@stoplight/elements-core 9.0.25-beta-0.4 → 9.0.26-beta-0.0

package/components/Docs/Article/index.d.ts

@@ -1,5 +1,6 @@
 import { IMarkdownViewerProps } from '@stoplight/markdown-viewer';
+import * as React from 'react';
 import { DocsComponentProps } from '..';
 declare type ArticleProps = DocsComponentProps<IMarkdownViewerProps['markdown']>;
-export declare const Article: import("react").FunctionComponent<ArticleProps & import("@stoplight/react-error-boundary").ErrorBoundaryProps<{}>>;
+export declare const Article: React.FunctionComponent<ArticleProps & import("@stoplight/react-error-boundary").ErrorBoundaryProps<{}>>;
 export {};

package/components/Docs/HttpOperation/Body.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="react" />
 import { IHttpOperationRequestBody } from '@stoplight/types';
 export interface BodyProps {
     body: IHttpOperationRequestBody;

package/components/Docs/HttpOperation/Callbacks.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="react" />
 import { IHttpCallbackOperation } from '@stoplight/types';
 import { ExtensionAddonRenderer } from '../Docs';
 export interface CallbacksProps {

package/components/Docs/HttpOperation/HttpOperation.d.ts

@@ -1,7 +1,8 @@
 import { IHttpEndpointOperation } from '@stoplight/types';
+import * as React from 'react';
 import { DocsComponentProps } from '..';
 export declare type HttpOperationProps = DocsComponentProps<IHttpEndpointOperation>;
-export declare const HttpOperation: import("react").FunctionComponent<HttpOperationProps & import("@stoplight/react-error-boundary").ErrorBoundaryProps<{}>>;
+export declare const HttpOperation: React.FunctionComponent<HttpOperationProps & import("@stoplight/react-error-boundary").ErrorBoundaryProps<{}>>;
 export declare function OperationHeader({ id, noHeading, hasBadges, name, isDeprecated, isInternal, hideServerUrl, method, path, }: {
     id: string;
     noHeading?: boolean;

package/components/Docs/HttpOperation/Responses.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="react" />
 import { IHttpOperationResponse } from '@stoplight/types';
 interface ResponsesProps {
     responses: IHttpOperationResponse[];

package/components/Docs/HttpService/HttpService.d.ts

@@ -1,4 +1,5 @@
 import { IHttpService } from '@stoplight/types';
+import * as React from 'react';
 import { DocsComponentProps } from '..';
 export declare type HttpServiceProps = DocsComponentProps<Partial<IHttpService>>;
-export declare const HttpService: import("react").FunctionComponent<HttpServiceProps & import("@stoplight/react-error-boundary").ErrorBoundaryProps<{}>>;
+export declare const HttpService: React.FunctionComponent<HttpServiceProps & import("@stoplight/react-error-boundary").ErrorBoundaryProps<{}>>;

package/components/Docs/Model/Model.d.ts

@@ -1,4 +1,5 @@
 import { JSONSchema7 } from 'json-schema';
+import * as React from 'react';
 import { DocsComponentProps } from '..';
 export declare type ModelProps = DocsComponentProps<JSONSchema7>;
-export declare const Model: import("react").FunctionComponent<ModelProps & import("@stoplight/react-error-boundary").ErrorBoundaryProps<{}>>;
+export declare const Model: React.FunctionComponent<ModelProps & import("@stoplight/react-error-boundary").ErrorBoundaryProps<{}>>;

package/components/Docs/Skeleton.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="react" />
 export declare const DocsSkeleton: ({ className, padding }: {
     className?: string | undefined;
     padding?: string | undefined;

package/components/Docs/story-renderer-helper.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="react" />
 import { ExtensionAddonRenderer } from './Docs';
 export declare const renderExtensionRenderer: ExtensionAddonRenderer;
 export declare const wrapOptionsContext: (story: any) => JSX.Element;

package/components/Layout/MobileTopNav.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="react" />
 import { LogoProps } from '../../types';
 import type { TableOfContentsItem } from '../TableOfContents';
 export declare const MobileTopNav: ({ name, logo, tree, pathname, onTocClick, }: {

package/components/Loading/Loading.d.ts

@@ -1 +1,2 @@
+/// <reference types="react" />
 export declare const Loading: () => JSX.Element;

package/components/MarkdownViewer/CustomComponents/ReactRouterLink.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="react" />
 import type { LinkProps } from '@stoplight/mosaic';
 export declare const ReactRouterMarkdownLink: ({ title, to, href: _href, children, }: Omit<LinkProps<"a">, "target" | "rel"> & {
     to?: string | undefined;

package/components/MarkdownViewer/CustomComponents/ResolvedImage.d.ts

@@ -1,3 +1,3 @@
 import React from 'react';
 import { BundledBranchNode } from '../../../types';
-export declare const createResolvedImageComponent: (branchNode: BundledBranchNode) => React.NamedExoticComponent<import("react").ImgHTMLAttributes<HTMLImageElement> & import("@stoplight/markdown/ast-types/hast").ImageProperties>;
+export declare const createResolvedImageComponent: (branchNode: BundledBranchNode) => React.NamedExoticComponent<React.ImgHTMLAttributes<HTMLImageElement> & import("@stoplight/markdown/ast-types/hast").ImageProperties>;

