@paydock/client-sdk 1.122.3-beta → 1.123.2-beta

package/bundles/widget.umd.js

@@ -503,10 +503,10 @@
     for (; !{}.hasOwnProperty.call(t, o) && null !== (t = _getPrototypeOf(t)););
     return t;
   }
-  function _superPropGet(t, e, o, r) {
-    var p = _get(_getPrototypeOf(t.prototype ), e, o);
+  function _superPropGet(t, o, e, r) {
+    var p = _get(_getPrototypeOf(t.prototype ), o, e);
     return "function" == typeof p ? function (t) {
-      return p.apply(o, t);
+      return p.apply(e, t);
     } : p;
   }
   function _toConsumableArray(r) {
@@ -869,46 +869,75 @@
     PAYDOCK: 'paydock.com',
     KOVENA: 'kovena.com'
   };
+  // TODO @ingeniousraccoons we should take advantage of TypeScript mechanism for static environmentId checking and simplified runtime validation
+  // TODO @ingeniousraccoons unify `environment.paydock.ts` and `environment.cba.ts` making them configuration driven
   var Env = /*#__PURE__*/function () {
     function Env(configs) {
       var defaultEnv = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : DEFAULT_ENV;
       _classCallCheck(this, Env);
-      this.configs = configs;
+      this.environmentConfigurations = configs;
       this.setEnv(defaultEnv);
     }
     return _createClass(Env, [{
       key: "setEnv",
-      value: function setEnv(env, alias) {
-        if (!this.isValidMode(this.configs, env)) throw new Error("unknown env: ".concat(env));
-        this.env = env;
-        if (alias && !alias.match(REGEX_ALIAS)) throw new Error("invalid: ".concat(alias));
-        if (alias) this.alias = alias;else if (ADDITIONAL_ENV.indexOf(this.env) !== -1) this.alias = DEFAULT_ALIAS.KOVENA;else this.alias = DEFAULT_ALIAS.PAYDOCK;
+      value: function setEnv(environmentId, alias) {
+        this.validateAlias(alias);
+        this.validateEnvironmentId(environmentId);
+        this.environmentId = environmentId;
+        if (alias) {
+          this.alias = alias;
+        } else if (ADDITIONAL_ENV.includes(this.environmentId)) {
+          this.alias = DEFAULT_ALIAS.KOVENA;
+        } else {
+          this.alias = DEFAULT_ALIAS.PAYDOCK;
+        }
       }
     }, {
       key: "getEnv",
       value: function getEnv() {
-        return this.env;
+        return this.environmentId;
       }
     }, {
       key: "getConf",
       value: function getConf() {
-        for (var index in this.configs) {
-          if (!this.configs.hasOwnProperty(index)) continue;
-          if (this.configs[index].env === this.getEnv()) return {
-            url: this.configs[index].url.indexOf('localhost') !== -1 ? this.configs[index].url : this.configs[index].url + this.alias,
-            env: this.configs[index].env
-          };
+        for (var index in this.environmentConfigurations) {
+          if (!Object.hasOwn(this.environmentConfigurations, index)) {
+            continue;
+          }
+          if (this.environmentConfigurations[index].env === this.getEnv()) {
+            return {
+              url: this.environmentConfigurations[index].url.indexOf('localhost') !== -1 ? this.environmentConfigurations[index].url : this.environmentConfigurations[index].url + this.alias,
+              env: this.environmentConfigurations[index].env
+            };
+          }
         }
-        throw new Error('invalid env');
+        throw new Error('Env could not obtain configuration. Unknown environmentId.');
       }
     }, {
-      key: "isValidMode",
-      value: function isValidMode(configs, env) {
-        for (var index in configs) {
-          if (!configs.hasOwnProperty(index)) continue;
-          if (configs[index].env === env) return true;
+      key: "validateAlias",
+      value: function validateAlias(alias) {
+        if (typeof alias === 'undefined') {
+          return;
+        }
+        if (typeof alias !== 'string') {
+          throw new TypeError("Env expects parameter 'alias' to be of type 'string' or 'undefined'.");
+        }
+        if (!alias.match(REGEX_ALIAS)) {
+          throw new Error("Env received malformed alias: ".concat(alias, ". Ensure it satisfies the regex: '").concat(REGEX_ALIAS, "'."));
         }
-        return false;
+      }
+    }, {
+      key: "validateEnvironmentId",
+      value: function validateEnvironmentId(environmentId) {
+        for (var index in this.environmentConfigurations) {
+          if (!Object.hasOwn(this.environmentConfigurations, index)) {
+            continue;
+          }
+          if (this.environmentConfigurations[index].env === environmentId) {
+            return;
+          }
+        }
+        throw new TypeError("Env received unknown environmentId: ".concat(environmentId));
       }
     }]);
   }();
@@ -929,7 +958,7 @@
     version: 'x-sdk-version',
     type: 'x-sdk-type'
   });
-  SDK._version = 'v1.122.3-beta';
+  SDK._version = 'v1.123.2-beta';
 
   /******************************************************************************
   Copyright (c) Microsoft Corporation.
@@ -1793,6 +1822,12 @@
       value: function getAccessHeaderNameByToken(token) {
         return !!AccessToken.validateJWT(token) ? ACCESS_HEADER_NAME.accessToken : ACCESS_HEADER_NAME.publicKey;
       }
+    }, {
+      key: "isJwt",
+      value: function isJwt(value) {
+        var jwtPattern = /^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$/;
+        return jwtPattern.test(value);
+      }
     }]);
   }();
 
@@ -4327,7 +4362,7 @@
           return _regeneratorRuntime().wrap(function _callee$(_context) {
             while (1) switch (_context.prev = _context.next) {
               case 0:
-                (_this$agent = this.agent).addPageAction.apply(_this$agent, args);
+                (_this$agent = this.agent).call.apply(_this$agent, ['addPageAction'].concat(args));
               case 1:
               case "end":
                 return _context.stop();
@@ -4355,7 +4390,7 @@
           return _regeneratorRuntime().wrap(function _callee$(_context) {
             while (1) switch (_context.prev = _context.next) {
               case 0:
-                (_this$agent = this.agent).noticeError.apply(_this$agent, args);
+                (_this$agent = this.agent).call.apply(_this$agent, ['noticeError'].concat(args));
               case 1:
               case "end":
                 return _context.stop();
@@ -4383,7 +4418,7 @@
           return _regeneratorRuntime().wrap(function _callee$(_context) {
             while (1) switch (_context.prev = _context.next) {
               case 0:
-                (_this$agent = this.agent).addPageAction.apply(_this$agent, args);
+                (_this$agent = this.agent).call.apply(_this$agent, ['addPageAction'].concat(args));
               case 1:
               case "end":
                 return _context.stop();
@@ -8949,6 +8984,829 @@
     return _createClass(PaypalCheckoutButton);
   }(CheckoutButton);
 
+  var MODES = ['live', 'test'];
+  function isValidMode(val) {
+    return MODES.includes(val);
+  }
+  var PROVIDERS = {
+    FORTER: 'forter'
+  };
+
+  var NAMESPACE = 'fraudPrevention';
+  var TYPES = {
+    FINGERPRINT_TOKEN_ERROR: 'fingerprint-token-error',
+    FINTERPRINT_TOKEN_READY: 'fingerprint-token-ready'
+  };
+  var FRAUD_PREVENTION_EVENTS = {
+    NAMESPACE: NAMESPACE,
+    TYPES: TYPES,
+    PROVIDERS: PROVIDERS
+  };
+
+  var AuthorizationStrategy = /*#__PURE__*/_createClass(function AuthorizationStrategy() {
+    _classCallCheck(this, AuthorizationStrategy);
+  });
+  /**
+   * Implementation of AuthorizationStrategy that uses an access token for authorization.
+   *
+   * This strategy configures the SDK Services and Widgets to use access token authentication.
+   */
+  var AccessTokenStrategy = /*#__PURE__*/function (_AuthorizationStrateg) {
+    /**
+     * @constructor Creates an instance of AuthorizationStrategy which enables authorization by access token
+     *
+     * @param accessToken
+     */
+    function AccessTokenStrategy(accessToken) {
+      var _this;
+      _classCallCheck(this, AccessTokenStrategy);
+      _this = _callSuper(this, AccessTokenStrategy);
+      _this.accessToken = accessToken;
+      if (typeof accessToken !== 'string') {
+        throw new TypeError("AccessTokenStrategy expects parameter 'accessToken' to be of type string.");
+      }
+      return _this;
+    }
+    _inherits(AccessTokenStrategy, _AuthorizationStrateg);
+    return _createClass(AccessTokenStrategy, [{
+      key: "apply",
+      value: function apply(httpFetch) {
+        httpFetch.setAccessToken(this.accessToken);
+      }
+    }]);
+  }(AuthorizationStrategy);
+  /**
+   * Implementation of AuthorizationStrategy that preserves Services and Widgets in an anonymous state.
+   */
+  var AnonymousStrategy = /*#__PURE__*/function (_AuthorizationStrateg2) {
+    function AnonymousStrategy() {
+      _classCallCheck(this, AnonymousStrategy);
+      return _callSuper(this, AnonymousStrategy, arguments);
+    }
+    _inherits(AnonymousStrategy, _AuthorizationStrateg2);
+    return _createClass(AnonymousStrategy, [{
+      key: "apply",
+      value: function apply(_) {
+        // no-op
+      }
+    }]);
+  }(AuthorizationStrategy);
+  /**
+   * Implementation of AuthorizationStrategy that uses a public key for authorization.
+   *
+   * This strategy configures the SDK Services and Widgets to use public key authentication.
+   */
+  var PublicKeyStrategy = /*#__PURE__*/function (_AuthorizationStrateg3) {
+    /**
+     * @constructor Creates an instance of AuthorizationStrategy which enables authorization by public key
+     *
+     * @param publicKey
+     */
+    function PublicKeyStrategy(publicKey) {
+      var _this2;
+      _classCallCheck(this, PublicKeyStrategy);
+      _this2 = _callSuper(this, PublicKeyStrategy);
+      _this2.publicKey = publicKey;
+      if (typeof publicKey !== 'string') {
+        throw new TypeError("AccessTokenStrategy expects parameter 'publicKey' to be of type string.");
+      }
+      return _this2;
+    }
+    _inherits(PublicKeyStrategy, _AuthorizationStrateg3);
+    return _createClass(PublicKeyStrategy, [{
+      key: "apply",
+      value: function apply(httpFetch) {
+        httpFetch.setPublicKey(this.publicKey);
+      }
+    }]);
+  }(AuthorizationStrategy);
+
+  /**
+   * Deep clones a value.
+   *
+   * @param value - The value to clone.
+   * @param visited - A WeakMap to track visited objects.
+   * @returns A deep clone of the value.
+   *
+   * Warning: Only own enumerable properties of objects are cloned. Thus, not suitable for cloning custom instances with getters, setters, methods or static properties.
+   * Warning: Functions are cloned by reference.
+   * Warning: Circular references are cloned by reference.
+   */
+  function deepClone(value) {
+    var visited = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : new WeakMap();
+    // Handle null, undefined, and primitive types
+    if (value === null || value === undefined || _typeof$1(value) !== 'object') {
+      return value;
+    }
+    // Handle circular references - Copy by reference if already visited
+    if (visited.has(value)) {
+      return visited.get(value);
+    }
+    // Handle Date objects
+    if (value instanceof Date) {
+      return new Date(value.getTime());
+    }
+    // Handle Array objects
+    if (Array.isArray(value)) {
+      var _clone = [];
+      visited.set(value, _clone);
+      _clone.push.apply(_clone, _toConsumableArray(value.map(function (item) {
+        return deepClone(item, visited);
+      })));
+      return _clone;
+    }
+    // Handle Map objects
+    if (value instanceof Map) {
+      var _clone2 = new Map();
+      visited.set(value, _clone2);
+      value.forEach(function (val, key) {
+        _clone2.set(deepClone(key, visited), deepClone(val, visited));
+      });
+      return _clone2;
+    }
+    // Handle Set objects
+    if (value instanceof Set) {
+      var _clone3 = new Set();
+      visited.set(value, _clone3);
+      var _iterator = _createForOfIteratorHelper(value),
+        _step;
+      try {
+        for (_iterator.s(); !(_step = _iterator.n()).done;) {
+          var val = _step.value;
+          _clone3.add(deepClone(val, visited));
+        }
+      } catch (err) {
+        _iterator.e(err);
+      } finally {
+        _iterator.f();
+      }
+      return _clone3;
+    }
+    // For objects, create a plain object (ignoring prototype, getters, setters and methods) and clone own enumerable properties
+    var clone = {};
+    var keys = Object.keys(value);
+    visited.set(value, clone);
+    for (var _i = 0, _keys = keys; _i < _keys.length; _i++) {
+      var key = _keys[_i];
+      clone[key] = deepClone(value[key], visited);
+    }
+    return clone;
+  }
+
+  var failureResult = function failureResult(data) {
+    return [null, data];
+  };
+  var successResult = function successResult(data) {
+    return [data, null];
+  };
+
+  var HttpFetcher = /*#__PURE__*/function () {
+    function HttpFetcher() {
+      _classCallCheck(this, HttpFetcher);
+      this.reportError = function (repository, err, ctx) {
+        repository.createError(err, ctx);
+      };
+      this.baseUrl = '';
+      this.headers = {};
+    }
+    return _createClass(HttpFetcher, [{
+      key: "setAccessToken",
+      value: function setAccessToken(accessToken) {
+        this.headers['x-access-token'] = accessToken;
+        return this;
+      }
+    }, {
+      key: "setBaseUrl",
+      value: function setBaseUrl(baseUrl) {
+        this.baseUrl = baseUrl;
+        return this;
+      }
+    }, {
+      key: "setBody",
+      value: function setBody(body) {
+        if (_typeof$1(body) === 'symbol' || typeof body === 'function' || typeof body === 'undefined') {
+          throw new TypeError("HttpFetcher setBody: expected parameter 'body' to be serializable.");
+        }
+        this.body = body;
+        return this;
+      }
+    }, {
+      key: "setContentTypeJson",
+      value: function setContentTypeJson() {
+        this.headers['Content-Type'] = 'application/json; charset=UTF-8';
+        return this;
+      }
+    }, {
+      key: "setContentTypeText",
+      value: function setContentTypeText() {
+        this.headers['Content-Type'] = 'text/plain; charset=UTF-8';
+        return this;
+      }
+    }, {
+      key: "setHeaders",
+      value: function setHeaders(headers) {
+        _extends(this.headers, headers);
+        return this;
+      }
+    }, {
+      key: "setPublicKey",
+      value: function setPublicKey(publicKey) {
+        this.headers['x-user-public-key'] = publicKey;
+        return this;
+      }
+    }, {
+      key: "setSdkVersion",
+      value: function setSdkVersion() {
+        if (SDK.version) {
+          this.headers[SDK.headerKeys.version] = SDK.version;
+          this.headers[SDK.headerKeys.type] = SDK.type;
+        }
+        return this;
+      }
+    }, {
+      key: "execute",
+      value: function execute(method, path) {
+        return __awaiter(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
+          var url, response, responseContentType, text, json;
+          return _regeneratorRuntime().wrap(function _callee$(_context) {
+            while (1) switch (_context.prev = _context.next) {
+              case 0:
+                url = "".concat(this.baseUrl).concat(path);
+                _context.prev = 1;
+                _context.next = 4;
+                return fetch(url, {
+                  method: method,
+                  body: this.body ? JSON.stringify(this.body) : undefined,
+                  headers: this.headers
+                });
+              case 4:
+                response = _context.sent;
+                responseContentType = response.headers.get('Content-Type') || '';
+                if (!responseContentType.includes('text/plain')) {
+                  _context.next = 11;
+                  break;
+                }
+                _context.next = 9;
+                return response.text();
+              case 9:
+                text = _context.sent;
+                return _context.abrupt("return", successResult({
+                  statusCode: response.status,
+                  body: text
+                }));
+              case 11:
+                _context.next = 13;
+                return response.json();
+              case 13:
+                json = _context.sent;
+                if (response.ok) {
+                  _context.next = 16;
+                  break;
+                }
+                return _context.abrupt("return", failureResult({
+                  statusCode: response.status,
+                  body: json
+                }));
+              case 16:
+                if (!('error' in json && json.error !== null)) {
+                  _context.next = 18;
+                  break;
+                }
+                return _context.abrupt("return", failureResult({
+                  statusCode: response.status,
+                  body: json
+                }));
+              case 18:
+                return _context.abrupt("return", successResult({
+                  statusCode: response.status,
+                  body: json
+                }));
+              case 21:
+                _context.prev = 21;
+                _context.t0 = _context["catch"](1);
+                this.reportError(errorRepository, _context.t0, {
+                  sdkVersion: SDK.version,
+                  className: HttpFetcher.name,
+                  classMethod: 'send',
+                  environment: this.baseUrl
+                });
+                throw _context.t0;
+              case 25:
+              case "end":
+                return _context.stop();
+            }
+          }, _callee, this, [[1, 21]]);
+        }));
+      }
+    }, {
+      key: "value",
+      value: function value() {
+        return {
+          baseUrl: this.baseUrl,
+          headers: deepClone(this.headers),
+          body: deepClone(this.body)
+        };
+      }
+    }]);
+  }();
+
+  var HttpFetcherFactory = /*#__PURE__*/function () {
+    function HttpFetcherFactory(config) {
+      _classCallCheck(this, HttpFetcherFactory);
+      this.authorizationStrategyReference = config.authorizationStrategy;
+      this.environment = config.environment;
+    }
+    return _createClass(HttpFetcherFactory, [{
+      key: "createFetcher",
+      value: function createFetcher() {
+        var baseUrl = this.environment.getConf().url;
+        var fetcher = new HttpFetcher().setBaseUrl(baseUrl).setContentTypeJson().setSdkVersion();
+        this.authorizationStrategyValue.apply(fetcher);
+        return fetcher;
+      }
+    }, {
+      key: "authorizationStrategyValue",
+      get: function get() {
+        return typeof this.authorizationStrategyReference === 'function' ? this.authorizationStrategyReference() : this.authorizationStrategyReference;
+      }
+    }]);
+  }();
+
+  var FORTER_SDK_SCRIPT_TEMPLATE = "\n(function () {\n  var merchantConfig = {\n    csp: %CSP%\n  };\n\n  var siteId = \"%SITE_ID%\";\n\n  function t(t,e){for(var n=t.split(\"\"),r=0;r<n.length;++r)n[r]=String.fromCharCode(n[r].charCodeAt(0)+e);return n.join(\"\")}function e(e){return t(e,-_).replace(/%SN%/g,siteId)}function n(t){try{if(\"number\"==typeof t&&window.location&&window.location.pathname){for(var e=window.location.pathname.split(\"/\"),n=[],r=0;r<=Math.min(e.length-1,Math.abs(t));r++)n.push(e[r]);return n.join(\"/\")||\"/\"}}catch(t){}return\"/\"}function r(t){try{Q.ex=t,o()&&-1===Q.ex.indexOf(X.uB)&&(Q.ex+=X.uB),i()&&-1===Q.ex.indexOf(X.uBr)&&(Q.ex+=X.uBr),a()&&-1===Q.ex.indexOf(X.nIL)&&(Q.ex+=X.nIL),window.ftr__snp_cwc||(Q.ex+=X.s),B(Q)}catch(t){}}function o(){var t=\"no\"+\"op\"+\"fn\",e=\"g\"+\"a\",n=\"n\"+\"ame\";return window[e]&&window[e][n]===t}function i(){return!(!navigator.brave||\"function\"!=typeof navigator.brave.isBrave)}function a(){return document.currentScript&&document.currentScript.src}function c(t,e){function n(o){try{o.blockedURI===t&&(e(),document.removeEventListener(r,n))}catch(t){document.removeEventListener(r,n)}}var r=\"securitypolicyviolation\";document.addEventListener(r,n),setTimeout(function(){document.removeEventListener(r,n)},2*60*1e3)}function u(t,e,n,r){var o=!1;t=\"https://\"+t,c(t,function(){r(!0),o=!0});var i=document.createElement(\"script\");i.onerror=function(){if(!o)try{r(!1),o=!0}catch(t){}},i.onload=n,i.type=\"text/javascript\",i.id=\"ftr__script\",i.async=!0,i.src=t;var a=document.getElementsByTagName(\"script\")[0];a.parentNode.insertBefore(i,a)}function f(){tt(X.uDF),setTimeout(w,N,X.uDF)}function s(t,e,n,r){var o=!1,i=new XMLHttpRequest;if(c(\"https:\"+t,function(){n(new Error(\"CSP Violation\"),!0),o=!0}),\"//\"===t.slice(0,2)&&(t=\"https:\"+t),\"withCredentials\"in i)i.open(\"GET\",t,!0);else{if(\"undefined\"==typeof XDomainRequest)return;i=new XDomainRequest,i.open(\"GET\",t)}Object.keys(r).forEach(function(t){i.setRequestHeader(t,r[t])}),i.onload=function(){\"function\"==typeof e&&e(i)},i.onerror=function(t){if(\"function\"==typeof n&&!o)try{n(t,!1),o=!0}catch(t){}},i.onprogress=function(){},i.ontimeout=function(){\"function\"==typeof n&&n(\"tim\"+\"eo\"+\"ut\",!1)},setTimeout(function(){i.send()},0)}function d(t,siteId,e){function n(t){var e=t.toString(16);return e.length%2?\"0\"+e:e}function r(t){if(t<=0)return\"\";for(var e=\"0123456789abcdef\",n=\"\",r=0;r<t;r++)n+=e[Math.floor(Math.random()*e.length)];return n}function o(t){for(var e=\"\",r=0;r<t.length;r++)e+=n(t.charCodeAt(r));return e}function i(t){for(var e=t.split(\"\"),n=0;n<e.length;++n)e[n]=String.fromCharCode(255^e[n].charCodeAt(0));return e.join(\"\")}e=e?\"1\":\"0\";var a=[];return a.push(t),a.push(siteId),a.push(e),function(t){var e=40,n=\"\";return t.length<e/2&&(n=\",\"+r(e/2-t.length-1)),o(i(t+n))}(a.join(\",\"))}function h(){function t(){F&&(tt(X.dUAL),setTimeout(w,N,X.dUAL))}function e(t,e){r(e?X.uAS+X.uF+X.cP:X.uAS+X.uF),F=\"F\"+\"T\"+\"R\"+\"A\"+\"U\",setTimeout(w,N,X.uAS)}window.ftr__fdad(t,e)}function l(){function t(){F&&setTimeout(w,N,X.uDAD)}function e(t,e){r(e?X.uDS+X.uF+X.cP:X.uDS+X.uF),F=\"F\"+\"T\"+\"R\"+\"A\"+\"U\",setTimeout(w,N,X.uDS)}window.ftr__radd(t,e)}function w(t){try{var e;switch(t){case X.uFP:e=O;break;case X.uDF:e=M;break;default:e=F}if(!e)return;var n=function(){try{et(),r(t+X.uS)}catch(t){}},o=function(e){try{et(),Q.td=1*new Date-Q.ts,r(e?t+X.uF+X.cP:t+X.uF),t===X.uFP&&f(),t===X.uDF&&(I?l():h()),t!==X.uAS&&t!==X.dUAL||I||l(),t!==X.uDS&&t!==X.uDAD||I&&h()}catch(t){r(X.eUoe)}};if(e===\"F\"+\"T\"+\"R\"+\"A\"+\"U\")return void o();u(e,void 0,n,o)}catch(e){r(t+X.eTlu)}}var g=\"22ge:t7mj8unkn;1forxgiurqw1qhw2vwdwxv\",v=\"fort\",p=\"erTo\",m=\"ken\",_=3;window.ftr__config={m:merchantConfig,s:\"24\",si:siteId};var y=!1,U=!1,T=v+p+m,x=400*24*60,A=10,S={write:function(t,e,r,o){void 0===o&&(o=!0);var i=0;window.ftr__config&&window.ftr__config.m&&window.ftr__config.m.ckDepth&&(i=window.ftr__config.m.ckDepth);var a,c,u=n(i);if(r?(a=new Date,a.setTime(a.getTime()+60*r*1e3),c=\"; expires=\"+a.toGMTString()):c=\"\",!o)return void(document.cookie=escape(t)+\"=\"+escape(e)+c+\"; path=\"+u);for(var f=1,s=document.domain.split(\".\"),d=A,h=!0;h&&s.length>=f&&d>0;){var l=s.slice(-f).join(\".\");document.cookie=escape(t)+\"=\"+escape(e)+c+\"; path=\"+u+\"; domain=\"+l;var w=S.read(t);null!=w&&w==e||(l=\".\"+l,document.cookie=escape(t)+\"=\"+escape(e)+c+\"; path=\"+u+\"; domain=\"+l),h=-1===document.cookie.indexOf(t+\"=\"+e),f++,d--}},read:function(t){var e=null;try{for(var n=escape(t)+\"=\",r=document.cookie.split(\";\"),o=32,i=0;i<r.length;i++){for(var a=r[i];a.charCodeAt(0)===o;)a=a.substring(1,a.length);0===a.indexOf(n)&&(e=unescape(a.substring(n.length,a.length)))}}finally{return e}}},D=window.ftr__config.s;D+=\"ck\";var L=function(t){var e=!1,n=null,r=function(){try{if(!n||!e)return;n.remove&&\"function\"==typeof n.remove?n.remove():document.head.removeChild(n),e=!1}catch(t){}};document.head&&(!function(){n=document.createElement(\"link\"),n.setAttribute(\"rel\",\"pre\"+\"con\"+\"nect\"),n.setAttribute(\"cros\"+\"sori\"+\"gin\",\"anonymous\"),n.onload=r,n.onerror=r,n.setAttribute(\"href\",t),document.head.appendChild(n),e=!0}(),setTimeout(r,3e3))},E=e(g||\"22ge:t7mj8unkn;1forxgiurqw1qhw2vwdwxv\"),C=t(\"[0Uhtxhvw0LG\",-_),R=t(\"[0Fruuhodwlrq0LG\",-_),P=t(\"Li0Qrqh0Pdwfk\",-_),k=e(\"dss1vlwhshuirupdqfhwhvw1qhw\"),q=e(\"2241414142gqv0txhu|\"),F,b=\"fgq71iruwhu1frp\",M=e(\"(VQ(1\"+b+\"2vq2(VQ(2vfulsw1mv\"),V=e(\"(VQ(1\"+b+\"2vqV2(VQ(2vfulsw1mv\"),O;window.ftr__config&&window.ftr__config.m&&window.ftr__config.m.fpi&&(O=window.ftr__config.m.fpi+e(\"2vq2(VQ(2vfulsw1mv\"));var I=!1,N=10;window.ftr__startScriptLoad=1*new Date;var j=function(t){var e=\"ft\"+\"r:tok\"+\"enR\"+\"eady\";window.ftr__tt&&clearTimeout(window.ftr__tt),window.ftr__tt=setTimeout(function(){try{delete window.ftr__tt,t+=\"_tt\";var n=document.createEvent(\"Event\");n.initEvent(e,!1,!1),n.detail=t,document.dispatchEvent(n)}catch(t){}},1e3)},B=function(t){var e=function(t){return t||\"\"},n=e(t.id)+\"_\"+e(t.ts)+\"_\"+e(t.td)+\"_\"+e(t.ex)+\"_\"+e(D),r=x;!isNaN(window.ftr__config.m.ckTTL)&&window.ftr__config.m.ckTTL&&(r=window.ftr__config.m.ckTTL),S.write(T,n,r,!0),j(n),window.ftr__gt=n},G=function(){var t=S.read(T)||\"\",e=t.split(\"_\"),n=function(t){return e[t]||void 0};return{id:n(0),ts:n(1),td:n(2),ex:n(3),vr:n(4)}},H=function(){for(var t={},e=\"fgu\",n=[],r=0;r<256;r++)n[r]=(r<16?\"0\":\"\")+r.toString(16);var o=function(t,e,r,o,i){var a=i?\"-\":\"\";return n[255&t]+n[t>>8&255]+n[t>>16&255]+n[t>>24&255]+a+n[255&e]+n[e>>8&255]+a+n[e>>16&15|64]+n[e>>24&255]+a+n[63&r|128]+n[r>>8&255]+a+n[r>>16&255]+n[r>>24&255]+n[255&o]+n[o>>8&255]+n[o>>16&255]+n[o>>24&255]},i=function(){if(window.Uint32Array&&window.crypto&&window.crypto.getRandomValues){var t=new window.Uint32Array(4);return window.crypto.getRandomValues(t),{d0:t[0],d1:t[1],d2:t[2],d3:t[3]}}return{d0:4294967296*Math.random()>>>0,d1:4294967296*Math.random()>>>0,d2:4294967296*Math.random()>>>0,d3:4294967296*Math.random()>>>0}},a=function(){var t=\"\",e=function(t,e){for(var n=\"\",r=t;r>0;--r)n+=e.charAt(1e3*Math.random()%e.length);return n};return t+=e(2,\"0123456789\"),t+=e(1,\"123456789\"),t+=e(8,\"0123456789\")};return t.safeGenerateNoDash=function(){try{var t=i();return o(t.d0,t.d1,t.d2,t.d3,!1)}catch(t){try{return e+a()}catch(t){}}},t.isValidNumericalToken=function(t){return t&&t.toString().length<=11&&t.length>=9&&parseInt(t,10).toString().length<=11&&parseInt(t,10).toString().length>=9},t.isValidUUIDToken=function(t){return t&&32===t.toString().length&&/^[a-z0-9]+$/.test(t)},t.isValidFGUToken=function(t){return 0==t.indexOf(e)&&t.length>=12},t}(),X={uDF:\"UDF\",dUAL:\"dUAL\",uAS:\"UAS\",uDS:\"UDS\",uDAD:\"UDAD\",uFP:\"UFP\",mLd:\"1\",eTlu:\"2\",eUoe:\"3\",uS:\"4\",uF:\"9\",tmos:[\"T5\",\"T10\",\"T15\",\"T30\",\"T60\"],tmosSecs:[5,10,15,30,60],bIR:\"43\",uB:\"u\",uBr:\"b\",cP:\"c\",nIL:\"i\",s:\"s\"};try{var Q=G();try{Q.id&&(H.isValidNumericalToken(Q.id)||H.isValidUUIDToken(Q.id)||H.isValidFGUToken(Q.id))?window.ftr__ncd=!1:(Q.id=H.safeGenerateNoDash(),window.ftr__ncd=!0),Q.ts=window.ftr__startScriptLoad,B(Q),window.ftr__snp_cwc=!!S.read(T),window.ftr__snp_cwc||(M=V);for(var $=\"for\"+\"ter\"+\".co\"+\"m\",z=\"ht\"+\"tps://c\"+\"dn9.\"+$,J=\"ht\"+\"tps://\"+Q.id+\"-\"+siteId+\".cd\"+\"n.\"+$,K=\"http\"+\"s://cd\"+\"n3.\"+$,W=[z,J,K],Y=0;Y<W.length;Y++)L(W[Y]);var Z=new Array(X.tmosSecs.length),tt=function(t){for(var e=0;e<X.tmosSecs.length;e++)Z[e]=setTimeout(r,1e3*X.tmosSecs[e],t+X.tmos[e])},et=function(){for(var t=0;t<X.tmosSecs.length;t++)clearTimeout(Z[t])};window.ftr__fdad=function(e,n){if(!y){y=!0;var r={};r[P]=d(window.ftr__config.s,siteId,window.ftr__config.m.csp),s(E,function(n){try{var r=n.getAllResponseHeaders().toLowerCase();if(r.indexOf(R.toLowerCase())>=0){var o=n.getResponseHeader(R);window.ftr__altd2=t(atob(o),-_-1)}if(r.indexOf(C.toLowerCase())<0)return;var i=n.getResponseHeader(C),a=t(atob(i),-_-1);if(a){var c=a.split(\":\");if(c&&2===c.length){for(var u=c[0],f=c[1],s=\"\",d=0,h=0;d<20;++d)s+=d%3>0&&h<12?siteId.charAt(h++):Q.id.charAt(d);var l=f.split(\",\");if(l.length>1){var w=l[0],g=l[1];F=u+\"/\"+w+\".\"+s+\".\"+g}}}e()}catch(t){}},function(t,e){n&&n(t,e)},r)}},window.ftr__radd=function(t,e){function n(e){try{var n=e.response,r=function(t){function e(t,o,i){try{if(i>=n)return{name:\"\",nextOffsetToProcess:o,error:\"Max pointer dereference depth exceeded\"};for(var a=[],c=o,u=t.getUint8(c),f=0;f<r;){if(f++,192==(192&u)){var s=(63&u)<<8|t.getUint8(c+1),d=e(t,s,i+1);if(d.error)return d;var h=d.name;return a.push(h),{name:a.join(\".\"),nextOffsetToProcess:c+2}}if(!(u>0)){if(0!==u)return{name:\"\",nextOffsetToProcess:c,error:\"Unexpected length at the end of name: \"+u.toString()};return{name:a.join(\".\"),nextOffsetToProcess:c+1}}for(var l=\"\",w=1;w<=u;w++)l+=String.fromCharCode(t.getUint8(c+w));a.push(l),c+=u+1,u=t.getUint8(c)}return{name:\"\",nextOffsetToProcess:c,error:\"Max iterations exceeded\"}}catch(t){return{name:\"\",nextOffsetToProcess:o,error:\"Unexpected error while parsing response: \"+t.toString()}}}for(var n=4,r=100,o=16,i=new DataView(t),a=i.getUint16(0),c=i.getUint16(2),u=i.getUint16(4),f=i.getUint16(6),s=i.getUint16(8),d=i.getUint16(10),h=12,l=[],w=0;w<u;w++){var g=e(i,h,0);if(g.error)throw new Error(g.error);if(h=g.nextOffsetToProcess,!Number.isInteger(h))throw new Error(\"invalid returned offset\");var v=g.name,p=i.getUint16(h);h+=2;var m=i.getUint16(h);h+=2,l.push({qname:v,qtype:p,qclass:m})}for(var _=[],w=0;w<f;w++){var g=e(i,h,0);if(g.error)throw new Error(g.error);if(h=g.nextOffsetToProcess,!Number.isInteger(h))throw new Error(\"invalid returned offset\");var y=g.name,U=i.getUint16(h);if(U!==o)throw new Error(\"Unexpected record type: \"+U.toString());h+=2;var T=i.getUint16(h);h+=2;var x=i.getUint32(h);h+=4;var A=i.getUint16(h);h+=2;for(var S=\"\",D=h,L=0;D<h+A&&L<r;){L++;var E=i.getUint8(D);D+=1;S+=(new TextDecoder).decode(t.slice(D,D+E)),D+=E}if(L>=r)throw new Error(\"Max iterations exceeded while reading TXT data\");h+=A,_.push({name:y,type:U,class:T,ttl:x,data:S})}return{transactionId:a,flags:c,questionCount:u,answerCount:f,authorityCount:s,additionalCount:d,questions:l,answers:_}}(n);if(!r)throw new Error(\"Error parsing DNS response\");if(!(\"answers\"in r))throw new Error(\"Unexpected response\");var o=r.answers;if(0===o.length)throw new Error(\"No answers found\");var i=o[0].data;if(i=i.replace(/^\"(.*)\"$/,\"$1\"),decodedVal=function(t){var e=40,n=32,r=126;try{for(var o=atob(t),i=\"\",a=0;a<o.length;a++)i+=function(t){var o=t.charCodeAt(0),i=o-e;return i<n&&(i=r-(n-i)+1),String.fromCharCode(i)}(o[a]);return atob(i)}catch(t){return}}(i),!decodedVal)throw new Error(\"failed to decode the value\");var a=function(t){var e=\"_\"+\"D\"+\"L\"+\"M\"+\"_\",n=t.split(e);if(!(n.length<2)){var r=n[0],o=n[1];if(!(r.split(\".\").length-1<1))return{jURL:r,eURL:o}}}(decodedVal);if(!a)throw new Error(\"failed to parse the value\");var c=a.jURL,u=a.eURL;F=function(t){for(var e=\"\",n=0,r=0;n<20;++n)e+=n%3>0&&r<12?siteId.charAt(r++):Q.id.charAt(n);return t.replace(\"/PRM1\",\"\").replace(\"/PRM2\",\"/main.\").replace(\"/PRM3\",e).replace(\"/PRM4\",\".js\")}(c),window.ftr__altd3=u,t()}catch(t){}}function r(t,n){e&&e(t,n)}if(!U){window.ftr__config.m.dr===\"N\"+\"D\"+\"R\"&&e(new Error(\"N\"+\"D\"+\"R\"),!1),q&&k||e(new Error(\"D\"+\"P\"+\"P\"),!1),U=!0;try{var o=function(t){for(var e=new Uint8Array([0,0]),n=new Uint8Array([1,0]),r=new Uint8Array([0,1]),o=new Uint8Array([0,0]),i=new Uint8Array([0,0]),a=new Uint8Array([0,0]),c=t.split(\".\"),u=[],f=0;f<c.length;f++){var s=c[f];u.push(s.length);for(var d=0;d<s.length;d++)u.push(s.charCodeAt(d))}u.push(0);var h=16,l=new Uint8Array([0,h]),w=new Uint8Array([0,1]),g=new Uint8Array(e.length+n.length+r.length+o.length+i.length+a.length+u.length+l.length+w.length);return g.set(e,0),g.set(n,e.length),g.set(r,e.length+n.length),g.set(o,e.length+n.length+r.length),g.set(i,e.length+n.length+r.length+o.length),g.set(a,e.length+n.length+r.length+o.length+i.length),g.set(u,e.length+n.length+r.length+o.length+i.length+a.length),g.set(l,e.length+n.length+r.length+o.length+i.length+a.length+u.length),g.set(w,e.length+n.length+r.length+o.length+i.length+a.length+u.length+l.length),g}(k);!function(t,e,n,r,o){var i=!1,a=new XMLHttpRequest;if(c(\"https:\"+t,function(){o(new Error(\"CSP Violation\"),!0),i=!0}),\"//\"===t.slice(0,2)&&(t=\"https:\"+t),\"withCredentials\"in a)a.open(\"POST\",t,!0);else{if(\"undefined\"==typeof XDomainRequest)return;a=new XDomainRequest,a.open(\"POST\",t)}a.responseType=\"arraybuffer\",a.setRequestHeader(\"Content-Type\",e),a.onload=function(){\"function\"==typeof r&&r(a)},a.onerror=function(t){if(\"function\"==typeof o&&!i)try{o(t,!1),i=!0}catch(t){}},a.onprogress=function(){},a.ontimeout=function(){\"function\"==typeof o&&o(\"tim\"+\"eo\"+\"ut\",!1)},setTimeout(function(){a.send(n)},0)}(q,\"application/dns-message\",o,n,r)}catch(t){e(t,!1)}}};var nt=O?X.uFP:X.uDF;tt(nt),setTimeout(w,N,nt)}catch(t){r(X.mLd)}}catch(t){}}\n)();\n";
+
+  var FORTER_SDK_EVENTS = {
+    TOKEN_READY: 'ftr:tokenReady'
+  };
+  /**
+   * A class that manages Forter's device fingerprinting integration.
+   * It handles script injection and token management.
+   *
+   * @example
+   *
+   * ```js
+   * const agent = new ForterDeviceAgent({
+   *   siteId: 'your-site-id',
+   *   csp: false,
+   *   mode: 'test'
+   * }).init();
+   *
+   * // Later, access the token
+   * const token = agent.token;
+   * ```
+   */
+  var ForterDeviceAgent = /*#__PURE__*/function () {
+    /**
+     * Creates a new instance of ForterDeviceAgent
+     *
+     * @param {ForterDeviceAgentConfig} config - Configuration object for Forter integration
+     */
+    function ForterDeviceAgent(config) {
+      _classCallCheck(this, ForterDeviceAgent);
+      this.cookieToken = null;
+      this.validateCsp(config.csp);
+      this.validateMode(config.mode);
+      this.validateSiteId(config.siteId);
+      this.config = config;
+    }
+    /**
+     * Returns the current Forter token if available
+     *
+     * @returns {string | null} The Forter token or null if not yet available
+     *
+     * @example
+     *
+     * ```js
+     * const token = forterAgent.token;
+     * if (token) {
+     *   // Use the token
+     * }
+     * ```
+     */
+    return _createClass(ForterDeviceAgent, [{
+      key: "token",
+      get: function get() {
+        return this.cookieToken;
+      }
+      /**
+       * Initializes the Forter Device Agent by injecting the required script
+       * and setting up event listeners.
+       *
+       * @returns {ForterDeviceAgent} The current instance for method chaining
+       *
+       * @example
+       *
+       * ```js
+       * const agent = new ForterDeviceAgent(config).init();
+       * ```
+       */
+    }, {
+      key: "init",
+      value: function init() {
+        this.subscribeSdkEvents();
+        this.injectScript();
+        return this;
+      }
+    }, {
+      key: "emit",
+      value: function emit(detail) {
+        var evt = new CustomEvent(FRAUD_PREVENTION_EVENTS.NAMESPACE, {
+          detail: detail
+        });
+        document.dispatchEvent(evt);
+      }
+    }, {
+      key: "emitFingerprintTokenWrongTypeError",
+      value: function emitFingerprintTokenWrongTypeError() {
+        this.emit({
+          type: FRAUD_PREVENTION_EVENTS.TYPES.FINGERPRINT_TOKEN_ERROR,
+          provider: FRAUD_PREVENTION_EVENTS.PROVIDERS.FORTER,
+          payload: {
+            code: 'unexpected_token_type',
+            message: 'Forter JavaScript SDK created a fingerprint token but it was not of the expected string type. Please contact our support team if the issue persists.'
+          }
+        });
+      }
+    }, {
+      key: "emitFingerprintTokenReady",
+      value: function emitFingerprintTokenReady() {
+        this.emit({
+          type: FRAUD_PREVENTION_EVENTS.TYPES.FINTERPRINT_TOKEN_READY,
+          provider: FRAUD_PREVENTION_EVENTS.PROVIDERS.FORTER,
+          payload: {
+            token: this.cookieToken
+          }
+        });
+      }
+    }, {
+      key: "getScriptContent",
+      value: function getScriptContent() {
+        var template = FORTER_SDK_SCRIPT_TEMPLATE.replace('%CSP%', String(this.config.csp)).replace('%SITE_ID%', this.config.siteId);
+        return template;
+      }
+    }, {
+      key: "injectScript",
+      value: function injectScript() {
+        var script = document.createElement('script');
+        script.type = 'text/javascript';
+        script.id = this.config.siteId;
+        script.textContent = this.getScriptContent();
+        document.body.appendChild(script);
+      }
+    }, {
+      key: "subscribeSdkEvents",
+      value: function subscribeSdkEvents() {
+        var _this = this;
+        document.addEventListener(FORTER_SDK_EVENTS.TOKEN_READY, function (evt) {
+          if (typeof evt.detail === 'string') {
+            _this.cookieToken = evt.detail;
+            _this.emitFingerprintTokenReady();
+          } else {
+            _this.emitFingerprintTokenWrongTypeError();
+          }
+        });
+      }
+    }, {
+      key: "validateCsp",
+      value: function validateCsp(csp) {
+        if (typeof csp !== 'undefined' && typeof csp !== 'boolean') {
+          throw new TypeError("ForterDeviceAgent config 'csp' is optional, when set it must be of type boolean.");
+        }
+      }
+    }, {
+      key: "validateMode",
+      value: function validateMode(mode) {
+        if (!isValidMode(mode)) {
+          throw new TypeError("ForterDeviceAgent: forter integration can not be initiated with the provided mode '".concat(mode, "'"));
+        }
+      }
+    }, {
+      key: "validateSiteId",
+      value: function validateSiteId(siteId) {
+        if (typeof siteId !== 'string') {
+          throw new TypeError("ForterDeviceAgent config 'siteId' is required and must be of type string.");
+        }
+      }
+    }]);
+  }();
+
+  // TODO @ingeniousraccoons add more credentials types as more providers are supported
+  // type SomeOtherProviderCredentials = {
+  //   provider: typeof providers.someOther;
+  //   someField: string;
+  // };
+  function findServiceConfig(httpFetcher, provider, providerId) {
+    return __awaiter(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
+      var _yield$httpFetcher$ex, _yield$httpFetcher$ex2, response, error;
+      return _regeneratorRuntime().wrap(function _callee$(_context) {
+        while (1) switch (_context.prev = _context.next) {
+          case 0:
+            _context.next = 2;
+            return httpFetcher.execute('GET', "/v1/services/".concat(providerId, "/config"));
+          case 2:
+            _yield$httpFetcher$ex = _context.sent;
+            _yield$httpFetcher$ex2 = _slicedToArray(_yield$httpFetcher$ex, 2);
+            response = _yield$httpFetcher$ex2[0];
+            error = _yield$httpFetcher$ex2[1];
+            if (!error) {
+              _context.next = 8;
+              break;
+            }
+            return _context.abrupt("return", [null, error.body.error]);
+          case 8:
+            _context.t0 = provider;
+            _context.next = _context.t0 === PROVIDERS.FORTER ? 11 : 12;
+            break;
+          case 11:
+            return _context.abrupt("return", [{
+              provider: PROVIDERS.FORTER,
+              siteId: response.body.resource.data.username,
+              subsiteId: response.body.resource.data.merchant
+            }, null]);
+          case 12:
+            throw new Error("findServiceConfig does not support provider ".concat(provider, "."));
+          case 13:
+          case "end":
+            return _context.stop();
+        }
+      }, _callee);
+    }));
+  }
+
+  /**
+   * A class to manage integration fraud prevention integrations.
+   *
+   * @example
+   *
+   * ```js
+   * const fps = new FraudPreventionService({
+   *   environmentId: 'production',
+   *   mode: 'live',
+   * });
+   * ```
+   */
+  var FraudPreventionService = /*#__PURE__*/function () {
+    /**
+     * @constructs
+     *
+     * @param {Object} config - FraudPreventionService configuration object
+     * @param {string} config.mode - Environment mode, must be either 'test' or 'live'
+     * @param {string} config.environmentId - Environment identifier
+     * @param {string} [config.environmentAlias] - Optional environment alias for API requests
+     */
+    function FraudPreventionService(config) {
+      var _this = this;
+      _classCallCheck(this, FraudPreventionService);
+      this.authorizationStrategy = new AnonymousStrategy();
+      this.forterDeviceAgent = null;
+      this.validateEnvironmentId(config.environmentId);
+      this.validateEnvironmentAlias(config.environmentAlias);
+      this.environment = new Env(API_URL);
+      this.environment.setEnv(config.environmentId, config.environmentAlias);
+      this.validateMode(config.mode);
+      this.mode = config.mode;
+      /**
+       * Use lazy authorizationStrategy as some functionalities can work without Paydock
+       * configurations. E.g., forter device agent can initialized using just a `siteId`.
+       */
+      this.httpFetcherFactory = new HttpFetcherFactory({
+        authorizationStrategy: function authorizationStrategy() {
+          return _this.authorizationStrategy;
+        },
+        environment: this.environment
+      });
+    }
+    /**
+     * Automatically detects and sets the authorization strategy the service should use
+     * based on the shape of the provided string.
+     *
+     * If the value is a JWT token, it will use an access token strategy, otherwise it will use
+     * a public key strategy.
+     *
+     * @param value - The authorization value (either JWT token or public key)
+     *
+     * @returns The FraudPreventionService instance for method chaining
+     *
+     * @example
+     * ```ts
+     * // With JWT token
+     * fps.withAuthorization('eyJhbGciOiJIUzI1NiIs...');
+     *
+     * // With public key
+     * fps.withAuthorization('pk_example_...');
+     * ```
+     */
+    return _createClass(FraudPreventionService, [{
+      key: "withAuthorization",
+      value: function withAuthorization(value) {
+        if (AccessToken.isJwt(value)) {
+          return this.withAccessTokenStrategy(value);
+        }
+        return this.withPublicKeyStrategy(value);
+      }
+      /**
+       * Sets the authorization strategy to use access token authentication.
+       *
+       * @param accessToken - The JWT access token
+       * @returns The FraudPreventionService instance for method chaining
+       *
+       * @example
+       *
+       * ```ts
+       * fps.withAccessTokenStrategy('eyJhbGciOiJIUzI1NiIs...');
+       * ```
+       */
+    }, {
+      key: "withAccessTokenStrategy",
+      value: function withAccessTokenStrategy(accessToken) {
+        this.authorizationStrategy = new AccessTokenStrategy(accessToken);
+        return this;
+      }
+      /**
+       * Sets the authorization strategy to use public key authentication.
+       *
+       * @param publicKey - The public key
+       * @returns The FraudPreventionService instance for method chaining
+       *
+       * @example
+       *
+       * ```ts
+       * fps.withPublicKeyStrategy('pk_example_...');
+       * ```
+       */
+    }, {
+      key: "withPublicKeyStrategy",
+      value: function withPublicKeyStrategy(publicKey) {
+        this.authorizationStrategy = new PublicKeyStrategy(publicKey);
+        return this;
+      }
+      /**
+       * Initializes Forter integration with the provided configuration. This method injects
+       * Forter's JavaScript snippet into the page and starts tracking user behavior.
+       *
+       * @param {Object} config - Configuration object for Forter integration
+       * @param {string} [config.siteId] - Your Forter site ID or subsite merchant ID
+       * @param {string} [config.providerId] - Your Paydock integrated Forter Service ID.
+       * @param {boolean} [config.csp] - Set to true if your site uses Content-Security-Policies
+       *
+       * @throws If neither siteId nor providerId are provided in the configuration
+       * @throws If providerId fails to resolve to a siteId through Paydock integration services
+       *
+       * @returns Promise with existing FraudPreventionService instance
+       *
+       * @example
+       *
+       * ```js
+       * await fps.withForter({
+       *   providerId: 'your-paydock-forter-service-id'
+       * });
+       * ```
+       *
+       * @example
+       *
+       * ```js
+       * await fps.withForter({
+       *   siteId: 'your-forter-site-id',
+       * });
+       * ```
+       */
+    }, {
+      key: "withForter",
+      value: function withForter(config) {
+        return __awaiter(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee2() {
+          var _this2 = this;
+          var useForterDeviceAgent, usingOwnCredentials, usingIntegratedCredentials, _yield$this$getProvid, _yield$this$getProvid2, credentials, error;
+          return _regeneratorRuntime().wrap(function _callee2$(_context2) {
+            while (1) switch (_context2.prev = _context2.next) {
+              case 0:
+                useForterDeviceAgent = function useForterDeviceAgent(siteId, subsiteId) {
+                  return __awaiter(_this2, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
+                    return _regeneratorRuntime().wrap(function _callee$(_context) {
+                      while (1) switch (_context.prev = _context.next) {
+                        case 0:
+                          this.forterDeviceAgent = new ForterDeviceAgent({
+                            csp: config.csp,
+                            mode: this.mode,
+                            siteId: siteId !== null && siteId !== void 0 ? siteId : subsiteId
+                          }).init();
+                          return _context.abrupt("return", Promise.resolve(this));
+                        case 2:
+                        case "end":
+                          return _context.stop();
+                      }
+                    }, _callee, this);
+                  }));
+                };
+                usingOwnCredentials = 'siteId' in config && typeof config.siteId === 'string';
+                if (!usingOwnCredentials) {
+                  _context2.next = 4;
+                  break;
+                }
+                return _context2.abrupt("return", useForterDeviceAgent(config.siteId, undefined));
+              case 4:
+                usingIntegratedCredentials = 'providerId' in config && typeof config.providerId === 'string';
+                if (!(usingIntegratedCredentials && this.authorizationStrategy)) {
+                  _context2.next = 15;
+                  break;
+                }
+                _context2.next = 8;
+                return this.getProviderCredentials(PROVIDERS.FORTER, config.providerId);
+              case 8:
+                _yield$this$getProvid = _context2.sent;
+                _yield$this$getProvid2 = _slicedToArray(_yield$this$getProvid, 2);
+                credentials = _yield$this$getProvid2[0];
+                error = _yield$this$getProvid2[1];
+                if (!error) {
+                  _context2.next = 14;
+                  break;
+                }
+                throw new Error("FraudPreventionService could not obtain forter integration credentials from providerId '".concat(config.providerId, "'. Cause: ").concat(error instanceof Error ? error.message : JSON.stringify(error), ";"));
+              case 14:
+                return _context2.abrupt("return", useForterDeviceAgent(credentials.siteId, credentials.subsiteId));
+              case 15:
+                throw new TypeError("FraudPreventionService withForter expects either config 'siteId' or config 'providerId' to be of type string.");
+              case 16:
+              case "end":
+                return _context2.stop();
+            }
+          }, _callee2, this);
+        }));
+      }
+      /**
+       * Returns the initialized Forter device agent instance if available.
+       *
+       * Make sure to call withForter() before accessing this getter.
+       *
+       * @returns {ForterDeviceAgent | null} The Forter device agent instance or null if not initialized
+       *
+       * @example
+       *
+       * ```js
+       * const fps = new FraudPreventionService();
+       *
+       * fps.withForter({
+       *   siteId: 'your-site-id',
+       *   mode: 'test'
+       * });
+       *
+       * const token = fps.forter?.token;
+       * ```
+       */
+    }, {
+      key: "forter",
+      get: function get() {
+        return this.forterDeviceAgent;
+      }
+      /**
+       * Gets the credentials for a specific fraud prevention provider.
+       *
+       * Returns different credential types based on the selected provider.
+       *
+       * @param provider - The fraud prevention provider
+       * @param providerId - The ID of the provider instance
+       *
+       * @returns a tuple with shape [providerSpecificCredentials, error]
+       */
+    }, {
+      key: "getProviderCredentials",
+      value: function getProviderCredentials(provider, providerId) {
+        return __awaiter(this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee3() {
+          var fetcher;
+          return _regeneratorRuntime().wrap(function _callee3$(_context3) {
+            while (1) switch (_context3.prev = _context3.next) {
+              case 0:
+                fetcher = this.httpFetcherFactory.createFetcher();
+                return _context3.abrupt("return", findServiceConfig(fetcher, provider, providerId));
+              case 2:
+              case "end":
+                return _context3.stop();
+            }
+          }, _callee3, this);
+        }));
+      }
+    }, {
+      key: "validateEnvironmentId",
+      value: function validateEnvironmentId(environmentId) {
+        if (typeof environmentId !== 'string') {
+          throw new TypeError("FraudPreventionService expects config 'environmentId' to be of type string.");
+        }
+      }
+    }, {
+      key: "validateEnvironmentAlias",
+      value: function validateEnvironmentAlias(environmentAlias) {
+        if (environmentAlias && typeof environmentAlias !== 'string') {
+          throw new TypeError("FraudPreventionService expects config 'domain' to be of type string when it is provided.");
+        }
+      }
+    }, {
+      key: "validateMode",
+      value: function validateMode(mode) {
+        if (!isValidMode(mode)) {
+          throw new TypeError("FraudPreventionService expects config 'mode' to be of type string and one of ".concat(MODES.join(','), "."));
+        }
+      }
+    }]);
+  }();
+
   var ObjectHelper = /*#__PURE__*/function () {
     function ObjectHelper() {
       _classCallCheck(this, ObjectHelper);
@@ -10142,1580 +11000,1355 @@
     }]);
   }(WalletService);
 
