@shopgate/engage 7.31.8-beta.1 → 7.31.9-beta.1

package/core/helpers/index.d.ts

@@ -28,6 +28,7 @@ export { generateGoogleMapsDirectionsUrl } from "./googleMaps";
 export { getDeviceTypeForCms } from "./deviceType";
 export { default as logGroup } from "@shopgate/pwa-core/helpers/logGroup";
 export { default as decodeHTML } from "@shopgate/pwa-common/helpers/html/decodeHTML";
+export { default as htmlToText } from "@shopgate/pwa-common/helpers/html/htmlToText";
 export { default as parseHTML } from "@shopgate/pwa-common/helpers/html/parseHTML";
 export { default as getTranslator } from "@shopgate/pwa-common/helpers/i18n/getTranslator";
 export { default as getPriceFormatter } from "@shopgate/pwa-common/helpers/i18n/getPriceFormatter";

package/core/helpers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/helpers/index.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yDAOO,qCAAqC;uBAArC,qCAAqC;wBAArC,qCAAqC;yCAArC,qCAAqC;yCAArC,qCAAqC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/helpers/index.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yDAOO,qCAAqC;uBAArC,qCAAqC;wBAArC,qCAAqC;yCAArC,qCAAqC;yCAArC,qCAAqC"}

package/core/helpers/index.js

@@ -31,6 +31,7 @@ export * from '@shopgate/pwa-common/helpers/date';
 export * from '@shopgate/pwa-common/helpers/dom';
 export { env, isDev, isProd, isRemote, isStaging, isLinux, isWindows } from '@shopgate/pwa-common/helpers/environment';
 export { default as decodeHTML } from '@shopgate/pwa-common/helpers/html/decodeHTML';
+export { default as htmlToText } from '@shopgate/pwa-common/helpers/html/htmlToText';
 export * from '@shopgate/pwa-common/helpers/html/handleDOM';
 export { default as parseHTML } from '@shopgate/pwa-common/helpers/html/parseHTML';
 export { default as getTranslator } from '@shopgate/pwa-common/helpers/i18n/getTranslator';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopgate/engage",
-  "version": "7.31.8-beta.1",
+  "version": "7.31.9-beta.1",
   "description": "Shopgate's ENGAGE library.",
   "license": "Apache-2.0",
   "author": "Shopgate <support@shopgate.com>",
@@ -18,12 +18,12 @@
   "dependencies": {
     "@emotion/react": "^11.14.0",
     "@shopgate/native-modules": "1.0.0-beta.34",
-    "@shopgate/pwa-common": "7.31.8-beta.1",
-    "@shopgate/pwa-common-commerce": "7.31.8-beta.1",
-    "@shopgate/pwa-core": "7.31.8-beta.1",
-    "@shopgate/pwa-ui-ios": "7.31.8-beta.1",
-    "@shopgate/pwa-ui-material": "7.31.8-beta.1",
-    "@shopgate/pwa-ui-shared": "7.31.8-beta.1",
+    "@shopgate/pwa-common": "7.31.9-beta.1",
+    "@shopgate/pwa-common-commerce": "7.31.9-beta.1",
+    "@shopgate/pwa-core": "7.31.9-beta.1",
+    "@shopgate/pwa-ui-ios": "7.31.9-beta.1",
+    "@shopgate/pwa-ui-material": "7.31.9-beta.1",
+    "@shopgate/pwa-ui-shared": "7.31.9-beta.1",
     "@stripe/react-stripe-js": "^1.16.5",
     "@stripe/stripe-js": "^1.44.1",
     "@virtuous/conductor": "~2.5.0",

package/page/components/Widgets/constants.js

@@ -1,7 +1,8 @@
 /**
- * List of allowed origin patterns for cms page preview iFrame communication. Incoming messages are
- * only processed when their origin matches one of these patterns, and outgoing messages are only
- * posted to origins that matched before.
+ * List of allowed origin patterns for cms page preview iFrame communication. Both directions are
+ * validated against these patterns: incoming messages are only processed when their origin matches,
+ * and outgoing messages are only posted to a matching origin - either the origin of the last
+ * accepted incoming message, or the origin of the embedding document.
  *
  * A "*" acts as a wildcard for one or more domain labels, so "https://*.shopgate.com" matches
  * "https://app.shopgate.com" as well as "https://next.us.admin.shopgate.com", but neither

package/page/components/Widgets/hooks.js

@@ -99,7 +99,7 @@ function useIframeMessenger(onMessage, parentOrigins, enabled = true) {
     return () => {
       window.removeEventListener('message', handler);
     };
-  }, [enabled, parentOrigins, sendToParent]);
+  }, [enabled, parentOrigins]);
   return {
     sendToParent
   };
@@ -127,6 +127,10 @@ export const usePreviewIframeCommunication = (isActive = false) => {
   const {
     sendToParent
   } = useIframeMessenger(data => {
+    // Allowed parents can also emit unrelated messages with arbitrary payloads.
+    if (typeof data !== 'object' || data === null) {
+      return;
+    }
     if (data.type === 'receivePageConfig') {
       // Page preview config received from the parent window.
       dispatch(receivePageConfigV2({