true) {
+	        addToSet(ALLOWED_TAGS, html$1);
+	        addToSet(ALLOWED_ATTR, html);
+	      }
+	      if (USE_PROFILES.svg === true) {
+	        addToSet(ALLOWED_TAGS, svg$1);
+	        addToSet(ALLOWED_ATTR, svg);
+	        addToSet(ALLOWED_ATTR, xml);
+	      }
+	      if (USE_PROFILES.svgFilters === true) {
+	        addToSet(ALLOWED_TAGS, svgFilters);
+	        addToSet(ALLOWED_ATTR, svg);
+	        addToSet(ALLOWED_ATTR, xml);
+	      }
+	      if (USE_PROFILES.mathMl === true) {
+	        addToSet(ALLOWED_TAGS, mathMl$1);
+	        addToSet(ALLOWED_ATTR, mathMl);
+	        addToSet(ALLOWED_ATTR, xml);
+	      }
+	    }
+	    /* Merge configuration parameters */
+	    if (cfg.ADD_TAGS) {
+	      if (ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {
+	        ALLOWED_TAGS = clone(ALLOWED_TAGS);
+	      }
+	      addToSet(ALLOWED_TAGS, cfg.ADD_TAGS, transformCaseFunc);
+	    }
+	    if (cfg.ADD_ATTR) {
+	      if (ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {
+	        ALLOWED_ATTR = clone(ALLOWED_ATTR);
+	      }
+	      addToSet(ALLOWED_ATTR, cfg.ADD_ATTR, transformCaseFunc);
+	    }
+	    if (cfg.ADD_URI_SAFE_ATTR) {
+	      addToSet(URI_SAFE_ATTRIBUTES, cfg.ADD_URI_SAFE_ATTR, transformCaseFunc);
+	    }
+	    if (cfg.FORBID_CONTENTS) {
+	      if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {
+	        FORBID_CONTENTS = clone(FORBID_CONTENTS);
+	      }
+	      addToSet(FORBID_CONTENTS, cfg.FORBID_CONTENTS, transformCaseFunc);
+	    }
+	    /* Add #text in case KEEP_CONTENT is set to true */
+	    if (KEEP_CONTENT) {
+	      ALLOWED_TAGS['#text'] = true;
+	    }
+	    /* Add html, head and body to ALLOWED_TAGS in case WHOLE_DOCUMENT is true */
+	    if (WHOLE_DOCUMENT) {
+	      addToSet(ALLOWED_TAGS, ['html', 'head', 'body']);
+	    }
+	    /* Add tbody to ALLOWED_TAGS in case tables are permitted, see #286, #365 */
+	    if (ALLOWED_TAGS.table) {
+	      addToSet(ALLOWED_TAGS, ['tbody']);
+	      delete FORBID_TAGS.tbody;
+	    }
+	    if (cfg.TRUSTED_TYPES_POLICY) {
+	      if (typeof cfg.TRUSTED_TYPES_POLICY.createHTML !== 'function') {
+	        throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a "createHTML" hook.');
+	      }
+	      if (typeof cfg.TRUSTED_TYPES_POLICY.createScriptURL !== 'function') {
+	        throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a "createScriptURL" hook.');
+	      }
+	      // Overwrite existing TrustedTypes policy.
+	      trustedTypesPolicy = cfg.TRUSTED_TYPES_POLICY;
+	      // Sign local variables required by `sanitize`.
+	      emptyHTML = trustedTypesPolicy.createHTML('');
+	    } else {
+	      // Uninitialized policy, attempt to initialize the internal dompurify policy.
+	      if (trustedTypesPolicy === undefined) {
+	        trustedTypesPolicy = _createTrustedTypesPolicy(trustedTypes, currentScript);
+	      }
+	      // If creating the internal policy succeeded sign internal variables.
+	      if (trustedTypesPolicy !== null && typeof emptyHTML === 'string') {
+	        emptyHTML = trustedTypesPolicy.createHTML('');
+	      }
+	    }
+	    // Prevent further manipulation of configuration.
+	    // Not available in IE8, Safari 5, etc.
+	    if (freeze) {
+	      freeze(cfg);
+	    }
+	    CONFIG = cfg;
+	  };
+	  /* Keep track of all possible SVG and MathML tags
+	   * so that we can perform the namespace checks
+	   * correctly. */
+	  const ALL_SVG_TAGS = addToSet({}, [...svg$1, ...svgFilters, ...svgDisallowed]);
+	  const ALL_MATHML_TAGS = addToSet({}, [...mathMl$1, ...mathMlDisallowed]);
+	  /**
+	   * @param element a DOM element whose namespace is being checked
+	   * @returns Return false if the element has a
+	   *  namespace that a spec-compliant parser would never
+	   *  return. Return true otherwise.
+	   */
+	  const _checkValidNamespace = function _checkValidNamespace(element) {
+	    let parent = getParentNode(element);
+	    // In JSDOM, if we're inside shadow DOM, then parentNode
+	    // can be null. We just simulate parent in this case.
+	    if (!parent || !parent.tagName) {
+	      parent = {
+	        namespaceURI: NAMESPACE,
+	        tagName: 'template'
+	      };
+	    }
+	    const tagName = stringToLowerCase(element.tagName);
+	    const parentTagName = stringToLowerCase(parent.tagName);
+	    if (!ALLOWED_NAMESPACES[element.namespaceURI]) {
+	      return false;
+	    }
+	    if (element.namespaceURI === SVG_NAMESPACE) {
+	      // The only way to switch from HTML namespace to SVG
+	      // is via <svg>. If it happens via any other tag, then
+	      // it should be killed.
+	      if (parent.namespaceURI === HTML_NAMESPACE) {
+	        return tagName === 'svg';
+	      }
+	      // The only way to switch from MathML to SVG is via`
+	      // svg if parent is either <annotation-xml> or MathML
+	      // text integration points.
+	      if (parent.namespaceURI === MATHML_NAMESPACE) {
+	        return tagName === 'svg' && (parentTagName === 'annotation-xml' || MATHML_TEXT_INTEGRATION_POINTS[parentTagName]);
+	      }
+	      // We only allow elements that are defined in SVG
+	      // spec. All others are disallowed in SVG namespace.
+	      return Boolean(ALL_SVG_TAGS[tagName]);
+	    }
+	    if (element.namespaceURI === MATHML_NAMESPACE) {
+	      // The only way to switch from HTML namespace to MathML
+	      // is via <math>. If it happens via any other tag, then
+	      // it should be killed.
+	      if (parent.namespaceURI === HTML_NAMESPACE) {
+	        return tagName === 'math';
+	      }
+	      // The only way to switch from SVG to MathML is via
+	      // <math> and HTML integration points
+	      if (parent.namespaceURI === SVG_NAMESPACE) {
+	        return tagName === 'math' && HTML_INTEGRATION_POINTS[parentTagName];
+	      }
+	      // We only allow elements that are defined in MathML
+	      // spec. All others are disallowed in MathML namespace.
+	      return Boolean(ALL_MATHML_TAGS[tagName]);
+	    }
+	    if (element.namespaceURI === HTML_NAMESPACE) {
+	      // The only way to switch from SVG to HTML is via
+	      // HTML integration points, and from MathML to HTML
+	      // is via MathML text integration points
+	      if (parent.namespaceURI === SVG_NAMESPACE && !HTML_INTEGRATION_POINTS[parentTagName]) {
+	        return false;
+	      }
+	      if (parent.namespaceURI === MATHML_NAMESPACE && !MATHML_TEXT_INTEGRATION_POINTS[parentTagName]) {
+	        return false;
+	      }
+	      // We disallow tags that are specific for MathML
+	      // or SVG and should never appear in HTML namespace
+	      return !ALL_MATHML_TAGS[tagName] && (COMMON_SVG_AND_HTML_ELEMENTS[tagName] || !ALL_SVG_TAGS[tagName]);
+	    }
+	    // For XHTML and XML documents that support custom namespaces
+	    if (PARSER_MEDIA_TYPE === 'application/xhtml+xml' && ALLOWED_NAMESPACES[element.namespaceURI]) {
+	      return true;
+	    }
+	    // The code should never reach this place (this means
+	    // that the element somehow got namespace that is not
+	    // HTML, SVG, MathML or allowed via ALLOWED_NAMESPACES).
+	    // Return false just in case.
+	    return false;
+	  };
+	  /**
+	   * _forceRemove
+	   *
+	   * @param node a DOM node
+	   */
+	  const _forceRemove = function _forceRemove(node) {
+	    arrayPush(DOMPurify.removed, {
+	      element: node
+	    });
+	    try {
+	      // eslint-disable-next-line unicorn/prefer-dom-node-remove
+	      getParentNode(node).removeChild(node);
+	    } catch (_) {
+	      remove(node);
+	    }
+	  };
+	  /**
+	   * _removeAttribute
+	   *
+	   * @param name an Attribute name
+	   * @param element a DOM node
+	   */
+	  const _removeAttribute = function _removeAttribute(name, element) {
+	    try {
+	      arrayPush(DOMPurify.removed, {
+	        attribute: element.getAttributeNode(name),
+	        from: element
+	      });
+	    } catch (_) {
+	      arrayPush(DOMPurify.removed, {
+	        attribute: null,
+	        from: element
+	      });
+	    }
+	    element.removeAttribute(name);
+	    // We void attribute values for unremovable "is" attributes
+	    if (name === 'is') {
+	      if (RETURN_DOM || RETURN_DOM_FRAGMENT) {
+	        try {
+	          _forceRemove(element);
+	        } catch (_) {}
+	      } else {
+	        try {
+	          element.setAttribute(name, '');
+	        } catch (_) {}
+	      }
+	    }
+	  };
+	  /**
+	   * _initDocument
+	   *
+	   * @param dirty - a string of dirty markup
+	   * @return a DOM, filled with the dirty markup
+	   */
+	  const _initDocument = function _initDocument(dirty) {
+	    /* Create a HTML document */
+	    let doc = null;
+	    let leadingWhitespace = null;
+	    if (FORCE_BODY) {
+	      dirty = '<remove></remove>' + dirty;
+	    } else {
+	      /* If FORCE_BODY isn't used, leading whitespace needs to be preserved manually */
+	      const matches = stringMatch(dirty, /^[\r\n\t ]+/);
+	      leadingWhitespace = matches && matches[0];
+	    }
+	    if (PARSER_MEDIA_TYPE === 'application/xhtml+xml' && NAMESPACE === HTML_NAMESPACE) {
+	      // Root of XHTML doc must contain xmlns declaration (see https://www.w3.org/TR/xhtml1/normative.html#strict)
+	      dirty = '<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>' + dirty + '</body></html>';
+	    }
+	    const dirtyPayload = trustedTypesPolicy ? trustedTypesPolicy.createHTML(dirty) : dirty;
+	    /*
+	     * Use the DOMParser API by default, fallback later if needs be
+	     * DOMParser not work for svg when has multiple root element.