-  var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};
-
-  var purify = {exports: {}};
-
-  /*! @license DOMPurify 3.1.6 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.1.6/LICENSE */
-
-  var hasRequiredPurify;
-
-  function requirePurify () {
-  	if (hasRequiredPurify) return purify.exports;
-  	hasRequiredPurify = 1;
-  	(function (module, exports) {
-  		(function (global, factory) {
-  		  module.exports = factory() ;
-  		})(commonjsGlobal, (function () {
-  		  const {
-  		    entries,
-  		    setPrototypeOf,
-  		    isFrozen,
-  		    getPrototypeOf,
-  		    getOwnPropertyDescriptor
-  		  } = Object;
-  		  let {
-  		    freeze,
-  		    seal,
-  		    create
-  		  } = Object; // eslint-disable-line import/no-mutable-exports
-  		  let {
-  		    apply,
-  		    construct
-  		  } = typeof Reflect !== 'undefined' && Reflect;
-  		  if (!freeze) {
-  		    freeze = function freeze(x) {
-  		      return x;
-  		    };
-  		  }
-  		  if (!seal) {
-  		    seal = function seal(x) {
-  		      return x;
-  		    };
-  		  }
-  		  if (!apply) {
-  		    apply = function apply(fun, thisValue, args) {
-  		      return fun.apply(thisValue, args);
-  		    };
-  		  }
-  		  if (!construct) {
-  		    construct = function construct(Func, args) {
-  		      return new Func(...args);
-  		    };
-  		  }
-  		  const arrayForEach = unapply(Array.prototype.forEach);
-  		  const arrayPop = unapply(Array.prototype.pop);
-  		  const arrayPush = unapply(Array.prototype.push);
-  		  const stringToLowerCase = unapply(String.prototype.toLowerCase);
-  		  const stringToString = unapply(String.prototype.toString);
-  		  const stringMatch = unapply(String.prototype.match);
-  		  const stringReplace = unapply(String.prototype.replace);
-  		  const stringIndexOf = unapply(String.prototype.indexOf);
-  		  const stringTrim = unapply(String.prototype.trim);
-  		  const objectHasOwnProperty = unapply(Object.prototype.hasOwnProperty);
-  		  const regExpTest = unapply(RegExp.prototype.test);
-  		  const typeErrorCreate = unconstruct(TypeError);
-
-  		  /**
-  		   * Creates a new function that calls the given function with a specified thisArg and arguments.
-  		   *
-  		   * @param {Function} func - The function to be wrapped and called.
-  		   * @returns {Function} A new function that calls the given function with a specified thisArg and arguments.
-  		   */
-  		  function unapply(func) {
-  		    return function (thisArg) {
-  		      for (var _len = arguments.length, args = new Array(_len > 1 ? _len - 1 : 0), _key = 1; _key < _len; _key++) {
-  		        args[_key - 1] = arguments[_key];
-  		      }
-  		      return apply(func, thisArg, args);
-  		    };
-  		  }
-
-  		  /**
-  		   * Creates a new function that constructs an instance of the given constructor function with the provided arguments.
-  		   *
-  		   * @param {Function} func - The constructor function to be wrapped and called.
-  		   * @returns {Function} A new function that constructs an instance of the given constructor function with the provided arguments.
-  		   */
-  		  function unconstruct(func) {
-  		    return function () {
-  		      for (var _len2 = arguments.length, args = new Array(_len2), _key2 = 0; _key2 < _len2; _key2++) {
-  		        args[_key2] = arguments[_key2];
-  		      }
-  		      return construct(func, args);
-  		    };
-  		  }
-
-  		  /**
-  		   * Add properties to a lookup table
-  		   *
-  		   * @param {Object} set - The set to which elements will be added.
-  		   * @param {Array} array - The array containing elements to be added to the set.
-  		   * @param {Function} transformCaseFunc - An optional function to transform the case of each element before adding to the set.
-  		   * @returns {Object} The modified set with added elements.
-  		   */
-  		  function addToSet(set, array) {
-  		    let transformCaseFunc = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : stringToLowerCase;
-  		    if (setPrototypeOf) {
-  		      // Make 'in' and truthy checks like Boolean(set.constructor)
-  		      // independent of any properties defined on Object.prototype.
-  		      // Prevent prototype setters from intercepting set as a this value.
-  		      setPrototypeOf(set, null);
-  		    }
-  		    let l = array.length;
-  		    while (l--) {
-  		      let element = array[l];
-  		      if (typeof element === 'string') {
-  		        const lcElement = transformCaseFunc(element);
-  		        if (lcElement !== element) {
-  		          // Config presets (e.g. tags.js, attrs.js) are immutable.
-  		          if (!isFrozen(array)) {
-  		            array[l] = lcElement;
-  		          }
-  		          element = lcElement;
-  		        }
-  		      }
-  		      set[element] = true;
-  		    }
-  		    return set;
-  		  }
-
-  		  /**
-  		   * Clean up an array to harden against CSPP
-  		   *
-  		   * @param {Array} array - The array to be cleaned.
-  		   * @returns {Array} The cleaned version of the array
-  		   */
-  		  function cleanArray(array) {
-  		    for (let index = 0; index < array.length; index++) {
-  		      const isPropertyExist = objectHasOwnProperty(array, index);
-  		      if (!isPropertyExist) {
-  		        array[index] = null;
-  		      }
-  		    }
-  		    return array;
-  		  }
-
-  		  /**
-  		   * Shallow clone an object
-  		   *
-  		   * @param {Object} object - The object to be cloned.
-  		   * @returns {Object} A new object that copies the original.
-  		   */
-  		  function clone(object) {
-  		    const newObject = create(null);
-  		    for (const [property, value] of entries(object)) {
-  		      const isPropertyExist = objectHasOwnProperty(object, property);
-  		      if (isPropertyExist) {
-  		        if (Array.isArray(value)) {
-  		          newObject[property] = cleanArray(value);
-  		        } else if (value && typeof value === 'object' && value.constructor === Object) {
-  		          newObject[property] = clone(value);
-  		        } else {
-  		          newObject[property] = value;
-  		        }
-  		      }
-  		    }
-  		    return newObject;
-  		  }
-
-  		  /**
-  		   * This method automatically checks if the prop is function or getter and behaves accordingly.
-  		   *
-  		   * @param {Object} object - The object to look up the getter function in its prototype chain.
-  		   * @param {String} prop - The property name for which to find the getter function.
-  		   * @returns {Function} The getter function found in the prototype chain or a fallback function.
-  		   */
-  		  function lookupGetter(object, prop) {
-  		    while (object !== null) {
-  		      const desc = getOwnPropertyDescriptor(object, prop);
-  		      if (desc) {
-  		        if (desc.get) {
-  		          return unapply(desc.get);
-  		        }
-  		        if (typeof desc.value === 'function') {
-  		          return unapply(desc.value);
-  		        }
-  		      }
-  		      object = getPrototypeOf(object);
-  		    }
-  		    function fallbackValue() {
-  		      return null;
-  		    }
-  		    return fallbackValue;
-  		  }
-
-  		  const html$1 = freeze(['a', 'abbr', 'acronym', 'address', 'area', 'article', 'aside', 'audio', 'b', 'bdi', 'bdo', 'big', 'blink', 'blockquote', 'body', 'br', 'button', 'canvas', 'caption', 'center', 'cite', 'code', 'col', 'colgroup', 'content', 'data', 'datalist', 'dd', 'decorator', 'del', 'details', 'dfn', 'dialog', 'dir', 'div', 'dl', 'dt', 'element', 'em', 'fieldset', 'figcaption', 'figure', 'font', 'footer', 'form', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'head', 'header', 'hgroup', 'hr', 'html', 'i', 'img', 'input', 'ins', 'kbd', 'label', 'legend', 'li', 'main', 'map', 'mark', 'marquee', 'menu', 'menuitem', 'meter', 'nav', 'nobr', 'ol', 'optgroup', 'option', 'output', 'p', 'picture', 'pre', 'progress', 'q', 'rp', 'rt', 'ruby', 's', 'samp', 'section', 'select', 'shadow', 'small', 'source', 'spacer', 'span', 'strike', 'strong', 'style', 'sub', 'summary', 'sup', 'table', 'tbody', 'td', 'template', 'textarea', 'tfoot', 'th', 'thead', 'time', 'tr', 'track', 'tt', 'u', 'ul', 'var', 'video', 'wbr']);
-
-  		  // SVG
-  		  const svg$1 = freeze(['svg', 'a', 'altglyph', 'altglyphdef', 'altglyphitem', 'animatecolor', 'animatemotion', 'animatetransform', 'circle', 'clippath', 'defs', 'desc', 'ellipse', 'filter', 'font', 'g', 'glyph', 'glyphref', 'hkern', 'image', 'line', 'lineargradient', 'marker', 'mask', 'metadata', 'mpath', 'path', 'pattern', 'polygon', 'polyline', 'radialgradient', 'rect', 'stop', 'style', 'switch', 'symbol', 'text', 'textpath', 'title', 'tref', 'tspan', 'view', 'vkern']);
-  		  const svgFilters = freeze(['feBlend', 'feColorMatrix', 'feComponentTransfer', 'feComposite', 'feConvolveMatrix', 'feDiffuseLighting', 'feDisplacementMap', 'feDistantLight', 'feDropShadow', 'feFlood', 'feFuncA', 'feFuncB', 'feFuncG', 'feFuncR', 'feGaussianBlur', 'feImage', 'feMerge', 'feMergeNode', 'feMorphology', 'feOffset', 'fePointLight', 'feSpecularLighting', 'feSpotLight', 'feTile', 'feTurbulence']);
-
-  		  // List of SVG elements that are disallowed by default.
-  		  // We still need to know them so that we can do namespace
-  		  // checks properly in case one wants to add them to
-  		  // allow-list.
-  		  const svgDisallowed = freeze(['animate', 'color-profile', 'cursor', 'discard', 'font-face', 'font-face-format', 'font-face-name', 'font-face-src', 'font-face-uri', 'foreignobject', 'hatch', 'hatchpath', 'mesh', 'meshgradient', 'meshpatch', 'meshrow', 'missing-glyph', 'script', 'set', 'solidcolor', 'unknown', 'use']);
-  		  const mathMl$1 = freeze(['math', 'menclose', 'merror', 'mfenced', 'mfrac', 'mglyph', 'mi', 'mlabeledtr', 'mmultiscripts', 'mn', 'mo', 'mover', 'mpadded', 'mphantom', 'mroot', 'mrow', 'ms', 'mspace', 'msqrt', 'mstyle', 'msub', 'msup', 'msubsup', 'mtable', 'mtd', 'mtext', 'mtr', 'munder', 'munderover', 'mprescripts']);
-
-  		  // Similarly to SVG, we want to know all MathML elements,
-  		  // even those that we disallow by default.
-  		  const mathMlDisallowed = freeze(['maction', 'maligngroup', 'malignmark', 'mlongdiv', 'mscarries', 'mscarry', 'msgroup', 'mstack', 'msline', 'msrow', 'semantics', 'annotation', 'annotation-xml', 'mprescripts', 'none']);
-  		  const text = freeze(['#text']);
-
-  		  const html = freeze(['accept', 'action', 'align', 'alt', 'autocapitalize', 'autocomplete', 'autopictureinpicture', 'autoplay', 'background', 'bgcolor', 'border', 'capture', 'cellpadding', 'cellspacing', 'checked', 'cite', 'class', 'clear', 'color', 'cols', 'colspan', 'controls', 'controlslist', 'coords', 'crossorigin', 'datetime', 'decoding', 'default', 'dir', 'disabled', 'disablepictureinpicture', 'disableremoteplayback', 'download', 'draggable', 'enctype', 'enterkeyhint', 'face', 'for', 'headers', 'height', 'hidden', 'high', 'href', 'hreflang', 'id', 'inputmode', 'integrity', 'ismap', 'kind', 'label', 'lang', 'list', 'loading', 'loop', 'low', 'max', 'maxlength', 'media', 'method', 'min', 'minlength', 'multiple', 'muted', 'name', 'nonce', 'noshade', 'novalidate', 'nowrap', 'open', 'optimum', 'pattern', 'placeholder', 'playsinline', 'popover', 'popovertarget', 'popovertargetaction', 'poster', 'preload', 'pubdate', 'radiogroup', 'readonly', 'rel', 'required', 'rev', 'reversed', 'role', 'rows', 'rowspan', 'spellcheck', 'scope', 'selected', 'shape', 'size', 'sizes', 'span', 'srclang', 'start', 'src', 'srcset', 'step', 'style', 'summary', 'tabindex', 'title', 'translate', 'type', 'usemap', 'valign', 'value', 'width', 'wrap', 'xmlns', 'slot']);
-  		  const svg = freeze(['accent-height', 'accumulate', 'additive', 'alignment-baseline', 'ascent', 'attributename', 'attributetype', 'azimuth', 'basefrequency', 'baseline-shift', 'begin', 'bias', 'by', 'class', 'clip', 'clippathunits', 'clip-path', 'clip-rule', 'color', 'color-interpolation', 'color-interpolation-filters', 'color-profile', 'color-rendering', 'cx', 'cy', 'd', 'dx', 'dy', 'diffuseconstant', 'direction', 'display', 'divisor', 'dur', 'edgemode', 'elevation', 'end', 'fill', 'fill-opacity', 'fill-rule', 'filter', 'filterunits', 'flood-color', 'flood-opacity', 'font-family', 'font-size', 'font-size-adjust', 'font-stretch', 'font-style', 'font-variant', 'font-weight', 'fx', 'fy', 'g1', 'g2', 'glyph-name', 'glyphref', 'gradientunits', 'gradienttransform', 'height', 'href', 'id', 'image-rendering', 'in', 'in2', 'k', 'k1', 'k2', 'k3', 'k4', 'kerning', 'keypoints', 'keysplines', 'keytimes', 'lang', 'lengthadjust', 'letter-spacing', 'kernelmatrix', 'kernelunitlength', 'lighting-color', 'local', 'marker-end', 'marker-mid', 'marker-start', 'markerheight', 'markerunits', 'markerwidth', 'maskcontentunits', 'maskunits', 'max', 'mask', 'media', 'method', 'mode', 'min', 'name', 'numoctaves', 'offset', 'operator', 'opacity', 'order', 'orient', 'orientation', 'origin', 'overflow', 'paint-order', 'path', 'pathlength', 'patterncontentunits', 'patterntransform', 'patternunits', 'points', 'preservealpha', 'preserveaspectratio', 'primitiveunits', 'r', 'rx', 'ry', 'radius', 'refx', 'refy', 'repeatcount', 'repeatdur', 'restart', 'result', 'rotate', 'scale', 'seed', 'shape-rendering', 'specularconstant', 'specularexponent', 'spreadmethod', 'startoffset', 'stddeviation', 'stitchtiles', 'stop-color', 'stop-opacity', 'stroke-dasharray', 'stroke-dashoffset', 'stroke-linecap', 'stroke-linejoin', 'stroke-miterlimit', 'stroke-opacity', 'stroke', 'stroke-width', 'style', 'surfacescale', 'systemlanguage', 'tabindex', 'targetx', 'targety', 'transform', 'transform-origin', 'text-anchor', 'text-decoration', 'text-rendering', 'textlength', 'type', 'u1', 'u2', 'unicode', 'values', 'viewbox', 'visibility', 'version', 'vert-adv-y', 'vert-origin-x', 'vert-origin-y', 'width', 'word-spacing', 'wrap', 'writing-mode', 'xchannelselector', 'ychannelselector', 'x', 'x1', 'x2', 'xmlns', 'y', 'y1', 'y2', 'z', 'zoomandpan']);
-  		  const mathMl = freeze(['accent', 'accentunder', 'align', 'bevelled', 'close', 'columnsalign', 'columnlines', 'columnspan', 'denomalign', 'depth', 'dir', 'display', 'displaystyle', 'encoding', 'fence', 'frame', 'height', 'href', 'id', 'largeop', 'length', 'linethickness', 'lspace', 'lquote', 'mathbackground', 'mathcolor', 'mathsize', 'mathvariant', 'maxsize', 'minsize', 'movablelimits', 'notation', 'numalign', 'open', 'rowalign', 'rowlines', 'rowspacing', 'rowspan', 'rspace', 'rquote', 'scriptlevel', 'scriptminsize', 'scriptsizemultiplier', 'selection', 'separator', 'separators', 'stretchy', 'subscriptshift', 'supscriptshift', 'symmetric', 'voffset', 'width', 'xmlns']);
-  		  const xml = freeze(['xlink:href', 'xml:id', 'xlink:title', 'xml:space', 'xmlns:xlink']);
-
-  		  // eslint-disable-next-line unicorn/better-regex
-  		  const MUSTACHE_EXPR = seal(/\{\{[\w\W]*|[\w\W]*\}\}/gm); // Specify template detection regex for SAFE_FOR_TEMPLATES mode
-  		  const ERB_EXPR = seal(/<%[\w\W]*|[\w\W]*%>/gm);
-  		  const TMPLIT_EXPR = seal(/\${[\w\W]*}/gm);
-  		  const DATA_ATTR = seal(/^data-[\-\w.\u00B7-\uFFFF]/); // eslint-disable-line no-useless-escape
-  		  const ARIA_ATTR = seal(/^aria-[\-\w]+$/); // eslint-disable-line no-useless-escape
-  		  const IS_ALLOWED_URI = seal(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i // eslint-disable-line no-useless-escape
-  		  );
-  		  const IS_SCRIPT_OR_DATA = seal(/^(?:\w+script|data):/i);
-  		  const ATTR_WHITESPACE = seal(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g // eslint-disable-line no-control-regex
-  		  );
-  		  const DOCTYPE_NAME = seal(/^html$/i);
-  		  const CUSTOM_ELEMENT = seal(/^[a-z][.\w]*(-[.\w]+)+$/i);
-
-  		  var EXPRESSIONS = /*#__PURE__*/Object.freeze({
-  		    __proto__: null,
-  		    MUSTACHE_EXPR: MUSTACHE_EXPR,
-  		    ERB_EXPR: ERB_EXPR,
-  		    TMPLIT_EXPR: TMPLIT_EXPR,
-  		    DATA_ATTR: DATA_ATTR,
-  		    ARIA_ATTR: ARIA_ATTR,
-  		    IS_ALLOWED_URI: IS_ALLOWED_URI,
-  		    IS_SCRIPT_OR_DATA: IS_SCRIPT_OR_DATA,
-  		    ATTR_WHITESPACE: ATTR_WHITESPACE,
-  		    DOCTYPE_NAME: DOCTYPE_NAME,
-  		    CUSTOM_ELEMENT: CUSTOM_ELEMENT
-  		  });
-
-  		  // https://developer.mozilla.org/en-US/docs/Web/API/Node/nodeType
-  		  const NODE_TYPE = {
-  		    element: 1,
-  		    attribute: 2,
-  		    text: 3,
-  		    cdataSection: 4,
-  		    entityReference: 5,
-  		    // Deprecated
-  		    entityNode: 6,
-  		    // Deprecated
-  		    progressingInstruction: 7,
-  		    comment: 8,
-  		    document: 9,
-  		    documentType: 10,
-  		    documentFragment: 11,
-  		    notation: 12 // Deprecated
-  		  };
-  		  const getGlobal = function getGlobal() {
-  		    return typeof window === 'undefined' ? null : window;
-  		  };
-
-  		  /**
-  		   * Creates a no-op policy for internal use only.
-  		   * Don't export this function outside this module!
-  		   * @param {TrustedTypePolicyFactory} trustedTypes The policy factory.
-  		   * @param {HTMLScriptElement} purifyHostElement The Script element used to load DOMPurify (to determine policy name suffix).
-  		   * @return {TrustedTypePolicy} The policy created (or null, if Trusted Types
-  		   * are not supported or creating the policy failed).
-  		   */
-  		  const _createTrustedTypesPolicy = function _createTrustedTypesPolicy(trustedTypes, purifyHostElement) {
-  		    if (typeof trustedTypes !== 'object' || typeof trustedTypes.createPolicy !== 'function') {
-  		      return null;
-  		    }
-
-  		    // Allow the callers to control the unique policy name
-  		    // by adding a data-tt-policy-suffix to the script element with the DOMPurify.
-  		    // Policy creation with duplicate names throws in Trusted Types.
-  		    let suffix = null;
-  		    const ATTR_NAME = 'data-tt-policy-suffix';
-  		    if (purifyHostElement && purifyHostElement.hasAttribute(ATTR_NAME)) {
-  		      suffix = purifyHostElement.getAttribute(ATTR_NAME);
-  		    }
-  		    const policyName = 'dompurify' + (suffix ? '#' + suffix : '');
-  		    try {
-  		      return trustedTypes.createPolicy(policyName, {
-  		        createHTML(html) {
-  		          return html;
-  		        },
-  		        createScriptURL(scriptUrl) {
-  		          return scriptUrl;
-  		        }
-  		      });
-  		    } catch (_) {
-  		      // Policy creation failed (most likely another DOMPurify script has
-  		      // already run). Skip creating the policy, as this will only cause errors
-  		      // if TT are enforced.
-  		      console.warn('TrustedTypes policy ' + policyName + ' could not be created.');
-  		      return null;
-  		    }
-  		  };
-  		  function createDOMPurify() {
-  		    let window = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : getGlobal();
-  		    const DOMPurify = root => createDOMPurify(root);
-
-  		    /**
-  		     * Version label, exposed for easier checks
-  		     * if DOMPurify is up to date or not
-  		     */
-  		    DOMPurify.version = '3.1.6';
-
-  		    /**
-  		     * Array of elements that DOMPurify removed during sanitation.
-  		     * Empty if nothing was removed.
-  		     */
-  		    DOMPurify.removed = [];
-  		    if (!window || !window.document || window.document.nodeType !== NODE_TYPE.document) {
-  		      // Not running in a browser, provide a factory function
-  		      // so that you can pass your own Window
-  		      DOMPurify.isSupported = false;
-  		      return DOMPurify;
-  		    }
-  		    let {
-  		      document
-  		    } = window;
-  		    const originalDocument = document;
-  		    const currentScript = originalDocument.currentScript;
-  		    const {
-  		      DocumentFragment,
-  		      HTMLTemplateElement,
-  		      Node,
-  		      Element,
-  		      NodeFilter,
-  		      NamedNodeMap = window.NamedNodeMap || window.MozNamedAttrMap,
-  		      HTMLFormElement,
-  		      DOMParser,
-  		      trustedTypes
-  		    } = window;
-  		    const ElementPrototype = Element.prototype;
-  		    const cloneNode = lookupGetter(ElementPrototype, 'cloneNode');
-  		    const remove = lookupGetter(ElementPrototype, 'remove');
-  		    const getNextSibling = lookupGetter(ElementPrototype, 'nextSibling');
-  		    const getChildNodes = lookupGetter(ElementPrototype, 'childNodes');
-  		    const getParentNode = lookupGetter(ElementPrototype, 'parentNode');
-
-  		    // As per issue #47, the web-components registry is inherited by a
-  		    // new document created via createHTMLDocument. As per the spec
-  		    // (http://w3c.github.io/webcomponents/spec/custom/#creating-and-passing-registries)
-  		    // a new empty registry is used when creating a template contents owner
-  		    // document, so we use that as our parent document to ensure nothing
-  		    // is inherited.
-  		    if (typeof HTMLTemplateElement === 'function') {
-  		      const template = document.createElement('template');
-  		      if (template.content && template.content.ownerDocument) {
-  		        document = template.content.ownerDocument;
-  		      }
-  		    }
-  		    let trustedTypesPolicy;
-  		    let emptyHTML = '';
-  		    const {
-  		      implementation,
-  		      createNodeIterator,
-  		      createDocumentFragment,
-  		      getElementsByTagName
-  		    } = document;
-  		    const {
-  		      importNode
-  		    } = originalDocument;
-  		    let hooks = {};
-
-  		    /**
-  		     * Expose whether this browser supports running the full DOMPurify.
-  		     */
-  		    DOMPurify.isSupported = typeof entries === 'function' && typeof getParentNode === 'function' && implementation && implementation.createHTMLDocument !== undefined;
-  		    const {
-  		      MUSTACHE_EXPR,
-  		      ERB_EXPR,
-  		      TMPLIT_EXPR,
-  		      DATA_ATTR,
-  		      ARIA_ATTR,
-  		      IS_SCRIPT_OR_DATA,
-  		      ATTR_WHITESPACE,
-  		      CUSTOM_ELEMENT
-  		    } = EXPRESSIONS;
-  		    let {
-  		      IS_ALLOWED_URI: IS_ALLOWED_URI$1
-  		    } = EXPRESSIONS;
-
-  		    /**
-  		     * We consider the elements and attributes below to be safe. Ideally
-  		     * don't add any new ones but feel free to remove unwanted ones.
-  		     */
-
-  		    /* allowed element names */
-  		    let ALLOWED_TAGS = null;
-  		    const DEFAULT_ALLOWED_TAGS = addToSet({}, [...html$1, ...svg$1, ...svgFilters, ...mathMl$1, ...text]);
-
-  		    /* Allowed attribute names */
-  		    let ALLOWED_ATTR = null;
-  		    const DEFAULT_ALLOWED_ATTR = addToSet({}, [...html, ...svg, ...mathMl, ...xml]);
-
-  		    /*
-  		     * Configure how DOMPUrify should handle custom elements and their attributes as well as customized built-in elements.
-  		     * @property {RegExp|Function|null} tagNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any custom elements)
-  		     * @property {RegExp|Function|null} attributeNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any attributes not on the allow list)
-  		     * @property {boolean} allowCustomizedBuiltInElements allow custom elements derived from built-ins if they pass CUSTOM_ELEMENT_HANDLING.tagNameCheck. Default: `false`.
-  		     */
-  		    let CUSTOM_ELEMENT_HANDLING = Object.seal(create(null, {
-  		      tagNameCheck: {
-  		        writable: true,
-  		        configurable: false,
-  		        enumerable: true,
-  		        value: null
-  		      },
-  		      attributeNameCheck: {
-  		        writable: true,
-  		        configurable: false,
-  		        enumerable: true,
-  		        value: null
-  		      },
-  		      allowCustomizedBuiltInElements: {
-  		        writable: true,
-  		        configurable: false,
-  		        enumerable: true,
-  		        value: false
-  		      }
-  		    }));
-
-  		    /* Explicitly forbidden tags (overrides ALLOWED_TAGS/ADD_TAGS) */
-  		    let FORBID_TAGS = null;
-
-  		    /* Explicitly forbidden attributes (overrides ALLOWED_ATTR/ADD_ATTR) */
-  		    let FORBID_ATTR = null;
-
-  		    /* Decide if ARIA attributes are okay */
-  		    let ALLOW_ARIA_ATTR = true;
-
-  		    /* Decide if custom data attributes are okay */
-  		    let ALLOW_DATA_ATTR = true;
-
-  		    /* Decide if unknown protocols are okay */
-  		    let ALLOW_UNKNOWN_PROTOCOLS = false;
-
-  		    /* Decide if self-closing tags in attributes are allowed.
-  		     * Usually removed due to a mXSS issue in jQuery 3.0 */
-  		    let ALLOW_SELF_CLOSE_IN_ATTR = true;
-
-  		    /* Output should be safe for common template engines.
-  		     * This means, DOMPurify removes data attributes, mustaches and ERB
-  		     */
-  		    let SAFE_FOR_TEMPLATES = false;
-
-  		    /* Output should be safe even for XML used within HTML and alike.
-  		     * This means, DOMPurify removes comments when containing risky content.
-  		     */
-  		    let SAFE_FOR_XML = true;
-
-  		    /* Decide if document with <html>... should be returned */
-  		    let WHOLE_DOCUMENT = false;
-
-  		    /* Track whether config is already set on this instance of DOMPurify. */
-  		    let SET_CONFIG = false;
-
-  		    /* Decide if all elements (e.g. style, script) must be children of
-  		     * document.body. By default, browsers might move them to document.head */
-  		    let FORCE_BODY = false;
-
-  		    /* Decide if a DOM `HTMLBodyElement` should be returned, instead of a html
-  		     * string (or a TrustedHTML object if Trusted Types are supported).
-  		     * If `WHOLE_DOCUMENT` is enabled a `HTMLHtmlElement` will be returned instead
-  		     */
-  		    let RETURN_DOM = false;
-
-  		    /* Decide if a DOM `DocumentFragment` should be returned, instead of a html
-  		     * string  (or a TrustedHTML object if Trusted Types are supported) */
-  		    let RETURN_DOM_FRAGMENT = false;
-
-  		    /* Try to return a Trusted Type object instead of a string, return a string in
-  		     * case Trusted Types are not supported  */
-  		    let RETURN_TRUSTED_TYPE = false;
-
-  		    /* Output should be free from DOM clobbering attacks?
-  		     * This sanitizes markups named with colliding, clobberable built-in DOM APIs.
-  		     */
-  		    let SANITIZE_DOM = true;
-
-  		    /* Achieve full DOM Clobbering protection by isolating the namespace of named
-  		     * properties and JS variables, mitigating attacks that abuse the HTML/DOM spec rules.
-  		     *
-  		     * HTML/DOM spec rules that enable DOM Clobbering:
-  		     *   - Named Access on Window (§7.3.3)
-  		     *   - DOM Tree Accessors (§3.1.5)
-  		     *   - Form Element Parent-Child Relations (§4.10.3)
-  		     *   - Iframe srcdoc / Nested WindowProxies (§4.8.5)
-  		     *   - HTMLCollection (§4.2.10.2)
-  		     *
-  		     * Namespace isolation is implemented by prefixing `id` and `name` attributes
-  		     * with a constant string, i.e., `user-content-`
-  		     */
-  		    let SANITIZE_NAMED_PROPS = false;
-  		    const SANITIZE_NAMED_PROPS_PREFIX = 'user-content-';
-
-  		    /* Keep element content when removing element? */
-  		    let KEEP_CONTENT = true;
-
-  		    /* If a `Node` is passed to sanitize(), then performs sanitization in-place instead
-  		     * of importing it into a new Document and returning a sanitized copy */
-  		    let IN_PLACE = false;
-
-  		    /* Allow usage of profiles like html, svg and mathMl */
-  		    let USE_PROFILES = {};
-
-  		    /* Tags to ignore content of when KEEP_CONTENT is true */
-  		    let FORBID_CONTENTS = null;
-  		    const DEFAULT_FORBID_CONTENTS = addToSet({}, ['annotation-xml', 'audio', 'colgroup', 'desc', 'foreignobject', 'head', 'iframe', 'math', 'mi', 'mn', 'mo', 'ms', 'mtext', 'noembed', 'noframes', 'noscript', 'plaintext', 'script', 'style', 'svg', 'template', 'thead', 'title', 'video', 'xmp']);
-
-  		    /* Tags that are safe for data: URIs */
-  		    let DATA_URI_TAGS = null;
-  		    const DEFAULT_DATA_URI_TAGS = addToSet({}, ['audio', 'video', 'img', 'source', 'image', 'track']);
-
-  		    /* Attributes safe for values like "javascript:" */
-  		    let URI_SAFE_ATTRIBUTES = null;
-  		    const DEFAULT_URI_SAFE_ATTRIBUTES = addToSet({}, ['alt', 'class', 'for', 'id', 'label', 'name', 'pattern', 'placeholder', 'role', 'summary', 'title', 'value', 'style', 'xmlns']);
-  		    const MATHML_NAMESPACE = 'http://www.w3.org/1998/Math/MathML';
-  		    const SVG_NAMESPACE = 'http://www.w3.org/2000/svg';
-  		    const HTML_NAMESPACE = 'http://www.w3.org/1999/xhtml';
-  		    /* Document namespace */
-  		    let NAMESPACE = HTML_NAMESPACE;
-  		    let IS_EMPTY_INPUT = false;
-
-  		    /* Allowed XHTML+XML namespaces */
-  		    let ALLOWED_NAMESPACES = null;
-  		    const DEFAULT_ALLOWED_NAMESPACES = addToSet({}, [MATHML_NAMESPACE, SVG_NAMESPACE, HTML_NAMESPACE], stringToString);
-
-  		    /* Parsing of strict XHTML documents */
-  		    let PARSER_MEDIA_TYPE = null;
-  		    const SUPPORTED_PARSER_MEDIA_TYPES = ['application/xhtml+xml', 'text/html'];
-  		    const DEFAULT_PARSER_MEDIA_TYPE = 'text/html';
-  		    let transformCaseFunc = null;
-
-  		    /* Keep a reference to config to pass to hooks */
-  		    let CONFIG = null;
-
-  		    /* Ideally, do not touch anything below this line */
-  		    /* ______________________________________________ */
-
-  		    const formElement = document.createElement('form');
-  		    const isRegexOrFunction = function isRegexOrFunction(testValue) {
-  		      return testValue instanceof RegExp || testValue instanceof Function;
-  		    };
-
-  		    /**
-  		     * _parseConfig
-  		     *
-  		     * @param  {Object} cfg optional config literal
-  		     */
-  		    // eslint-disable-next-line complexity
-  		    const _parseConfig = function _parseConfig() {
-  		      let cfg = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
-  		      if (CONFIG && CONFIG === cfg) {
-  		        return;
-  		      }
-
-  		      /* Shield configuration object from tampering */
-  		      if (!cfg || typeof cfg !== 'object') {
-  		        cfg = {};
-  		      }
-
-  		      /* Shield configuration object from prototype pollution */
-  		      cfg = clone(cfg);
-  		      PARSER_MEDIA_TYPE =
-  		      // eslint-disable-next-line unicorn/prefer-includes
-  		      SUPPORTED_PARSER_MEDIA_TYPES.indexOf(cfg.PARSER_MEDIA_TYPE) === -1 ? DEFAULT_PARSER_MEDIA_TYPE : cfg.PARSER_MEDIA_TYPE;
-
-  		      // HTML tags and attributes are not case-sensitive, converting to lowercase. Keeping XHTML as is.
-  		      transformCaseFunc = PARSER_MEDIA_TYPE === 'application/xhtml+xml' ? stringToString : stringToLowerCase;
-
-  		      /* Set configuration parameters */
-  		      ALLOWED_TAGS = objectHasOwnProperty(cfg, 'ALLOWED_TAGS') ? addToSet({}, cfg.ALLOWED_TAGS, transformCaseFunc) : DEFAULT_ALLOWED_TAGS;
-  		      ALLOWED_ATTR = objectHasOwnProperty(cfg, 'ALLOWED_ATTR') ? addToSet({}, cfg.ALLOWED_ATTR, transformCaseFunc) : DEFAULT_ALLOWED_ATTR;
-  		      ALLOWED_NAMESPACES = objectHasOwnProperty(cfg, 'ALLOWED_NAMESPACES') ? addToSet({}, cfg.ALLOWED_NAMESPACES, stringToString) : DEFAULT_ALLOWED_NAMESPACES;
-  		      URI_SAFE_ATTRIBUTES = objectHasOwnProperty(cfg, 'ADD_URI_SAFE_ATTR') ? addToSet(clone(DEFAULT_URI_SAFE_ATTRIBUTES),
-  		      // eslint-disable-line indent
-  		      cfg.ADD_URI_SAFE_ATTR,
-  		      // eslint-disable-line indent
-  		      transformCaseFunc // eslint-disable-line indent
-  		      ) // eslint-disable-line indent
-  		      : DEFAULT_URI_SAFE_ATTRIBUTES;
-  		      DATA_URI_TAGS = objectHasOwnProperty(cfg, 'ADD_DATA_URI_TAGS') ? addToSet(clone(DEFAULT_DATA_URI_TAGS),
-  		      // eslint-disable-line indent
-  		      cfg.ADD_DATA_URI_TAGS,
-  		      // eslint-disable-line indent
-  		      transformCaseFunc // eslint-disable-line indent
-  		      ) // eslint-disable-line indent
-  		      : DEFAULT_DATA_URI_TAGS;
-  		      FORBID_CONTENTS = objectHasOwnProperty(cfg, 'FORBID_CONTENTS') ? addToSet({}, cfg.FORBID_CONTENTS, transformCaseFunc) : DEFAULT_FORBID_CONTENTS;
-  		      FORBID_TAGS = objectHasOwnProperty(cfg, 'FORBID_TAGS') ? addToSet({}, cfg.FORBID_TAGS, transformCaseFunc) : {};
-  		      FORBID_ATTR = objectHasOwnProperty(cfg, 'FORBID_ATTR') ? addToSet({}, cfg.FORBID_ATTR, transformCaseFunc) : {};
-  		      USE_PROFILES = objectHasOwnProperty(cfg, 'USE_PROFILES') ? cfg.USE_PROFILES : false;
-  		      ALLOW_ARIA_ATTR = cfg.ALLOW_ARIA_ATTR !== false; // Default true
-  		      ALLOW_DATA_ATTR = cfg.ALLOW_DATA_ATTR !== false; // Default true
-  		      ALLOW_UNKNOWN_PROTOCOLS = cfg.ALLOW_UNKNOWN_PROTOCOLS || false; // Default false
-  		      ALLOW_SELF_CLOSE_IN_ATTR = cfg.ALLOW_SELF_CLOSE_IN_ATTR !== false; // Default true
-  		      SAFE_FOR_TEMPLATES = cfg.SAFE_FOR_TEMPLATES || false; // Default false
-  		      SAFE_FOR_XML = cfg.SAFE_FOR_XML !== false; // Default true
-  		      WHOLE_DOCUMENT = cfg.WHOLE_DOCUMENT || false; // Default false
-  		      RETURN_DOM = cfg.RETURN_DOM || false; // Default false
-  		      RETURN_DOM_FRAGMENT = cfg.RETURN_DOM_FRAGMENT || false; // Default false
-  		      RETURN_TRUSTED_TYPE = cfg.RETURN_TRUSTED_TYPE || false; // Default false
-  		      FORCE_BODY = cfg.FORCE_BODY || false; // Default false
-  		      SANITIZE_DOM = cfg.SANITIZE_DOM !== false; // Default true
-  		      SANITIZE_NAMED_PROPS = cfg.SANITIZE_NAMED_PROPS || false; // Default false
-  		      KEEP_CONTENT = cfg.KEEP_CONTENT !== false; // Default true
-  		      IN_PLACE = cfg.IN_PLACE || false; // Default false
-  		      IS_ALLOWED_URI$1 = cfg.ALLOWED_URI_REGEXP || IS_ALLOWED_URI;
-  		      NAMESPACE = cfg.NAMESPACE || HTML_NAMESPACE;
-  		      CUSTOM_ELEMENT_HANDLING = cfg.CUSTOM_ELEMENT_HANDLING || {};
-  		      if (cfg.CUSTOM_ELEMENT_HANDLING && isRegexOrFunction(cfg.CUSTOM_ELEMENT_HANDLING.tagNameCheck)) {
-  		        CUSTOM_ELEMENT_HANDLING.tagNameCheck = cfg.CUSTOM_ELEMENT_HANDLING.tagNameCheck;
-  		      }
-  		      if (cfg.CUSTOM_ELEMENT_HANDLING && isRegexOrFunction(cfg.CUSTOM_ELEMENT_HANDLING.attributeNameCheck)) {
-  		        CUSTOM_ELEMENT_HANDLING.attributeNameCheck = cfg.CUSTOM_ELEMENT_HANDLING.attributeNameCheck;
-  		      }
-  		      if (cfg.CUSTOM_ELEMENT_HANDLING && typeof cfg.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements === 'boolean') {
-  		        CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements = cfg.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements;
-  		      }
-  		      if (SAFE_FOR_TEMPLATES) {
-  		        ALLOW_DATA_ATTR = false;
-  		      }
-  		      if (RETURN_DOM_FRAGMENT) {
-  		        RETURN_DOM = true;
-  		      }
-
-  		      /* Parse profile info */
-  		      if (USE_PROFILES) {
-  		        ALLOWED_TAGS = addToSet({}, text);
-  		        ALLOWED_ATTR = [];
-  		        if (USE_PROFILES.html === true) {
-  		          addToSet(ALLOWED_TAGS, html$1);
-  		          addToSet(ALLOWED_ATTR, html);
-  		        }
-  		        if (USE_PROFILES.svg === true) {
-  		          addToSet(ALLOWED_TAGS, svg$1);
-  		          addToSet(ALLOWED_ATTR, svg);
-  		          addToSet(ALLOWED_ATTR, xml);
-  		        }
-  		        if (USE_PROFILES.svgFilters === true) {
-  		          addToSet(ALLOWED_TAGS, svgFilters);
-  		          addToSet(ALLOWED_ATTR, svg);
-  		          addToSet(ALLOWED_ATTR, xml);
-  		        }
-  		        if (USE_PROFILES.mathMl === true) {
-  		          addToSet(ALLOWED_TAGS, mathMl$1);
-  		          addToSet(ALLOWED_ATTR, mathMl);
-  		          addToSet(ALLOWED_ATTR, xml);
-  		        }
-  		      }
-
-  		      /* Merge configuration parameters */
-  		      if (cfg.ADD_TAGS) {
-  		        if (ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {
-  		          ALLOWED_TAGS = clone(ALLOWED_TAGS);
-  		        }
-  		        addToSet(ALLOWED_TAGS, cfg.ADD_TAGS, transformCaseFunc);
-  		      }
-  		      if (cfg.ADD_ATTR) {
-  		        if (ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {
-  		          ALLOWED_ATTR = clone(ALLOWED_ATTR);
-  		        }
-  		        addToSet(ALLOWED_ATTR, cfg.ADD_ATTR, transformCaseFunc);
-  		      }
-  		      if (cfg.ADD_URI_SAFE_ATTR) {
-  		        addToSet(URI_SAFE_ATTRIBUTES, cfg.ADD_URI_SAFE_ATTR, transformCaseFunc);
-  		      }
-  		      if (cfg.FORBID_CONTENTS) {
-  		        if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {
-  		          FORBID_CONTENTS = clone(FORBID_CONTENTS);
-  		        }
-  		        addToSet(FORBID_CONTENTS, cfg.FORBID_CONTENTS, transformCaseFunc);
-  		      }
-
-  		      /* Add #text in case KEEP_CONTENT is set to true */
-  		      if (KEEP_CONTENT) {
-  		        ALLOWED_TAGS['#text'] = true;
-  		      }
-
-  		      /* Add html, head and body to ALLOWED_TAGS in case WHOLE_DOCUMENT is true */
-  		      if (WHOLE_DOCUMENT) {
-  		        addToSet(ALLOWED_TAGS, ['html', 'head', 'body']);
-  		      }
-
-  		      /* Add tbody to ALLOWED_TAGS in case tables are permitted, see #286, #365 */
-  		      if (ALLOWED_TAGS.table) {
-  		        addToSet(ALLOWED_TAGS, ['tbody']);
-  		        delete FORBID_TAGS.tbody;
-  		      }
-  		      if (cfg.TRUSTED_TYPES_POLICY) {
-  		        if (typeof cfg.TRUSTED_TYPES_POLICY.createHTML !== 'function') {
-  		          throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a "createHTML" hook.');
-  		        }
-  		        if (typeof cfg.TRUSTED_TYPES_POLICY.createScriptURL !== 'function') {
-  		          throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a "createScriptURL" hook.');
-  		        }
-
-  		        // Overwrite existing TrustedTypes policy.
-  		        trustedTypesPolicy = cfg.TRUSTED_TYPES_POLICY;
-
-  		        // Sign local variables required by `sanitize`.
-  		        emptyHTML = trustedTypesPolicy.createHTML('');
-  		      } else {
-  		        // Uninitialized policy, attempt to initialize the internal dompurify policy.
-  		        if (trustedTypesPolicy === undefined) {
-  		          trustedTypesPolicy = _createTrustedTypesPolicy(trustedTypes, currentScript);
-  		        }
-
-  		        // If creating the internal policy succeeded sign internal variables.
-  		        if (trustedTypesPolicy !== null && typeof emptyHTML === 'string') {
-  		          emptyHTML = trustedTypesPolicy.createHTML('');
-  		        }
-  		      }
-
-  		      // Prevent further manipulation of configuration.
-  		      // Not available in IE8, Safari 5, etc.
-  		      if (freeze) {
-  		        freeze(cfg);
-  		      }
-  		      CONFIG = cfg;
-  		    };
-  		    const MATHML_TEXT_INTEGRATION_POINTS = addToSet({}, ['mi', 'mo', 'mn', 'ms', 'mtext']);
-  		    const HTML_INTEGRATION_POINTS = addToSet({}, ['foreignobject', 'annotation-xml']);
-
-  		    // Certain elements are allowed in both SVG and HTML
-  		    // namespace. We need to specify them explicitly
-  		    // so that they don't get erroneously deleted from
-  		    // HTML namespace.
-  		    const COMMON_SVG_AND_HTML_ELEMENTS = addToSet({}, ['title', 'style', 'font', 'a', 'script']);
-
-  		    /* Keep track of all possible SVG and MathML tags
-  		     * so that we can perform the namespace checks
-  		     * correctly. */
-  		    const ALL_SVG_TAGS = addToSet({}, [...svg$1, ...svgFilters, ...svgDisallowed]);
-  		    const ALL_MATHML_TAGS = addToSet({}, [...mathMl$1, ...mathMlDisallowed]);
-
-  		    /**
-  		     * @param  {Element} element a DOM element whose namespace is being checked
-  		     * @returns {boolean} Return false if the element has a
-  		     *  namespace that a spec-compliant parser would never
-  		     *  return. Return true otherwise.
-  		     */
-  		    const _checkValidNamespace = function _checkValidNamespace(element) {
-  		      let parent = getParentNode(element);
-
-  		      // In JSDOM, if we're inside shadow DOM, then parentNode
-  		      // can be null. We just simulate parent in this case.
-  		      if (!parent || !parent.tagName) {
-  		        parent = {
-  		          namespaceURI: NAMESPACE,
-  		          tagName: 'template'
-  		        };
-  		      }
-  		      const tagName = stringToLowerCase(element.tagName);
-  		      const parentTagName = stringToLowerCase(parent.tagName);
-  		      if (!ALLOWED_NAMESPACES[element.namespaceURI]) {
-  		        return false;
-  		      }
-  		      if (element.namespaceURI === SVG_NAMESPACE) {
-  		        // The only way to switch from HTML namespace to SVG
-  		        // is via <svg>. If it happens via any other tag, then
-  		        // it should be killed.
-  		        if (parent.namespaceURI === HTML_NAMESPACE) {
-  		          return tagName === 'svg';
-  		        }
-
-  		        // The only way to switch from MathML to SVG is via`
-  		        // svg if parent is either <annotation-xml> or MathML
-  		        // text integration points.
-  		        if (parent.namespaceURI === MATHML_NAMESPACE) {
-  		          return tagName === 'svg' && (parentTagName === 'annotation-xml' || MATHML_TEXT_INTEGRATION_POINTS[parentTagName]);
-  		        }
-
-  		        // We only allow elements that are defined in SVG
-  		        // spec. All others are disallowed in SVG namespace.
-  		        return Boolean(ALL_SVG_TAGS[tagName]);
-  		      }
-  		      if (element.namespaceURI === MATHML_NAMESPACE) {
-  		        // The only way to switch from HTML namespace to MathML
-  		        // is via <math>. If it happens via any other tag, then
-  		        // it should be killed.
-  		        if (parent.namespaceURI === HTML_NAMESPACE) {
-  		          return tagName === 'math';
-  		        }
-
-  		        // The only way to switch from SVG to MathML is via
-  		        // <math> and HTML integration points
-  		        if (parent.namespaceURI === SVG_NAMESPACE) {
-  		          return tagName === 'math' && HTML_INTEGRATION_POINTS[parentTagName];
-  		        }
-
-  		        // We only allow elements that are defined in MathML
-  		        // spec. All others are disallowed in MathML namespace.
-  		        return Boolean(ALL_MATHML_TAGS[tagName]);
-  		      }
-  		      if (element.namespaceURI === HTML_NAMESPACE) {
-  		        // The only way to switch from SVG to HTML is via
-  		        // HTML integration points, and from MathML to HTML
-  		        // is via MathML text integration points
-  		        if (parent.namespaceURI === SVG_NAMESPACE && !HTML_INTEGRATION_POINTS[parentTagName]) {
-  		          return false;
-  		        }
-  		        if (parent.namespaceURI === MATHML_NAMESPACE && !MATHML_TEXT_INTEGRATION_POINTS[parentTagName]) {
-  		          return false;
-  		        }
-
-  		        // We disallow tags that are specific for MathML
-  		        // or SVG and should never appear in HTML namespace
-  		        return !ALL_MATHML_TAGS[tagName] && (COMMON_SVG_AND_HTML_ELEMENTS[tagName] || !ALL_SVG_TAGS[tagName]);
-  		      }
-
-  		      // For XHTML and XML documents that support custom namespaces
-  		      if (PARSER_MEDIA_TYPE === 'application/xhtml+xml' && ALLOWED_NAMESPACES[element.namespaceURI]) {
-  		        return true;
-  		      }
-
-  		      // The code should never reach this place (this means
-  		      // that the element somehow got namespace that is not
-  		      // HTML, SVG, MathML or allowed via ALLOWED_NAMESPACES).
-  		      // Return false just in case.
-  		      return false;
-  		    };
-
-  		    /**
-  		     * _forceRemove
-  		     *
-  		     * @param  {Node} node a DOM node
-  		     */
-  		    const _forceRemove = function _forceRemove(node) {
-  		      arrayPush(DOMPurify.removed, {
-  		        element: node
-  		      });
-  		      try {
-  		        // eslint-disable-next-line unicorn/prefer-dom-node-remove
-  		        getParentNode(node).removeChild(node);
-  		      } catch (_) {
-  		        remove(node);
-  		      }
-  		    };
-
-  		    /**
-  		     * _removeAttribute
-  		     *
-  		     * @param  {String} name an Attribute name
-  		     * @param  {Node} node a DOM node
-  		     */
-  		    const _removeAttribute = function _removeAttribute(name, node) {
-  		      try {
-  		        arrayPush(DOMPurify.removed, {
-  		          attribute: node.getAttributeNode(name),
-  		          from: node
-  		        });
-  		      } catch (_) {
-  		        arrayPush(DOMPurify.removed, {
-  		          attribute: null,
-  		          from: node
-  		        });
-  		      }
-  		      node.removeAttribute(name);
-
-  		      // We void attribute values for unremovable "is"" attributes
-  		      if (name === 'is' && !ALLOWED_ATTR[name]) {
-  		        if (RETURN_DOM || RETURN_DOM_FRAGMENT) {
-  		          try {
-  		            _forceRemove(node);
-  		          } catch (_) {}
-  		        } else {
-  		          try {
-  		            node.setAttribute(name, '');
-  		          } catch (_) {}
-  		        }
-  		      }
-  		    };
-
-  		    /**
-  		     * _initDocument
-  		     *
-  		     * @param  {String} dirty a string of dirty markup
-  		     * @return {Document} a DOM, filled with the dirty markup
-  		     */
-  		    const _initDocument = function _initDocument(dirty) {
-  		      /* Create a HTML document */
-  		      let doc = null;
-  		      let leadingWhitespace = null;
-  		      if (FORCE_BODY) {
-  		        dirty = '<remove></remove>' + dirty;
-  		      } else {
-  		        /* If FORCE_BODY isn't used, leading whitespace needs to be preserved manually */
-  		        const matches = stringMatch(dirty, /^[\r\n\t ]+/);
-  		        leadingWhitespace = matches && matches[0];
-  		      }
-  		      if (PARSER_MEDIA_TYPE === 'application/xhtml+xml' && NAMESPACE === HTML_NAMESPACE) {
-  		        // Root of XHTML doc must contain xmlns declaration (see https://www.w3.org/TR/xhtml1/normative.html#strict)
-  		        dirty = '<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>' + dirty + '</body></html>';
-  		      }
-  		      const dirtyPayload = trustedTypesPolicy ? trustedTypesPolicy.createHTML(dirty) : dirty;
-  		      /*
-  		       * Use the DOMParser API by default, fallback later if needs be
-  		       * DOMParser not work for svg when has multiple root element.
-  		       */
-  		      if (NAMESPACE === HTML_NAMESPACE) {
-  		        try {
-  		          doc = new DOMParser().parseFromString(dirtyPayload, PARSER_MEDIA_TYPE);
-  		        } catch (_) {}
-  		      }
-
-  		      /* Use createHTMLDocument in case DOMParser is not available */
-  		      if (!doc || !doc.documentElement) {
-  		        doc = implementation.createDocument(NAMESPACE, 'template', null);
-  		        try {
-  		          doc.documentElement.innerHTML = IS_EMPTY_INPUT ? emptyHTML : dirtyPayload;
-  		        } catch (_) {
-  		          // Syntax error if dirtyPayload is invalid xml
-  		        }
-  		      }
-  		      const body = doc.body || doc.documentElement;
-  		      if (dirty && leadingWhitespace) {
-  		        body.insertBefore(document.createTextNode(leadingWhitespace), body.childNodes[0] || null);
-  		      }
-
-  		      /* Work on whole document or just its body */
