@salla.sa/twilight-components 2.14.540 → 2.14.542

package/dist/collection/components/salla-file-upload/upload-limits.js

@@ -0,0 +1,127 @@
+/*!
+ * Crafted with ❤ by Salla
+ */
+export const IMAGE_UPLOAD_ACCEPT = 'image/png, image/jpeg, image/jpg';
+/** Valid MIME types + extensions for native file pickers (macOS Finder requires real MIME types). */
+export const VIDEO_UPLOAD_ACCEPT = 'video/mp4, video/quicktime, video/x-msvideo, video/x-matroska, video/webm, .mp4, .mov, .avi, .mkv, .webm';
+export const MEDIA_UPLOAD_ACCEPT = `${IMAGE_UPLOAD_ACCEPT}, ${VIDEO_UPLOAD_ACCEPT}`;
+export function buildMediaUploadAccept(allowImages, allowVideos) {
+    const types = [];
+    if (allowImages)
+        types.push(IMAGE_UPLOAD_ACCEPT);
+    if (allowVideos)
+        types.push(VIDEO_UPLOAD_ACCEPT);
+    return types.join(', ');
+}
+export function usesSplitCountLimits(maxImagesCount, maxVideosCount) {
+    return maxImagesCount != null || maxVideosCount != null;
+}
+export function isConfiguredLimit(limit) {
+    return limit != null;
+}
+export function getMaxImagesCount(maxImagesCount) {
+    return maxImagesCount ?? 0;
+}
+export function getMaxVideosCount(maxVideosCount) {
+    return maxVideosCount ?? 0;
+}
+export function getTotalMaxFiles(maxFilesCount, maxImagesCount, maxVideosCount) {
+    if (usesSplitCountLimits(maxImagesCount, maxVideosCount)) {
+        return getMaxImagesCount(maxImagesCount) + getMaxVideosCount(maxVideosCount);
+    }
+    return maxFilesCount;
+}
+export function isVideoMimeType(mimeType, urlOrName) {
+    if (mimeType?.startsWith('video/'))
+        return true;
+    if (urlOrName && /\.(mp4|webm|mov|avi|mkv)$/i.test(urlOrName))
+        return true;
+    return false;
+}
+export function isImageMimeType(mimeType, urlOrName) {
+    if (mimeType?.startsWith('image/'))
+        return true;
+    if (urlOrName && /\.(png|jpe?g|gif|webp|heic|heif)$/i.test(urlOrName))
+        return true;
+    return false;
+}
+export function parseSizeToBytes(size) {
+    const match = size.match(/^(\d+(?:\.\d+)?)\s*(KB|MB)$/i);
+    if (!match)
+        return 0;
+    const value = parseFloat(match[1]);
+    return match[2].toUpperCase() === 'MB' ? value * 1024 * 1024 : value * 1024;
+}
+export function formatBytesAsSize(bytes) {
+    if (bytes >= 1024 * 1024) {
+        return `${Math.round(bytes / (1024 * 1024))}MB`;
+    }
+    return `${Math.round(bytes / 1024)}KB`;
+}
+export function formatDuration(seconds) {
+    const mins = Math.floor(seconds / 60);