+	     */
+	    if (NAMESPACE === HTML_NAMESPACE) {
+	      try {
+	        doc = new DOMParser().parseFromString(dirtyPayload, PARSER_MEDIA_TYPE);
+	      } catch (_) {}
+	    }
+	    /* Use createHTMLDocument in case DOMParser is not available */
+	    if (!doc || !doc.documentElement) {
+	      doc = implementation.createDocument(NAMESPACE, 'template', null);
+	      try {
+	        doc.documentElement.innerHTML = IS_EMPTY_INPUT ? emptyHTML : dirtyPayload;
+	      } catch (_) {
+	        // Syntax error if dirtyPayload is invalid xml
+	      }
+	    }
+	    const body = doc.body || doc.documentElement;
+	    if (dirty && leadingWhitespace) {
+	      body.insertBefore(document.createTextNode(leadingWhitespace), body.childNodes[0] || null);
+	    }
+	    /* Work on whole document or just its body */
+	    if (NAMESPACE === HTML_NAMESPACE) {
+	      return getElementsByTagName.call(doc, WHOLE_DOCUMENT ? 'html' : 'body')[0];
+	    }
+	    return WHOLE_DOCUMENT ? doc.documentElement : body;
+	  };
+	  /**
+	   * Creates a NodeIterator object that you can use to traverse filtered lists of nodes or elements in a document.
+	   *
+	   * @param root The root element or node to start traversing on.
+	   * @return The created NodeIterator
+	   */
+	  const _createNodeIterator = function _createNodeIterator(root) {
+	    return createNodeIterator.call(root.ownerDocument || root, root,
+	    // eslint-disable-next-line no-bitwise
+	    NodeFilter.SHOW_ELEMENT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_TEXT | NodeFilter.SHOW_PROCESSING_INSTRUCTION | NodeFilter.SHOW_CDATA_SECTION, null);
+	  };
+	  /**
+	   * _isClobbered
+	   *
+	   * @param element element to check for clobbering attacks
+	   * @return true if clobbered, false if safe
+	   */
+	  const _isClobbered = function _isClobbered(element) {
+	    return element instanceof HTMLFormElement && (typeof element.nodeName !== 'string' || typeof element.textContent !== 'string' || typeof element.removeChild !== 'function' || !(element.attributes instanceof NamedNodeMap) || typeof element.removeAttribute !== 'function' || typeof element.setAttribute !== 'function' || typeof element.namespaceURI !== 'string' || typeof element.insertBefore !== 'function' || typeof element.hasChildNodes !== 'function');
+	  };
+	  /**
+	   * Checks whether the given object is a DOM node.
+	   *
+	   * @param value object to check whether it's a DOM node
+	   * @return true is object is a DOM node
+	   */
+	  const _isNode = function _isNode(value) {
+	    return typeof Node === 'function' && value instanceof Node;
+	  };
+	  function _executeHooks(hooks, currentNode, data) {
+	    arrayForEach(hooks, hook => {
+	      hook.call(DOMPurify, currentNode, data, CONFIG);
+	    });
+	  }
+	  /**
+	   * _sanitizeElements
+	   *
+	   * @protect nodeName
+	   * @protect textContent
+	   * @protect removeChild
+	   * @param currentNode to check for permission to exist
+	   * @return true if node was killed, false if left alive
+	   */
+	  const _sanitizeElements = function _sanitizeElements(currentNode) {
+	    let content = null;
+	    /* Execute a hook if present */
+	    _executeHooks(hooks.beforeSanitizeElements, currentNode, null);
+	    /* Check if element is clobbered or can clobber */
+	    if (_isClobbered(currentNode)) {
+	      _forceRemove(currentNode);
+	      return true;
+	    }
+	    /* Now let's check the element's type and name */
+	    const tagName = transformCaseFunc(currentNode.nodeName);
+	    /* Execute a hook if present */
+	    _executeHooks(hooks.uponSanitizeElement, currentNode, {
+	      tagName,
+	      allowedTags: ALLOWED_TAGS
+	    });
+	    /* Detect mXSS attempts abusing namespace confusion */
+	    if (currentNode.hasChildNodes() && !_isNode(currentNode.firstElementChild) && regExpTest(/<[/\w]/g, currentNode.innerHTML) && regExpTest(/<[/\w]/g, currentNode.textContent)) {
+	      _forceRemove(currentNode);
+	      return true;
+	    }
+	    /* Remove any occurrence of processing instructions */
+	    if (currentNode.nodeType === NODE_TYPE.progressingInstruction) {
+	      _forceRemove(currentNode);
+	      return true;
+	    }
+	    /* Remove any kind of possibly harmful comments */
+	    if (SAFE_FOR_XML && currentNode.nodeType === NODE_TYPE.comment && regExpTest(/<[/\w]/g, currentNode.data)) {
+	      _forceRemove(currentNode);
+	      return true;
+	    }
+	    /* Remove element if anything forbids its presence */
+	    if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {
+	      /* Check if we have a custom element to handle */
+	      if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) {
+	        if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)) {
+	          return false;
+	        }
+	        if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(tagName)) {
+	          return false;
+	        }
+	      }
+	      /* Keep content except for bad-listed elements */
+	      if (KEEP_CONTENT && !FORBID_CONTENTS[tagName]) {
+	        const parentNode = getParentNode(currentNode) || currentNode.parentNode;
+	        const childNodes = getChildNodes(currentNode) || currentNode.childNodes;
+	        if (childNodes && parentNode) {
+	          const childCount = childNodes.length;
+	          for (let i = childCount - 1; i >= 0; --i) {
+	            const childClone = cloneNode(childNodes[i], true);
+	            childClone.__removalCount = (currentNode.__removalCount || 0) + 1;
+	            parentNode.insertBefore(childClone, getNextSibling(currentNode));
+	          }
+	        }
+	      }
+	      _forceRemove(currentNode);
+	      return true;
+	    }
+	    /* Check whether element has a valid namespace */
+	    if (currentNode instanceof Element && !_checkValidNamespace(currentNode)) {
+	      _forceRemove(currentNode);
+	      return true;
+	    }
+	    /* Make sure that older browsers don't get fallback-tag mXSS */
+	    if ((tagName === 'noscript' || tagName === 'noembed' || tagName === 'noframes') && regExpTest(/<\/no(script|embed|frames)/i, currentNode.innerHTML)) {
+	      _forceRemove(currentNode);
+	      return true;
+	    }
+	    /* Sanitize element content to be template-safe */
+	    if (SAFE_FOR_TEMPLATES && currentNode.nodeType === NODE_TYPE.text) {
+	      /* Get the element's text content */
+	      content = currentNode.textContent;
+	      arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
+	        content = stringReplace(content, expr, ' ');
+	      });
+	      if (currentNode.textContent !== content) {
+	        arrayPush(DOMPurify.removed, {
+	          element: currentNode.cloneNode()
+	        });
+	        currentNode.textContent = content;
+	      }
+	    }
+	    /* Execute a hook if present */
+	    _executeHooks(hooks.afterSanitizeElements, currentNode, null);
+	    return false;
+	  };
+	  /**
+	   * _isValidAttribute
+	   *
+	   * @param lcTag Lowercase tag name of containing element.
+	   * @param lcName Lowercase attribute name.
+	   * @param value Attribute value.
+	   * @return Returns true if `value` is valid, otherwise false.
+	   */
+	  // eslint-disable-next-line complexity
+	  const _isValidAttribute = function _isValidAttribute(lcTag, lcName, value) {
+	    /* Make sure attribute cannot clobber */
+	    if (SANITIZE_DOM && (lcName === 'id' || lcName === 'name') && (value in document || value in formElement)) {
+	      return false;
+	    }
+	    /* Allow valid data-* attributes: At least one character after "-"
+	        (https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-*-attributes)
+	        XML-compatible (https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible and http://www.w3.org/TR/xml/#d0e804)
+	        We don't need to check the value; it's always URI safe. */
+	    if (ALLOW_DATA_ATTR && !FORBID_ATTR[lcName] && regExpTest(DATA_ATTR, lcName)) ; else if (ALLOW_ARIA_ATTR && regExpTest(ARIA_ATTR, lcName)) ; else if (!ALLOWED_ATTR[lcName] || FORBID_ATTR[lcName]) {
+	      if (
+	      // First condition does a very basic check if a) it's basically a valid custom element tagname AND
+	      // b) if the tagName passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
+	      // and c) if the attribute name passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.attributeNameCheck
+	      _isBasicCustomElement(lcTag) && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, lcTag) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(lcTag)) && (CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.attributeNameCheck, lcName) || CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.attributeNameCheck(lcName)) ||
+	      // Alternative, second condition checks if it's an `is`-attribute, AND
+	      // the value passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
+	      lcName === 'is' && CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, value) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(value))) ; else {
+	        return false;
+	      }
+	      /* Check value is safe. First, is attr inert? If so, is safe */
+	    } else if (URI_SAFE_ATTRIBUTES[lcName]) ; else if (regExpTest(IS_ALLOWED_URI$1, stringReplace(value, ATTR_WHITESPACE, ''))) ; else if ((lcName === 'src' || lcName === 'xlink:href' || lcName === 'href') && lcTag !== 'script' && stringIndexOf(value, 'data:') === 0 && DATA_URI_TAGS[lcTag]) ; else if (ALLOW_UNKNOWN_PROTOCOLS && !regExpTest(IS_SCRIPT_OR_DATA, stringReplace(value, ATTR_WHITESPACE, ''))) ; else if (value) {
+	      return false;
+	    } else ;
+	    return true;
+	  };
+	  /**
+	   * _isBasicCustomElement
+	   * checks if at least one dash is included in tagName, and it's not the first char
+	   * for more sophisticated checking see https://github.com/sindresorhus/validate-element-name
+	   *
+	   * @param tagName name of the tag of the node to sanitize
+	   * @returns Returns true if the tag name meets the basic criteria for a custom element, otherwise false.