-  		      if (NAMESPACE === HTML_NAMESPACE) {
-  		        return getElementsByTagName.call(doc, WHOLE_DOCUMENT ? 'html' : 'body')[0];
-  		      }
-  		      return WHOLE_DOCUMENT ? doc.documentElement : body;
-  		    };
-
-  		    /**
-  		     * Creates a NodeIterator object that you can use to traverse filtered lists of nodes or elements in a document.
-  		     *
-  		     * @param  {Node} root The root element or node to start traversing on.
-  		     * @return {NodeIterator} The created NodeIterator
-  		     */
-  		    const _createNodeIterator = function _createNodeIterator(root) {
-  		      return createNodeIterator.call(root.ownerDocument || root, root,
-  		      // eslint-disable-next-line no-bitwise
-  		      NodeFilter.SHOW_ELEMENT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_TEXT | NodeFilter.SHOW_PROCESSING_INSTRUCTION | NodeFilter.SHOW_CDATA_SECTION, null);
-  		    };
-
-  		    /**
-  		     * _isClobbered
-  		     *
-  		     * @param  {Node} elm element to check for clobbering attacks
-  		     * @return {Boolean} true if clobbered, false if safe
-  		     */
-  		    const _isClobbered = function _isClobbered(elm) {
-  		      return elm instanceof HTMLFormElement && (typeof elm.nodeName !== 'string' || typeof elm.textContent !== 'string' || typeof elm.removeChild !== 'function' || !(elm.attributes instanceof NamedNodeMap) || typeof elm.removeAttribute !== 'function' || typeof elm.setAttribute !== 'function' || typeof elm.namespaceURI !== 'string' || typeof elm.insertBefore !== 'function' || typeof elm.hasChildNodes !== 'function');
-  		    };
-
-  		    /**
-  		     * Checks whether the given object is a DOM node.
-  		     *
-  		     * @param  {Node} object object to check whether it's a DOM node
-  		     * @return {Boolean} true is object is a DOM node
-  		     */
-  		    const _isNode = function _isNode(object) {
-  		      return typeof Node === 'function' && object instanceof Node;
-  		    };
-
-  		    /**
-  		     * _executeHook
-  		     * Execute user configurable hooks
-  		     *
-  		     * @param  {String} entryPoint  Name of the hook's entry point
-  		     * @param  {Node} currentNode node to work on with the hook
-  		     * @param  {Object} data additional hook parameters
-  		     */
-  		    const _executeHook = function _executeHook(entryPoint, currentNode, data) {
-  		      if (!hooks[entryPoint]) {
-  		        return;
-  		      }
-  		      arrayForEach(hooks[entryPoint], hook => {
-  		        hook.call(DOMPurify, currentNode, data, CONFIG);
-  		      });
-  		    };
-
-  		    /**
-  		     * _sanitizeElements
-  		     *
-  		     * @protect nodeName
-  		     * @protect textContent
-  		     * @protect removeChild
-  		     *
-  		     * @param   {Node} currentNode to check for permission to exist
-  		     * @return  {Boolean} true if node was killed, false if left alive
-  		     */
-  		    const _sanitizeElements = function _sanitizeElements(currentNode) {
-  		      let content = null;
-
-  		      /* Execute a hook if present */
-  		      _executeHook('beforeSanitizeElements', currentNode, null);
-
-  		      /* Check if element is clobbered or can clobber */
-  		      if (_isClobbered(currentNode)) {
-  		        _forceRemove(currentNode);
-  		        return true;
-  		      }
-
-  		      /* Now let's check the element's type and name */
-  		      const tagName = transformCaseFunc(currentNode.nodeName);
-
-  		      /* Execute a hook if present */
-  		      _executeHook('uponSanitizeElement', currentNode, {
-  		        tagName,
-  		        allowedTags: ALLOWED_TAGS
-  		      });
-
-  		      /* Detect mXSS attempts abusing namespace confusion */
-  		      if (currentNode.hasChildNodes() && !_isNode(currentNode.firstElementChild) && regExpTest(/<[/\w]/g, currentNode.innerHTML) && regExpTest(/<[/\w]/g, currentNode.textContent)) {
-  		        _forceRemove(currentNode);
-  		        return true;
-  		      }
-
-  		      /* Remove any occurrence of processing instructions */
-  		      if (currentNode.nodeType === NODE_TYPE.progressingInstruction) {
-  		        _forceRemove(currentNode);
-  		        return true;
-  		      }
-
-  		      /* Remove any kind of possibly harmful comments */
-  		      if (SAFE_FOR_XML && currentNode.nodeType === NODE_TYPE.comment && regExpTest(/<[/\w]/g, currentNode.data)) {
-  		        _forceRemove(currentNode);
-  		        return true;
-  		      }
-
-  		      /* Remove element if anything forbids its presence */
-  		      if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {
-  		        /* Check if we have a custom element to handle */
-  		        if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) {
-  		          if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)) {
-  		            return false;
-  		          }
-  		          if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(tagName)) {
-  		            return false;
-  		          }
-  		        }
-
-  		        /* Keep content except for bad-listed elements */
-  		        if (KEEP_CONTENT && !FORBID_CONTENTS[tagName]) {
-  		          const parentNode = getParentNode(currentNode) || currentNode.parentNode;
-  		          const childNodes = getChildNodes(currentNode) || currentNode.childNodes;
-  		          if (childNodes && parentNode) {
-  		            const childCount = childNodes.length;
-  		            for (let i = childCount - 1; i >= 0; --i) {
-  		              const childClone = cloneNode(childNodes[i], true);
-  		              childClone.__removalCount = (currentNode.__removalCount || 0) + 1;
-  		              parentNode.insertBefore(childClone, getNextSibling(currentNode));
-  		            }
-  		          }
-  		        }
-  		        _forceRemove(currentNode);
-  		        return true;
-  		      }
-
-  		      /* Check whether element has a valid namespace */
-  		      if (currentNode instanceof Element && !_checkValidNamespace(currentNode)) {
-  		        _forceRemove(currentNode);
-  		        return true;
-  		      }
-
-  		      /* Make sure that older browsers don't get fallback-tag mXSS */
-  		      if ((tagName === 'noscript' || tagName === 'noembed' || tagName === 'noframes') && regExpTest(/<\/no(script|embed|frames)/i, currentNode.innerHTML)) {
-  		        _forceRemove(currentNode);
-  		        return true;
-  		      }
-
-  		      /* Sanitize element content to be template-safe */
-  		      if (SAFE_FOR_TEMPLATES && currentNode.nodeType === NODE_TYPE.text) {
-  		        /* Get the element's text content */
-  		        content = currentNode.textContent;
-  		        arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
-  		          content = stringReplace(content, expr, ' ');
-  		        });
-  		        if (currentNode.textContent !== content) {
-  		          arrayPush(DOMPurify.removed, {
-  		            element: currentNode.cloneNode()
-  		          });
-  		          currentNode.textContent = content;
-  		        }
-  		      }
-
-  		      /* Execute a hook if present */
-  		      _executeHook('afterSanitizeElements', currentNode, null);
-  		      return false;
-  		    };
-
-  		    /**
-  		     * _isValidAttribute
-  		     *
-  		     * @param  {string} lcTag Lowercase tag name of containing element.
-  		     * @param  {string} lcName Lowercase attribute name.
-  		     * @param  {string} value Attribute value.
-  		     * @return {Boolean} Returns true if `value` is valid, otherwise false.
-  		     */
-  		    // eslint-disable-next-line complexity
-  		    const _isValidAttribute = function _isValidAttribute(lcTag, lcName, value) {
-  		      /* Make sure attribute cannot clobber */
-  		      if (SANITIZE_DOM && (lcName === 'id' || lcName === 'name') && (value in document || value in formElement)) {
-  		        return false;
-  		      }
-
-  		      /* Allow valid data-* attributes: At least one character after "-"
-  		          (https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-*-attributes)
-  		          XML-compatible (https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible and http://www.w3.org/TR/xml/#d0e804)
-  		          We don't need to check the value; it's always URI safe. */
-  		      if (ALLOW_DATA_ATTR && !FORBID_ATTR[lcName] && regExpTest(DATA_ATTR, lcName)) ; else if (ALLOW_ARIA_ATTR && regExpTest(ARIA_ATTR, lcName)) ; else if (!ALLOWED_ATTR[lcName] || FORBID_ATTR[lcName]) {
-  		        if (
-  		        // First condition does a very basic check if a) it's basically a valid custom element tagname AND
-  		        // b) if the tagName passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
-  		        // and c) if the attribute name passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.attributeNameCheck
-  		        _isBasicCustomElement(lcTag) && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, lcTag) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(lcTag)) && (CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.attributeNameCheck, lcName) || CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.attributeNameCheck(lcName)) ||
-  		        // Alternative, second condition checks if it's an `is`-attribute, AND
-  		        // the value passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
-  		        lcName === 'is' && CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, value) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(value))) ; else {
-  		          return false;
-  		        }
-  		        /* Check value is safe. First, is attr inert? If so, is safe */
-  		      } else if (URI_SAFE_ATTRIBUTES[lcName]) ; else if (regExpTest(IS_ALLOWED_URI$1, stringReplace(value, ATTR_WHITESPACE, ''))) ; else if ((lcName === 'src' || lcName === 'xlink:href' || lcName === 'href') && lcTag !== 'script' && stringIndexOf(value, 'data:') === 0 && DATA_URI_TAGS[lcTag]) ; else if (ALLOW_UNKNOWN_PROTOCOLS && !regExpTest(IS_SCRIPT_OR_DATA, stringReplace(value, ATTR_WHITESPACE, ''))) ; else if (value) {
-  		        return false;
-  		      } else ;
-  		      return true;
-  		    };
-
-  		    /**
-  		     * _isBasicCustomElement
-  		     * checks if at least one dash is included in tagName, and it's not the first char
-  		     * for more sophisticated checking see https://github.com/sindresorhus/validate-element-name
-  		     *
-  		     * @param {string} tagName name of the tag of the node to sanitize
-  		     * @returns {boolean} Returns true if the tag name meets the basic criteria for a custom element, otherwise false.
-  		     */
-  		    const _isBasicCustomElement = function _isBasicCustomElement(tagName) {
-  		      return tagName !== 'annotation-xml' && stringMatch(tagName, CUSTOM_ELEMENT);
-  		    };
-
-  		    /**
-  		     * _sanitizeAttributes
-  		     *
-  		     * @protect attributes
-  		     * @protect nodeName
-  		     * @protect removeAttribute
-  		     * @protect setAttribute
-  		     *
-  		     * @param  {Node} currentNode to sanitize
-  		     */
-  		    const _sanitizeAttributes = function _sanitizeAttributes(currentNode) {
-  		      /* Execute a hook if present */
-  		      _executeHook('beforeSanitizeAttributes', currentNode, null);
-  		      const {
-  		        attributes
-  		      } = currentNode;
-
-  		      /* Check if we have attributes; if not we might have a text node */
-  		      if (!attributes) {
-  		        return;
-  		      }
-  		      const hookEvent = {
-  		        attrName: '',
-  		        attrValue: '',
-  		        keepAttr: true,
-  		        allowedAttributes: ALLOWED_ATTR
-  		      };
-  		      let l = attributes.length;
-
-  		      /* Go backwards over all attributes; safely remove bad ones */
-  		      while (l--) {
-  		        const attr = attributes[l];
-  		        const {
-  		          name,
-  		          namespaceURI,
-  		          value: attrValue
-  		        } = attr;
-  		        const lcName = transformCaseFunc(name);
-  		        let value = name === 'value' ? attrValue : stringTrim(attrValue);
-
-  		        /* Execute a hook if present */
-  		        hookEvent.attrName = lcName;
-  		        hookEvent.attrValue = value;
-  		        hookEvent.keepAttr = true;
-  		        hookEvent.forceKeepAttr = undefined; // Allows developers to see this is a property they can set
-  		        _executeHook('uponSanitizeAttribute', currentNode, hookEvent);
-  		        value = hookEvent.attrValue;
-
-  		        /* Work around a security issue with comments inside attributes */
-  		        if (SAFE_FOR_XML && regExpTest(/((--!?|])>)|<\/(style|title)/i, value)) {
-  		          _removeAttribute(name, currentNode);
-  		          continue;
-  		        }
-
-  		        /* Did the hooks approve of the attribute? */
-  		        if (hookEvent.forceKeepAttr) {
-  		          continue;
-  		        }
-
-  		        /* Remove attribute */
-  		        _removeAttribute(name, currentNode);
-
-  		        /* Did the hooks approve of the attribute? */
-  		        if (!hookEvent.keepAttr) {
-  		          continue;
-  		        }
-
-  		        /* Work around a security issue in jQuery 3.0 */
-  		        if (!ALLOW_SELF_CLOSE_IN_ATTR && regExpTest(/\/>/i, value)) {
-  		          _removeAttribute(name, currentNode);
-  		          continue;
-  		        }
-
-  		        /* Sanitize attribute content to be template-safe */
-  		        if (SAFE_FOR_TEMPLATES) {
-  		          arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
-  		            value = stringReplace(value, expr, ' ');
-  		          });
-  		        }
-
-  		        /* Is `value` valid for this attribute? */
-  		        const lcTag = transformCaseFunc(currentNode.nodeName);
-  		        if (!_isValidAttribute(lcTag, lcName, value)) {
-  		          continue;
-  		        }
-
-  		        /* Full DOM Clobbering protection via namespace isolation,
-  		         * Prefix id and name attributes with `user-content-`
-  		         */
-  		        if (SANITIZE_NAMED_PROPS && (lcName === 'id' || lcName === 'name')) {
-  		          // Remove the attribute with this value
-  		          _removeAttribute(name, currentNode);
-
-  		          // Prefix the value and later re-create the attribute with the sanitized value
-  		          value = SANITIZE_NAMED_PROPS_PREFIX + value;
-  		        }
-
-  		        /* Handle attributes that require Trusted Types */
-  		        if (trustedTypesPolicy && typeof trustedTypes === 'object' && typeof trustedTypes.getAttributeType === 'function') {
-  		          if (namespaceURI) ; else {
-  		            switch (trustedTypes.getAttributeType(lcTag, lcName)) {
-  		              case 'TrustedHTML':
-  		                {
-  		                  value = trustedTypesPolicy.createHTML(value);
-  		                  break;
-  		                }
-  		              case 'TrustedScriptURL':
-  		                {
-  		                  value = trustedTypesPolicy.createScriptURL(value);
-  		                  break;
-  		                }
-  		            }
-  		          }
-  		        }
-
-  		        /* Handle invalid data-* attribute set by try-catching it */
-  		        try {
-  		          if (namespaceURI) {
-  		            currentNode.setAttributeNS(namespaceURI, name, value);
-  		          } else {
-  		            /* Fallback to setAttribute() for browser-unrecognized namespaces e.g. "x-schema". */
-  		            currentNode.setAttribute(name, value);
-  		          }
-  		          if (_isClobbered(currentNode)) {
-  		            _forceRemove(currentNode);
-  		          } else {
-  		            arrayPop(DOMPurify.removed);
-  		          }
-  		        } catch (_) {}
-  		      }
-
-  		      /* Execute a hook if present */
-  		      _executeHook('afterSanitizeAttributes', currentNode, null);
-  		    };
-
-  		    /**
-  		     * _sanitizeShadowDOM
-  		     *
-  		     * @param  {DocumentFragment} fragment to iterate over recursively
-  		     */
-  		    const _sanitizeShadowDOM = function _sanitizeShadowDOM(fragment) {
-  		      let shadowNode = null;
-  		      const shadowIterator = _createNodeIterator(fragment);
-
-  		      /* Execute a hook if present */
-  		      _executeHook('beforeSanitizeShadowDOM', fragment, null);
-  		      while (shadowNode = shadowIterator.nextNode()) {
-  		        /* Execute a hook if present */
-  		        _executeHook('uponSanitizeShadowNode', shadowNode, null);
-
-  		        /* Sanitize tags and elements */
-  		        if (_sanitizeElements(shadowNode)) {
-  		          continue;
-  		        }
-
-  		        /* Deep shadow DOM detected */
-  		        if (shadowNode.content instanceof DocumentFragment) {
-  		          _sanitizeShadowDOM(shadowNode.content);
-  		        }
-
-  		        /* Check attributes, sanitize if necessary */
-  		        _sanitizeAttributes(shadowNode);
-  		      }
-
-  		      /* Execute a hook if present */
-  		      _executeHook('afterSanitizeShadowDOM', fragment, null);
-  		    };
-
-  		    /**
-  		     * Sanitize
-  		     * Public method providing core sanitation functionality
-  		     *
-  		     * @param {String|Node} dirty string or DOM node
-  		     * @param {Object} cfg object
-  		     */
-  		    // eslint-disable-next-line complexity
-  		    DOMPurify.sanitize = function (dirty) {
-  		      let cfg = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
-  		      let body = null;
-  		      let importedNode = null;
-  		      let currentNode = null;
-  		      let returnNode = null;
-  		      /* Make sure we have a string to sanitize.
-  		        DO NOT return early, as this will return the wrong type if
-  		        the user has requested a DOM object rather than a string */
-  		      IS_EMPTY_INPUT = !dirty;
-  		      if (IS_EMPTY_INPUT) {
-  		        dirty = '<!-->';
-  		      }
-
-  		      /* Stringify, in case dirty is an object */
-  		      if (typeof dirty !== 'string' && !_isNode(dirty)) {
-  		        if (typeof dirty.toString === 'function') {
-  		          dirty = dirty.toString();
-  		          if (typeof dirty !== 'string') {
-  		            throw typeErrorCreate('dirty is not a string, aborting');
-  		          }
-  		        } else {
-  		          throw typeErrorCreate('toString is not a function');
-  		        }
-  		      }
-
-  		      /* Return dirty HTML if DOMPurify cannot run */
-  		      if (!DOMPurify.isSupported) {
-  		        return dirty;
-  		      }
-
-  		      /* Assign config vars */
-  		      if (!SET_CONFIG) {
-  		        _parseConfig(cfg);
-  		      }
-
-  		      /* Clean up removed elements */
-  		      DOMPurify.removed = [];
-
-  		      /* Check if dirty is correctly typed for IN_PLACE */
-  		      if (typeof dirty === 'string') {
-  		        IN_PLACE = false;
-  		      }
-  		      if (IN_PLACE) {
-  		        /* Do some early pre-sanitization to avoid unsafe root nodes */
-  		        if (dirty.nodeName) {
-  		          const tagName = transformCaseFunc(dirty.nodeName);
-  		          if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {
-  		            throw typeErrorCreate('root node is forbidden and cannot be sanitized in-place');
-  		          }
-  		        }
-  		      } else if (dirty instanceof Node) {
-  		        /* If dirty is a DOM element, append to an empty document to avoid
-  		           elements being stripped by the parser */
-  		        body = _initDocument('<!---->');
-  		        importedNode = body.ownerDocument.importNode(dirty, true);
-  		        if (importedNode.nodeType === NODE_TYPE.element && importedNode.nodeName === 'BODY') {
-  		          /* Node is already a body, use as is */
-  		          body = importedNode;
-  		        } else if (importedNode.nodeName === 'HTML') {
-  		          body = importedNode;
-  		        } else {
-  		          // eslint-disable-next-line unicorn/prefer-dom-node-append
-  		          body.appendChild(importedNode);
-  		        }
-  		      } else {
-  		        /* Exit directly if we have nothing to do */
-  		        if (!RETURN_DOM && !SAFE_FOR_TEMPLATES && !WHOLE_DOCUMENT &&
-  		        // eslint-disable-next-line unicorn/prefer-includes
-  		        dirty.indexOf('<') === -1) {
-  		          return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? trustedTypesPolicy.createHTML(dirty) : dirty;
-  		        }
-
-  		        /* Initialize the document to work on */
-  		        body = _initDocument(dirty);
-
-  		        /* Check we have a DOM node from the data */
-  		        if (!body) {
-  		          return RETURN_DOM ? null : RETURN_TRUSTED_TYPE ? emptyHTML : '';
-  		        }
-  		      }
-
-  		      /* Remove first element node (ours) if FORCE_BODY is set */
-  		      if (body && FORCE_BODY) {
-  		        _forceRemove(body.firstChild);
-  		      }
-
-  		      /* Get node iterator */
-  		      const nodeIterator = _createNodeIterator(IN_PLACE ? dirty : body);
-
-  		      /* Now start iterating over the created document */
-  		      while (currentNode = nodeIterator.nextNode()) {
-  		        /* Sanitize tags and elements */
-  		        if (_sanitizeElements(currentNode)) {
-  		          continue;
-  		        }
-
-  		        /* Shadow DOM detected, sanitize it */
-  		        if (currentNode.content instanceof DocumentFragment) {
-  		          _sanitizeShadowDOM(currentNode.content);
-  		        }
-
-  		        /* Check attributes, sanitize if necessary */
-  		        _sanitizeAttributes(currentNode);
-  		      }
-
-  		      /* If we sanitized `dirty` in-place, return it. */
-  		      if (IN_PLACE) {
-  		        return dirty;
-  		      }
-
-  		      /* Return sanitized string or DOM */
-  		      if (RETURN_DOM) {
-  		        if (RETURN_DOM_FRAGMENT) {
-  		          returnNode = createDocumentFragment.call(body.ownerDocument);
-  		          while (body.firstChild) {
-  		            // eslint-disable-next-line unicorn/prefer-dom-node-append
-  		            returnNode.appendChild(body.firstChild);
-  		          }
-  		        } else {
-  		          returnNode = body;
-  		        }
-  		        if (ALLOWED_ATTR.shadowroot || ALLOWED_ATTR.shadowrootmode) {
-  		          /*
-  		            AdoptNode() is not used because internal state is not reset
-  		            (e.g. the past names map of a HTMLFormElement), this is safe
-  		            in theory but we would rather not risk another attack vector.
-  		            The state that is cloned by importNode() is explicitly defined
-  		            by the specs.
-  		          */
-  		          returnNode = importNode.call(originalDocument, returnNode, true);
-  		        }
-  		        return returnNode;
-  		      }
-  		      let serializedHTML = WHOLE_DOCUMENT ? body.outerHTML : body.innerHTML;
-
-  		      /* Serialize doctype if allowed */
-  		      if (WHOLE_DOCUMENT && ALLOWED_TAGS['!doctype'] && body.ownerDocument && body.ownerDocument.doctype && body.ownerDocument.doctype.name && regExpTest(DOCTYPE_NAME, body.ownerDocument.doctype.name)) {
-  		        serializedHTML = '<!DOCTYPE ' + body.ownerDocument.doctype.name + '>\n' + serializedHTML;
-  		      }
-
-  		      /* Sanitize final string template-safe */
-  		      if (SAFE_FOR_TEMPLATES) {
-  		        arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
-  		          serializedHTML = stringReplace(serializedHTML, expr, ' ');
-  		        });
-  		      }
-  		      return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? trustedTypesPolicy.createHTML(serializedHTML) : serializedHTML;
-  		    };
-
-  		    /**
-  		     * Public method to set the configuration once
-  		     * setConfig
-  		     *
-  		     * @param {Object} cfg configuration object
-  		     */
-  		    DOMPurify.setConfig = function () {
-  		      let cfg = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
-  		      _parseConfig(cfg);
-  		      SET_CONFIG = true;
-  		    };
-
-  		    /**
-  		     * Public method to remove the configuration
-  		     * clearConfig
-  		     *
-  		     */
-  		    DOMPurify.clearConfig = function () {
-  		      CONFIG = null;
-  		      SET_CONFIG = false;
-  		    };
-
-  		    /**
-  		     * Public method to check if an attribute value is valid.
-  		     * Uses last set config, if any. Otherwise, uses config defaults.
-  		     * isValidAttribute
-  		     *
-  		     * @param  {String} tag Tag name of containing element.
-  		     * @param  {String} attr Attribute name.
-  		     * @param  {String} value Attribute value.
-  		     * @return {Boolean} Returns true if `value` is valid. Otherwise, returns false.
-  		     */
-  		    DOMPurify.isValidAttribute = function (tag, attr, value) {
-  		      /* Initialize shared config vars if necessary. */
-  		      if (!CONFIG) {
-  		        _parseConfig({});
-  		      }
-  		      const lcTag = transformCaseFunc(tag);
-  		      const lcName = transformCaseFunc(attr);
-  		      return _isValidAttribute(lcTag, lcName, value);
-  		    };
-
-  		    /**
-  		     * AddHook
-  		     * Public method to add DOMPurify hooks
-  		     *
-  		     * @param {String} entryPoint entry point for the hook to add
-  		     * @param {Function} hookFunction function to execute
-  		     */
-  		    DOMPurify.addHook = function (entryPoint, hookFunction) {
-  		      if (typeof hookFunction !== 'function') {
-  		        return;
-  		      }
-  		      hooks[entryPoint] = hooks[entryPoint] || [];
-  		      arrayPush(hooks[entryPoint], hookFunction);
-  		    };
-
-  		    /**
-  		     * RemoveHook
-  		     * Public method to remove a DOMPurify hook at a given entryPoint
-  		     * (pops it from the stack of hooks if more are present)
-  		     *
-  		     * @param {String} entryPoint entry point for the hook to remove
-  		     * @return {Function} removed(popped) hook
-  		     */
-  		    DOMPurify.removeHook = function (entryPoint) {
-  		      if (hooks[entryPoint]) {
-  		        return arrayPop(hooks[entryPoint]);
-  		      }
-  		    };
-
-  		    /**
-  		     * RemoveHooks
-  		     * Public method to remove all DOMPurify hooks at a given entryPoint
-  		     *
-  		     * @param  {String} entryPoint entry point for the hooks to remove
-  		     */
-  		    DOMPurify.removeHooks = function (entryPoint) {
-  		      if (hooks[entryPoint]) {
-  		        hooks[entryPoint] = [];
-  		      }
-  		    };
-
-  		    /**
-  		     * RemoveAllHooks
-  		     * Public method to remove all DOMPurify hooks
-  		     */
-  		    DOMPurify.removeAllHooks = function () {
-  		      hooks = {};
-  		    };
-  		    return DOMPurify;
-  		  }
-  		  var purify = createDOMPurify();
-
-  		  return purify;
-
-  		}));
-  		
-  	} (purify));
-  	return purify.exports;
-  }
-
-  window.DOMPurify || (window.DOMPurify = requirePurify().default || requirePurify());
+  /*! @license DOMPurify 3.2.4 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.2.4/LICENSE */
+
+  var purify_cjs;
+  var hasRequiredPurify_cjs;
+
+  function requirePurify_cjs () {
+  	if (hasRequiredPurify_cjs) return purify_cjs;
+  	hasRequiredPurify_cjs = 1;
+
+  	const {
+  	  entries,
+  	  setPrototypeOf,
+  	  isFrozen,
+  	  getPrototypeOf,
+  	  getOwnPropertyDescriptor
+  	} = Object;
+  	let {
+  	  freeze,
+  	  seal,
+  	  create
+  	} = Object; // eslint-disable-line import/no-mutable-exports
+  	let {
+  	  apply,
+  	  construct
+  	} = typeof Reflect !== 'undefined' && Reflect;
+  	if (!freeze) {
+  	  freeze = function freeze(x) {
+  	    return x;
+  	  };
+  	}
+  	if (!seal) {
+  	  seal = function seal(x) {
+  	    return x;
+  	  };
+  	}
+  	if (!apply) {
+  	  apply = function apply(fun, thisValue, args) {
+  	    return fun.apply(thisValue, args);
+  	  };
+  	}
+  	if (!construct) {
+  	  construct = function construct(Func, args) {
+  	    return new Func(...args);
+  	  };
+  	}
+  	const arrayForEach = unapply(Array.prototype.forEach);
+  	const arrayLastIndexOf = unapply(Array.prototype.lastIndexOf);
+  	const arrayPop = unapply(Array.prototype.pop);
+  	const arrayPush = unapply(Array.prototype.push);
+  	const arraySplice = unapply(Array.prototype.splice);
+  	const stringToLowerCase = unapply(String.prototype.toLowerCase);
+  	const stringToString = unapply(String.prototype.toString);
+  	const stringMatch = unapply(String.prototype.match);
+  	const stringReplace = unapply(String.prototype.replace);
+  	const stringIndexOf = unapply(String.prototype.indexOf);
+  	const stringTrim = unapply(String.prototype.trim);
+  	const objectHasOwnProperty = unapply(Object.prototype.hasOwnProperty);
+  	const regExpTest = unapply(RegExp.prototype.test);
+  	const typeErrorCreate = unconstruct(TypeError);
+  	/**
+  	 * Creates a new function that calls the given function with a specified thisArg and arguments.
+  	 *
+  	 * @param func - The function to be wrapped and called.
+  	 * @returns A new function that calls the given function with a specified thisArg and arguments.
+  	 */
+  	function unapply(func) {
+  	  return function (thisArg) {
+  	    for (var _len = arguments.length, args = new Array(_len > 1 ? _len - 1 : 0), _key = 1; _key < _len; _key++) {
+  	      args[_key - 1] = arguments[_key];
+  	    }
+  	    return apply(func, thisArg, args);
+  	  };
+  	}
+  	/**
+  	 * Creates a new function that constructs an instance of the given constructor function with the provided arguments.
+  	 *
+  	 * @param func - The constructor function to be wrapped and called.
+  	 * @returns A new function that constructs an instance of the given constructor function with the provided arguments.
+  	 */
+  	function unconstruct(func) {
+  	  return function () {
+  	    for (var _len2 = arguments.length, args = new Array(_len2), _key2 = 0; _key2 < _len2; _key2++) {
+  	      args[_key2] = arguments[_key2];
+  	    }
+  	    return construct(func, args);
+  	  };
+  	}
+  	/**
+  	 * Add properties to a lookup table
+  	 *
+  	 * @param set - The set to which elements will be added.
+  	 * @param array - The array containing elements to be added to the set.
+  	 * @param transformCaseFunc - An optional function to transform the case of each element before adding to the set.
+  	 * @returns The modified set with added elements.
+  	 */
+  	function addToSet(set, array) {
+  	  let transformCaseFunc = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : stringToLowerCase;
+  	  if (setPrototypeOf) {
+  	    // Make 'in' and truthy checks like Boolean(set.constructor)
+  	    // independent of any properties defined on Object.prototype.
+  	    // Prevent prototype setters from intercepting set as a this value.
+  	    setPrototypeOf(set, null);
+  	  }
+  	  let l = array.length;
+  	  while (l--) {
+  	    let element = array[l];
+  	    if (typeof element === 'string') {
+  	      const lcElement = transformCaseFunc(element);
+  	      if (lcElement !== element) {
+  	        // Config presets (e.g. tags.js, attrs.js) are immutable.
+  	        if (!isFrozen(array)) {
+  	          array[l] = lcElement;
+  	        }
+  	        element = lcElement;
+  	      }
+  	    }
+  	    set[element] = true;
+  	  }
+  	  return set;
+  	}
+  	/**
+  	 * Clean up an array to harden against CSPP
+  	 *
+  	 * @param array - The array to be cleaned.
+  	 * @returns The cleaned version of the array
+  	 */
+  	function cleanArray(array) {
+  	  for (let index = 0; index < array.length; index++) {
+  	    const isPropertyExist = objectHasOwnProperty(array, index);
+  	    if (!isPropertyExist) {
+  	      array[index] = null;
+  	    }
+  	  }
+  	  return array;
+  	}
+  	/**
+  	 * Shallow clone an object
+  	 *
+  	 * @param object - The object to be cloned.
+  	 * @returns A new object that copies the original.
+  	 */
+  	function clone(object) {
+  	  const newObject = create(null);
+  	  for (const [property, value] of entries(object)) {
+  	    const isPropertyExist = objectHasOwnProperty(object, property);
+  	    if (isPropertyExist) {
+  	      if (Array.isArray(value)) {
+  	        newObject[property] = cleanArray(value);
+  	      } else if (value && typeof value === 'object' && value.constructor === Object) {
+  	        newObject[property] = clone(value);
+  	      } else {
+  	        newObject[property] = value;
+  	      }
+  	    }
+  	  }
+  	  return newObject;
+  	}
+  	/**
+  	 * This method automatically checks if the prop is function or getter and behaves accordingly.
+  	 *
+  	 * @param object - The object to look up the getter function in its prototype chain.
+  	 * @param prop - The property name for which to find the getter function.
+  	 * @returns The getter function found in the prototype chain or a fallback function.
+  	 */
+  	function lookupGetter(object, prop) {
+  	  while (object !== null) {
+  	    const desc = getOwnPropertyDescriptor(object, prop);
+  	    if (desc) {
+  	      if (desc.get) {
+  	        return unapply(desc.get);
+  	      }
+  	      if (typeof desc.value === 'function') {
+  	        return unapply(desc.value);
+  	      }
+  	    }
+  	    object = getPrototypeOf(object);
+  	  }
+  	  function fallbackValue() {
+  	    return null;
+  	  }
+  	  return fallbackValue;
+  	}
+
+  	const html$1 = freeze(['a', 'abbr', 'acronym', 'address', 'area', 'article', 'aside', 'audio', 'b', 'bdi', 'bdo', 'big', 'blink', 'blockquote', 'body', 'br', 'button', 'canvas', 'caption', 'center', 'cite', 'code', 'col', 'colgroup', 'content', 'data', 'datalist', 'dd', 'decorator', 'del', 'details', 'dfn', 'dialog', 'dir', 'div', 'dl', 'dt', 'element', 'em', 'fieldset', 'figcaption', 'figure', 'font', 'footer', 'form', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'head', 'header', 'hgroup', 'hr', 'html', 'i', 'img', 'input', 'ins', 'kbd', 'label', 'legend', 'li', 'main', 'map', 'mark', 'marquee', 'menu', 'menuitem', 'meter', 'nav', 'nobr', 'ol', 'optgroup', 'option', 'output', 'p', 'picture', 'pre', 'progress', 'q', 'rp', 'rt', 'ruby', 's', 'samp', 'section', 'select', 'shadow', 'small', 'source', 'spacer', 'span', 'strike', 'strong', 'style', 'sub', 'summary', 'sup', 'table', 'tbody', 'td', 'template', 'textarea', 'tfoot', 'th', 'thead', 'time', 'tr', 'track', 'tt', 'u', 'ul', 'var', 'video', 'wbr']);
+  	const svg$1 = freeze(['svg', 'a', 'altglyph', 'altglyphdef', 'altglyphitem', 'animatecolor', 'animatemotion', 'animatetransform', 'circle', 'clippath', 'defs', 'desc', 'ellipse', 'filter', 'font', 'g', 'glyph', 'glyphref', 'hkern', 'image', 'line', 'lineargradient', 'marker', 'mask', 'metadata', 'mpath', 'path', 'pattern', 'polygon', 'polyline', 'radialgradient', 'rect', 'stop', 'style', 'switch', 'symbol', 'text', 'textpath', 'title', 'tref', 'tspan', 'view', 'vkern']);
+  	const svgFilters = freeze(['feBlend', 'feColorMatrix', 'feComponentTransfer', 'feComposite', 'feConvolveMatrix', 'feDiffuseLighting', 'feDisplacementMap', 'feDistantLight', 'feDropShadow', 'feFlood', 'feFuncA', 'feFuncB', 'feFuncG', 'feFuncR', 'feGaussianBlur', 'feImage', 'feMerge', 'feMergeNode', 'feMorphology', 'feOffset', 'fePointLight', 'feSpecularLighting', 'feSpotLight', 'feTile', 'feTurbulence']);
+  	// List of SVG elements that are disallowed by default.
+  	// We still need to know them so that we can do namespace
+  	// checks properly in case one wants to add them to
+  	// allow-list.
+  	const svgDisallowed = freeze(['animate', 'color-profile', 'cursor', 'discard', 'font-face', 'font-face-format', 'font-face-name', 'font-face-src', 'font-face-uri', 'foreignobject', 'hatch', 'hatchpath', 'mesh', 'meshgradient', 'meshpatch', 'meshrow', 'missing-glyph', 'script', 'set', 'solidcolor', 'unknown', 'use']);
+  	const mathMl$1 = freeze(['math', 'menclose', 'merror', 'mfenced', 'mfrac', 'mglyph', 'mi', 'mlabeledtr', 'mmultiscripts', 'mn', 'mo', 'mover', 'mpadded', 'mphantom', 'mroot', 'mrow', 'ms', 'mspace', 'msqrt', 'mstyle', 'msub', 'msup', 'msubsup', 'mtable', 'mtd', 'mtext', 'mtr', 'munder', 'munderover', 'mprescripts']);
+  	// Similarly to SVG, we want to know all MathML elements,
+  	// even those that we disallow by default.
+  	const mathMlDisallowed = freeze(['maction', 'maligngroup', 'malignmark', 'mlongdiv', 'mscarries', 'mscarry', 'msgroup', 'mstack', 'msline', 'msrow', 'semantics', 'annotation', 'annotation-xml', 'mprescripts', 'none']);
+  	const text = freeze(['#text']);
+
+  	const html = freeze(['accept', 'action', 'align', 'alt', 'autocapitalize', 'autocomplete', 'autopictureinpicture', 'autoplay', 'background', 'bgcolor', 'border', 'capture', 'cellpadding', 'cellspacing', 'checked', 'cite', 'class', 'clear', 'color', 'cols', 'colspan', 'controls', 'controlslist', 'coords', 'crossorigin', 'datetime', 'decoding', 'default', 'dir', 'disabled', 'disablepictureinpicture', 'disableremoteplayback', 'download', 'draggable', 'enctype', 'enterkeyhint', 'face', 'for', 'headers', 'height', 'hidden', 'high', 'href', 'hreflang', 'id', 'inputmode', 'integrity', 'ismap', 'kind', 'label', 'lang', 'list', 'loading', 'loop', 'low', 'max', 'maxlength', 'media', 'method', 'min', 'minlength', 'multiple', 'muted', 'name', 'nonce', 'noshade', 'novalidate', 'nowrap', 'open', 'optimum', 'pattern', 'placeholder', 'playsinline', 'popover', 'popovertarget', 'popovertargetaction', 'poster', 'preload', 'pubdate', 'radiogroup', 'readonly', 'rel', 'required', 'rev', 'reversed', 'role', 'rows', 'rowspan', 'spellcheck', 'scope', 'selected', 'shape', 'size', 'sizes', 'span', 'srclang', 'start', 'src', 'srcset', 'step', 'style', 'summary', 'tabindex', 'title', 'translate', 'type', 'usemap', 'valign', 'value', 'width', 'wrap', 'xmlns', 'slot']);
+  	const svg = freeze(['accent-height', 'accumulate', 'additive', 'alignment-baseline', 'amplitude', 'ascent', 'attributename', 'attributetype', 'azimuth', 'basefrequency', 'baseline-shift', 'begin', 'bias', 'by', 'class', 'clip', 'clippathunits', 'clip-path', 'clip-rule', 'color', 'color-interpolation', 'color-interpolation-filters', 'color-profile', 'color-rendering', 'cx', 'cy', 'd', 'dx', 'dy', 'diffuseconstant', 'direction', 'display', 'divisor', 'dur', 'edgemode', 'elevation', 'end', 'exponent', 'fill', 'fill-opacity', 'fill-rule', 'filter', 'filterunits', 'flood-color', 'flood-opacity', 'font-family', 'font-size', 'font-size-adjust', 'font-stretch', 'font-style', 'font-variant', 'font-weight', 'fx', 'fy', 'g1', 'g2', 'glyph-name', 'glyphref', 'gradientunits', 'gradienttransform', 'height', 'href', 'id', 'image-rendering', 'in', 'in2', 'intercept', 'k', 'k1', 'k2', 'k3', 'k4', 'kerning', 'keypoints', 'keysplines', 'keytimes', 'lang', 'lengthadjust', 'letter-spacing', 'kernelmatrix', 'kernelunitlength', 'lighting-color', 'local', 'marker-end', 'marker-mid', 'marker-start', 'markerheight', 'markerunits', 'markerwidth', 'maskcontentunits', 'maskunits', 'max', 'mask', 'media', 'method', 'mode', 'min', 'name', 'numoctaves', 'offset', 'operator', 'opacity', 'order', 'orient', 'orientation', 'origin', 'overflow', 'paint-order', 'path', 'pathlength', 'patterncontentunits', 'patterntransform', 'patternunits', 'points', 'preservealpha', 'preserveaspectratio', 'primitiveunits', 'r', 'rx', 'ry', 'radius', 'refx', 'refy', 'repeatcount', 'repeatdur', 'restart', 'result', 'rotate', 'scale', 'seed', 'shape-rendering', 'slope', 'specularconstant', 'specularexponent', 'spreadmethod', 'startoffset', 'stddeviation', 'stitchtiles', 'stop-color', 'stop-opacity', 'stroke-dasharray', 'stroke-dashoffset', 'stroke-linecap', 'stroke-linejoin', 'stroke-miterlimit', 'stroke-opacity', 'stroke', 'stroke-width', 'style', 'surfacescale', 'systemlanguage', 'tabindex', 'tablevalues', 'targetx', 'targety', 'transform', 'transform-origin', 'text-anchor', 'text-decoration', 'text-rendering', 'textlength', 'type', 'u1', 'u2', 'unicode', 'values', 'viewbox', 'visibility', 'version', 'vert-adv-y', 'vert-origin-x', 'vert-origin-y', 'width', 'word-spacing', 'wrap', 'writing-mode', 'xchannelselector', 'ychannelselector', 'x', 'x1', 'x2', 'xmlns', 'y', 'y1', 'y2', 'z', 'zoomandpan']);
+  	const mathMl = freeze(['accent', 'accentunder', 'align', 'bevelled', 'close', 'columnsalign', 'columnlines', 'columnspan', 'denomalign', 'depth', 'dir', 'display', 'displaystyle', 'encoding', 'fence', 'frame', 'height', 'href', 'id', 'largeop', 'length', 'linethickness', 'lspace', 'lquote', 'mathbackground', 'mathcolor', 'mathsize', 'mathvariant', 'maxsize', 'minsize', 'movablelimits', 'notation', 'numalign', 'open', 'rowalign', 'rowlines', 'rowspacing', 'rowspan', 'rspace', 'rquote', 'scriptlevel', 'scriptminsize', 'scriptsizemultiplier', 'selection', 'separator', 'separators', 'stretchy', 'subscriptshift', 'supscriptshift', 'symmetric', 'voffset', 'width', 'xmlns']);
+  	const xml = freeze(['xlink:href', 'xml:id', 'xlink:title', 'xml:space', 'xmlns:xlink']);
+
+  	// eslint-disable-next-line unicorn/better-regex
+  	const MUSTACHE_EXPR = seal(/\{\{[\w\W]*|[\w\W]*\}\}/gm); // Specify template detection regex for SAFE_FOR_TEMPLATES mode
+  	const ERB_EXPR = seal(/<%[\w\W]*|[\w\W]*%>/gm);
+  	const TMPLIT_EXPR = seal(/\$\{[\w\W]*/gm); // eslint-disable-line unicorn/better-regex
+  	const DATA_ATTR = seal(/^data-[\-\w.\u00B7-\uFFFF]+$/); // eslint-disable-line no-useless-escape
+  	const ARIA_ATTR = seal(/^aria-[\-\w]+$/); // eslint-disable-line no-useless-escape
+  	const IS_ALLOWED_URI = seal(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i // eslint-disable-line no-useless-escape
+  	);
+  	const IS_SCRIPT_OR_DATA = seal(/^(?:\w+script|data):/i);
+  	const ATTR_WHITESPACE = seal(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g // eslint-disable-line no-control-regex
+  	);
+  	const DOCTYPE_NAME = seal(/^html$/i);
+  	const CUSTOM_ELEMENT = seal(/^[a-z][.\w]*(-[.\w]+)+$/i);
+
+  	var EXPRESSIONS = /*#__PURE__*/Object.freeze({
+  	  __proto__: null,
+  	  ARIA_ATTR: ARIA_ATTR,
+  	  ATTR_WHITESPACE: ATTR_WHITESPACE,
+  	  CUSTOM_ELEMENT: CUSTOM_ELEMENT,
+  	  DATA_ATTR: DATA_ATTR,
+  	  DOCTYPE_NAME: DOCTYPE_NAME,
+  	  ERB_EXPR: ERB_EXPR,
+  	  IS_ALLOWED_URI: IS_ALLOWED_URI,
+  	  IS_SCRIPT_OR_DATA: IS_SCRIPT_OR_DATA,
+  	  MUSTACHE_EXPR: MUSTACHE_EXPR,
+  	  TMPLIT_EXPR: TMPLIT_EXPR
+  	});
+
+  	/* eslint-disable @typescript-eslint/indent */
+  	// https://developer.mozilla.org/en-US/docs/Web/API/Node/nodeType
+  	const NODE_TYPE = {
+  	  element: 1,
+  	  attribute: 2,
+  	  text: 3,
+  	  cdataSection: 4,
+  	  entityReference: 5,
+  	  // Deprecated
+  	  entityNode: 6,
+  	  // Deprecated
+  	  progressingInstruction: 7,
+  	  comment: 8,
+  	  document: 9,
+  	  documentType: 10,
+  	  documentFragment: 11,
+  	  notation: 12 // Deprecated
+  	};
+  	const getGlobal = function getGlobal() {
+  	  return typeof window === 'undefined' ? null : window;
+  	};
+  	/**
+  	 * Creates a no-op policy for internal use only.
+  	 * Don't export this function outside this module!
+  	 * @param trustedTypes The policy factory.
+  	 * @param purifyHostElement The Script element used to load DOMPurify (to determine policy name suffix).
+  	 * @return The policy created (or null, if Trusted Types
+  	 * are not supported or creating the policy failed).
+  	 */
+  	const _createTrustedTypesPolicy = function _createTrustedTypesPolicy(trustedTypes, purifyHostElement) {
+  	  if (typeof trustedTypes !== 'object' || typeof trustedTypes.createPolicy !== 'function') {
+  	    return null;
+  	  }
+  	  // Allow the callers to control the unique policy name
+  	  // by adding a data-tt-policy-suffix to the script element with the DOMPurify.
+  	  // Policy creation with duplicate names throws in Trusted Types.
+  	  let suffix = null;
+  	  const ATTR_NAME = 'data-tt-policy-suffix';
+  	  if (purifyHostElement && purifyHostElement.hasAttribute(ATTR_NAME)) {
+  	    suffix = purifyHostElement.getAttribute(ATTR_NAME);
+  	  }
+  	  const policyName = 'dompurify' + (suffix ? '#' + suffix : '');
+  	  try {
+  	    return trustedTypes.createPolicy(policyName, {
+  	      createHTML(html) {
+  	        return html;
+  	      },
+  	      createScriptURL(scriptUrl) {
+  	        return scriptUrl;
+  	      }
+  	    });
+  	  } catch (_) {
+  	    // Policy creation failed (most likely another DOMPurify script has
+  	    // already run). Skip creating the policy, as this will only cause errors
+  	    // if TT are enforced.
+  	    console.warn('TrustedTypes policy ' + policyName + ' could not be created.');
+  	    return null;
+  	  }
+  	};
+  	const _createHooksMap = function _createHooksMap() {
+  	  return {
+  	    afterSanitizeAttributes: [],
+  	    afterSanitizeElements: [],
+  	    afterSanitizeShadowDOM: [],
+  	    beforeSanitizeAttributes: [],
+  	    beforeSanitizeElements: [],
+  	    beforeSanitizeShadowDOM: [],
+  	    uponSanitizeAttribute: [],
+  	    uponSanitizeElement: [],
+  	    uponSanitizeShadowNode: []
+  	  };
+  	};
+  	function createDOMPurify() {
+  	  let window = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : getGlobal();
+  	  const DOMPurify = root => createDOMPurify(root);
+  	  DOMPurify.version = '3.2.4';
+  	  DOMPurify.removed = [];
+  	  if (!window || !window.document || window.document.nodeType !== NODE_TYPE.document || !window.Element) {
+  	    // Not running in a browser, provide a factory function
+  	    // so that you can pass your own Window
+  	    DOMPurify.isSupported = false;
+  	    return DOMPurify;
+  	  }
+  	  let {
+  	    document
+  	  } = window;
+  	  const originalDocument = document;
+  	  const currentScript = originalDocument.currentScript;
+  	  const {
+  	    DocumentFragment,
+  	    HTMLTemplateElement,
+  	    Node,
+  	    Element,
+  	    NodeFilter,
+  	    NamedNodeMap = window.NamedNodeMap || window.MozNamedAttrMap,
+  	    HTMLFormElement,
+  	    DOMParser,
+  	    trustedTypes
+  	  } = window;
+  	  const ElementPrototype = Element.prototype;
+  	  const cloneNode = lookupGetter(ElementPrototype, 'cloneNode');
+  	  const remove = lookupGetter(ElementPrototype, 'remove');
+  	  const getNextSibling = lookupGetter(ElementPrototype, 'nextSibling');
+  	  const getChildNodes = lookupGetter(ElementPrototype, 'childNodes');
+  	  const getParentNode = lookupGetter(ElementPrototype, 'parentNode');
+  	  // As per issue #47, the web-components registry is inherited by a
+  	  // new document created via createHTMLDocument. As per the spec
+  	  // (http://w3c.github.io/webcomponents/spec/custom/#creating-and-passing-registries)
+  	  // a new empty registry is used when creating a template contents owner
+  	  // document, so we use that as our parent document to ensure nothing
+  	  // is inherited.
+  	  if (typeof HTMLTemplateElement === 'function') {
+  	    const template = document.createElement('template');
+  	    if (template.content && template.content.ownerDocument) {
+  	      document = template.content.ownerDocument;
+  	    }