+    const secs = Math.floor(seconds % 60);
+    if (mins > 0) {
+        return `${mins}:${secs.toString().padStart(2, '0')}`;
+    }
+    return `${secs}s`;
+}
+export function getFilePondMaxFileSize(maxFileSize, storeUploadSizeKb, maxVideoFileSize) {
+    const imageLimit = storeUploadSizeKb ? `${storeUploadSizeKb}KB` : maxFileSize;
+    const limits = [imageLimit, maxVideoFileSize].filter(Boolean).map(s => parseSizeToBytes(s));
+    if (!limits.length) {
+        return null;
+    }
+    return formatBytesAsSize(Math.max(...limits));
+}
+export function isUploadSizeError(error) {
+    const body = (error.body || '').toLowerCase();
+    return (error.type === 'size' ||
+        body.includes('too large') ||
+        body.includes('max file size') ||
+        body.includes('file is too big') ||
+        body.includes('exceeds'));
+}
+export function isUploadTypeError(error) {
+    const body = (error.body || '').toLowerCase();
+    return (error.type === 'type' ||
+        body.includes('invalid type') ||
+        body.includes('not allowed') ||
+        body.includes('file type'));
+}
+export function getUploadErrorMessage(error, options) {
+    if (isUploadSizeError(error)) {
+        if (options.isVideo) {
+            const sizeLabel = options.maxVideoFileSizeLabel ||
+                (options.maxVideoBytes ? formatBytesAsSize(options.maxVideoBytes) : '');
+            return options.videoTooLarge(sizeLabel);
+        }
+        return options.tooLargeLabel;
+    }
+    if (isUploadTypeError(error)) {
+        return options.invalidTypeLabel;
+    }
+    if (error.body) {
+        return error.body;
+    }
+    return options.genericErrorLabel;
+}
+/** FilePond FileStatus values used for gallery counting. */
+export const FILE_STATUS_INIT = 1;
+export const FILE_STATUS_IDLE = 2;
+export const FILE_STATUS_PROCESSING = 3;
+export const FILE_STATUS_PROCESSING_COMPLETE = 5;
+export const FILE_STATUS_PROCESSING_ERROR = 6;
+export const FILE_STATUS_LOADING = 7;
+export const FILE_STATUS_LOAD_ERROR = 8;
+export const FILE_STATUS_PROCESSING_QUEUED = 9;
+export function shouldCountGalleryFile(status) {
+    return status !== FILE_STATUS_LOAD_ERROR && status !== FILE_STATUS_PROCESSING_ERROR;
+}
+/** Exclude in-flight add validation so limit counters don't spike on rejected picks. */
+export function shouldCountGalleryLimit(status) {
+    if (!shouldCountGalleryFile(status)) {
+        return false;
+    }
+    return status !== FILE_STATUS_LOADING && status !== FILE_STATUS_INIT;
+}