+	   */
+	  const _isBasicCustomElement = function _isBasicCustomElement(tagName) {
+	    return tagName !== 'annotation-xml' && stringMatch(tagName, CUSTOM_ELEMENT);
+	  };
+	  /**
+	   * _sanitizeAttributes
+	   *
+	   * @protect attributes
+	   * @protect nodeName
+	   * @protect removeAttribute
+	   * @protect setAttribute
+	   *
+	   * @param currentNode to sanitize
+	   */
+	  const _sanitizeAttributes = function _sanitizeAttributes(currentNode) {
+	    /* Execute a hook if present */
+	    _executeHooks(hooks.beforeSanitizeAttributes, currentNode, null);
+	    const {
+	      attributes
+	    } = currentNode;
+	    /* Check if we have attributes; if not we might have a text node */
+	    if (!attributes || _isClobbered(currentNode)) {
+	      return;
+	    }
+	    const hookEvent = {
+	      attrName: '',
+	      attrValue: '',
+	      keepAttr: true,
+	      allowedAttributes: ALLOWED_ATTR,
+	      forceKeepAttr: undefined
+	    };
+	    let l = attributes.length;
+	    /* Go backwards over all attributes; safely remove bad ones */
+	    while (l--) {
+	      const attr = attributes[l];
+	      const {
+	        name,
+	        namespaceURI,
+	        value: attrValue
+	      } = attr;
+	      const lcName = transformCaseFunc(name);
+	      let value = name === 'value' ? attrValue : stringTrim(attrValue);
+	      /* Execute a hook if present */
+	      hookEvent.attrName = lcName;
+	      hookEvent.attrValue = value;
+	      hookEvent.keepAttr = true;
+	      hookEvent.forceKeepAttr = undefined; // Allows developers to see this is a property they can set
+	      _executeHooks(hooks.uponSanitizeAttribute, currentNode, hookEvent);
+	      value = hookEvent.attrValue;
+	      /* Full DOM Clobbering protection via namespace isolation,
+	       * Prefix id and name attributes with `user-content-`
+	       */
+	      if (SANITIZE_NAMED_PROPS && (lcName === 'id' || lcName === 'name')) {
+	        // Remove the attribute with this value
+	        _removeAttribute(name, currentNode);
+	        // Prefix the value and later re-create the attribute with the sanitized value
+	        value = SANITIZE_NAMED_PROPS_PREFIX + value;
+	      }
+	      /* Work around a security issue with comments inside attributes */
+	      if (SAFE_FOR_XML && regExpTest(/((--!?|])>)|<\/(style|title)/i, value)) {
+	        _removeAttribute(name, currentNode);
+	        continue;
+	      }
+	      /* Did the hooks approve of the attribute? */
+	      if (hookEvent.forceKeepAttr) {
+	        continue;
+	      }
+	      /* Remove attribute */
+	      _removeAttribute(name, currentNode);
+	      /* Did the hooks approve of the attribute? */
+	      if (!hookEvent.keepAttr) {
+	        continue;
+	      }
+	      /* Work around a security issue in jQuery 3.0 */
+	      if (!ALLOW_SELF_CLOSE_IN_ATTR && regExpTest(/\/>/i, value)) {
+	        _removeAttribute(name, currentNode);
+	        continue;
+	      }
+	      /* Sanitize attribute content to be template-safe */
+	      if (SAFE_FOR_TEMPLATES) {
+	        arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
+	          value = stringReplace(value, expr, ' ');
+	        });
+	      }
+	      /* Is `value` valid for this attribute? */
+	      const lcTag = transformCaseFunc(currentNode.nodeName);
+	      if (!_isValidAttribute(lcTag, lcName, value)) {
+	        continue;
+	      }
+	      /* Handle attributes that require Trusted Types */
+	      if (trustedTypesPolicy && typeof trustedTypes === 'object' && typeof trustedTypes.getAttributeType === 'function') {
+	        if (namespaceURI) ; else {
+	          switch (trustedTypes.getAttributeType(lcTag, lcName)) {
+	            case 'TrustedHTML':
+	              {
+	                value = trustedTypesPolicy.createHTML(value);
+	                break;
+	              }
+	            case 'TrustedScriptURL':
+	              {
+	                value = trustedTypesPolicy.createScriptURL(value);
+	                break;
+	              }
+	          }
+	        }
+	      }
+	      /* Handle invalid data-* attribute set by try-catching it */
+	      try {
+	        if (namespaceURI) {
+	          currentNode.setAttributeNS(namespaceURI, name, value);
+	        } else {
+	          /* Fallback to setAttribute() for browser-unrecognized namespaces e.g. "x-schema". */
+	          currentNode.setAttribute(name, value);
+	        }
+	        if (_isClobbered(currentNode)) {
+	          _forceRemove(currentNode);
+	        } else {
+	          arrayPop(DOMPurify.removed);
+	        }
+	      } catch (_) {}
+	    }
+	    /* Execute a hook if present */
+	    _executeHooks(hooks.afterSanitizeAttributes, currentNode, null);
+	  };
+	  /**
+	   * _sanitizeShadowDOM
+	   *
+	   * @param fragment to iterate over recursively
+	   */
+	  const _sanitizeShadowDOM = function _sanitizeShadowDOM(fragment) {
+	    let shadowNode = null;
+	    const shadowIterator = _createNodeIterator(fragment);
+	    /* Execute a hook if present */
+	    _executeHooks(hooks.beforeSanitizeShadowDOM, fragment, null);
+	    while (shadowNode = shadowIterator.nextNode()) {
+	      /* Execute a hook if present */
+	      _executeHooks(hooks.uponSanitizeShadowNode, shadowNode, null);
+	      /* Sanitize tags and elements */
+	      _sanitizeElements(shadowNode);
+	      /* Check attributes next */
+	      _sanitizeAttributes(shadowNode);
+	      /* Deep shadow DOM detected */
+	      if (shadowNode.content instanceof DocumentFragment) {
+	        _sanitizeShadowDOM(shadowNode.content);
+	      }
+	    }
+	    /* Execute a hook if present */
+	    _executeHooks(hooks.afterSanitizeShadowDOM, fragment, null);
+	  };
+	  // eslint-disable-next-line complexity
+	  DOMPurify.sanitize = function (dirty) {
+	    let cfg = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
+	    let body = null;
+	    let importedNode = null;
+	    let currentNode = null;
+	    let returnNode = null;
+	    /* Make sure we have a string to sanitize.
+	      DO NOT return early, as this will return the wrong type if
+	      the user has requested a DOM object rather than a string */
+	    IS_EMPTY_INPUT = !dirty;
+	    if (IS_EMPTY_INPUT) {
+	      dirty = '<!-->';
+	    }
+	    /* Stringify, in case dirty is an object */
+	    if (typeof dirty !== 'string' && !_isNode(dirty)) {
+	      if (typeof dirty.toString === 'function') {
+	        dirty = dirty.toString();
+	        if (typeof dirty !== 'string') {
+	          throw typeErrorCreate('dirty is not a string, aborting');
+	        }
+	      } else {
+	        throw typeErrorCreate('toString is not a function');
+	      }
+	    }
+	    /* Return dirty HTML if DOMPurify cannot run */
+	    if (!DOMPurify.isSupported) {
+	      return dirty;
+	    }
+	    /* Assign config vars */
+	    if (!SET_CONFIG) {
+	      _parseConfig(cfg);
+	    }
+	    /* Clean up removed elements */
+	    DOMPurify.removed = [];
+	    /* Check if dirty is correctly typed for IN_PLACE */
+	    if (typeof dirty === 'string') {
+	      IN_PLACE = false;
+	    }
+	    if (IN_PLACE) {
+	      /* Do some early pre-sanitization to avoid unsafe root nodes */
+	      if (dirty.nodeName) {
+	        const tagName = transformCaseFunc(dirty.nodeName);
+	        if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {
+	          throw typeErrorCreate('root node is forbidden and cannot be sanitized in-place');
+	        }
+	      }
+	    } else if (dirty instanceof Node) {
+	      /* If dirty is a DOM element, append to an empty document to avoid
+	         elements being stripped by the parser */
+	      body = _initDocument('<!---->');
+	      importedNode = body.ownerDocument.importNode(dirty, true);
+	      if (importedNode.nodeType === NODE_TYPE.element && importedNode.nodeName === 'BODY') {
+	        /* Node is already a body, use as is */
+	        body = importedNode;
+	      } else if (importedNode.nodeName === 'HTML') {
+	        body = importedNode;
+	      } else {
+	        // eslint-disable-next-line unicorn/prefer-dom-node-append
+	        body.appendChild(importedNode);
+	      }
+	    } else {
+	      /* Exit directly if we have nothing to do */
+	      if (!RETURN_DOM && !SAFE_FOR_TEMPLATES && !WHOLE_DOCUMENT &&
+	      // eslint-disable-next-line unicorn/prefer-includes
+	      dirty.indexOf('<') === -1) {
+	        return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? trustedTypesPolicy.createHTML(dirty) : dirty;
+	      }
+	      /* Initialize the document to work on */
+	      body = _initDocument(dirty);
+	      /* Check we have a DOM node from the data */
+	      if (!body) {
+	        return RETURN_DOM ? null : RETURN_TRUSTED_TYPE ? emptyHTML : '';
+	      }
+	    }
+	    /* Remove first element node (ours) if FORCE_BODY is set */
+	    if (body && FORCE_BODY) {
+	      _forceRemove(body.firstChild);
+	    }
+	    /* Get node iterator */
+	    const nodeIterator = _createNodeIterator(IN_PLACE ? dirty : body);
+	    /* Now start iterating over the created document */
+	    while (currentNode = nodeIterator.nextNode()) {
+	      /* Sanitize tags and elements */
+	      _sanitizeElements(currentNode);
+	      /* Check attributes next */
+	      _sanitizeAttributes(currentNode);
+	      /* Shadow DOM detected, sanitize it */
+	      if (currentNode.content instanceof DocumentFragment) {
+	        _sanitizeShadowDOM(currentNode.content);
+	      }
+	    }
+	    /* If we sanitized `dirty` in-place, return it. */
+	    if (IN_PLACE) {
+	      return dirty;
+	    }
+	    /* Return sanitized string or DOM */
+	    if (RETURN_DOM) {
+	      if (RETURN_DOM_FRAGMENT) {
+	        returnNode = createDocumentFragment.call(body.ownerDocument);
+	        while (body.firstChild) {
+	          // eslint-disable-next-line unicorn/prefer-dom-node-append
+	          returnNode.appendChild(body.firstChild);
+	        }
+	      } else {
+	        returnNode = body;
+	      }
+	      if (ALLOWED_ATTR.shadowroot || ALLOWED_ATTR.shadowrootmode) {
+	        /*
+	          AdoptNode() is not used because internal state is not reset
+	          (e.g. the past names map of a HTMLFormElement), this is safe
+	          in theory but we would rather not risk another attack vector.