+  	  }
+  	  let trustedTypesPolicy;
+  	  let emptyHTML = '';
+  	  const {
+  	    implementation,
+  	    createNodeIterator,
+  	    createDocumentFragment,
+  	    getElementsByTagName
+  	  } = document;
+  	  const {
+  	    importNode
+  	  } = originalDocument;
+  	  let hooks = _createHooksMap();
+  	  /**
+  	   * Expose whether this browser supports running the full DOMPurify.
+  	   */
+  	  DOMPurify.isSupported = typeof entries === 'function' && typeof getParentNode === 'function' && implementation && implementation.createHTMLDocument !== undefined;
+  	  const {
+  	    MUSTACHE_EXPR,
+  	    ERB_EXPR,
+  	    TMPLIT_EXPR,
+  	    DATA_ATTR,
+  	    ARIA_ATTR,
+  	    IS_SCRIPT_OR_DATA,
+  	    ATTR_WHITESPACE,
+  	    CUSTOM_ELEMENT
+  	  } = EXPRESSIONS;
+  	  let {
+  	    IS_ALLOWED_URI: IS_ALLOWED_URI$1
+  	  } = EXPRESSIONS;
+  	  /**
+  	   * We consider the elements and attributes below to be safe. Ideally
+  	   * don't add any new ones but feel free to remove unwanted ones.
+  	   */
+  	  /* allowed element names */
+  	  let ALLOWED_TAGS = null;
+  	  const DEFAULT_ALLOWED_TAGS = addToSet({}, [...html$1, ...svg$1, ...svgFilters, ...mathMl$1, ...text]);
+  	  /* Allowed attribute names */
+  	  let ALLOWED_ATTR = null;
+  	  const DEFAULT_ALLOWED_ATTR = addToSet({}, [...html, ...svg, ...mathMl, ...xml]);
+  	  /*
+  	   * Configure how DOMPurify should handle custom elements and their attributes as well as customized built-in elements.
+  	   * @property {RegExp|Function|null} tagNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any custom elements)
+  	   * @property {RegExp|Function|null} attributeNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any attributes not on the allow list)
+  	   * @property {boolean} allowCustomizedBuiltInElements allow custom elements derived from built-ins if they pass CUSTOM_ELEMENT_HANDLING.tagNameCheck. Default: `false`.
+  	   */
+  	  let CUSTOM_ELEMENT_HANDLING = Object.seal(create(null, {
+  	    tagNameCheck: {
+  	      writable: true,
+  	      configurable: false,
+  	      enumerable: true,
+  	      value: null
+  	    },
+  	    attributeNameCheck: {
+  	      writable: true,
+  	      configurable: false,
+  	      enumerable: true,
+  	      value: null
+  	    },
+  	    allowCustomizedBuiltInElements: {
+  	      writable: true,
+  	      configurable: false,
+  	      enumerable: true,
+  	      value: false
+  	    }
+  	  }));
+  	  /* Explicitly forbidden tags (overrides ALLOWED_TAGS/ADD_TAGS) */
+  	  let FORBID_TAGS = null;
+  	  /* Explicitly forbidden attributes (overrides ALLOWED_ATTR/ADD_ATTR) */
+  	  let FORBID_ATTR = null;
+  	  /* Decide if ARIA attributes are okay */
+  	  let ALLOW_ARIA_ATTR = true;
+  	  /* Decide if custom data attributes are okay */
+  	  let ALLOW_DATA_ATTR = true;
+  	  /* Decide if unknown protocols are okay */
+  	  let ALLOW_UNKNOWN_PROTOCOLS = false;
+  	  /* Decide if self-closing tags in attributes are allowed.
+  	   * Usually removed due to a mXSS issue in jQuery 3.0 */
+  	  let ALLOW_SELF_CLOSE_IN_ATTR = true;
+  	  /* Output should be safe for common template engines.
+  	   * This means, DOMPurify removes data attributes, mustaches and ERB
+  	   */
+  	  let SAFE_FOR_TEMPLATES = false;
+  	  /* Output should be safe even for XML used within HTML and alike.
+  	   * This means, DOMPurify removes comments when containing risky content.
+  	   */
+  	  let SAFE_FOR_XML = true;
+  	  /* Decide if document with <html>... should be returned */
+  	  let WHOLE_DOCUMENT = false;
+  	  /* Track whether config is already set on this instance of DOMPurify. */
+  	  let SET_CONFIG = false;
+  	  /* Decide if all elements (e.g. style, script) must be children of
+  	   * document.body. By default, browsers might move them to document.head */
+  	  let FORCE_BODY = false;
+  	  /* Decide if a DOM `HTMLBodyElement` should be returned, instead of a html
+  	   * string (or a TrustedHTML object if Trusted Types are supported).
+  	   * If `WHOLE_DOCUMENT` is enabled a `HTMLHtmlElement` will be returned instead
+  	   */
+  	  let RETURN_DOM = false;
+  	  /* Decide if a DOM `DocumentFragment` should be returned, instead of a html
+  	   * string  (or a TrustedHTML object if Trusted Types are supported) */
+  	  let RETURN_DOM_FRAGMENT = false;
+  	  /* Try to return a Trusted Type object instead of a string, return a string in
+  	   * case Trusted Types are not supported  */
+  	  let RETURN_TRUSTED_TYPE = false;
+  	  /* Output should be free from DOM clobbering attacks?
+  	   * This sanitizes markups named with colliding, clobberable built-in DOM APIs.
+  	   */
+  	  let SANITIZE_DOM = true;
+  	  /* Achieve full DOM Clobbering protection by isolating the namespace of named
+  	   * properties and JS variables, mitigating attacks that abuse the HTML/DOM spec rules.
+  	   *
+  	   * HTML/DOM spec rules that enable DOM Clobbering:
+  	   *   - Named Access on Window (§7.3.3)
+  	   *   - DOM Tree Accessors (§3.1.5)
+  	   *   - Form Element Parent-Child Relations (§4.10.3)
+  	   *   - Iframe srcdoc / Nested WindowProxies (§4.8.5)
+  	   *   - HTMLCollection (§4.2.10.2)
+  	   *
+  	   * Namespace isolation is implemented by prefixing `id` and `name` attributes
+  	   * with a constant string, i.e., `user-content-`
+  	   */
+  	  let SANITIZE_NAMED_PROPS = false;
+  	  const SANITIZE_NAMED_PROPS_PREFIX = 'user-content-';
+  	  /* Keep element content when removing element? */
+  	  let KEEP_CONTENT = true;
+  	  /* If a `Node` is passed to sanitize(), then performs sanitization in-place instead
+  	   * of importing it into a new Document and returning a sanitized copy */
+  	  let IN_PLACE = false;
+  	  /* Allow usage of profiles like html, svg and mathMl */
+  	  let USE_PROFILES = {};
+  	  /* Tags to ignore content of when KEEP_CONTENT is true */
+  	  let FORBID_CONTENTS = null;
+  	  const DEFAULT_FORBID_CONTENTS = addToSet({}, ['annotation-xml', 'audio', 'colgroup', 'desc', 'foreignobject', 'head', 'iframe', 'math', 'mi', 'mn', 'mo', 'ms', 'mtext', 'noembed', 'noframes', 'noscript', 'plaintext', 'script', 'style', 'svg', 'template', 'thead', 'title', 'video', 'xmp']);
+  	  /* Tags that are safe for data: URIs */
+  	  let DATA_URI_TAGS = null;
+  	  const DEFAULT_DATA_URI_TAGS = addToSet({}, ['audio', 'video', 'img', 'source', 'image', 'track']);
+  	  /* Attributes safe for values like "javascript:" */
+  	  let URI_SAFE_ATTRIBUTES = null;
+  	  const DEFAULT_URI_SAFE_ATTRIBUTES = addToSet({}, ['alt', 'class', 'for', 'id', 'label', 'name', 'pattern', 'placeholder', 'role', 'summary', 'title', 'value', 'style', 'xmlns']);
+  	  const MATHML_NAMESPACE = 'http://www.w3.org/1998/Math/MathML';
+  	  const SVG_NAMESPACE = 'http://www.w3.org/2000/svg';
+  	  const HTML_NAMESPACE = 'http://www.w3.org/1999/xhtml';
+  	  /* Document namespace */
+  	  let NAMESPACE = HTML_NAMESPACE;
+  	  let IS_EMPTY_INPUT = false;
+  	  /* Allowed XHTML+XML namespaces */
+  	  let ALLOWED_NAMESPACES = null;
+  	  const DEFAULT_ALLOWED_NAMESPACES = addToSet({}, [MATHML_NAMESPACE, SVG_NAMESPACE, HTML_NAMESPACE], stringToString);
+  	  let MATHML_TEXT_INTEGRATION_POINTS = addToSet({}, ['mi', 'mo', 'mn', 'ms', 'mtext']);
+  	  let HTML_INTEGRATION_POINTS = addToSet({}, ['annotation-xml']);
+  	  // Certain elements are allowed in both SVG and HTML
+  	  // namespace. We need to specify them explicitly
+  	  // so that they don't get erroneously deleted from
+  	  // HTML namespace.
+  	  const COMMON_SVG_AND_HTML_ELEMENTS = addToSet({}, ['title', 'style', 'font', 'a', 'script']);
+  	  /* Parsing of strict XHTML documents */
+  	  let PARSER_MEDIA_TYPE = null;
+  	  const SUPPORTED_PARSER_MEDIA_TYPES = ['application/xhtml+xml', 'text/html'];
+  	  const DEFAULT_PARSER_MEDIA_TYPE = 'text/html';
+  	  let transformCaseFunc = null;
+  	  /* Keep a reference to config to pass to hooks */
+  	  let CONFIG = null;
+  	  /* Ideally, do not touch anything below this line */
+  	  /* ______________________________________________ */
+  	  const formElement = document.createElement('form');
+  	  const isRegexOrFunction = function isRegexOrFunction(testValue) {
+  	    return testValue instanceof RegExp || testValue instanceof Function;
+  	  };
+  	  /**
+  	   * _parseConfig
+  	   *
+  	   * @param cfg optional config literal
+  	   */
+  	  // eslint-disable-next-line complexity
+  	  const _parseConfig = function _parseConfig() {
+  	    let cfg = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+  	    if (CONFIG && CONFIG === cfg) {
+  	      return;
+  	    }
+  	    /* Shield configuration object from tampering */
+  	    if (!cfg || typeof cfg !== 'object') {
+  	      cfg = {};
+  	    }
+  	    /* Shield configuration object from prototype pollution */
+  	    cfg = clone(cfg);
+  	    PARSER_MEDIA_TYPE =
+  	    // eslint-disable-next-line unicorn/prefer-includes
+  	    SUPPORTED_PARSER_MEDIA_TYPES.indexOf(cfg.PARSER_MEDIA_TYPE) === -1 ? DEFAULT_PARSER_MEDIA_TYPE : cfg.PARSER_MEDIA_TYPE;
+  	    // HTML tags and attributes are not case-sensitive, converting to lowercase. Keeping XHTML as is.
+  	    transformCaseFunc = PARSER_MEDIA_TYPE === 'application/xhtml+xml' ? stringToString : stringToLowerCase;
+  	    /* Set configuration parameters */
+  	    ALLOWED_TAGS = objectHasOwnProperty(cfg, 'ALLOWED_TAGS') ? addToSet({}, cfg.ALLOWED_TAGS, transformCaseFunc) : DEFAULT_ALLOWED_TAGS;
+  	    ALLOWED_ATTR = objectHasOwnProperty(cfg, 'ALLOWED_ATTR') ? addToSet({}, cfg.ALLOWED_ATTR, transformCaseFunc) : DEFAULT_ALLOWED_ATTR;
+  	    ALLOWED_NAMESPACES = objectHasOwnProperty(cfg, 'ALLOWED_NAMESPACES') ? addToSet({}, cfg.ALLOWED_NAMESPACES, stringToString) : DEFAULT_ALLOWED_NAMESPACES;
+  	    URI_SAFE_ATTRIBUTES = objectHasOwnProperty(cfg, 'ADD_URI_SAFE_ATTR') ? addToSet(clone(DEFAULT_URI_SAFE_ATTRIBUTES), cfg.ADD_URI_SAFE_ATTR, transformCaseFunc) : DEFAULT_URI_SAFE_ATTRIBUTES;
+  	    DATA_URI_TAGS = objectHasOwnProperty(cfg, 'ADD_DATA_URI_TAGS') ? addToSet(clone(DEFAULT_DATA_URI_TAGS), cfg.ADD_DATA_URI_TAGS, transformCaseFunc) : DEFAULT_DATA_URI_TAGS;
+  	    FORBID_CONTENTS = objectHasOwnProperty(cfg, 'FORBID_CONTENTS') ? addToSet({}, cfg.FORBID_CONTENTS, transformCaseFunc) : DEFAULT_FORBID_CONTENTS;
+  	    FORBID_TAGS = objectHasOwnProperty(cfg, 'FORBID_TAGS') ? addToSet({}, cfg.FORBID_TAGS, transformCaseFunc) : {};
+  	    FORBID_ATTR = objectHasOwnProperty(cfg, 'FORBID_ATTR') ? addToSet({}, cfg.FORBID_ATTR, transformCaseFunc) : {};
+  	    USE_PROFILES = objectHasOwnProperty(cfg, 'USE_PROFILES') ? cfg.USE_PROFILES : false;
+  	    ALLOW_ARIA_ATTR = cfg.ALLOW_ARIA_ATTR !== false; // Default true
+  	    ALLOW_DATA_ATTR = cfg.ALLOW_DATA_ATTR !== false; // Default true
+  	    ALLOW_UNKNOWN_PROTOCOLS = cfg.ALLOW_UNKNOWN_PROTOCOLS || false; // Default false
+  	    ALLOW_SELF_CLOSE_IN_ATTR = cfg.ALLOW_SELF_CLOSE_IN_ATTR !== false; // Default true
+  	    SAFE_FOR_TEMPLATES = cfg.SAFE_FOR_TEMPLATES || false; // Default false
+  	    SAFE_FOR_XML = cfg.SAFE_FOR_XML !== false; // Default true
+  	    WHOLE_DOCUMENT = cfg.WHOLE_DOCUMENT || false; // Default false
+  	    RETURN_DOM = cfg.RETURN_DOM || false; // Default false
+  	    RETURN_DOM_FRAGMENT = cfg.RETURN_DOM_FRAGMENT || false; // Default false
+  	    RETURN_TRUSTED_TYPE = cfg.RETURN_TRUSTED_TYPE || false; // Default false
+  	    FORCE_BODY = cfg.FORCE_BODY || false; // Default false
+  	    SANITIZE_DOM = cfg.SANITIZE_DOM !== false; // Default true
+  	    SANITIZE_NAMED_PROPS = cfg.SANITIZE_NAMED_PROPS || false; // Default false
+  	    KEEP_CONTENT = cfg.KEEP_CONTENT !== false; // Default true
+  	    IN_PLACE = cfg.IN_PLACE || false; // Default false
+  	    IS_ALLOWED_URI$1 = cfg.ALLOWED_URI_REGEXP || IS_ALLOWED_URI;
+  	    NAMESPACE = cfg.NAMESPACE || HTML_NAMESPACE;
+  	    MATHML_TEXT_INTEGRATION_POINTS = cfg.MATHML_TEXT_INTEGRATION_POINTS || MATHML_TEXT_INTEGRATION_POINTS;
+  	    HTML_INTEGRATION_POINTS = cfg.HTML_INTEGRATION_POINTS || HTML_INTEGRATION_POINTS;
+  	    CUSTOM_ELEMENT_HANDLING = cfg.CUSTOM_ELEMENT_HANDLING || {};
+  	    if (cfg.CUSTOM_ELEMENT_HANDLING && isRegexOrFunction(cfg.CUSTOM_ELEMENT_HANDLING.tagNameCheck)) {
+  	      CUSTOM_ELEMENT_HANDLING.tagNameCheck = cfg.CUSTOM_ELEMENT_HANDLING.tagNameCheck;
+  	    }
+  	    if (cfg.CUSTOM_ELEMENT_HANDLING && isRegexOrFunction(cfg.CUSTOM_ELEMENT_HANDLING.attributeNameCheck)) {
+  	      CUSTOM_ELEMENT_HANDLING.attributeNameCheck = cfg.CUSTOM_ELEMENT_HANDLING.attributeNameCheck;
+  	    }
+  	    if (cfg.CUSTOM_ELEMENT_HANDLING && typeof cfg.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements === 'boolean') {
+  	      CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements = cfg.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements;
+  	    }
+  	    if (SAFE_FOR_TEMPLATES) {
+  	      ALLOW_DATA_ATTR = false;
+  	    }
+  	    if (RETURN_DOM_FRAGMENT) {
+  	      RETURN_DOM = true;
+  	    }
+  	    /* Parse profile info */
+  	    if (USE_PROFILES) {
+  	      ALLOWED_TAGS = addToSet({}, text);
+  	      ALLOWED_ATTR = [];
+  	      if (USE_PROFILES.html === true) {
+  	        addToSet(ALLOWED_TAGS, html$1);
+  	        addToSet(ALLOWED_ATTR, html);
+  	      }
+  	      if (USE_PROFILES.svg === true) {
+  	        addToSet(ALLOWED_TAGS, svg$1);
+  	        addToSet(ALLOWED_ATTR, svg);
+  	        addToSet(ALLOWED_ATTR, xml);
+  	      }
+  	      if (USE_PROFILES.svgFilters === true) {
+  	        addToSet(ALLOWED_TAGS, svgFilters);
+  	        addToSet(ALLOWED_ATTR, svg);
+  	        addToSet(ALLOWED_ATTR, xml);
+  	      }
+  	      if (USE_PROFILES.mathMl === true) {
+  	        addToSet(ALLOWED_TAGS, mathMl$1);
+  	        addToSet(ALLOWED_ATTR, mathMl);
+  	        addToSet(ALLOWED_ATTR, xml);
+  	      }
+  	    }
+  	    /* Merge configuration parameters */
+  	    if (cfg.ADD_TAGS) {
+  	      if (ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {
+  	        ALLOWED_TAGS = clone(ALLOWED_TAGS);
+  	      }
+  	      addToSet(ALLOWED_TAGS, cfg.ADD_TAGS, transformCaseFunc);
+  	    }
+  	    if (cfg.ADD_ATTR) {
+  	      if (ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {
+  	        ALLOWED_ATTR = clone(ALLOWED_ATTR);
+  	      }
+  	      addToSet(ALLOWED_ATTR, cfg.ADD_ATTR, transformCaseFunc);
+  	    }
+  	    if (cfg.ADD_URI_SAFE_ATTR) {
+  	      addToSet(URI_SAFE_ATTRIBUTES, cfg.ADD_URI_SAFE_ATTR, transformCaseFunc);
+  	    }
+  	    if (cfg.FORBID_CONTENTS) {
+  	      if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {
+  	        FORBID_CONTENTS = clone(FORBID_CONTENTS);
+  	      }
+  	      addToSet(FORBID_CONTENTS, cfg.FORBID_CONTENTS, transformCaseFunc);
+  	    }
+  	    /* Add #text in case KEEP_CONTENT is set to true */
+  	    if (KEEP_CONTENT) {
+  	      ALLOWED_TAGS['#text'] = true;
+  	    }
+  	    /* Add html, head and body to ALLOWED_TAGS in case WHOLE_DOCUMENT is true */
+  	    if (WHOLE_DOCUMENT) {
+  	      addToSet(ALLOWED_TAGS, ['html', 'head', 'body']);
+  	    }
+  	    /* Add tbody to ALLOWED_TAGS in case tables are permitted, see #286, #365 */
+  	    if (ALLOWED_TAGS.table) {
+  	      addToSet(ALLOWED_TAGS, ['tbody']);
+  	      delete FORBID_TAGS.tbody;
+  	    }
+  	    if (cfg.TRUSTED_TYPES_POLICY) {
+  	      if (typeof cfg.TRUSTED_TYPES_POLICY.createHTML !== 'function') {
+  	        throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a "createHTML" hook.');
+  	      }
+  	      if (typeof cfg.TRUSTED_TYPES_POLICY.createScriptURL !== 'function') {
+  	        throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a "createScriptURL" hook.');
+  	      }
+  	      // Overwrite existing TrustedTypes policy.
+  	      trustedTypesPolicy = cfg.TRUSTED_TYPES_POLICY;
+  	      // Sign local variables required by `sanitize`.
+  	      emptyHTML = trustedTypesPolicy.createHTML('');
+  	    } else {
+  	      // Uninitialized policy, attempt to initialize the internal dompurify policy.
+  	      if (trustedTypesPolicy === undefined) {
+  	        trustedTypesPolicy = _createTrustedTypesPolicy(trustedTypes, currentScript);
+  	      }
+  	      // If creating the internal policy succeeded sign internal variables.
+  	      if (trustedTypesPolicy !== null && typeof emptyHTML === 'string') {
+  	        emptyHTML = trustedTypesPolicy.createHTML('');
+  	      }
+  	    }
+  	    // Prevent further manipulation of configuration.
+  	    // Not available in IE8, Safari 5, etc.
+  	    if (freeze) {
+  	      freeze(cfg);
+  	    }
+  	    CONFIG = cfg;
+  	  };
+  	  /* Keep track of all possible SVG and MathML tags
+  	   * so that we can perform the namespace checks
+  	   * correctly. */
+  	  const ALL_SVG_TAGS = addToSet({}, [...svg$1, ...svgFilters, ...svgDisallowed]);
+  	  const ALL_MATHML_TAGS = addToSet({}, [...mathMl$1, ...mathMlDisallowed]);
+  	  /**
+  	   * @param element a DOM element whose namespace is being checked
+  	   * @returns Return false if the element has a
+  	   *  namespace that a spec-compliant parser would never
+  	   *  return. Return true otherwise.
+  	   */
+  	  const _checkValidNamespace = function _checkValidNamespace(element) {
+  	    let parent = getParentNode(element);
+  	    // In JSDOM, if we're inside shadow DOM, then parentNode
+  	    // can be null. We just simulate parent in this case.
+  	    if (!parent || !parent.tagName) {
+  	      parent = {
+  	        namespaceURI: NAMESPACE,
+  	        tagName: 'template'
+  	      };
+  	    }
+  	    const tagName = stringToLowerCase(element.tagName);
+  	    const parentTagName = stringToLowerCase(parent.tagName);
+  	    if (!ALLOWED_NAMESPACES[element.namespaceURI]) {
+  	      return false;
+  	    }
+  	    if (element.namespaceURI === SVG_NAMESPACE) {
+  	      // The only way to switch from HTML namespace to SVG
+  	      // is via <svg>. If it happens via any other tag, then
+  	      // it should be killed.
+  	      if (parent.namespaceURI === HTML_NAMESPACE) {
+  	        return tagName === 'svg';
+  	      }
+  	      // The only way to switch from MathML to SVG is via`
+  	      // svg if parent is either <annotation-xml> or MathML
+  	      // text integration points.
+  	      if (parent.namespaceURI === MATHML_NAMESPACE) {
+  	        return tagName === 'svg' && (parentTagName === 'annotation-xml' || MATHML_TEXT_INTEGRATION_POINTS[parentTagName]);
+  	      }
+  	      // We only allow elements that are defined in SVG
+  	      // spec. All others are disallowed in SVG namespace.
+  	      return Boolean(ALL_SVG_TAGS[tagName]);
+  	    }
+  	    if (element.namespaceURI === MATHML_NAMESPACE) {
+  	      // The only way to switch from HTML namespace to MathML
+  	      // is via <math>. If it happens via any other tag, then
+  	      // it should be killed.
+  	      if (parent.namespaceURI === HTML_NAMESPACE) {
+  	        return tagName === 'math';
+  	      }
+  	      // The only way to switch from SVG to MathML is via
+  	      // <math> and HTML integration points
+  	      if (parent.namespaceURI === SVG_NAMESPACE) {
+  	        return tagName === 'math' && HTML_INTEGRATION_POINTS[parentTagName];
+  	      }
+  	      // We only allow elements that are defined in MathML
+  	      // spec. All others are disallowed in MathML namespace.
+  	      return Boolean(ALL_MATHML_TAGS[tagName]);
+  	    }
+  	    if (element.namespaceURI === HTML_NAMESPACE) {
+  	      // The only way to switch from SVG to HTML is via
+  	      // HTML integration points, and from MathML to HTML
+  	      // is via MathML text integration points
+  	      if (parent.namespaceURI === SVG_NAMESPACE && !HTML_INTEGRATION_POINTS[parentTagName]) {
+  	        return false;
+  	      }
+  	      if (parent.namespaceURI === MATHML_NAMESPACE && !MATHML_TEXT_INTEGRATION_POINTS[parentTagName]) {
+  	        return false;
+  	      }
+  	      // We disallow tags that are specific for MathML
+  	      // or SVG and should never appear in HTML namespace
+  	      return !ALL_MATHML_TAGS[tagName] && (COMMON_SVG_AND_HTML_ELEMENTS[tagName] || !ALL_SVG_TAGS[tagName]);
+  	    }
+  	    // For XHTML and XML documents that support custom namespaces
+  	    if (PARSER_MEDIA_TYPE === 'application/xhtml+xml' && ALLOWED_NAMESPACES[element.namespaceURI]) {
+  	      return true;
+  	    }
+  	    // The code should never reach this place (this means
+  	    // that the element somehow got namespace that is not
+  	    // HTML, SVG, MathML or allowed via ALLOWED_NAMESPACES).
+  	    // Return false just in case.
+  	    return false;
+  	  };
+  	  /**
+  	   * _forceRemove
+  	   *
+  	   * @param node a DOM node
+  	   */
+  	  const _forceRemove = function _forceRemove(node) {
+  	    arrayPush(DOMPurify.removed, {
+  	      element: node
+  	    });
+  	    try {
+  	      // eslint-disable-next-line unicorn/prefer-dom-node-remove
+  	      getParentNode(node).removeChild(node);
+  	    } catch (_) {
+  	      remove(node);
+  	    }
+  	  };
+  	  /**
+  	   * _removeAttribute
+  	   *
+  	   * @param name an Attribute name
+  	   * @param element a DOM node
+  	   */
+  	  const _removeAttribute = function _removeAttribute(name, element) {
+  	    try {
+  	      arrayPush(DOMPurify.removed, {
+  	        attribute: element.getAttributeNode(name),
+  	        from: element
+  	      });
+  	    } catch (_) {
+  	      arrayPush(DOMPurify.removed, {
+  	        attribute: null,
+  	        from: element
+  	      });
+  	    }
+  	    element.removeAttribute(name);
+  	    // We void attribute values for unremovable "is" attributes
+  	    if (name === 'is') {
+  	      if (RETURN_DOM || RETURN_DOM_FRAGMENT) {
+  	        try {
+  	          _forceRemove(element);
+  	        } catch (_) {}
+  	      } else {
+  	        try {
+  	          element.setAttribute(name, '');
+  	        } catch (_) {}
+  	      }
+  	    }
+  	  };
+  	  /**
+  	   * _initDocument
+  	   *
+  	   * @param dirty - a string of dirty markup
+  	   * @return a DOM, filled with the dirty markup
+  	   */
+  	  const _initDocument = function _initDocument(dirty) {
+  	    /* Create a HTML document */
+  	    let doc = null;
+  	    let leadingWhitespace = null;
+  	    if (FORCE_BODY) {
+  	      dirty = '<remove></remove>' + dirty;
+  	    } else {
+  	      /* If FORCE_BODY isn't used, leading whitespace needs to be preserved manually */
+  	      const matches = stringMatch(dirty, /^[\r\n\t ]+/);
+  	      leadingWhitespace = matches && matches[0];
+  	    }
+  	    if (PARSER_MEDIA_TYPE === 'application/xhtml+xml' && NAMESPACE === HTML_NAMESPACE) {
+  	      // Root of XHTML doc must contain xmlns declaration (see https://www.w3.org/TR/xhtml1/normative.html#strict)
+  	      dirty = '<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>' + dirty + '</body></html>';
+  	    }
+  	    const dirtyPayload = trustedTypesPolicy ? trustedTypesPolicy.createHTML(dirty) : dirty;
+  	    /*
+  	     * Use the DOMParser API by default, fallback later if needs be
+  	     * DOMParser not work for svg when has multiple root element.
+  	     */
+  	    if (NAMESPACE === HTML_NAMESPACE) {
+  	      try {
+  	        doc = new DOMParser().parseFromString(dirtyPayload, PARSER_MEDIA_TYPE);
+  	      } catch (_) {}
+  	    }
+  	    /* Use createHTMLDocument in case DOMParser is not available */
+  	    if (!doc || !doc.documentElement) {
+  	      doc = implementation.createDocument(NAMESPACE, 'template', null);
+  	      try {
+  	        doc.documentElement.innerHTML = IS_EMPTY_INPUT ? emptyHTML : dirtyPayload;
+  	      } catch (_) {
+  	        // Syntax error if dirtyPayload is invalid xml
+  	      }
+  	    }
+  	    const body = doc.body || doc.documentElement;
+  	    if (dirty && leadingWhitespace) {
+  	      body.insertBefore(document.createTextNode(leadingWhitespace), body.childNodes[0] || null);
+  	    }
+  	    /* Work on whole document or just its body */
+  	    if (NAMESPACE === HTML_NAMESPACE) {
+  	      return getElementsByTagName.call(doc, WHOLE_DOCUMENT ? 'html' : 'body')[0];
+  	    }
+  	    return WHOLE_DOCUMENT ? doc.documentElement : body;
+  	  };
+  	  /**
+  	   * Creates a NodeIterator object that you can use to traverse filtered lists of nodes or elements in a document.
+  	   *
+  	   * @param root The root element or node to start traversing on.
+  	   * @return The created NodeIterator
+  	   */
+  	  const _createNodeIterator = function _createNodeIterator(root) {
+  	    return createNodeIterator.call(root.ownerDocument || root, root,
+  	    // eslint-disable-next-line no-bitwise
+  	    NodeFilter.SHOW_ELEMENT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_TEXT | NodeFilter.SHOW_PROCESSING_INSTRUCTION | NodeFilter.SHOW_CDATA_SECTION, null);
+  	  };
+  	  /**
+  	   * _isClobbered
+  	   *
+  	   * @param element element to check for clobbering attacks
+  	   * @return true if clobbered, false if safe
+  	   */
+  	  const _isClobbered = function _isClobbered(element) {
+  	    return element instanceof HTMLFormElement && (typeof element.nodeName !== 'string' || typeof element.textContent !== 'string' || typeof element.removeChild !== 'function' || !(element.attributes instanceof NamedNodeMap) || typeof element.removeAttribute !== 'function' || typeof element.setAttribute !== 'function' || typeof element.namespaceURI !== 'string' || typeof element.insertBefore !== 'function' || typeof element.hasChildNodes !== 'function');
+  	  };
+  	  /**
+  	   * Checks whether the given object is a DOM node.
+  	   *
+  	   * @param value object to check whether it's a DOM node
+  	   * @return true is object is a DOM node
+  	   */
+  	  const _isNode = function _isNode(value) {
+  	    return typeof Node === 'function' && value instanceof Node;
+  	  };
+  	  function _executeHooks(hooks, currentNode, data) {
+  	    arrayForEach(hooks, hook => {
+  	      hook.call(DOMPurify, currentNode, data, CONFIG);
+  	    });
+  	  }
+  	  /**
+  	   * _sanitizeElements
+  	   *
+  	   * @protect nodeName
+  	   * @protect textContent
+  	   * @protect removeChild
+  	   * @param currentNode to check for permission to exist
+  	   * @return true if node was killed, false if left alive
+  	   */
+  	  const _sanitizeElements = function _sanitizeElements(currentNode) {
+  	    let content = null;
+  	    /* Execute a hook if present */
+  	    _executeHooks(hooks.beforeSanitizeElements, currentNode, null);
+  	    /* Check if element is clobbered or can clobber */
+  	    if (_isClobbered(currentNode)) {
+  	      _forceRemove(currentNode);
+  	      return true;
+  	    }
+  	    /* Now let's check the element's type and name */
+  	    const tagName = transformCaseFunc(currentNode.nodeName);
+  	    /* Execute a hook if present */
+  	    _executeHooks(hooks.uponSanitizeElement, currentNode, {
+  	      tagName,
+  	      allowedTags: ALLOWED_TAGS
+  	    });
+  	    /* Detect mXSS attempts abusing namespace confusion */
+  	    if (currentNode.hasChildNodes() && !_isNode(currentNode.firstElementChild) && regExpTest(/<[/\w]/g, currentNode.innerHTML) && regExpTest(/<[/\w]/g, currentNode.textContent)) {
+  	      _forceRemove(currentNode);
+  	      return true;
+  	    }
+  	    /* Remove any occurrence of processing instructions */
+  	    if (currentNode.nodeType === NODE_TYPE.progressingInstruction) {
+  	      _forceRemove(currentNode);
+  	      return true;
+  	    }
+  	    /* Remove any kind of possibly harmful comments */
+  	    if (SAFE_FOR_XML && currentNode.nodeType === NODE_TYPE.comment && regExpTest(/<[/\w]/g, currentNode.data)) {
+  	      _forceRemove(currentNode);
+  	      return true;
+  	    }
+  	    /* Remove element if anything forbids its presence */
+  	    if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {
+  	      /* Check if we have a custom element to handle */
+  	      if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) {
+  	        if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)) {
+  	          return false;
+  	        }
+  	        if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(tagName)) {
+  	          return false;
+  	        }
+  	      }
+  	      /* Keep content except for bad-listed elements */
+  	      if (KEEP_CONTENT && !FORBID_CONTENTS[tagName]) {
+  	        const parentNode = getParentNode(currentNode) || currentNode.parentNode;
+  	        const childNodes = getChildNodes(currentNode) || currentNode.childNodes;
+  	        if (childNodes && parentNode) {
+  	          const childCount = childNodes.length;
+  	          for (let i = childCount - 1; i >= 0; --i) {
+  	            const childClone = cloneNode(childNodes[i], true);
+  	            childClone.__removalCount = (currentNode.__removalCount || 0) + 1;
+  	            parentNode.insertBefore(childClone, getNextSibling(currentNode));
+  	          }
+  	        }
+  	      }
+  	      _forceRemove(currentNode);
+  	      return true;
+  	    }
+  	    /* Check whether element has a valid namespace */
+  	    if (currentNode instanceof Element && !_checkValidNamespace(currentNode)) {
+  	      _forceRemove(currentNode);
+  	      return true;
+  	    }
+  	    /* Make sure that older browsers don't get fallback-tag mXSS */
+  	    if ((tagName === 'noscript' || tagName === 'noembed' || tagName === 'noframes') && regExpTest(/<\/no(script|embed|frames)/i, currentNode.innerHTML)) {
+  	      _forceRemove(currentNode);
+  	      return true;
+  	    }
+  	    /* Sanitize element content to be template-safe */
+  	    if (SAFE_FOR_TEMPLATES && currentNode.nodeType === NODE_TYPE.text) {
+  	      /* Get the element's text content */
+  	      content = currentNode.textContent;
+  	      arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
+  	        content = stringReplace(content, expr, ' ');
+  	      });
+  	      if (currentNode.textContent !== content) {
+  	        arrayPush(DOMPurify.removed, {
+  	          element: currentNode.cloneNode()
+  	        });
+  	        currentNode.textContent = content;
+  	      }
+  	    }
+  	    /* Execute a hook if present */
+  	    _executeHooks(hooks.afterSanitizeElements, currentNode, null);
+  	    return false;
+  	  };
+  	  /**
+  	   * _isValidAttribute
+  	   *
+  	   * @param lcTag Lowercase tag name of containing element.
+  	   * @param lcName Lowercase attribute name.
+  	   * @param value Attribute value.
+  	   * @return Returns true if `value` is valid, otherwise false.
+  	   */
+  	  // eslint-disable-next-line complexity
+  	  const _isValidAttribute = function _isValidAttribute(lcTag, lcName, value) {
+  	    /* Make sure attribute cannot clobber */
+  	    if (SANITIZE_DOM && (lcName === 'id' || lcName === 'name') && (value in document || value in formElement)) {
+  	      return false;
+  	    }
+  	    /* Allow valid data-* attributes: At least one character after "-"
+  	        (https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-*-attributes)
+  	        XML-compatible (https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible and http://www.w3.org/TR/xml/#d0e804)
+  	        We don't need to check the value; it's always URI safe. */
+  	    if (ALLOW_DATA_ATTR && !FORBID_ATTR[lcName] && regExpTest(DATA_ATTR, lcName)) ; else if (ALLOW_ARIA_ATTR && regExpTest(ARIA_ATTR, lcName)) ; else if (!ALLOWED_ATTR[lcName] || FORBID_ATTR[lcName]) {
+  	      if (
+  	      // First condition does a very basic check if a) it's basically a valid custom element tagname AND
+  	      // b) if the tagName passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
+  	      // and c) if the attribute name passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.attributeNameCheck
+  	      _isBasicCustomElement(lcTag) && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, lcTag) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(lcTag)) && (CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.attributeNameCheck, lcName) || CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.attributeNameCheck(lcName)) ||
+  	      // Alternative, second condition checks if it's an `is`-attribute, AND
+  	      // the value passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
+  	      lcName === 'is' && CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, value) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(value))) ; else {
+  	        return false;
+  	      }
+  	      /* Check value is safe. First, is attr inert? If so, is safe */
+  	    } else if (URI_SAFE_ATTRIBUTES[lcName]) ; else if (regExpTest(IS_ALLOWED_URI$1, stringReplace(value, ATTR_WHITESPACE, ''))) ; else if ((lcName === 'src' || lcName === 'xlink:href' || lcName === 'href') && lcTag !== 'script' && stringIndexOf(value, 'data:') === 0 && DATA_URI_TAGS[lcTag]) ; else if (ALLOW_UNKNOWN_PROTOCOLS && !regExpTest(IS_SCRIPT_OR_DATA, stringReplace(value, ATTR_WHITESPACE, ''))) ; else if (value) {
+  	      return false;
+  	    } else ;
+  	    return true;
+  	  };
+  	  /**
+  	   * _isBasicCustomElement
+  	   * checks if at least one dash is included in tagName, and it's not the first char
+  	   * for more sophisticated checking see https://github.com/sindresorhus/validate-element-name
+  	   *
+  	   * @param tagName name of the tag of the node to sanitize
+  	   * @returns Returns true if the tag name meets the basic criteria for a custom element, otherwise false.
+  	   */
+  	  const _isBasicCustomElement = function _isBasicCustomElement(tagName) {
+  	    return tagName !== 'annotation-xml' && stringMatch(tagName, CUSTOM_ELEMENT);
+  	  };
+  	  /**
+  	   * _sanitizeAttributes
+  	   *
+  	   * @protect attributes
+  	   * @protect nodeName
+  	   * @protect removeAttribute
+  	   * @protect setAttribute
+  	   *
+  	   * @param currentNode to sanitize
+  	   */
+  	  const _sanitizeAttributes = function _sanitizeAttributes(currentNode) {
+  	    /* Execute a hook if present */
+  	    _executeHooks(hooks.beforeSanitizeAttributes, currentNode, null);
+  	    const {
+  	      attributes
+  	    } = currentNode;
+  	    /* Check if we have attributes; if not we might have a text node */
+  	    if (!attributes || _isClobbered(currentNode)) {
+  	      return;
+  	    }
+  	    const hookEvent = {
+  	      attrName: '',
+  	      attrValue: '',
+  	      keepAttr: true,
+  	      allowedAttributes: ALLOWED_ATTR,
+  	      forceKeepAttr: undefined
+  	    };
+  	    let l = attributes.length;
+  	    /* Go backwards over all attributes; safely remove bad ones */
+  	    while (l--) {
+  	      const attr = attributes[l];
+  	      const {
+  	        name,
+  	        namespaceURI,
+  	        value: attrValue
+  	      } = attr;
+  	      const lcName = transformCaseFunc(name);
+  	      let value = name === 'value' ? attrValue : stringTrim(attrValue);
+  	      /* Execute a hook if present */
+  	      hookEvent.attrName = lcName;
+  	      hookEvent.attrValue = value;
+  	      hookEvent.keepAttr = true;
+  	      hookEvent.forceKeepAttr = undefined; // Allows developers to see this is a property they can set
+  	      _executeHooks(hooks.uponSanitizeAttribute, currentNode, hookEvent);
+  	      value = hookEvent.attrValue;
+  	      /* Full DOM Clobbering protection via namespace isolation,
+  	       * Prefix id and name attributes with `user-content-`
+  	       */
+  	      if (SANITIZE_NAMED_PROPS && (lcName === 'id' || lcName === 'name')) {
+  	        // Remove the attribute with this value
+  	        _removeAttribute(name, currentNode);
+  	        // Prefix the value and later re-create the attribute with the sanitized value
+  	        value = SANITIZE_NAMED_PROPS_PREFIX + value;
+  	      }
+  	      /* Work around a security issue with comments inside attributes */
+  	      if (SAFE_FOR_XML && regExpTest(/((--!?|])>)|<\/(style|title)/i, value)) {
+  	        _removeAttribute(name, currentNode);
+  	        continue;
+  	      }
+  	      /* Did the hooks approve of the attribute? */
+  	      if (hookEvent.forceKeepAttr) {
+  	        continue;
+  	      }
+  	      /* Remove attribute */
+  	      _removeAttribute(name, currentNode);
+  	      /* Did the hooks approve of the attribute? */
+  	      if (!hookEvent.keepAttr) {
+  	        continue;
+  	      }
+  	      /* Work around a security issue in jQuery 3.0 */
+  	      if (!ALLOW_SELF_CLOSE_IN_ATTR && regExpTest(/\/>/i, value)) {
+  	        _removeAttribute(name, currentNode);
+  	        continue;
+  	      }
+  	      /* Sanitize attribute content to be template-safe */
+  	      if (SAFE_FOR_TEMPLATES) {
+  	        arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
+  	          value = stringReplace(value, expr, ' ');
+  	        });
+  	      }
+  	      /* Is `value` valid for this attribute? */
+  	      const lcTag = transformCaseFunc(currentNode.nodeName);
+  	      if (!_isValidAttribute(lcTag, lcName, value)) {
+  	        continue;
+  	      }
+  	      /* Handle attributes that require Trusted Types */
+  	      if (trustedTypesPolicy && typeof trustedTypes === 'object' && typeof trustedTypes.getAttributeType === 'function') {
+  	        if (namespaceURI) ; else {
+  	          switch (trustedTypes.getAttributeType(lcTag, lcName)) {
+  	            case 'TrustedHTML':
+  	              {
+  	                value = trustedTypesPolicy.createHTML(value);
+  	                break;
+  	              }
+  	            case 'TrustedScriptURL':
+  	              {
+  	                value = trustedTypesPolicy.createScriptURL(value);
+  	                break;
+  	              }
+  	          }
+  	        }
+  	      }
+  	      /* Handle invalid data-* attribute set by try-catching it */
+  	      try {
+  	        if (namespaceURI) {
+  	          currentNode.setAttributeNS(namespaceURI, name, value);
+  	        } else {
+  	          /* Fallback to setAttribute() for browser-unrecognized namespaces e.g. "x-schema". */
+  	          currentNode.setAttribute(name, value);
+  	        }
+  	        if (_isClobbered(currentNode)) {
+  	          _forceRemove(currentNode);
+  	        } else {
+  	          arrayPop(DOMPurify.removed);
+  	        }
+  	      } catch (_) {}
+  	    }
+  	    /* Execute a hook if present */
+  	    _executeHooks(hooks.afterSanitizeAttributes, currentNode, null);
+  	  };
+  	  /**
+  	   * _sanitizeShadowDOM
+  	   *
+  	   * @param fragment to iterate over recursively
+  	   */
+  	  const _sanitizeShadowDOM = function _sanitizeShadowDOM(fragment) {
+  	    let shadowNode = null;
+  	    const shadowIterator = _createNodeIterator(fragment);
+  	    /* Execute a hook if present */
+  	    _executeHooks(hooks.beforeSanitizeShadowDOM, fragment, null);
+  	    while (shadowNode = shadowIterator.nextNode()) {
+  	      /* Execute a hook if present */
+  	      _executeHooks(hooks.uponSanitizeShadowNode, shadowNode, null);
+  	      /* Sanitize tags and elements */
+  	      _sanitizeElements(shadowNode);
+  	      /* Check attributes next */
+  	      _sanitizeAttributes(shadowNode);
+  	      /* Deep shadow DOM detected */
+  	      if (shadowNode.content instanceof DocumentFragment) {
+  	        _sanitizeShadowDOM(shadowNode.content);
+  	      }
+  	    }
+  	    /* Execute a hook if present */
+  	    _executeHooks(hooks.afterSanitizeShadowDOM, fragment, null);
+  	  };
+  	  // eslint-disable-next-line complexity
+  	  DOMPurify.sanitize = function (dirty) {
+  	    let cfg = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};
+  	    let body = null;
+  	    let importedNode = null;
+  	    let currentNode = null;
+  	    let returnNode = null;
+  	    /* Make sure we have a string to sanitize.
+  	      DO NOT return early, as this will return the wrong type if
+  	      the user has requested a DOM object rather than a string */
+  	    IS_EMPTY_INPUT = !dirty;
+  	    if (IS_EMPTY_INPUT) {
+  	      dirty = '<!-->';
+  	    }
+  	    /* Stringify, in case dirty is an object */
+  	    if (typeof dirty !== 'string' && !_isNode(dirty)) {
+  	      if (typeof dirty.toString === 'function') {
+  	        dirty = dirty.toString();
+  	        if (typeof dirty !== 'string') {
+  	          throw typeErrorCreate('dirty is not a string, aborting');
+  	        }
+  	      } else {
+  	        throw typeErrorCreate('toString is not a function');
+  	      }
+  	    }
+  	    /* Return dirty HTML if DOMPurify cannot run */
+  	    if (!DOMPurify.isSupported) {
+  	      return dirty;
+  	    }
+  	    /* Assign config vars */
+  	    if (!SET_CONFIG) {
+  	      _parseConfig(cfg);
+  	    }
+  	    /* Clean up removed elements */
+  	    DOMPurify.removed = [];
+  	    /* Check if dirty is correctly typed for IN_PLACE */
+  	    if (typeof dirty === 'string') {
+  	      IN_PLACE = false;
+  	    }
+  	    if (IN_PLACE) {
+  	      /* Do some early pre-sanitization to avoid unsafe root nodes */
+  	      if (dirty.nodeName) {
+  	        const tagName = transformCaseFunc(dirty.nodeName);
+  	        if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {
+  	          throw typeErrorCreate('root node is forbidden and cannot be sanitized in-place');
+  	        }
+  	      }
+  	    } else if (dirty instanceof Node) {
+  	      /* If dirty is a DOM element, append to an empty document to avoid
+  	         elements being stripped by the parser */
+  	      body = _initDocument('<!---->');
+  	      importedNode = body.ownerDocument.importNode(dirty, true);
+  	      if (importedNode.nodeType === NODE_TYPE.element && importedNode.nodeName === 'BODY') {
+  	        /* Node is already a body, use as is */
+  	        body = importedNode;
+  	      } else if (importedNode.nodeName === 'HTML') {
+  	        body = importedNode;
+  	      } else {
+  	        // eslint-disable-next-line unicorn/prefer-dom-node-append
+  	        body.appendChild(importedNode);
+  	      }
+  	    } else {
+  	      /* Exit directly if we have nothing to do */
+  	      if (!RETURN_DOM && !SAFE_FOR_TEMPLATES && !WHOLE_DOCUMENT &&
+  	      // eslint-disable-next-line unicorn/prefer-includes
+  	      dirty.indexOf('<') === -1) {
+  	        return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? trustedTypesPolicy.createHTML(dirty) : dirty;
+  	      }
+  	      /* Initialize the document to work on */
+  	      body = _initDocument(dirty);
+  	      /* Check we have a DOM node from the data */
+  	      if (!body) {
+  	        return RETURN_DOM ? null : RETURN_TRUSTED_TYPE ? emptyHTML : '';
+  	      }
+  	    }
+  	    /* Remove first element node (ours) if FORCE_BODY is set */
+  	    if (body && FORCE_BODY) {
+  	      _forceRemove(body.firstChild);
+  	    }
+  	    /* Get node iterator */
+  	    const nodeIterator = _createNodeIterator(IN_PLACE ? dirty : body);
+  	    /* Now start iterating over the created document */
+  	    while (currentNode = nodeIterator.nextNode()) {
+  	      /* Sanitize tags and elements */
+  	      _sanitizeElements(currentNode);
+  	      /* Check attributes next */
+  	      _sanitizeAttributes(currentNode);
+  	      /* Shadow DOM detected, sanitize it */
+  	      if (currentNode.content instanceof DocumentFragment) {
+  	        _sanitizeShadowDOM(currentNode.content);
+  	      }
+  	    }
+  	    /* If we sanitized `dirty` in-place, return it. */
+  	    if (IN_PLACE) {
+  	      return dirty;
+  	    }
+  	    /* Return sanitized string or DOM */
+  	    if (RETURN_DOM) {
+  	      if (RETURN_DOM_FRAGMENT) {
+  	        returnNode = createDocumentFragment.call(body.ownerDocument);
+  	        while (body.firstChild) {
+  	          // eslint-disable-next-line unicorn/prefer-dom-node-append
+  	          returnNode.appendChild(body.firstChild);
+  	        }
+  	      } else {
+  	        returnNode = body;
+  	      }
+  	      if (ALLOWED_ATTR.shadowroot || ALLOWED_ATTR.shadowrootmode) {
+  	        /*
+  	          AdoptNode() is not used because internal state is not reset
+  	          (e.g. the past names map of a HTMLFormElement), this is safe
+  	          in theory but we would rather not risk another attack vector.
+  	          The state that is cloned by importNode() is explicitly defined
+  	          by the specs.
+  	        */
+  	        returnNode = importNode.call(originalDocument, returnNode, true);
+  	      }
+  	      return returnNode;
+  	    }
+  	    let serializedHTML = WHOLE_DOCUMENT ? body.outerHTML : body.innerHTML;
+  	    /* Serialize doctype if allowed */
+  	    if (WHOLE_DOCUMENT && ALLOWED_TAGS['!doctype'] && body.ownerDocument && body.ownerDocument.doctype && body.ownerDocument.doctype.name && regExpTest(DOCTYPE_NAME, body.ownerDocument.doctype.name)) {
+  	      serializedHTML = '<!DOCTYPE ' + body.ownerDocument.doctype.name + '>\n' + serializedHTML;
+  	    }
+  	    /* Sanitize final string template-safe */
+  	    if (SAFE_FOR_TEMPLATES) {
+  	      arrayForEach([MUSTACHE_EXPR, ERB_EXPR, TMPLIT_EXPR], expr => {
+  	        serializedHTML = stringReplace(serializedHTML, expr, ' ');
+  	      });
+  	    }
+  	    return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? trustedTypesPolicy.createHTML(serializedHTML) : serializedHTML;
+  	  };
+  	  DOMPurify.setConfig = function () {
+  	    let cfg = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+  	    _parseConfig(cfg);
+  	    SET_CONFIG = true;
+  	  };
+  	  DOMPurify.clearConfig = function () {
+  	    CONFIG = null;
+  	    SET_CONFIG = false;
+  	  };
+  	  DOMPurify.isValidAttribute = function (tag, attr, value) {
+  	    /* Initialize shared config vars if necessary. */
+  	    if (!CONFIG) {
+  	      _parseConfig({});
+  	    }
+  	    const lcTag = transformCaseFunc(tag);
+  	    const lcName = transformCaseFunc(attr);
+  	    return _isValidAttribute(lcTag, lcName, value);
+  	  };
+  	  DOMPurify.addHook = function (entryPoint, hookFunction) {
+  	    if (typeof hookFunction !== 'function') {
+  	      return;
+  	    }
+  	    arrayPush(hooks[entryPoint], hookFunction);
+  	  };
+  	  DOMPurify.removeHook = function (entryPoint, hookFunction) {
+  	    if (hookFunction !== undefined) {
+  	      const index = arrayLastIndexOf(hooks[entryPoint], hookFunction);
+  	      return index === -1 ? undefined : arraySplice(hooks[entryPoint], index, 1)[0];
+  	    }
+  	    return arrayPop(hooks[entryPoint]);
+  	  };
+  	  DOMPurify.removeHooks = function (entryPoint) {
+  	    hooks[entryPoint] = [];
+  	  };
+  	  DOMPurify.removeAllHooks = function () {
+  	    hooks = _createHooksMap();
+  	  };
+  	  return DOMPurify;
+  	}
+  	var purify = createDOMPurify();
+
+  	purify_cjs = purify;
+  	
+  	return purify_cjs;
+  }
+
+  window.DOMPurify || (window.DOMPurify = requirePurify_cjs().default || requirePurify_cjs());
 
