@poe-platform/safe-js 0.1.470 → 0.1.471

package/dist/safe-js/chunks/{chunk-4LQGK4QH.js → chunk-D26DLMQR.js}

@@ -19873,8 +19873,37 @@ async function compareStringLocale(value, args, budget, context) {
   }
 }
 
+// packages/safe-js/src/interp/methods/string-html.ts
+var stringHtmlMethods = {
+  anchor: ["a", "name"],
+  big: ["big", ""],
+  blink: ["blink", ""],
+  bold: ["b", ""],
+  fixed: ["tt", ""],
+  fontcolor: ["font", "color"],
+  fontsize: ["font", "size"],
+  italics: ["i", ""],
+  link: ["a", "href"],
+  small: ["small", ""],
+  strike: ["strike", ""],
+  sub: ["sub", ""],
+  sup: ["sup", ""]
+};
+async function createStringHtml(value, [tag, attribute], argument, budget, context) {
+  const release = retainValues(budget, () => [value, argument]);
+  try {
+    const text = attribute === "" ? "" : await sandboxString(argument, budget, context);
+    budget.visitNode(value.length + text.length);
+    const opening = attribute === "" ? `<${tag}>` : `<${tag} ${attribute}="${text.replaceAll('"', "&quot;")}">`;
+    return budget.allocateString(`${opening}${value}</${tag}>`);
+  } finally {
+    release();
+  }
+}
+
 // packages/safe-js/src/interp/methods/string.ts
 var stringMethodLengths = {
+  ...Object.fromEntries(Object.entries(stringHtmlMethods).map(([name, [, attribute]]) => [name, attribute === "" ? 0 : 1])),
   at: 1,
   charAt: 1,
   charCodeAt: 1,
@@ -20012,6 +20041,9 @@ function callStringMethod(value, methodName, args, budget, callClosure = async (
   return dispatch();
 }
 function callStringMethodBody(value, methodName, args, budget, parent, context) {
+  if (Object.hasOwn(stringHtmlMethods, methodName)) {
+    return createStringHtml(value, stringHtmlMethods[methodName], args[0], budget, context);
+  }
   if (methodName === "concat" && args.some((argument) => argument !== null && typeof argument === "object")) {
     return callConcat(value, args, budget, context);
   }
@@ -57043,4 +57075,4 @@ authorization of the copyright holder.
 SPDX-License-Identifier: Unicode-3.0
 
 */
-//# sourceMappingURL=chunk-4LQGK4QH.js.map
+//# sourceMappingURL=chunk-D26DLMQR.js.map