+	          The state that is cloned by importNode() is explicitly defined
+	          by the specs.
+	        */
+	        returnNode = importNode.call(originalDocument, returnNode, true);
+	      }
+	      return returnNode;
+	    }
+	    let serializedHTML = WHOLE_DOCUMENT ? body.outerHTML : body.innerHTML;
+	    /* Serialize doctype if allowed */
+	    if (WHOLE_DOCUMENT && ALLOWED_TAGS['!doctype'] && body.ownerDocument && body.ownerDocument.doctype && body.ownerDocument.doctype.name && regExpTest(DOCTYPE_NAME, body.ownerDocument.doctype.name)) {
+	      serializedHTML = '<!DOCTYPE ' + body.ownerDocument.doctype.name + '>\n' + serializedHTML;
+	    }
+	    /* Sanitize final string template-safe */
+	    if (SAFE_FOR_TEMPLATES) {
+	      arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
+	        serializedHTML = stringReplace(serializedHTML, expr, ' ');
+	      });
+	    }
+	    return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? trustedTypesPolicy.createHTML(serializedHTML) : serializedHTML;
+	  };
+	  DOMPurify.setConfig = function () {
+	    let cfg = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+	    _parseConfig(cfg);
+	    SET_CONFIG = true;
+	  };
+	  DOMPurify.clearConfig = function () {
+	    CONFIG = null;
+	    SET_CONFIG = false;
+	  };
+	  DOMPurify.isValidAttribute = function (tag, attr, value) {
+	    /* Initialize shared config vars if necessary. */
+	    if (!CONFIG) {
+	      _parseConfig({});
+	    }
+	    const lcTag = transformCaseFunc(tag);
+	    const lcName = transformCaseFunc(attr);
+	    return _isValidAttribute(lcTag, lcName, value);
+	  };
+	  DOMPurify.addHook = function (entryPoint, hookFunction) {
+	    if (typeof hookFunction !== 'function') {
+	      return;
+	    }
+	    arrayPush(hooks[entryPoint], hookFunction);
+	  };
+	  DOMPurify.removeHook = function (entryPoint, hookFunction) {
+	    if (hookFunction !== undefined) {
+	      const index = arrayLastIndexOf(hooks[entryPoint], hookFunction);
+	      return index === -1 ? undefined : arraySplice(hooks[entryPoint], index, 1)[0];
+	    }
+	    return arrayPop(hooks[entryPoint]);
+	  };
+	  DOMPurify.removeHooks = function (entryPoint) {
+	    hooks[entryPoint] = [];
+	  };
+	  DOMPurify.removeAllHooks = function () {
+	    hooks = _createHooksMap();
+	  };
+	  return DOMPurify;
+	}
+	var purify = createDOMPurify();
+
+	purify_cjs = purify;
+	
+	return purify_cjs;
+}
+
+window.DOMPurify || (window.DOMPurify = requirePurify_cjs().default || requirePurify_cjs());
 
 // src/utils/entries-to-string.ts
 function entriesToString(obj, separator = "=") {
@@ -16470,10 +17103,18 @@ var HtmlWidget = /*#__PURE__*/function (_HtmlMultiWidget) {
   }, {
     key: "setFormElements",
     value: function setFormElements(elements) {
-      var _this = this;
-      elements.forEach(function (element) {
-        return _this.setFormElement(element);
-      });
+      var _iterator = _createForOfIteratorHelper(elements),
+        _step;
+      try {
+        for (_iterator.s(); !(_step = _iterator.n()).done;) {
+          var element = _step.value;
+          this.setFormElement(element);
+        }
+      } catch (err) {
+        _iterator.e(err);
+      } finally {
+        _iterator.f();
+      }
     }
   }, {
     key: "setFormElement",
@@ -16484,17 +17125,17 @@ var HtmlWidget = /*#__PURE__*/function (_HtmlMultiWidget) {
       })]);
     }
     /**
-     * The method to set meta information for the checkout page
-     *
-     * @example
-     * config.setMeta({
-            brand_name: 'paydock',
-            reference: '15',
-            email: 'wault@paydock.com'
-        });
-     *
-     * @param {IPayPalMeta | IBamboraMeta} object - data which can be shown on checkout page [IPayPalMeta]{@link IPayPalMeta} [IBamboraMeta]{@link IBamboraMeta}
-     */
+       * The method to set meta information for the checkout page
+       *
+       * @example
+       * config.setMeta({
+              brand_name: 'paydock',
+              reference: '15',
+              email: 'wault@paydock.com'
+          });
+       *
+       * @param {IPayPalMeta | IBamboraMeta} object - data which can be shown on checkout page [IPayPalMeta]{@link IPayPalMeta} [IBamboraMeta]{@link IBamboraMeta}
+       */
   }, {
     key: "setMeta",
     value: function setMeta(meta) {
@@ -16508,6 +17149,37 @@ var HtmlWidget = /*#__PURE__*/function (_HtmlMultiWidget) {
   }]);
 }(HtmlMultiWidget);
 
+var InstructionModule$1 = /*#__PURE__*/function () {
+  function InstructionModule() {
+    _classCallCheck(this, InstructionModule);
+    this.instructions = [];
+  }
+  return _createClass(InstructionModule, [{
+    key: "getInstruction",
+    value: function getInstruction(id) {
+      return this.instructions.find(function (instructionClass) {
+        return instructionClass.instruction == id;
+      });
+    }
+  }]);
+}();
+
+function InstructionModule(config) {
+  return function (constructor) {
+    return /*#__PURE__*/function (_constructor) {
+      function _class() {
+        var _this;
+        _classCallCheck(this, _class);
+        _this = _callSuper(this, _class, arguments);
+        _this.instructions = config;
+        return _this;
+      }
+      _inherits(_class, _constructor);
+      return _createClass(_class);
+    }(constructor);
+  };
+}
+
 var InstructionHandler = /*#__PURE__*/function () {
   function InstructionHandler(selector, formSelector, api, checkoutWidget) {
     _classCallCheck(this, InstructionHandler);
@@ -17041,8 +17713,6 @@ var InstructionCardFormShow = /*#__PURE__*/function (_InstructionHandler) {
 }(InstructionHandler);
 InstructionCardFormShow = __decorate([Instruction('instruction.card_form.show')], InstructionCardFormShow);
 
-var TEMPLATE = "\n<style>\n    @import url('https://fonts.cdnfonts.com/css/segoe-ui-4');\n    @import url('https://fonts.cdnfonts.com/css/droid-sans-2');\n    @import url('https://fonts.cdnfonts.com/css/helvetica-neue-55');\n    @import url('https://fonts.googleapis.com/css2?family=Cantarell&family=Fira+Sans&family=Oxygen&family=Roboto&family=Ubuntu&display=swap');\n    \n    /* RESET DEFAULT STYLES */\n    *,\n    *:before,\n    *:after {\n        box-sizing: border-box;\n    }\n\n    html,\n    body,\n    div,\n    span,\n    applet,\n    object,\n    iframe,\n    h1,\n    h2,\n    h3,\n    h4,\n    h5,\n    h6,\n    p,\n    blockquote,\n    pre,\n    a,\n    abbr,\n    acronym,\n    address,\n    big,\n    cite,\n    code,\n    del,\n    dfn,\n    em,\n    img,\n    ins,\n    kbd,\n    q,\n    s,\n    samp,\n    small,\n    strike,\n    strong,\n    sub,\n    sup,\n    tt,\n    var,\n    b,\n    u,\n    i,\n    center,\n    dl,\n    dt,\n    dd,\n    ol,\n    ul,\n    li,\n    fieldset,\n    form,\n    label,\n    legend,\n    table,\n    caption,\n    tbody,\n    tfoot,\n    thead,\n    tr,\n    th,\n    td,\n    article,\n    aside,\n    canvas,\n    details,\n    embed,\n    figure,\n    figcaption,\n    footer,\n    header,\n    hgroup,\n    menu,\n    nav,\n    output,\n    ruby,\n    section,\n    summary,\n    time,\n    mark,\n    audio,\n    video,\n    input {\n        margin: 0;\n        padding: 0;\n        border: 0;\n        font-size: 100%;\n        font: inherit;\n        vertical-align: baseline;\n    }\n\n    article,\n    aside,\n    details,\n    figcaption,\n    figure,\n    footer,\n    header,\n    hgroup,\n    menu,\n    nav,\n    section {\n        display: block;\n    }\n\n    body {\n        line-height: 1;\n    }\n\n    ol,\n    ul {\n        list-style: none;\n    }\n\n    ul {\n        padding: 0;\n        margin: 0;\n    }\n\n    /* MAIN STYLES */\n    .wrap {\n        padding: 10px;\n        background-color: {{background_color}};\n    }\n\n    .widget-body {\n        background-color: #fff;\n        border: 1px solid {{border_color}};\n    }\n\n    .payment-source {\n        cursor: pointer;\n        padding: 1em 0.8em;\n        display: flex;\n        align-items: center;\n        height: 70px;\n    }\n\n    .payment-source:not(:last-child) {\n        border-bottom: 1px solid {{border_color}};\n    }\n\n    .payment-source__wrap {\n        display: flex;\n        align-items: center;\n        font-family: {{font_family}};\n        font-size: {{font_size}};\n        color: {{text_color}}\n    }\n\n    .payment-source__radio {\n        margin-right: 2em;\n        width: 18px;\n        min-width: 18px;\n        height: 18px;\n        border: 1px solid {{button_color}};\n        border-radius: 50%;\n        appearance: none;\n        cursor: pointer;\n\n        @media screen and (max-width: 380px) {\n            margin-right: 1em;\n        }\n    }\n\n    .payment-source__radio::before {\n        content: \"\";\n        display: block;\n        width: 100%;\n        height: 100%;\n        background-color: #fff;\n        border-radius: 50%;\n    }\n\n    .payment-source__radio:checked::before {\n        border: 4px solid {{button_color}};\n        outline: 1px solid {{button_color}};\n    }\n\n    .payment-source__title {\n        margin-right: 2em;\n        font-weight: 400;\n        line-height: 1.2;\n\n        @media screen and (max-width: 380px) {\n            margin-right: 1em;\n            font-size: 14px;\n        }\n    }\n\n    .payment-source__icon {\n        margin-right: 2em;\n        max-height: 35px;\n\n        @media screen and (max-width: 380px) {\n            margin-right: 1em;\n        }\n    }\n\n    .payment-source .card__scheme {\n        margin-left: auto;\n        display: flex;\n        align-items: center;\n    }\n\n    .payment-source .card__scheme__item:not(:last-child) {\n        margin-right: 10px;\n    }\n\n    .payment-source .card__scheme__img {\n        max-width: 50px;\n\n        @media screen and (max-width: 460px) {\n            max-width: 40px;\n        }\n\n        @media screen and (max-width: 410px) {\n            max-width: 30px;\n        }\n    }\n\n    .payment-source__form {\n        margin-top: 1em;\n        margin-bottom: 1em;\n        margin-left: calc(2em + 18px);\n\n        @media screen and (max-width: 380px) {\n            margin-left: calc(1em + 18px);\n        }\n    }\n\n    .payment-source__form .form-group:not(:last-child) {\n        margin-bottom: 1.5em;\n    }\n\n    .payment-source__form .form-control {\n        padding: 10px 2px 10px 10px;\n        height: 40px;\n        background: #F9F9F9;\n        border: 1px solid {{border_color}};\n    }\n\n    .payment-source__form .form-control:not(:last-child) {\n        margin-right: 1.5em;\n    }\n\n    .payment-source__form .form-control.col-12 {\n        width: calc(100% - 1.5em);\n    }\n\n    .payment-source__form .form-control.col-3 {\n        width: calc(33.33% - 1.5em);\n    }\n\n    .footer__pay-btn {\n        margin-left: auto;\n        padding: 10px 2em;\n        height: 50px;\n        display: flex;\n        align-items: center;\n        justify-content: center;\n        color: #F6F0EB;\n        font-size: 16px;\n        background-color: {{button_color}};\n        box-shadow: 0 1px 3px 0 rgba(0, 0, 0, 0.10), 0 0 0 0.5px rgba(0, 0, 0, 0.10);\n        border: none;\n        border-radius: 6px;\n        cursor: pointer;\n    }\n\n    .footer__pay-btn--paypal {\n        padding: 5px 2em;\n        background-color: #FFC43A;\n    }\n\n    .footer__pay-btn--gpay {\n        font-size: 22px;\n    }\n\n    .footer__pay-btn--gpay img {\n        margin-left: 5px;\n    }\n\n    .footer__pay-btn img {\n        max-height: 100%;\n    }\n</style>\n<main class=\"wrap\">\n    <div class=\"widget-body\">\n        <ul class=\"payment-sources__list\">\n            {{paymentMethods}}\n        </ul>\n    </div>\n</main>\n</div>\n";
-
 var PAYMENT_METHOD = {
   card: "<label class=\"payment-source\">\n    <li class=\"payment-source\">\n      <div class=\"payment-source__wrap\">\n          <input class=\"payment-source__radio\" pm-button=\"card\" type=\"radio\" name=\"radio-group\" />\n          <h2 class=\"payment-source__title\">Pay with Credit or Debit card</h2>\n      </div>\n    </li>\n  </label>",
   bank_account: "<label class=\"payment-source\">\n    <li class=\"payment-source\">\n      <div class=\"payment-source__wrap\">\n          <input class=\"payment-source__radio\" pm-button=\"bank_account\" type=\"radio\" name=\"radio-group\" />\n          <h2 class=\"payment-source__title\">Pay Bank Account</h2>\n      </div>\n    </li>\n  </label>",
@@ -17055,11 +17725,13 @@ var PAYMENT_METHOD = {
   afterpay_checkout: "<label class=\"payment-source\">\n    <li class=\"payment-source\">\n      <div class=\"payment-source__wrap\">\n          <input class=\"payment-source__radio\" pm-button=\"afterpay_checkout\" type=\"radio\" name=\"radio-group\">\n          ".concat(getIcon(paymentMethods.AFTERPAY), "\n      </div>\n    </li>\n  </label>")
 };
 
+var TEMPLATE = "\n<style>\n    @import url('https://fonts.cdnfonts.com/css/segoe-ui-4');\n    @import url('https://fonts.cdnfonts.com/css/droid-sans-2');\n    @import url('https://fonts.cdnfonts.com/css/helvetica-neue-55');\n    @import url('https://fonts.googleapis.com/css2?family=Cantarell&family=Fira+Sans&family=Oxygen&family=Roboto&family=Ubuntu&display=swap');\n    \n    /* RESET DEFAULT STYLES */\n    *,\n    *:before,\n    *:after {\n        box-sizing: border-box;\n    }\n\n    html,\n    body,\n    div,\n    span,\n    applet,\n    object,\n    iframe,\n    h1,\n    h2,\n    h3,\n    h4,\n    h5,\n    h6,\n    p,\n    blockquote,\n    pre,\n    a,\n    abbr,\n    acronym,\n    address,\n    big,\n    cite,\n    code,\n    del,\n    dfn,\n    em,\n    img,\n    ins,\n    kbd,\n    q,\n    s,\n    samp,\n    small,\n    strike,\n    strong,\n    sub,\n    sup,\n    tt,\n    var,\n    b,\n    u,\n    i,\n    center,\n    dl,\n    dt,\n    dd,\n    ol,\n    ul,\n    li,\n    fieldset,\n    form,\n    label,\n    legend,\n    table,\n    caption,\n    tbody,\n    tfoot,\n    thead,\n    tr,\n    th,\n    td,\n    article,\n    aside,\n    canvas,\n    details,\n    embed,\n    figure,\n    figcaption,\n    footer,\n    header,\n    hgroup,\n    menu,\n    nav,\n    output,\n    ruby,\n    section,\n    summary,\n    time,\n    mark,\n    audio,\n    video,\n    input {\n        margin: 0;\n        padding: 0;\n        border: 0;\n        font-size: 100%;\n        font: inherit;\n        vertical-align: baseline;\n    }\n\n    article,\n    aside,\n    details,\n    figcaption,\n    figure,\n    footer,\n    header,\n    hgroup,\n    menu,\n    nav,\n    section {\n        display: block;\n    }\n\n    body {\n        line-height: 1;\n    }\n\n    ol,\n    ul {\n        list-style: none;\n    }\n\n    ul {\n        padding: 0;\n        margin: 0;\n    }\n\n    /* MAIN STYLES */\n    .wrap {\n        padding: 10px;\n        background-color: {{background_color}};\n    }\n\n    .widget-body {\n        background-color: #fff;\n        border: 1px solid {{border_color}};\n    }\n\n    .payment-source {\n        cursor: pointer;\n        padding: 1em 0.8em;\n        display: flex;\n        align-items: center;\n        height: 70px;\n    }\n\n    .payment-source:not(:last-child) {\n        border-bottom: 1px solid {{border_color}};\n    }\n\n    .payment-source__wrap {\n        display: flex;\n        align-items: center;\n        font-family: {{font_family}};\n        font-size: {{font_size}};\n        color: {{text_color}}\n    }\n\n    .payment-source__radio {\n        margin-right: 2em;\n        width: 18px;\n        min-width: 18px;\n        height: 18px;\n        border: 1px solid {{button_color}};\n        border-radius: 50%;\n        appearance: none;\n        cursor: pointer;\n\n        @media screen and (max-width: 380px) {\n            margin-right: 1em;\n        }\n    }\n\n    .payment-source__radio::before {\n        content: \"\";\n        display: block;\n        width: 100%;\n        height: 100%;\n        background-color: #fff;\n        border-radius: 50%;\n    }\n\n    .payment-source__radio:checked::before {\n        border: 4px solid {{button_color}};\n        outline: 1px solid {{button_color}};\n    }\n\n    .payment-source__title {\n        margin-right: 2em;\n        font-weight: 400;\n        line-height: 1.2;\n\n        @media screen and (max-width: 380px) {\n            margin-right: 1em;\n            font-size: 14px;\n        }\n    }\n\n    .payment-source__icon {\n        margin-right: 2em;\n        max-height: 35px;\n\n        @media screen and (max-width: 380px) {\n            margin-right: 1em;\n        }\n    }\n\n    .payment-source .card__scheme {\n        margin-left: auto;\n        display: flex;\n        align-items: center;\n    }\n\n    .payment-source .card__scheme__item:not(:last-child) {\n        margin-right: 10px;\n    }\n\n    .payment-source .card__scheme__img {\n        max-width: 50px;\n\n        @media screen and (max-width: 460px) {\n            max-width: 40px;\n        }\n\n        @media screen and (max-width: 410px) {\n            max-width: 30px;\n        }\n    }\n\n    .payment-source__form {\n        margin-top: 1em;\n        margin-bottom: 1em;\n        margin-left: calc(2em + 18px);\n\n        @media screen and (max-width: 380px) {\n            margin-left: calc(1em + 18px);\n        }\n    }\n\n    .payment-source__form .form-group:not(:last-child) {\n        margin-bottom: 1.5em;\n    }\n\n    .payment-source__form .form-control {\n        padding: 10px 2px 10px 10px;\n        height: 40px;\n        background: #F9F9F9;\n        border: 1px solid {{border_color}};\n    }\n\n    .payment-source__form .form-control:not(:last-child) {\n        margin-right: 1.5em;\n    }\n\n    .payment-source__form .form-control.col-12 {\n        width: calc(100% - 1.5em);\n    }\n\n    .payment-source__form .form-control.col-3 {\n        width: calc(33.33% - 1.5em);\n    }\n\n    .footer__pay-btn {\n        margin-left: auto;\n        padding: 10px 2em;\n        height: 50px;\n        display: flex;\n        align-items: center;\n        justify-content: center;\n        color: #F6F0EB;\n        font-size: 16px;\n        background-color: {{button_color}};\n        box-shadow: 0 1px 3px 0 rgba(0, 0, 0, 0.10), 0 0 0 0.5px rgba(0, 0, 0, 0.10);\n        border: none;\n        border-radius: 6px;\n        cursor: pointer;\n    }\n\n    .footer__pay-btn--paypal {\n        padding: 5px 2em;\n        background-color: #FFC43A;\n    }\n\n    .footer__pay-btn--gpay {\n        font-size: 22px;\n    }\n\n    .footer__pay-btn--gpay img {\n        margin-left: 5px;\n    }\n\n    .footer__pay-btn img {\n        max-height: 100%;\n    }\n</style>\n<main class=\"wrap\">\n    <div class=\"widget-body\">\n        <ul class=\"payment-sources__list\">\n            {{paymentMethods}}\n        </ul>\n    </div>\n</main>\n</div>\n";