   // src/utils/entries-to-string.ts
   function entriesToString(obj, separator = "=") {
@@ -16476,10 +17109,18 @@
     }, {
       key: "setFormElements",
       value: function setFormElements(elements) {
-        var _this = this;
-        elements.forEach(function (element) {
-          return _this.setFormElement(element);
-        });
+        var _iterator = _createForOfIteratorHelper(elements),
+          _step;
+        try {
+          for (_iterator.s(); !(_step = _iterator.n()).done;) {
+            var element = _step.value;
+            this.setFormElement(element);
+          }
+        } catch (err) {
+          _iterator.e(err);
+        } finally {
+          _iterator.f();
+        }
       }
     }, {
       key: "setFormElement",
@@ -16490,17 +17131,17 @@
         })]);
       }
       /**
-       * The method to set meta information for the checkout page
-       *
-       * @example
-       * config.setMeta({
-              brand_name: 'paydock',
-              reference: '15',
-              email: 'wault@paydock.com'
-          });
-       *
-       * @param {IPayPalMeta | IBamboraMeta} object - data which can be shown on checkout page [IPayPalMeta]{@link IPayPalMeta} [IBamboraMeta]{@link IBamboraMeta}
-       */
+         * The method to set meta information for the checkout page
+         *
+         * @example
+         * config.setMeta({
+                brand_name: 'paydock',
+                reference: '15',
+                email: 'wault@paydock.com'
+            });
+         *
+         * @param {IPayPalMeta | IBamboraMeta} object - data which can be shown on checkout page [IPayPalMeta]{@link IPayPalMeta} [IBamboraMeta]{@link IBamboraMeta}
+         */
     }, {
       key: "setMeta",
       value: function setMeta(meta) {
@@ -16514,6 +17155,37 @@
     }]);
   }(HtmlMultiWidget);
 
