@schukai/monster 4.25.5 → 4.27.0

package/CHANGELOG.md

@@ -2,6 +2,25 @@
 
 
 
+## [4.27.0] - 2025-07-03
+
+### Add Features
+
+- Increase digits option and improve attribute observation [#330](https://gitlab.schukai.com/oss/libraries/javascript/monster/issues/330)
+
+
+
+## [4.26.0] - 2025-07-03
+
+### Add Features
+
+- Improve random UUID generation check [#330](https://gitlab.schukai.com/oss/libraries/javascript/monster/issues/330)
+### Bug Fixes
+
+- Add HTML escaping for message headers to prevent XSS
+
+
+
 ## [4.25.5] - 2025-07-03
 
 ### Bug Fixes

package/package.json

@@ -1 +1 @@
-{"author":"schukai GmbH","dependencies":{"@floating-ui/dom":"^1.7.2","@popperjs/core":"^2.11.8"},"description":"Monster is a simple library for creating fast, robust and lightweight websites.","homepage":"https://monsterjs.org/","keywords":["framework","web","dom","css","sass","mobile-first","app","front-end","templates","schukai","core","shopcloud","alvine","monster","buildmap","stack","observer","observable","uuid","node","nodelist","css-in-js","logger","log","theme"],"license":"AGPL 3.0","main":"source/monster.mjs","module":"source/monster.mjs","name":"@schukai/monster","repository":{"type":"git","url":"https://gitlab.schukai.com/oss/libraries/javascript/monster.git"},"type":"module","version":"4.25.5"}
+{"author":"schukai GmbH","dependencies":{"@floating-ui/dom":"^1.7.2","@popperjs/core":"^2.11.8"},"description":"Monster is a simple library for creating fast, robust and lightweight websites.","homepage":"https://monsterjs.org/","keywords":["framework","web","dom","css","sass","mobile-first","app","front-end","templates","schukai","core","shopcloud","alvine","monster","buildmap","stack","observer","observable","uuid","node","nodelist","css-in-js","logger","log","theme"],"license":"AGPL 3.0","main":"source/monster.mjs","module":"source/monster.mjs","name":"@schukai/monster","repository":{"type":"git","url":"https://gitlab.schukai.com/oss/libraries/javascript/monster.git"},"type":"module","version":"4.27.0"}

package/source/components/content/viewer/message.mjs

@@ -193,6 +193,15 @@ class MessageContent extends CustomElement {
 		this.setOption("message.subject", message?.subject || null);
 		this.setOption("message.messageID", message?.messageID || null);
 
+		function escapeHTML(str) {
+			return str
+				.replace(/&/g, "&")
+				.replace(/</g, "&lt;")
+				.replace(/>/g, "&gt;")
+				.replace(/"/g, "&quot;")
+				.replace(/'/g, "&#39;");
+		}
+
 		const headers = [];
 		for (const [key, value] of Object.entries(message?.headers || {})) {
 			if (key && value) {
@@ -200,7 +209,8 @@ class MessageContent extends CustomElement {
 				if (isArray(valueString)) {
 					valueString = "<ul>";
 					for (const item of value) {
-						valueString += `<li>${item}</li>`;
+						const escapedItem = escapeHTML(item);
+						valueString += `<li>${escapedItem}</li>`;
 					}
 					valueString += "</ul>";
 				}

package/source/components/form/digits.mjs

@@ -132,7 +132,7 @@ class Digits extends CustomControl {
 				main: getTemplate(),
 			},
 
-			digits: 4,
+			digits: 6,
 			characterSet: "0123456789",
 
 			digitsControls: [],
@@ -184,13 +184,20 @@ function initOptionObserver() {
 	const self = this;
 
 	let lastValue = this.getOption("value");
+	let lastDigits = this.getOption("digits");
 
 	self.attachObserver(
 		new Observer(function () {
+
 			if (lastValue !== self.getOption("value")) {
 				lastValue = self.getOption("value");
 				updateDigitControls.call(self);
 			}
+
+			if (lastDigits !== self.getOption("digits")) {
+				lastDigits = self.getOption("digits");
+				updateDigitControls.call(self);
+			}
 		}),
 	);
 }
@@ -237,6 +244,10 @@ function initEventHandler() {
 	const self = this;
 	const element = this[digitsElementSymbol];
 
+	// this[attributeObserverSymbol]['data-monster-option-digits'] = () => {
+	// 	this.setOption("digits", );
+	// }
+
 	element.addEventListener("keydown", function (event) {
 		if (event.target.tagName !== "INPUT") return;
 		const inputControl = event.target;

package/source/dom/customelement.mjs

@@ -713,6 +713,7 @@ class CustomElement extends HTMLElement {
 	 * @since 1.15.0
 	 */
 	attributeChangedCallback(attrName, oldVal, newVal) {
+
 		if (attrName.startsWith("data-monster-option-")) {
 			setOptionFromAttribute(
 				this,

package/source/types/uuid.mjs

@@ -78,6 +78,6 @@ function createWithRandom() {
 function createWithCrypto() {
 	const crypt = getGlobalObject("crypto");
 	if (!isObject(crypt)) return;
-	if (typeof crypt?.["randomUUID"]) return;
+	if (typeof crypt?.["randomUUID"] !== "function") return;
 	return crypt.randomUUID();
 }