+
 var PAYMENTS_METHODS = {
-  APPLE_PAY: "applepay_wallet",
-  GOOGLE_PAY: "googlepay_wallet"
+  APPLE_PAY: 'applepay_wallet',
+  GOOGLE_PAY: 'googlepay_wallet'
 };
-var PAYMENT_METHOD_ORDER = ["card", "afterpay_checkout", "applepay_wallet", "googlepay_wallet", "paypal_wallet", "zip_checkout"];
+var PAYMENT_METHOD_ORDER = ['card', 'afterpay_checkout', 'applepay_wallet', 'googlepay_wallet', 'paypal_wallet', 'zip_checkout'];
 var PaymentMethods = /*#__PURE__*/function () {
   function PaymentMethods(selector, methods, styles, chosen, instruction_token) {
     var skip = arguments.length > 5 && arguments[5] !== undefined ? arguments[5] : false;
@@ -17083,51 +17755,24 @@ var PaymentMethods = /*#__PURE__*/function () {
       var _this = this;
       this.setPaymentMethodsOrder();
       this.setStylesToStandaloneWidget();
-      var initState = new Promise(function (resolve, reject) {
-        return __awaiter(_this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
-          var paymentMethodsAllowed, _iterator, _step, method;
-          return _regeneratorRuntime().wrap(function _callee$(_context) {
-            while (1) switch (_context.prev = _context.next) {
-              case 0:
-                paymentMethodsAllowed = [];
-                _iterator = _createForOfIteratorHelper(this.methods);
-                _context.prev = 2;
-                _iterator.s();
-              case 4:
-                if ((_step = _iterator.n()).done) {
-                  _context.next = 11;
-                  break;
-                }
-                method = _step.value;
-                if (!(method === PAYMENTS_METHODS.APPLE_PAY && !this.isApplePaySupported())) {
-                  _context.next = 8;
-                  break;
-                }
-                return _context.abrupt("continue", 9);
-              case 8:
-                paymentMethodsAllowed.push(PAYMENT_METHOD[method]);
-              case 9:
-                _context.next = 4;
-                break;
-              case 11:
-                _context.next = 16;
-                break;
-              case 13:
-                _context.prev = 13;
-                _context.t0 = _context["catch"](2);
-                _iterator.e(_context.t0);
-              case 16:
-                _context.prev = 16;
-                _iterator.f();
-                return _context.finish(16);
-              case 19:
-                resolve(paymentMethodsAllowed.join(' '));
-              case 20:
-              case "end":
-                return _context.stop();
+      var initState = new Promise(function (resolve, _reject) {
+        var paymentMethodsAllowed = [];
+        var _iterator = _createForOfIteratorHelper(_this.methods),
+          _step;
+        try {
+          for (_iterator.s(); !(_step = _iterator.n()).done;) {
+            var method = _step.value;
+            if (method === PAYMENTS_METHODS.APPLE_PAY && !_this.isApplePaySupported()) {
+              continue;
             }
-          }, _callee, this, [[2, 13, 16, 19]]);
-        }));
+            paymentMethodsAllowed.push(PAYMENT_METHOD[method]);
+          }
+        } catch (err) {
+          _iterator.e(err);
+        } finally {
+          _iterator.f();
+        }
+        resolve(paymentMethodsAllowed.join(' '));
       });
       initState.then(function (content) {
         var template = _this.setStyles(content);
@@ -17139,7 +17784,7 @@ var PaymentMethods = /*#__PURE__*/function () {
           _this.setListenerButtons(iframeDocument);
           _this.iFrame.setIframeHeight(iframeElement, iframeDocument, '.wrap');
         } else {
-          _this.iFrame.getElement().addEventListener("load", function (event) {
+          _this.iFrame.getElement().addEventListener('load', function (event) {
             _this.setListenerButtons(iframeDocument);
             _this.iFrame.setIframeHeight(iframeElement, iframeDocument, '.wrap');
           });
@@ -17150,26 +17795,37 @@ var PaymentMethods = /*#__PURE__*/function () {
     key: "setListenerButtons",
     value: function setListenerButtons(iframeDocument) {
       var _this2 = this;
-      var selectedPaymentMethod = "";
+      var selectedPaymentMethod = '';
       Spinner.hide();
       var buttons = iframeDocument.querySelectorAll('[pm-button]');
-      buttons.forEach(function (button) {
-        button.addEventListener('click', function (event) {
-          var clickedButton = event.target;
-          var customAttributeValue = clickedButton.getAttribute('pm-button');
-          if (selectedPaymentMethod !== customAttributeValue && !_this2.disablePaymentMethodOptions) {
-            _this2.chosen(customAttributeValue);
-            selectedPaymentMethod = customAttributeValue;
-            Spinner.show();
-          }
-        });
-      });
+      var _iterator2 = _createForOfIteratorHelper(buttons),
+        _step2;
+      try {
+        for (_iterator2.s(); !(_step2 = _iterator2.n()).done;) {
+          var button = _step2.value;
+          button.addEventListener('click', function (event) {
+            var clickedButton = event.target;
+            var customAttributeValue = clickedButton.getAttribute('pm-button');
+            if (selectedPaymentMethod !== customAttributeValue && !_this2.disablePaymentMethodOptions) {
+              _this2.chosen(customAttributeValue);
+              selectedPaymentMethod = customAttributeValue;
+              Spinner.show();
+            }
+          });
+        }
+      } catch (err) {
+        _iterator2.e(err);
+      } finally {
+        _iterator2.f();
+      }
     }
   }, {
     key: "setEnv",
     value: function setEnv(instruction_token) {
       var tokenContent = AccessToken.validateJWT(instruction_token);
-      if (!tokenContent) throw new Error("Invalid instruction token.");
+      if (!tokenContent) {
+        throw new Error('Invalid instruction token.');
+      }
       return AccessToken.extractEnv(tokenContent.body);
     }
   }, {
@@ -17178,7 +17834,9 @@ var PaymentMethods = /*#__PURE__*/function () {
       var _a, _b, _c, _d, _e, _f;
       var template = TEMPLATE.replace('{{paymentMethods}}', content);
       var listElement = document === null || document === void 0 ? void 0 : document.querySelector(SELECTORS.LIST);
-      if (listElement) listElement.style.backgroundColor = this.styles.background_color || DEFAULT_VARIABLES.BG_COLOR;
+      if (listElement) {
+        listElement.style.backgroundColor = this.styles.background_color || DEFAULT_VARIABLES.BG_COLOR;
+      }
       template = ((_a = this.styles) === null || _a === void 0 ? void 0 : _a.button_color) ? template.replace(/{{button_color}}/g, this.styles.button_color) : template.replace(/{{button_color}}/g, DEFAULT_VARIABLES.BTN_COLOR);
       template = ((_b = this.styles) === null || _b === void 0 ? void 0 : _b.border_color) ? template.replace(/{{border_color}}/g, this.styles.border_color) : template.replace(/{{border_color}}/g, DEFAULT_VARIABLES.BORDER_COLOR);
       template = ((_c = this.styles) === null || _c === void 0 ? void 0 : _c.background_color) ? template.replace(/{{background_color}}/g, this.styles.background_color) : template.replace(/{{background_color}}/g, DEFAULT_VARIABLES.BG_COLOR);
@@ -17202,7 +17860,9 @@ var PaymentMethods = /*#__PURE__*/function () {
     key: "setPaymentMethodsOrder",
     value: function setPaymentMethodsOrder() {
       var _a;
-      if (!((_a = this.methods) === null || _a === void 0 ? void 0 : _a.length)) return this.methods;
+      if (!((_a = this.methods) === null || _a === void 0 ? void 0 : _a.length)) {
+        return this.methods;
+      }
       this.methods.sort(function (a, b) {
         return PAYMENT_METHOD_ORDER.indexOf(a) - PAYMENT_METHOD_ORDER.indexOf(b);
       });
@@ -17215,25 +17875,62 @@ var PaymentMethods = /*#__PURE__*/function () {
       var iframe = document === null || document === void 0 ? void 0 : document.querySelector("".concat(SELECTORS.LIST, " iframe"));
       var iframeDocument = iframe.contentDocument || ((_a = iframe === null || iframe === void 0 ? void 0 : iframe.contentWindow) === null || _a === void 0 ? void 0 : _a.document);