+  var InstructionModule$1 = /*#__PURE__*/function () {
+    function InstructionModule() {
+      _classCallCheck(this, InstructionModule);
+      this.instructions = [];
+    }
+    return _createClass(InstructionModule, [{
+      key: "getInstruction",
+      value: function getInstruction(id) {
+        return this.instructions.find(function (instructionClass) {
+          return instructionClass.instruction == id;
+        });
+      }
+    }]);
+  }();
+
+  function InstructionModule(config) {
+    return function (constructor) {
+      return /*#__PURE__*/function (_constructor) {
+        function _class() {
+          var _this;
+          _classCallCheck(this, _class);
+          _this = _callSuper(this, _class, arguments);
+          _this.instructions = config;
+          return _this;
+        }
+        _inherits(_class, _constructor);
+        return _createClass(_class);
+      }(constructor);
+    };
+  }
+
   var InstructionHandler = /*#__PURE__*/function () {
     function InstructionHandler(selector, formSelector, api, checkoutWidget) {
       _classCallCheck(this, InstructionHandler);
@@ -17047,8 +17719,6 @@
   }(InstructionHandler);
   InstructionCardFormShow = __decorate([Instruction('instruction.card_form.show')], InstructionCardFormShow);
 
-  var TEMPLATE = "\n<style>\n    @import url('https://fonts.cdnfonts.com/css/segoe-ui-4');\n    @import url('https://fonts.cdnfonts.com/css/droid-sans-2');\n    @import url('https://fonts.cdnfonts.com/css/helvetica-neue-55');\n    @import url('https://fonts.googleapis.com/css2?family=Cantarell&family=Fira+Sans&family=Oxygen&family=Roboto&family=Ubuntu&display=swap');\n    \n    /* RESET DEFAULT STYLES */\n    *,\n    *:before,\n    *:after {\n        box-sizing: border-box;\n    }\n\n    html,\n    body,\n    div,\n    span,\n    applet,\n    object,\n    iframe,\n    h1,\n    h2,\n    h3,\n    h4,\n    h5,\n    h6,\n    p,\n    blockquote,\n    pre,\n    a,\n    abbr,\n    acronym,\n    address,\n    big,\n    cite,\n    code,\n    del,\n    dfn,\n    em,\n    img,\n    ins,\n    kbd,\n    q,\n    s,\n    samp,\n    small,\n    strike,\n    strong,\n    sub,\n    sup,\n    tt,\n    var,\n    b,\n    u,\n    i,\n    center,\n    dl,\n    dt,\n    dd,\n    ol,\n    ul,\n    li,\n    fieldset,\n    form,\n    label,\n    legend,\n    table,\n    caption,\n    tbody,\n    tfoot,\n    thead,\n    tr,\n    th,\n    td,\n    article,\n    aside,\n    canvas,\n    details,\n    embed,\n    figure,\n    figcaption,\n    footer,\n    header,\n    hgroup,\n    menu,\n    nav,\n    output,\n    ruby,\n    section,\n    summary,\n    time,\n    mark,\n    audio,\n    video,\n    input {\n        margin: 0;\n        padding: 0;\n        border: 0;\n        font-size: 100%;\n        font: inherit;\n        vertical-align: baseline;\n    }\n\n    article,\n    aside,\n    details,\n    figcaption,\n    figure,\n    footer,\n    header,\n    hgroup,\n    menu,\n    nav,\n    section {\n        display: block;\n    }\n\n    body {\n        line-height: 1;\n    }\n\n    ol,\n    ul {\n        list-style: none;\n    }\n\n    ul {\n        padding: 0;\n        margin: 0;\n    }\n\n    /* MAIN STYLES */\n    .wrap {\n        padding: 10px;\n        background-color: {{background_color}};\n    }\n\n    .widget-body {\n        background-color: #fff;\n        border: 1px solid {{border_color}};\n    }\n\n    .payment-source {\n        cursor: pointer;\n        padding: 1em 0.8em;\n        display: flex;\n        align-items: center;\n        height: 70px;\n    }\n\n    .payment-source:not(:last-child) {\n        border-bottom: 1px solid {{border_color}};\n    }\n\n    .payment-source__wrap {\n        display: flex;\n        align-items: center;\n        font-family: {{font_family}};\n        font-size: {{font_size}};\n        color: {{text_color}}\n    }\n\n    .payment-source__radio {\n        margin-right: 2em;\n        width: 18px;\n        min-width: 18px;\n        height: 18px;\n        border: 1px solid {{button_color}};\n        border-radius: 50%;\n        appearance: none;\n        cursor: pointer;\n\n        @media screen and (max-width: 380px) {\n            margin-right: 1em;\n        }\n    }\n\n    .payment-source__radio::before {\n        content: \"\";\n        display: block;\n        width: 100%;\n        height: 100%;\n        background-color: #fff;\n        border-radius: 50%;\n    }\n\n    .payment-source__radio:checked::before {\n        border: 4px solid {{button_color}};\n        outline: 1px solid {{button_color}};\n    }\n\n    .payment-source__title {\n        margin-right: 2em;\n        font-weight: 400;\n        line-height: 1.2;\n\n        @media screen and (max-width: 380px) {\n            margin-right: 1em;\n            font-size: 14px;\n        }\n    }\n\n    .payment-source__icon {\n        margin-right: 2em;\n        max-height: 35px;\n\n        @media screen and (max-width: 380px) {\n            margin-right: 1em;\n        }\n    }\n\n    .payment-source .card__scheme {\n        margin-left: auto;\n        display: flex;\n        align-items: center;\n    }\n\n    .payment-source .card__scheme__item:not(:last-child) {\n        margin-right: 10px;\n    }\n\n    .payment-source .card__scheme__img {\n        max-width: 50px;\n\n        @media screen and (max-width: 460px) {\n            max-width: 40px;\n        }\n\n        @media screen and (max-width: 410px) {\n            max-width: 30px;\n        }\n    }\n\n    .payment-source__form {\n        margin-top: 1em;\n        margin-bottom: 1em;\n        margin-left: calc(2em + 18px);\n\n        @media screen and (max-width: 380px) {\n            margin-left: calc(1em + 18px);\n        }\n    }\n\n    .payment-source__form .form-group:not(:last-child) {\n        margin-bottom: 1.5em;\n    }\n\n    .payment-source__form .form-control {\n        padding: 10px 2px 10px 10px;\n        height: 40px;\n        background: #F9F9F9;\n        border: 1px solid {{border_color}};\n    }\n\n    .payment-source__form .form-control:not(:last-child) {\n        margin-right: 1.5em;\n    }\n\n    .payment-source__form .form-control.col-12 {\n        width: calc(100% - 1.5em);\n    }\n\n    .payment-source__form .form-control.col-3 {\n        width: calc(33.33% - 1.5em);\n    }\n\n    .footer__pay-btn {\n        margin-left: auto;\n        padding: 10px 2em;\n        height: 50px;\n        display: flex;\n        align-items: center;\n        justify-content: center;\n        color: #F6F0EB;\n        font-size: 16px;\n        background-color: {{button_color}};\n        box-shadow: 0 1px 3px 0 rgba(0, 0, 0, 0.10), 0 0 0 0.5px rgba(0, 0, 0, 0.10);\n        border: none;\n        border-radius: 6px;\n        cursor: pointer;\n    }\n\n    .footer__pay-btn--paypal {\n        padding: 5px 2em;\n        background-color: #FFC43A;\n    }\n\n    .footer__pay-btn--gpay {\n        font-size: 22px;\n    }\n\n    .footer__pay-btn--gpay img {\n        margin-left: 5px;\n    }\n\n    .footer__pay-btn img {\n        max-height: 100%;\n    }\n</style>\n<main class=\"wrap\">\n    <div class=\"widget-body\">\n        <ul class=\"payment-sources__list\">\n            {{paymentMethods}}\n        </ul>\n    </div>\n</main>\n</div>\n";
-
   var PAYMENT_METHOD = {
     card: "<label class=\"payment-source\">\n    <li class=\"payment-source\">\n      <div class=\"payment-source__wrap\">\n          <input class=\"payment-source__radio\" pm-button=\"card\" type=\"radio\" name=\"radio-group\" />\n          <h2 class=\"payment-source__title\">Pay with Credit or Debit card</h2>\n      </div>\n    </li>\n  </label>",
     bank_account: "<label class=\"payment-source\">\n    <li class=\"payment-source\">\n      <div class=\"payment-source__wrap\">\n          <input class=\"payment-source__radio\" pm-button=\"bank_account\" type=\"radio\" name=\"radio-group\" />\n          <h2 class=\"payment-source__title\">Pay Bank Account</h2>\n      </div>\n    </li>\n  </label>",
@@ -17061,11 +17731,13 @@
     afterpay_checkout: "<label class=\"payment-source\">\n    <li class=\"payment-source\">\n      <div class=\"payment-source__wrap\">\n          <input class=\"payment-source__radio\" pm-button=\"afterpay_checkout\" type=\"radio\" name=\"radio-group\">\n          ".concat(getIcon(paymentMethods.AFTERPAY), "\n      </div>\n    </li>\n  </label>")
   };
 
