@prokodo/ui 0.0.37 → 0.0.39

package/dist/node_modules/.pnpm/xss@1.0.15/node_modules/xss/lib/xss.js

@@ -0,0 +1,179 @@
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+import { __require as requireLib } from "../../../../cssfilter@0.0.10/node_modules/cssfilter/lib/index.js";
+import { __require as require_default } from "./default.js";
+import { __require as requireParser } from "./parser.js";
+import { __require as requireUtil } from "./util.js";
+var xss;
+var hasRequiredXss;
+function requireXss() {
+  if (hasRequiredXss) return xss;
+  hasRequiredXss = 1;
+  var FilterCSS = requireLib().FilterCSS;
+  var DEFAULT = /* @__PURE__ */ require_default();
+  var parser = /* @__PURE__ */ requireParser();
+  var parseTag = parser.parseTag;
+  var parseAttr = parser.parseAttr;
+  var _ = /* @__PURE__ */ requireUtil();
+  function isNull(obj) {
+    return obj === void 0 || obj === null;
+  }
+  __name(isNull, "isNull");
+  function getAttrs(html) {
+    var i = _.spaceIndex(html);
+    if (i === -1) {
+      return {
+        html: "",
+        closing: html[html.length - 2] === "/"
+      };
+    }
+    html = _.trim(html.slice(i + 1, -1));
+    var isClosing = html[html.length - 1] === "/";
+    if (isClosing) html = _.trim(html.slice(0, -1));
+    return {
+      html,
+      closing: isClosing
+    };
+  }
+  __name(getAttrs, "getAttrs");
+  function shallowCopyObject(obj) {
+    var ret = {};
+    for (var i in obj) {
+      ret[i] = obj[i];
+    }
+    return ret;
+  }
+  __name(shallowCopyObject, "shallowCopyObject");
+  function keysToLowerCase(obj) {
+    var ret = {};
+    for (var i in obj) {
+      if (Array.isArray(obj[i])) {
+        ret[i.toLowerCase()] = obj[i].map(function(item) {
+          return item.toLowerCase();
+        });
+      } else {
+        ret[i.toLowerCase()] = obj[i];
+      }
+    }
+    return ret;
+  }
+  __name(keysToLowerCase, "keysToLowerCase");
+  function FilterXSS(options) {
+    options = shallowCopyObject(options || {});
+    if (options.stripIgnoreTag) {
+      if (options.onIgnoreTag) {
+        console.error(
+          'Notes: cannot use these two options "stripIgnoreTag" and "onIgnoreTag" at the same time'
+        );
+      }
+      options.onIgnoreTag = DEFAULT.onIgnoreTagStripAll;
+    }
+    if (options.whiteList || options.allowList) {
+      options.whiteList = keysToLowerCase(options.whiteList || options.allowList);
+    } else {
+      options.whiteList = DEFAULT.whiteList;
+    }
+    this.attributeWrapSign = options.singleQuotedAttributeValue === true ? "'" : DEFAULT.attributeWrapSign;
+    options.onTag = options.onTag || DEFAULT.onTag;
+    options.onTagAttr = options.onTagAttr || DEFAULT.onTagAttr;
+    options.onIgnoreTag = options.onIgnoreTag || DEFAULT.onIgnoreTag;
+    options.onIgnoreTagAttr = options.onIgnoreTagAttr || DEFAULT.onIgnoreTagAttr;
+    options.safeAttrValue = options.safeAttrValue || DEFAULT.safeAttrValue;
+    options.escapeHtml = options.escapeHtml || DEFAULT.escapeHtml;
+    this.options = options;
+    if (options.css === false) {
+      this.cssFilter = false;
+    } else {
+      options.css = options.css || {};
+      this.cssFilter = new FilterCSS(options.css);
+    }
+  }
+  __name(FilterXSS, "FilterXSS");
+  FilterXSS.prototype.process = function(html) {
+    html = html || "";
+    html = html.toString();
+    if (!html) return "";
+    var me = this;
+    var options = me.options;
+    var whiteList = options.whiteList;
+    var onTag = options.onTag;
+    var onIgnoreTag = options.onIgnoreTag;
+    var onTagAttr = options.onTagAttr;
+    var onIgnoreTagAttr = options.onIgnoreTagAttr;
+    var safeAttrValue = options.safeAttrValue;
+    var escapeHtml = options.escapeHtml;
+    var attributeWrapSign = me.attributeWrapSign;
+    var cssFilter = me.cssFilter;
+    if (options.stripBlankChar) {
+      html = DEFAULT.stripBlankChar(html);
+    }
+    if (!options.allowCommentTag) {
+      html = DEFAULT.stripCommentTag(html);
+    }
+    var stripIgnoreTagBody = false;
+    if (options.stripIgnoreTagBody) {
+      stripIgnoreTagBody = DEFAULT.StripTagBody(
+        options.stripIgnoreTagBody,
+        onIgnoreTag
+      );
+      onIgnoreTag = stripIgnoreTagBody.onIgnoreTag;
+    }
+    var retHtml = parseTag(
+      html,
+      function(sourcePosition, position, tag, html2, isClosing) {
+        var info = {
+          sourcePosition,
+          position,
+          isClosing,
+          isWhite: Object.prototype.hasOwnProperty.call(whiteList, tag)
+        };
+        var ret = onTag(tag, html2, info);
+        if (!isNull(ret)) return ret;
+        if (info.isWhite) {
+          if (info.isClosing) {
+            return "</" + tag + ">";
+          }
+          var attrs = getAttrs(html2);
+          var whiteAttrList = whiteList[tag];
+          var attrsHtml = parseAttr(attrs.html, function(name, value) {
+            var isWhiteAttr = _.indexOf(whiteAttrList, name) !== -1;
+            var ret2 = onTagAttr(tag, name, value, isWhiteAttr);
+            if (!isNull(ret2)) return ret2;
+            if (isWhiteAttr) {
+              value = safeAttrValue(tag, name, value, cssFilter);
+              if (value) {
+                return name + "=" + attributeWrapSign + value + attributeWrapSign;
+              } else {
+                return name;
+              }
+            } else {
+              ret2 = onIgnoreTagAttr(tag, name, value, isWhiteAttr);
+              if (!isNull(ret2)) return ret2;
+              return;
+            }
+          });
+          html2 = "<" + tag;
+          if (attrsHtml) html2 += " " + attrsHtml;
+          if (attrs.closing) html2 += " /";
+          html2 += ">";
+          return html2;
+        } else {
+          ret = onIgnoreTag(tag, html2, info);
+          if (!isNull(ret)) return ret;
+          return escapeHtml(html2);
+        }
+      },
+      escapeHtml
+    );
+    if (stripIgnoreTagBody) {
+      retHtml = stripIgnoreTagBody.remove(retHtml);
+    }
+    return retHtml;
+  };
+  xss = FilterXSS;
+  return xss;
+}
+__name(requireXss, "requireXss");
+export {
+  requireXss as __require
+};