       if (iframeDocument) {
-        var radiosButtons = iframeDocument.querySelectorAll('input[type="radio"].payment-source__radio');
-        var labels = iframeDocument.querySelectorAll('.payment-source');
-        labels.forEach(function (label) {
-          label.style.cursor = "not-allowed";
-        });
-        radiosButtons.forEach(function (radioButton) {
-          var labels = iframeDocument.querySelectorAll('.payment-source');
-          labels.forEach(function (label) {
-            label.style.cursor = "not-allowed";
-          });
-          radioButton.style.cursor = "not-allowed";
-          if (!radioButton.checked) {
-            radioButton.style.border = "9px solid #EBEBE4";
+        var labels = this.queryAllPaymentSource(iframeDocument);
+        var _iterator3 = _createForOfIteratorHelper(labels),
+          _step3;
+        try {
+          for (_iterator3.s(); !(_step3 = _iterator3.n()).done;) {
+            var label = _step3.value;
+            label.style.cursor = 'not-allowed';
           }
-          radioButton.disabled = true;
-          radioButton.classList.add("disabled");
-        });
+        } catch (err) {
+          _iterator3.e(err);
+        } finally {
+          _iterator3.f();
+        }
+        var radiosButtons = this.queryAllPaymentSourceRadioButtons(iframeDocument);
+        var _iterator4 = _createForOfIteratorHelper(radiosButtons),
+          _step4;
+        try {
+          for (_iterator4.s(); !(_step4 = _iterator4.n()).done;) {
+            var radioButton = _step4.value;
+            var _labels = this.queryAllPaymentSource(iframeDocument);
+            var _iterator5 = _createForOfIteratorHelper(_labels),
+              _step5;
+            try {
+              for (_iterator5.s(); !(_step5 = _iterator5.n()).done;) {
+                var _label = _step5.value;
+                _label.style.cursor = 'not-allowed';
+              }
+            } catch (err) {
+              _iterator5.e(err);
+            } finally {
+              _iterator5.f();
+            }
+            radioButton.style.cursor = 'not-allowed';
+            if (!radioButton.checked) {
+              radioButton.style.border = '9px solid #EBEBE4';
+            }
+            radioButton.disabled = true;
+            radioButton.classList.add('disabled');
+          }
+        } catch (err) {
+          _iterator4.e(err);
+        } finally {
+          _iterator4.f();
+        }
       }
     }
+  }, {
+    key: "queryAllPaymentSource",
+    value: function queryAllPaymentSource(iframeDocument) {
+      return iframeDocument.querySelectorAll('.payment-source');
+    }
+  }, {
+    key: "queryAllPaymentSourceRadioButtons",
+    value: function queryAllPaymentSourceRadioButtons(iframeDocument) {
+      return iframeDocument.querySelectorAll('input[type="radio"].payment-source__radio');
+    }
   }]);
 }();
 
@@ -17264,6 +17961,78 @@ var instructionDisablePaymentMethod = /*#__PURE__*/function (_InstructionHandler
 }(InstructionHandler);
 instructionDisablePaymentMethod = __decorate([Instruction("instruction.disable_payment_method_event.emit")], instructionDisablePaymentMethod);
 
+var InstructionFraudServiceShow = /*#__PURE__*/function (_InstructionHandler) {
+  function InstructionFraudServiceShow() {
+    _classCallCheck(this, InstructionFraudServiceShow);
+    return _callSuper(this, InstructionFraudServiceShow, arguments);
+  }
+  _inherits(InstructionFraudServiceShow, _InstructionHandler);
+  return _createClass(InstructionFraudServiceShow, [{
+    key: "handle",
+    value: function handle(context) {
+      var _this = this;
+      var _a;
+      document.addEventListener(FRAUD_PREVENTION_EVENTS.NAMESPACE, function (event) {
+        switch (event.detail.type) {
+          case FRAUD_PREVENTION_EVENTS.TYPES.FINTERPRINT_TOKEN_READY:
+            {
+              _this.api.checkout().callback({
+                event: 'callback.fraud_service.status',
+                payload: {
+                  status: 'success',
+                  fraud_service_token: event.detail.payload.token
+                }
+              }).then(function () {
+                return console.info('callback.fraud_service.status: ok');
+              })["catch"](function (response) {
+                console.error('callback.fraud_service.status: ok', response);
+                Spinner.hide();
+              });
+              break;
+            }
+          case FRAUD_PREVENTION_EVENTS.TYPES.FINGERPRINT_TOKEN_ERROR:
+            {
+              _this.api.checkout().callback({
+                event: 'callback.fraud_service.status',
+                payload: {
+                  status: 'error',
+                  message: event.detail.payload.code || 'error in fraud service widget'
+                }
+              }).then(function () {
+                return console.info('callback.fraud_service.status: ok');
+              })["catch"](function (response) {
+                Spinner.hide();
+                console.error('callback.fraud_service.status: error', response);
+              });
+              break;
+            }
+          default:
+            {
+              throw new Error("".concat(FRAUD_PREVENTION_EVENTS.NAMESPACE, " emitted an unsupported event: ").concat(JSON.stringify(event.detail), "."));
+            }
+        }
+      });
+      this.fps = new FraudPreventionService({
+        environmentId: this.getEnv(context.instruction_token),
+        mode: 'live'
+      });
+      this.fps.withAccessTokenStrategy(context.instruction_token).withForter({
+        providerId: context.payload.gateway_id,
+        csp: false
+      });
+      if (context.next_instruction) {
+        (_a = this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
+      }
+    }
+  }, {
+    key: "destroy",
+    value: function destroy() {
+      // document.querySelector(this.formSelector).innerHTML = '';
+    }
+  }]);
+}(InstructionHandler);
+InstructionFraudServiceShow = __decorate([Instruction('instruction.fraud_service.show')], InstructionFraudServiceShow);
+
 var MESSAGE_WIDGET_STYLE = {
   TEXT_COLOR: 'text_color',
   FONT_SIZE: 'font_size',
@@ -17470,39 +18239,6 @@ var InstructionMerchantEventEmit = /*#__PURE__*/function (_InstructionHandler) {
 }(InstructionHandler);
 InstructionMerchantEventEmit = __decorate([Instruction("instruction.merchant_event.emit")], InstructionMerchantEventEmit);
 
-var InstructionModule$1 = /*#__PURE__*/function () {
-  function InstructionModule() {
-    _classCallCheck(this, InstructionModule);
-    this.instructions = [];
-  }
-  return _createClass(InstructionModule, [{
-    key: "getInstruction",
-    value: function getInstruction(id) {
-      return this.instructions
-      // tslint:disable-next-line:triple-equals
-      .find(function (instructionClass) {
-        return instructionClass.instruction == id;
-      });
-    }
-  }]);
-}();
-
-function InstructionModule(config) {
-  return function (constructor) {
-    return /*#__PURE__*/function (_constructor) {
-      function _class() {
-        var _this;
-        _classCallCheck(this, _class);
-        _this = _callSuper(this, _class, arguments);
-        _this.instructions = config;
-        return _this;
-      }
-      _inherits(_class, _constructor);
-      return _createClass(_class);
-    }(constructor);
-  };
-}
-
 var InstructionPaymentMethodShow = /*#__PURE__*/function (_InstructionHandler) {
   function InstructionPaymentMethodShow() {
     _classCallCheck(this, InstructionPaymentMethodShow);
@@ -17514,7 +18250,6 @@ var InstructionPaymentMethodShow = /*#__PURE__*/function (_InstructionHandler) {
     value: function handle(context) {
       var _this = this;
       var _a;
-      // tslint:disable-next-line:no-unused-expression
       new PaymentMethods(this.selector, context.payload.allowed_payment_method_types, ((_a = context.payload.customisation) === null || _a === void 0 ? void 0 : _a.base) || {}, function (type) {
         var _a;
         (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
@@ -17724,7 +18459,7 @@ var InstructionModuleV1 = /*#__PURE__*/function (_Module) {
   _inherits(InstructionModuleV1, _Module);
   return _createClass(InstructionModuleV1);
 }(InstructionModule$1);
-InstructionModuleV1 = __decorate([InstructionModule([InstructionAfterpayCheckoutFormShow, InstructionAfterpayWalletFormShow, InstructionApplePayFormShow, InstructionBankAccountFormShow, InstructionCanvas3dsShow, InstructionCardFormShow, instructionDisablePaymentMethod, InstructionGenericShowMessage, InstructionGooglePayFormShow, InstructionMerchantEventEmit, InstructionPaymentMethodShow, InstructionPaypalFormShow, InstructionZipCheckoutFormShow, InstructionZipCheckoutFormShow])], InstructionModuleV1);