+  var TEMPLATE = "\n<style>\n    @import url('https://fonts.cdnfonts.com/css/segoe-ui-4');\n    @import url('https://fonts.cdnfonts.com/css/droid-sans-2');\n    @import url('https://fonts.cdnfonts.com/css/helvetica-neue-55');\n    @import url('https://fonts.googleapis.com/css2?family=Cantarell&family=Fira+Sans&family=Oxygen&family=Roboto&family=Ubuntu&display=swap');\n    \n    /* RESET DEFAULT STYLES */\n    *,\n    *:before,\n    *:after {\n        box-sizing: border-box;\n    }\n\n    html,\n    body,\n    div,\n    span,\n    applet,\n    object,\n    iframe,\n    h1,\n    h2,\n    h3,\n    h4,\n    h5,\n    h6,\n    p,\n    blockquote,\n    pre,\n    a,\n    abbr,\n    acronym,\n    address,\n    big,\n    cite,\n    code,\n    del,\n    dfn,\n    em,\n    img,\n    ins,\n    kbd,\n    q,\n    s,\n    samp,\n    small,\n    strike,\n    strong,\n    sub,\n    sup,\n    tt,\n    var,\n    b,\n    u,\n    i,\n    center,\n    dl,\n    dt,\n    dd,\n    ol,\n    ul,\n    li,\n    fieldset,\n    form,\n    label,\n    legend,\n    table,\n    caption,\n    tbody,\n    tfoot,\n    thead,\n    tr,\n    th,\n    td,\n    article,\n    aside,\n    canvas,\n    details,\n    embed,\n    figure,\n    figcaption,\n    footer,\n    header,\n    hgroup,\n    menu,\n    nav,\n    output,\n    ruby,\n    section,\n    summary,\n    time,\n    mark,\n    audio,\n    video,\n    input {\n        margin: 0;\n        padding: 0;\n        border: 0;\n        font-size: 100%;\n        font: inherit;\n        vertical-align: baseline;\n    }\n\n    article,\n    aside,\n    details,\n    figcaption,\n    figure,\n    footer,\n    header,\n    hgroup,\n    menu,\n    nav,\n    section {\n        display: block;\n    }\n\n    body {\n        line-height: 1;\n    }\n\n    ol,\n    ul {\n        list-style: none;\n    }\n\n    ul {\n        padding: 0;\n        margin: 0;\n    }\n\n    /* MAIN STYLES */\n    .wrap {\n        padding: 10px;\n        background-color: {{background_color}};\n    }\n\n    .widget-body {\n        background-color: #fff;\n        border: 1px solid {{border_color}};\n    }\n\n    .payment-source {\n        cursor: pointer;\n        padding: 1em 0.8em;\n        display: flex;\n        align-items: center;\n        height: 70px;\n    }\n\n    .payment-source:not(:last-child) {\n        border-bottom: 1px solid {{border_color}};\n    }\n\n    .payment-source__wrap {\n        display: flex;\n        align-items: center;\n        font-family: {{font_family}};\n        font-size: {{font_size}};\n        color: {{text_color}}\n    }\n\n    .payment-source__radio {\n        margin-right: 2em;\n        width: 18px;\n        min-width: 18px;\n        height: 18px;\n        border: 1px solid {{button_color}};\n        border-radius: 50%;\n        appearance: none;\n        cursor: pointer;\n\n        @media screen and (max-width: 380px) {\n            margin-right: 1em;\n        }\n    }\n\n    .payment-source__radio::before {\n        content: \"\";\n        display: block;\n        width: 100%;\n        height: 100%;\n        background-color: #fff;\n        border-radius: 50%;\n    }\n\n    .payment-source__radio:checked::before {\n        border: 4px solid {{button_color}};\n        outline: 1px solid {{button_color}};\n    }\n\n    .payment-source__title {\n        margin-right: 2em;\n        font-weight: 400;\n        line-height: 1.2;\n\n        @media screen and (max-width: 380px) {\n            margin-right: 1em;\n            font-size: 14px;\n        }\n    }\n\n    .payment-source__icon {\n        margin-right: 2em;\n        max-height: 35px;\n\n        @media screen and (max-width: 380px) {\n            margin-right: 1em;\n        }\n    }\n\n    .payment-source .card__scheme {\n        margin-left: auto;\n        display: flex;\n        align-items: center;\n    }\n\n    .payment-source .card__scheme__item:not(:last-child) {\n        margin-right: 10px;\n    }\n\n    .payment-source .card__scheme__img {\n        max-width: 50px;\n\n        @media screen and (max-width: 460px) {\n            max-width: 40px;\n        }\n\n        @media screen and (max-width: 410px) {\n            max-width: 30px;\n        }\n    }\n\n    .payment-source__form {\n        margin-top: 1em;\n        margin-bottom: 1em;\n        margin-left: calc(2em + 18px);\n\n        @media screen and (max-width: 380px) {\n            margin-left: calc(1em + 18px);\n        }\n    }\n\n    .payment-source__form .form-group:not(:last-child) {\n        margin-bottom: 1.5em;\n    }\n\n    .payment-source__form .form-control {\n        padding: 10px 2px 10px 10px;\n        height: 40px;\n        background: #F9F9F9;\n        border: 1px solid {{border_color}};\n    }\n\n    .payment-source__form .form-control:not(:last-child) {\n        margin-right: 1.5em;\n    }\n\n    .payment-source__form .form-control.col-12 {\n        width: calc(100% - 1.5em);\n    }\n\n    .payment-source__form .form-control.col-3 {\n        width: calc(33.33% - 1.5em);\n    }\n\n    .footer__pay-btn {\n        margin-left: auto;\n        padding: 10px 2em;\n        height: 50px;\n        display: flex;\n        align-items: center;\n        justify-content: center;\n        color: #F6F0EB;\n        font-size: 16px;\n        background-color: {{button_color}};\n        box-shadow: 0 1px 3px 0 rgba(0, 0, 0, 0.10), 0 0 0 0.5px rgba(0, 0, 0, 0.10);\n        border: none;\n        border-radius: 6px;\n        cursor: pointer;\n    }\n\n    .footer__pay-btn--paypal {\n        padding: 5px 2em;\n        background-color: #FFC43A;\n    }\n\n    .footer__pay-btn--gpay {\n        font-size: 22px;\n    }\n\n    .footer__pay-btn--gpay img {\n        margin-left: 5px;\n    }\n\n    .footer__pay-btn img {\n        max-height: 100%;\n    }\n</style>\n<main class=\"wrap\">\n    <div class=\"widget-body\">\n        <ul class=\"payment-sources__list\">\n            {{paymentMethods}}\n        </ul>\n    </div>\n</main>\n</div>\n";
+
   var PAYMENTS_METHODS = {
-    APPLE_PAY: "applepay_wallet",
-    GOOGLE_PAY: "googlepay_wallet"
+    APPLE_PAY: 'applepay_wallet',
+    GOOGLE_PAY: 'googlepay_wallet'
   };
-  var PAYMENT_METHOD_ORDER = ["card", "afterpay_checkout", "applepay_wallet", "googlepay_wallet", "paypal_wallet", "zip_checkout"];
+  var PAYMENT_METHOD_ORDER = ['card', 'afterpay_checkout', 'applepay_wallet', 'googlepay_wallet', 'paypal_wallet', 'zip_checkout'];
   var PaymentMethods = /*#__PURE__*/function () {
     function PaymentMethods(selector, methods, styles, chosen, instruction_token) {
       var skip = arguments.length > 5 && arguments[5] !== undefined ? arguments[5] : false;
@@ -17089,51 +17761,24 @@
         var _this = this;
         this.setPaymentMethodsOrder();
         this.setStylesToStandaloneWidget();
-        var initState = new Promise(function (resolve, reject) {
-          return __awaiter(_this, void 0, void 0, /*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
-            var paymentMethodsAllowed, _iterator, _step, method;
-            return _regeneratorRuntime().wrap(function _callee$(_context) {
-              while (1) switch (_context.prev = _context.next) {
-                case 0:
-                  paymentMethodsAllowed = [];
-                  _iterator = _createForOfIteratorHelper(this.methods);
-                  _context.prev = 2;
-                  _iterator.s();
-                case 4:
-                  if ((_step = _iterator.n()).done) {
-                    _context.next = 11;
-                    break;
-                  }
-                  method = _step.value;
-                  if (!(method === PAYMENTS_METHODS.APPLE_PAY && !this.isApplePaySupported())) {
-                    _context.next = 8;
-                    break;
-                  }
-                  return _context.abrupt("continue", 9);
-                case 8:
-                  paymentMethodsAllowed.push(PAYMENT_METHOD[method]);
-                case 9:
-                  _context.next = 4;
-                  break;
-                case 11:
-                  _context.next = 16;
-                  break;
-                case 13:
-                  _context.prev = 13;
-                  _context.t0 = _context["catch"](2);
-                  _iterator.e(_context.t0);
-                case 16:
-                  _context.prev = 16;
-                  _iterator.f();
-                  return _context.finish(16);
-                case 19:
-                  resolve(paymentMethodsAllowed.join(' '));
-                case 20:
-                case "end":
-                  return _context.stop();
+        var initState = new Promise(function (resolve, _reject) {
+          var paymentMethodsAllowed = [];
+          var _iterator = _createForOfIteratorHelper(_this.methods),
+            _step;
+          try {
+            for (_iterator.s(); !(_step = _iterator.n()).done;) {
+              var method = _step.value;
+              if (method === PAYMENTS_METHODS.APPLE_PAY && !_this.isApplePaySupported()) {
+                continue;
               }
-            }, _callee, this, [[2, 13, 16, 19]]);
-          }));
+              paymentMethodsAllowed.push(PAYMENT_METHOD[method]);
+            }
+          } catch (err) {
+            _iterator.e(err);
+          } finally {
+            _iterator.f();
+          }
+          resolve(paymentMethodsAllowed.join(' '));
         });
         initState.then(function (content) {
           var template = _this.setStyles(content);
@@ -17145,7 +17790,7 @@
             _this.setListenerButtons(iframeDocument);
             _this.iFrame.setIframeHeight(iframeElement, iframeDocument, '.wrap');
           } else {
-            _this.iFrame.getElement().addEventListener("load", function (event) {
+            _this.iFrame.getElement().addEventListener('load', function (event) {
               _this.setListenerButtons(iframeDocument);
               _this.iFrame.setIframeHeight(iframeElement, iframeDocument, '.wrap');
             });
@@ -17156,26 +17801,37 @@
       key: "setListenerButtons",
       value: function setListenerButtons(iframeDocument) {
         var _this2 = this;
-        var selectedPaymentMethod = "";
+        var selectedPaymentMethod = '';
         Spinner.hide();
         var buttons = iframeDocument.querySelectorAll('[pm-button]');
-        buttons.forEach(function (button) {
-          button.addEventListener('click', function (event) {
-            var clickedButton = event.target;
-            var customAttributeValue = clickedButton.getAttribute('pm-button');
-            if (selectedPaymentMethod !== customAttributeValue && !_this2.disablePaymentMethodOptions) {
-              _this2.chosen(customAttributeValue);
-              selectedPaymentMethod = customAttributeValue;
-              Spinner.show();
-            }
-          });
-        });
+        var _iterator2 = _createForOfIteratorHelper(buttons),
+          _step2;
+        try {
+          for (_iterator2.s(); !(_step2 = _iterator2.n()).done;) {
+            var button = _step2.value;
+            button.addEventListener('click', function (event) {
+              var clickedButton = event.target;
+              var customAttributeValue = clickedButton.getAttribute('pm-button');
+              if (selectedPaymentMethod !== customAttributeValue && !_this2.disablePaymentMethodOptions) {
+                _this2.chosen(customAttributeValue);
+                selectedPaymentMethod = customAttributeValue;
+                Spinner.show();
+              }
+            });
+          }
+        } catch (err) {
+          _iterator2.e(err);
+        } finally {
+          _iterator2.f();
+        }
       }
     }, {
       key: "setEnv",
       value: function setEnv(instruction_token) {
         var tokenContent = AccessToken.validateJWT(instruction_token);
-        if (!tokenContent) throw new Error("Invalid instruction token.");
+        if (!tokenContent) {
+          throw new Error('Invalid instruction token.');
+        }
         return AccessToken.extractEnv(tokenContent.body);
       }
     }, {
@@ -17184,7 +17840,9 @@
         var _a, _b, _c, _d, _e, _f;
         var template = TEMPLATE.replace('{{paymentMethods}}', content);
         var listElement = document === null || document === void 0 ? void 0 : document.querySelector(SELECTORS.LIST);
-        if (listElement) listElement.style.backgroundColor = this.styles.background_color || DEFAULT_VARIABLES.BG_COLOR;
+        if (listElement) {
+          listElement.style.backgroundColor = this.styles.background_color || DEFAULT_VARIABLES.BG_COLOR;
+        }
         template = ((_a = this.styles) === null || _a === void 0 ? void 0 : _a.button_color) ? template.replace(/{{button_color}}/g, this.styles.button_color) : template.replace(/{{button_color}}/g, DEFAULT_VARIABLES.BTN_COLOR);
         template = ((_b = this.styles) === null || _b === void 0 ? void 0 : _b.border_color) ? template.replace(/{{border_color}}/g, this.styles.border_color) : template.replace(/{{border_color}}/g, DEFAULT_VARIABLES.BORDER_COLOR);
         template = ((_c = this.styles) === null || _c === void 0 ? void 0 : _c.background_color) ? template.replace(/{{background_color}}/g, this.styles.background_color) : template.replace(/{{background_color}}/g, DEFAULT_VARIABLES.BG_COLOR);
@@ -17208,7 +17866,9 @@
       key: "setPaymentMethodsOrder",
       value: function setPaymentMethodsOrder() {
         var _a;
-        if (!((_a = this.methods) === null || _a === void 0 ? void 0 : _a.length)) return this.methods;
+        if (!((_a = this.methods) === null || _a === void 0 ? void 0 : _a.length)) {
+          return this.methods;
+        }
         this.methods.sort(function (a, b) {
           return PAYMENT_METHOD_ORDER.indexOf(a) - PAYMENT_METHOD_ORDER.indexOf(b);
         });
@@ -17221,25 +17881,62 @@
         var iframe = document === null || document === void 0 ? void 0 : document.querySelector("".concat(SELECTORS.LIST, " iframe"));
         var iframeDocument = iframe.contentDocument || ((_a = iframe === null || iframe === void 0 ? void 0 : iframe.contentWindow) === null || _a === void 0 ? void 0 : _a.document);
         if (iframeDocument) {
-          var radiosButtons = iframeDocument.querySelectorAll('input[type="radio"].payment-source__radio');
-          var labels = iframeDocument.querySelectorAll('.payment-source');
-          labels.forEach(function (label) {
-            label.style.cursor = "not-allowed";
-          });
-          radiosButtons.forEach(function (radioButton) {
-            var labels = iframeDocument.querySelectorAll('.payment-source');
-            labels.forEach(function (label) {
-              label.style.cursor = "not-allowed";
-            });
-            radioButton.style.cursor = "not-allowed";
-            if (!radioButton.checked) {
-              radioButton.style.border = "9px solid #EBEBE4";
+          var labels = this.queryAllPaymentSource(iframeDocument);
+          var _iterator3 = _createForOfIteratorHelper(labels),
+            _step3;
+          try {
+            for (_iterator3.s(); !(_step3 = _iterator3.n()).done;) {
+              var label = _step3.value;
+              label.style.cursor = 'not-allowed';
             }
-            radioButton.disabled = true;
-            radioButton.classList.add("disabled");
-          });
+          } catch (err) {
+            _iterator3.e(err);
+          } finally {
+            _iterator3.f();
+          }
+          var radiosButtons = this.queryAllPaymentSourceRadioButtons(iframeDocument);
+          var _iterator4 = _createForOfIteratorHelper(radiosButtons),
+            _step4;
+          try {
+            for (_iterator4.s(); !(_step4 = _iterator4.n()).done;) {
+              var radioButton = _step4.value;
+              var _labels = this.queryAllPaymentSource(iframeDocument);
+              var _iterator5 = _createForOfIteratorHelper(_labels),
+                _step5;
+              try {
+                for (_iterator5.s(); !(_step5 = _iterator5.n()).done;) {
+                  var _label = _step5.value;
+                  _label.style.cursor = 'not-allowed';
+                }
+              } catch (err) {
+                _iterator5.e(err);
+              } finally {
+                _iterator5.f();
+              }
+              radioButton.style.cursor = 'not-allowed';
+              if (!radioButton.checked) {
+                radioButton.style.border = '9px solid #EBEBE4';
+              }
+              radioButton.disabled = true;
+              radioButton.classList.add('disabled');
+            }
+          } catch (err) {
+            _iterator4.e(err);
+          } finally {
+            _iterator4.f();
+          }
         }
       }
+    }, {
+      key: "queryAllPaymentSource",
+      value: function queryAllPaymentSource(iframeDocument) {
+        return iframeDocument.querySelectorAll('.payment-source');
+      }
+    }, {
+      key: "queryAllPaymentSourceRadioButtons",
+      value: function queryAllPaymentSourceRadioButtons(iframeDocument) {
+        return iframeDocument.querySelectorAll('input[type="radio"].payment-source__radio');
+      }
     }]);
   }();
 