package/dist/collection/components/salla-product-options/salla-product-options.js

@@ -818,7 +818,13 @@ export class SallaProductOptions {
                 + (detail.additional_price ? ` (${salla.money(detail.additional_price, false)})` : '');
             // Keep the Riyal icon markup for price-format radio options rendered via innerHTML.
             if (format === "price") {
-                const normalizedPrice = salla.helpers.digitsOnly(detail.name);
+                // Strip markup from the name before extracting the price, so an XSS
+                // payload (e.g. <img onerror=...>) can't contribute a stray '.' that
+                // turns "100" into Number(".100") === 0.1. Local fix only — do NOT
+                // relax the shared salla.helpers.digitsOnly (broad blast radius).
+                // COD-10924 / SAL-153 Stage 4.
+                const strippedName = detail.name.replace(/<[^>]*>/g, '');
+                const normalizedPrice = salla.helpers.digitsOnly(strippedName);
                 const price = Number(normalizedPrice);
                 if (!normalizedPrice || !Number.isFinite(price)) {
                     return detailSuffix;

package/dist/collection/components/salla-products-slider/salla-products-slider.js

@@ -377,7 +377,7 @@ export class SallaProductsSlider {
                 "mutable": false,
                 "complexType": {
                     "original": "Partial<SallaSliderProps>",
-                    "resolved": "{ autoPlay?: boolean; loop?: boolean; type?: \"\" | \"default\" | \"blog\" | \"carousel\" | \"fullscreen\" | \"thumbs\" | \"hero\" | \"testimonials\" | \"fullwidth\"; direction?: string; vertical?: boolean; blockTitle?: string; listenToThumbnailsOption?: boolean; blockSubtitle?: string; displayAllUrl?: string; arrowsCentered?: boolean; verticalThumbs?: boolean; gridThumbs?: boolean; autoHeight?: boolean; showControls?: boolean; controlsOuter?: boolean; showThumbsControls?: boolean; staticWhenSingle?: boolean; slidesPerView?: string; pagination?: boolean; centered?: boolean; sliderConfig?: any; thumbsConfig?: any; }",
+                    "resolved": "{ autoPlay?: boolean; loop?: boolean; type?: \"\" | \"default\" | \"blog\" | \"carousel\" | \"fullscreen\" | \"thumbs\" | \"hero\" | \"testimonials\" | \"fullwidth\"; direction?: string; autoHeight?: boolean; showControls?: boolean; sliderConfig?: any; vertical?: boolean; blockTitle?: string; listenToThumbnailsOption?: boolean; blockSubtitle?: string; displayAllUrl?: string; arrowsCentered?: boolean; verticalThumbs?: boolean; gridThumbs?: boolean; controlsOuter?: boolean; showThumbsControls?: boolean; staticWhenSingle?: boolean; slidesPerView?: string; pagination?: boolean; centered?: boolean; thumbsConfig?: any; }",
                     "references": {
                         "Partial": {
                             "location": "global",

package/dist/collection/components/salla-rating-modal/rating-modal-media.js

@@ -0,0 +1,85 @@
+/*!
+ * Crafted with ❤ by Salla
+ */
+export const MAX_IMAGE_UPLOAD_LIMIT = 10;
+export const MAX_VIDEO_UPLOAD_LIMIT = 5;
+export const MAX_VIDEO_FILE_SIZE = '100MB';
+export const MAX_VIDEO_DURATION = 60;
+export const MAX_PARALLEL_UPLOADS = 10;
+export function isVideoUrl(url) {
+    const pathname = url.split(/[?#]/, 1)[0];
+    return /\.(mp4|webm|mov|avi|mkv)$/i.test(pathname);
+}
+export function splitMediaUrls(urls) {
+    return urls.reduce((acc, url) => {
+        if (!url)
+            return acc;
+        if (isVideoUrl(url)) {
+            acc.videos.push(url);
+        }
+        else {
+            acc.images.push(url);
+        }
+        return acc;
+    }, { images: [], videos: [] });
+}
+export function getMediaUrlsByType(items) {
+    return splitMediaUrls(items.map(item => item?.url || '').filter(Boolean));
+}
+export function parseMediaField(value) {
+    if (!value)
+        return [];
+    if (Array.isArray(value))
+        return value.filter(Boolean);
+    return value
+        .split(',')
+        .map(url => url.trim())
+        .filter(Boolean);
+}
+export function countMediaByType(items) {
+    return items.reduce((counts, item) => {
+        const url = item?.url || '';
+        if (isVideoUrl(url)) {
+            counts.video += 1;
+        }
+        else {
+            counts.image += 1;
+        }
+        return counts;
+    }, { image: 0, video: 0 });
+}
+export function createPreloadedMediaItem(url) {
+    return { id: url, url };
+}
+export function removeUploadedImage(images, removedId) {
+    const normalizedId = String(removedId);
+    let removed = false;
+    return images.filter(image => {
+        const imageId = image?.id !== undefined && image?.id !== null ? String(image.id) : '';
+        const imageUrl = String(image?.url ?? '');
+        const matches = imageId === normalizedId || imageUrl === normalizedId;
+        if (matches) {
+            if (removed) {
+                return true;
+            }
+            removed = true;
+            return false;
+        }
+        return true;
+    });
+}
+export function syncHiddenMediaInputs(imagesInput, videosInput, items) {
+    const { images, videos } = getMediaUrlsByType(items);
+    if (imagesInput)
+        imagesInput.value = images.join(',');
+    if (videosInput)
+        videosInput.value = videos.join(',');
+}
+export function normalizeSubmittedMedia(data, allowAttachImages, allowAttachVideos) {
+    if (!allowAttachImages) {
+        delete data.images;
+    }
+    if (!allowAttachVideos) {
+        delete data.videos;
+    }
+}