+InstructionModuleV1 = __decorate([InstructionModule([InstructionAfterpayCheckoutFormShow, InstructionAfterpayWalletFormShow, InstructionApplePayFormShow, InstructionBankAccountFormShow, InstructionCanvas3dsShow, InstructionCardFormShow, InstructionFraudServiceShow, InstructionGenericShowMessage, InstructionGooglePayFormShow, InstructionMerchantEventEmit, InstructionPaymentMethodShow, InstructionPaypalFormShow, InstructionZipCheckoutFormShow, InstructionZipCheckoutFormShow, instructionDisablePaymentMethod])], InstructionModuleV1);
 
 function getVersionInstructions(version) {
   switch (version) {
@@ -17735,7 +18470,7 @@ function getVersionInstructions(version) {
   }
 }
 
-var additional = "\n<style>\n    #standaloneWidget iframe[title=\"3d secure authentication\"],\n    #standaloneWidget .threeDSecure-iframe {\n        height: 420px;\n    }\n    #standaloneWidget iframe, #list iframe {\n      display: block;\n       max-width: 640px;\n       min-width: 320px;\n       width: 100%;\n       border-width: 0;\n    }\n    .spinner-wrapper {\n      position: absolute;\n      width: calc(100% + 1px);\n      height: calc(100% + 1px);\n      top: 0;\n      left: 0;\n      display: flex;\n      justify-content: center;\n      align-items: center;\n      z-index: 999;\n    }\n    \n    .spinner-wrapper svg {\n        position: absolute;\n\n        height: 50px;\n        width: 50px;\n        z-index: 1000;\n      }\n  \n    .spinner-wrapper .background {\n      margin: 0 !important;\n      background: #f9f9f9;\n      color: #f9f9f9;\n      word-break: break-all;\n      white-space: pre-wrap;\n      width: 100%;\n      height: 100%;\n    }\n    \n    .spinner-wrapper--hidden {\n        display: none;\n    }\n    @media screen and (max-width: 450px) {\n        #standaloneWidget button {\n            width: 100% !important;\n        }\n    }\n    @media screen and (max-width: 450px) {\n        #standaloneWidget .paypal-buttons {\n            margin: 0 10px 10px 10px;\n        }\n    }\n    @media screen and (min-width: 451px) {\n        #standaloneWidget .paypal-buttons {\n            padding-bottom: 12px;\n            right: 40px;\n            max-width: 290px;\n        }\n    }\n    @media screen and (min-width: 451px) {\n        #standaloneWidget #gpay-button-online-api-id {\n            max-width: 311px;\n            margin-bottom: 11px;\n            right: 11px;\n        }\n    }\n    @media screen and (max-width: 450px) {\n        #standaloneWidget .gpay-card-info-container-fill {\n            margin: 0 10px 5px 10px;\n        }\n    }\n    \n    apple-pay-button {\n        padding: 0 10px 20px;\n        max-width: 320px;\n    }\n    \n    @media screen and (max-width: 450px) {\n        apple-pay-button {\n            max-width: 100%;\n        }\n    }\n</style>\n<div id=\"spinner\" class=\"spinner-wrapper spinner-wrapper--hidden\">\n    <svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 200 200'><radialGradient id='a5' cx='.66' fx='.66' cy='.3125' fy='.3125' gradientTransform='scale(1.5)'><stop offset='0' stop-color='#191919'></stop><stop offset='.3' stop-color='#191919' stop-opacity='.9'></stop><stop offset='.6' stop-color='#191919' stop-opacity='.6'></stop><stop offset='.8' stop-color='#191919' stop-opacity='.3'></stop><stop offset='1' stop-color='#191919' stop-opacity='0'></stop></radialGradient><circle transform-origin='center' fill='none' stroke='url(#a5)' stroke-width='30' stroke-linecap='round' stroke-dasharray='200 1000' stroke-dashoffset='0' cx='100' cy='100' r='70'><animateTransform type='rotate' attributeName='transform' calcMode='spline' dur='1' values='360;0' keyTimes='0;1' keySplines='0 0 1 1' repeatCount='indefinite'></animateTransform></circle><circle transform-origin='center' fill='none' opacity='.2' stroke='#191919' stroke-width='30' stroke-linecap='round' cx='100' cy='100' r='70'></circle></svg>\n    <pre class=\"background\"></pre>\n</div>\n";
+var additional = "\n<style>\n    #standaloneWidget iframe[title=\"3d secure authentication\"],\n    #standaloneWidget .threeDSecure-iframe {\n        height: 420px;\n    }\n    #standaloneWidget iframe, #list iframe {\n      display: block;\n       max-width: 640px;\n       min-width: 200px;\n       width: 100%;\n       border-width: 0;\n    }\n    .spinner-wrapper {\n      position: absolute;\n      width: calc(100% + 1px);\n      height: calc(100% + 1px);\n      top: 0;\n      left: 0;\n      display: flex;\n      justify-content: center;\n      align-items: center;\n      z-index: 999;\n    }\n    \n    .spinner-wrapper svg {\n        position: absolute;\n\n        height: 50px;\n        width: 50px;\n        z-index: 1000;\n      }\n  \n    .spinner-wrapper .background {\n      margin: 0 !important;\n      background: #f9f9f9;\n      color: #f9f9f9;\n      word-break: break-all;\n      white-space: pre-wrap;\n      width: 100%;\n      height: 100%;\n    }\n    \n    .spinner-wrapper--hidden {\n        display: none;\n    }\n    @media screen and (max-width: 450px) {\n        #standaloneWidget button {\n            width: 100% !important;\n        }\n    }\n    @media screen and (max-width: 450px) {\n        #standaloneWidget .paypal-buttons {\n            margin: 0 10px 10px 10px;\n        }\n    }\n    @media screen and (min-width: 451px) {\n        #standaloneWidget .paypal-buttons {\n            padding-bottom: 12px;\n            right: 10px;\n            max-width: 320px;\n        }\n    }\n    @media screen and (min-width: 451px) {\n        #standaloneWidget #gpay-button-online-api-id {\n            max-width: 311px;\n            margin-bottom: 11px;\n            right: 11px;\n        }\n    }\n    @media screen and (max-width: 450px) {\n        #standaloneWidget .gpay-card-info-container-fill {\n            margin: 0 10px 5px 10px;\n        }\n    }\n    \n    apple-pay-button {\n        padding: 0 10px 20px;\n        max-width: 320px;\n    }\n    \n    @media screen and (max-width: 450px) {\n        apple-pay-button {\n            max-width: 100%;\n        }\n    }\n</style>\n<div id=\"spinner\" class=\"spinner-wrapper spinner-wrapper--hidden\">\n    <svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 200 200'><radialGradient id='a5' cx='.66' fx='.66' cy='.3125' fy='.3125' gradientTransform='scale(1.5)'><stop offset='0' stop-color='#191919'></stop><stop offset='.3' stop-color='#191919' stop-opacity='.9'></stop><stop offset='.6' stop-color='#191919' stop-opacity='.6'></stop><stop offset='.8' stop-color='#191919' stop-opacity='.3'></stop><stop offset='1' stop-color='#191919' stop-opacity='0'></stop></radialGradient><circle transform-origin='center' fill='none' stroke='url(#a5)' stroke-width='30' stroke-linecap='round' stroke-dasharray='200 1000' stroke-dashoffset='0' cx='100' cy='100' r='70'><animateTransform type='rotate' attributeName='transform' calcMode='spline' dur='1' values='360;0' keyTimes='0;1' keySplines='0 0 1 1' repeatCount='indefinite'></animateTransform></circle><circle transform-origin='center' fill='none' opacity='.2' stroke='#191919' stroke-width='30' stroke-linecap='round' cx='100' cy='100' r='70'></circle></svg>\n    <pre class=\"background\"></pre>\n</div>\n";
 
 var EVENT$1 = {
   PAYMENT_SUCCESSFUL: 'paymentSuccessful',
@@ -17748,13 +18483,13 @@ var SELECTORS = {
 };
 var IFRAME_ELEMENTS_STYLES = {
   'max-width': '640px',
-  'min-width': '320px',
+  'min-width': '200px',
   'display': 'flex',
   'margin': 'auto'
 };
 var WIDGET_STYLES = {
   'max-width': '640px',
-  'min-width': '320px',
+  'min-width': '200px',
   'margin': 'auto',
   'position': 'relative'
 };
@@ -37778,4 +38513,4 @@ var browser = /*#__PURE__*/Object.freeze({
   strToU8: strToU8
 });
 
-export { AfterpayCheckoutButton, Api, ApplePayWalletButtonExpress, CHECKOUT_BUTTON_EVENT, Canvas3ds, Checkout, ClickToPay, Configuration, ELEMENT, EVENT$4 as EVENT, Builder$1 as ExternalCheckoutBuilder, Checker as ExternalCheckoutChecker, FORM_FIELD$1 as FORM_FIELD, HtmlMultiWidget, HtmlPaymentSourceWidget, HtmlWidget, InstructionDebugger, MultiWidget, PAYMENT_TYPE, PURPOSE, PayPalDataCollector, PayPalSavePaymentSourceWidget, Builder as PaymentSourceBuilder, PaymentSourceWidget, PaypalCheckoutButton, PaypalWalletButtonExpress, STYLABLE_ELEMENT, STYLABLE_ELEMENT_STATE, STYLE$2 as STYLE, SUPPORTED_CARD_TYPES, TEXT, TRIGGER$1 as TRIGGER, TYPE, VAULT_DISPLAY_STYLE, VaultDisplayWidget, WalletButtons, ZipmoneyCheckoutButton };
+export { AfterpayCheckoutButton, Api, ApplePayWalletButtonExpress, CHECKOUT_BUTTON_EVENT, Canvas3ds, Checkout, ClickToPay, Configuration, ELEMENT, EVENT$4 as EVENT, Builder$1 as ExternalCheckoutBuilder, Checker as ExternalCheckoutChecker, FORM_FIELD$1 as FORM_FIELD, FRAUD_PREVENTION_EVENTS, FraudPreventionService, HtmlMultiWidget, HtmlPaymentSourceWidget, HtmlWidget, InstructionDebugger, MultiWidget, PAYMENT_TYPE, PURPOSE, PayPalDataCollector, PayPalSavePaymentSourceWidget, Builder as PaymentSourceBuilder, PaymentSourceWidget, PaypalCheckoutButton, PaypalWalletButtonExpress, STYLABLE_ELEMENT, STYLABLE_ELEMENT_STATE, STYLE$2 as STYLE, SUPPORTED_CARD_TYPES, TEXT, TRIGGER$1 as TRIGGER, TYPE, VAULT_DISPLAY_STYLE, VaultDisplayWidget, WalletButtons, ZipmoneyCheckoutButton };