@@ -17270,6 +17967,78 @@
   }(InstructionHandler);
   instructionDisablePaymentMethod = __decorate([Instruction("instruction.disable_payment_method_event.emit")], instructionDisablePaymentMethod);
 
+  var InstructionFraudServiceShow = /*#__PURE__*/function (_InstructionHandler) {
+    function InstructionFraudServiceShow() {
+      _classCallCheck(this, InstructionFraudServiceShow);
+      return _callSuper(this, InstructionFraudServiceShow, arguments);
+    }
+    _inherits(InstructionFraudServiceShow, _InstructionHandler);
+    return _createClass(InstructionFraudServiceShow, [{
+      key: "handle",
+      value: function handle(context) {
+        var _this = this;
+        var _a;
+        document.addEventListener(FRAUD_PREVENTION_EVENTS.NAMESPACE, function (event) {
+          switch (event.detail.type) {
+            case FRAUD_PREVENTION_EVENTS.TYPES.FINTERPRINT_TOKEN_READY:
+              {
+                _this.api.checkout().callback({
+                  event: 'callback.fraud_service.status',
+                  payload: {
+                    status: 'success',
+                    fraud_service_token: event.detail.payload.token
+                  }
+                }).then(function () {
+                  return console.info('callback.fraud_service.status: ok');
+                })["catch"](function (response) {
+                  console.error('callback.fraud_service.status: ok', response);
+                  Spinner.hide();
+                });
+                break;
+              }
+            case FRAUD_PREVENTION_EVENTS.TYPES.FINGERPRINT_TOKEN_ERROR:
+              {
+                _this.api.checkout().callback({
+                  event: 'callback.fraud_service.status',
+                  payload: {
+                    status: 'error',
+                    message: event.detail.payload.code || 'error in fraud service widget'
+                  }
+                }).then(function () {
+                  return console.info('callback.fraud_service.status: ok');
+                })["catch"](function (response) {
+                  Spinner.hide();
+                  console.error('callback.fraud_service.status: error', response);
+                });
+                break;
+              }
+            default:
+              {
+                throw new Error("".concat(FRAUD_PREVENTION_EVENTS.NAMESPACE, " emitted an unsupported event: ").concat(JSON.stringify(event.detail), "."));
+              }
+          }
+        });
+        this.fps = new FraudPreventionService({
+          environmentId: this.getEnv(context.instruction_token),
+          mode: 'live'
+        });
+        this.fps.withAccessTokenStrategy(context.instruction_token).withForter({
+          providerId: context.payload.gateway_id,
+          csp: false
+        });
+        if (context.next_instruction) {
+          (_a = this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
+        }
+      }
+    }, {
+      key: "destroy",
+      value: function destroy() {
+        // document.querySelector(this.formSelector).innerHTML = '';
+      }
+    }]);
+  }(InstructionHandler);
+  InstructionFraudServiceShow = __decorate([Instruction('instruction.fraud_service.show')], InstructionFraudServiceShow);
+
   var MESSAGE_WIDGET_STYLE = {
     TEXT_COLOR: 'text_color',
     FONT_SIZE: 'font_size',
@@ -17476,39 +18245,6 @@
   }(InstructionHandler);
   InstructionMerchantEventEmit = __decorate([Instruction("instruction.merchant_event.emit")], InstructionMerchantEventEmit);
 
-  var InstructionModule$1 = /*#__PURE__*/function () {
-    function InstructionModule() {
-      _classCallCheck(this, InstructionModule);
-      this.instructions = [];
-    }
-    return _createClass(InstructionModule, [{
-      key: "getInstruction",
-      value: function getInstruction(id) {
-        return this.instructions
-        // tslint:disable-next-line:triple-equals
-        .find(function (instructionClass) {
-          return instructionClass.instruction == id;
-        });
-      }
-    }]);
-  }();
-
-  function InstructionModule(config) {
-    return function (constructor) {
-      return /*#__PURE__*/function (_constructor) {
-        function _class() {
-          var _this;
-          _classCallCheck(this, _class);
-          _this = _callSuper(this, _class, arguments);
-          _this.instructions = config;
-          return _this;
-        }
-        _inherits(_class, _constructor);
-        return _createClass(_class);
-      }(constructor);
-    };
-  }
-
   var InstructionPaymentMethodShow = /*#__PURE__*/function (_InstructionHandler) {
     function InstructionPaymentMethodShow() {
       _classCallCheck(this, InstructionPaymentMethodShow);
@@ -17520,7 +18256,6 @@
       value: function handle(context) {
         var _this = this;
         var _a;
-        // tslint:disable-next-line:no-unused-expression
         new PaymentMethods(this.selector, context.payload.allowed_payment_method_types, ((_a = context.payload.customisation) === null || _a === void 0 ? void 0 : _a.base) || {}, function (type) {
           var _a;
           (_a = _this.checkoutWidget) === null || _a === void 0 ? void 0 : _a.fetchInstruction();
@@ -17730,7 +18465,7 @@
     _inherits(InstructionModuleV1, _Module);
     return _createClass(InstructionModuleV1);
   }(InstructionModule$1);
-  InstructionModuleV1 = __decorate([InstructionModule([InstructionAfterpayCheckoutFormShow, InstructionAfterpayWalletFormShow, InstructionApplePayFormShow, InstructionBankAccountFormShow, InstructionCanvas3dsShow, InstructionCardFormShow, instructionDisablePaymentMethod, InstructionGenericShowMessage, InstructionGooglePayFormShow, InstructionMerchantEventEmit, InstructionPaymentMethodShow, InstructionPaypalFormShow, InstructionZipCheckoutFormShow, InstructionZipCheckoutFormShow])], InstructionModuleV1);
+  InstructionModuleV1 = __decorate([InstructionModule([InstructionAfterpayCheckoutFormShow, InstructionAfterpayWalletFormShow, InstructionApplePayFormShow, InstructionBankAccountFormShow, InstructionCanvas3dsShow, InstructionCardFormShow, InstructionFraudServiceShow, InstructionGenericShowMessage, InstructionGooglePayFormShow, InstructionMerchantEventEmit, InstructionPaymentMethodShow, InstructionPaypalFormShow, InstructionZipCheckoutFormShow, InstructionZipCheckoutFormShow, instructionDisablePaymentMethod])], InstructionModuleV1);
 
   function getVersionInstructions(version) {
     switch (version) {
@@ -17741,7 +18476,7 @@
     }
   }
 
-  var additional = "\n<style>\n    #standaloneWidget iframe[title=\"3d secure authentication\"],\n    #standaloneWidget .threeDSecure-iframe {\n        height: 420px;\n    }\n    #standaloneWidget iframe, #list iframe {\n      display: block;\n       max-width: 640px;\n       min-width: 320px;\n       width: 100%;\n       border-width: 0;\n    }\n    .spinner-wrapper {\n      position: absolute;\n      width: calc(100% + 1px);\n      height: calc(100% + 1px);\n      top: 0;\n      left: 0;\n      display: flex;\n      justify-content: center;\n      align-items: center;\n      z-index: 999;\n    }\n    \n    .spinner-wrapper svg {\n        position: absolute;\n\n        height: 50px;\n        width: 50px;\n        z-index: 1000;\n      }\n  \n    .spinner-wrapper .background {\n      margin: 0 !important;\n      background: #f9f9f9;\n      color: #f9f9f9;\n      word-break: break-all;\n      white-space: pre-wrap;\n      width: 100%;\n      height: 100%;\n    }\n    \n    .spinner-wrapper--hidden {\n        display: none;\n    }\n    @media screen and (max-width: 450px) {\n        #standaloneWidget button {\n            width: 100% !important;\n        }\n    }\n    @media screen and (max-width: 450px) {\n        #standaloneWidget .paypal-buttons {\n            margin: 0 10px 10px 10px;\n        }\n    }\n    @media screen and (min-width: 451px) {\n        #standaloneWidget .paypal-buttons {\n            padding-bottom: 12px;\n            right: 40px;\n            max-width: 290px;\n        }\n    }\n    @media screen and (min-width: 451px) {\n        #standaloneWidget #gpay-button-online-api-id {\n            max-width: 311px;\n            margin-bottom: 11px;\n            right: 11px;\n        }\n    }\n    @media screen and (max-width: 450px) {\n        #standaloneWidget .gpay-card-info-container-fill {\n            margin: 0 10px 5px 10px;\n        }\n    }\n    \n    apple-pay-button {\n        padding: 0 10px 20px;\n        max-width: 320px;\n    }\n    \n    @media screen and (max-width: 450px) {\n        apple-pay-button {\n            max-width: 100%;\n        }\n    }\n</style>\n<div id=\"spinner\" class=\"spinner-wrapper spinner-wrapper--hidden\">\n    <svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 200 200'><radialGradient id='a5' cx='.66' fx='.66' cy='.3125' fy='.3125' gradientTransform='scale(1.5)'><stop offset='0' stop-color='#191919'></stop><stop offset='.3' stop-color='#191919' stop-opacity='.9'></stop><stop offset='.6' stop-color='#191919' stop-opacity='.6'></stop><stop offset='.8' stop-color='#191919' stop-opacity='.3'></stop><stop offset='1' stop-color='#191919' stop-opacity='0'></stop></radialGradient><circle transform-origin='center' fill='none' stroke='url(#a5)' stroke-width='30' stroke-linecap='round' stroke-dasharray='200 1000' stroke-dashoffset='0' cx='100' cy='100' r='70'><animateTransform type='rotate' attributeName='transform' calcMode='spline' dur='1' values='360;0' keyTimes='0;1' keySplines='0 0 1 1' repeatCount='indefinite'></animateTransform></circle><circle transform-origin='center' fill='none' opacity='.2' stroke='#191919' stroke-width='30' stroke-linecap='round' cx='100' cy='100' r='70'></circle></svg>\n    <pre class=\"background\"></pre>\n</div>\n";
+  var additional = "\n<style>\n    #standaloneWidget iframe[title=\"3d secure authentication\"],\n    #standaloneWidget .threeDSecure-iframe {\n        height: 420px;\n    }\n    #standaloneWidget iframe, #list iframe {\n      display: block;\n       max-width: 640px;\n       min-width: 200px;\n       width: 100%;\n       border-width: 0;\n    }\n    .spinner-wrapper {\n      position: absolute;\n      width: calc(100% + 1px);\n      height: calc(100% + 1px);\n      top: 0;\n      left: 0;\n      display: flex;\n      justify-content: center;\n      align-items: center;\n      z-index: 999;\n    }\n    \n    .spinner-wrapper svg {\n        position: absolute;\n\n        height: 50px;\n        width: 50px;\n        z-index: 1000;\n      }\n  \n    .spinner-wrapper .background {\n      margin: 0 !important;\n      background: #f9f9f9;\n      color: #f9f9f9;\n      word-break: break-all;\n      white-space: pre-wrap;\n      width: 100%;\n      height: 100%;\n    }\n    \n    .spinner-wrapper--hidden {\n        display: none;\n    }\n    @media screen and (max-width: 450px) {\n        #standaloneWidget button {\n            width: 100% !important;\n        }\n    }\n    @media screen and (max-width: 450px) {\n        #standaloneWidget .paypal-buttons {\n            margin: 0 10px 10px 10px;\n        }\n    }\n    @media screen and (min-width: 451px) {\n        #standaloneWidget .paypal-buttons {\n            padding-bottom: 12px;\n            right: 10px;\n            max-width: 320px;\n        }\n    }\n    @media screen and (min-width: 451px) {\n        #standaloneWidget #gpay-button-online-api-id {\n            max-width: 311px;\n            margin-bottom: 11px;\n            right: 11px;\n        }\n    }\n    @media screen and (max-width: 450px) {\n        #standaloneWidget .gpay-card-info-container-fill {\n            margin: 0 10px 5px 10px;\n        }\n    }\n    \n    apple-pay-button {\n        padding: 0 10px 20px;\n        max-width: 320px;\n    }\n    \n    @media screen and (max-width: 450px) {\n        apple-pay-button {\n            max-width: 100%;\n        }\n    }\n</style>\n<div id=\"spinner\" class=\"spinner-wrapper spinner-wrapper--hidden\">\n    <svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 200 200'><radialGradient id='a5' cx='.66' fx='.66' cy='.3125' fy='.3125' gradientTransform='scale(1.5)'><stop offset='0' stop-color='#191919'></stop><stop offset='.3' stop-color='#191919' stop-opacity='.9'></stop><stop offset='.6' stop-color='#191919' stop-opacity='.6'></stop><stop offset='.8' stop-color='#191919' stop-opacity='.3'></stop><stop offset='1' stop-color='#191919' stop-opacity='0'></stop></radialGradient><circle transform-origin='center' fill='none' stroke='url(#a5)' stroke-width='30' stroke-linecap='round' stroke-dasharray='200 1000' stroke-dashoffset='0' cx='100' cy='100' r='70'><animateTransform type='rotate' attributeName='transform' calcMode='spline' dur='1' values='360;0' keyTimes='0;1' keySplines='0 0 1 1' repeatCount='indefinite'></animateTransform></circle><circle transform-origin='center' fill='none' opacity='.2' stroke='#191919' stroke-width='30' stroke-linecap='round' cx='100' cy='100' r='70'></circle></svg>\n    <pre class=\"background\"></pre>\n</div>\n";
 
   var EVENT$1 = {
     PAYMENT_SUCCESSFUL: 'paymentSuccessful',
@@ -17754,13 +18489,13 @@
   };
   var IFRAME_ELEMENTS_STYLES = {
     'max-width': '640px',
-    'min-width': '320px',
+    'min-width': '200px',
     'display': 'flex',
     'margin': 'auto'
   };
   var WIDGET_STYLES = {
     'max-width': '640px',
-    'min-width': '320px',
+    'min-width': '200px',
     'margin': 'auto',
     'position': 'relative'
   };
@@ -37797,6 +38532,8 @@
   exports.ExternalCheckoutBuilder = Builder$1;
   exports.ExternalCheckoutChecker = Checker;
   exports.FORM_FIELD = FORM_FIELD$1;
+  exports.FRAUD_PREVENTION_EVENTS = FRAUD_PREVENTION_EVENTS;
+  exports.FraudPreventionService = FraudPreventionService;
   exports.HtmlMultiWidget = HtmlMultiWidget;
   exports.HtmlPaymentSourceWidget = HtmlPaymentSourceWidget;
   exports.HtmlWidget = HtmlWidget;