package/components/MarkdownViewer/index.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="react" />
 import { IMarkdownViewerProps } from '@stoplight/markdown-viewer';
 export declare const MarkdownViewer: {
     (props: IMarkdownViewerProps): JSX.Element;

package/components/ResponseExamples/ResponseExamples.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="react" />
 import { IHttpEndpointOperation } from '@stoplight/types';
 export interface ResponseExamplesProps {
     httpOperation: IHttpEndpointOperation;

package/components/TableOfContents/types.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="react" />
 export declare type TableOfContentsProps = {
     tree: TableOfContentsItem[];
     activeId: string;

package/components/TryIt/Servers/ServersDropdown.d.ts

@@ -1,3 +1,4 @@
+/// <reference types="react" />
 import type { IServer } from '@stoplight/types';
 export declare type ServersDropdownProps = {
     servers: IServer[];

package/context/Persistence.d.ts

@@ -1,6 +1,6 @@
 import * as React from 'react';
-export declare const PersistenceContextProvider: ({ initialValues, scope, children, }: import("react").PropsWithChildren<{
+export declare const PersistenceContextProvider: ({ initialValues, scope, children, }: React.PropsWithChildren<{
     initialValues?: Iterable<readonly [import("jotai").Atom<unknown>, unknown]> | undefined;
     scope?: import("jotai/core/atom").Scope | undefined;
-}>) => import("react").FunctionComponentElement<import("react").ProviderProps<import("jotai/core/contexts").ScopeContainer>>;
+}>) => React.FunctionComponentElement<React.ProviderProps<import("jotai/core/contexts").ScopeContainer>>;
 export declare function withPersistenceBoundary<T>(WrappedComponent: React.ComponentType<T>): React.FC<T>;

package/index.esm.js

@@ -39,6 +39,7 @@ import map from 'lodash/map.js';
 import mapValues from 'lodash/mapValues.js';
 import pickBy from 'lodash/pickBy.js';
 import { CodeEditor } from '@stoplight/mosaic-code-editor';
+import DOMPurify from 'dompurify';
 import compact from 'lodash/compact.js';
 import uniq from 'lodash/uniq.js';
 import orderBy from 'lodash/orderBy.js';
@@ -2161,14 +2162,15 @@ const getQueryParams = ({ httpOperation, parameterValues, }) => {
 function buildFetchRequest({ httpOperation, mediaTypeContent, bodyInput, parameterValues, serverVariableValues, mockData, auth, chosenServer, credentials = 'omit', corsProxy, }) {
     var _a, _b, _c;
     return __awaiter(this, void 0, void 0, function* () {
+        const sanitizedParameterValues = Object.fromEntries(Object.entries(parameterValues).map(([key, value]) => [key, DOMPurify.sanitize(value)]));
         const serverUrl = getServerUrl({ httpOperation, mockData, chosenServer, corsProxy, serverVariableValues });
         const shouldIncludeBody = ['PUT', 'POST', 'PATCH', 'DELETE'].includes(httpOperation.method.toUpperCase()) && bodyInput !== undefined;
-        const queryParams = getQueryParams({ httpOperation, parameterValues });
+        const queryParams = getQueryParams({ httpOperation, parameterValues: sanitizedParameterValues });
         const rawHeaders = filterOutAuthorizationParams((_b = (_a = httpOperation.request) === null || _a === void 0 ? void 0 : _a.headers) !== null && _b !== void 0 ? _b : [], httpOperation.security)
-            .map(header => { var _a; return ({ name: header.name, value: (_a = parameterValues[header.name]) !== null && _a !== void 0 ? _a : '' }); })
+            .map(header => { var _a; return ({ name: header.name, value: (_a = sanitizedParameterValues[header.name]) !== null && _a !== void 0 ? _a : '' }); })
             .filter(({ value }) => value.length > 0);
         const [queryParamsWithAuth, headersWithAuth] = runAuthRequestEhancements(auth, queryParams, rawHeaders);
-        const expandedPath = uriExpand(httpOperation.path, parameterValues);
+        const expandedPath = uriExpand(httpOperation.path, sanitizedParameterValues);
         const urlObject = new URL(serverUrl + expandedPath);
         urlObject.search = new URLSearchParams(queryParamsWithAuth.map(nameAndValueObjectToPair)).toString();
         const body = typeof bodyInput === 'object' && !(bodyInput instanceof File)

package/index.js

@@ -39,6 +39,7 @@ var map = require('lodash/map.js');
 var mapValues = require('lodash/mapValues.js');
 var pickBy = require('lodash/pickBy.js');
 var mosaicCodeEditor = require('@stoplight/mosaic-code-editor');
+var DOMPurify = require('dompurify');
 var compact = require('lodash/compact.js');
 var uniq = require('lodash/uniq.js');
 var orderBy = require('lodash/orderBy.js');
@@ -2182,14 +2183,15 @@ const getQueryParams = ({ httpOperation, parameterValues, }) => {
 function buildFetchRequest({ httpOperation, mediaTypeContent, bodyInput, parameterValues, serverVariableValues, mockData, auth, chosenServer, credentials = 'omit', corsProxy, }) {
     var _a, _b, _c;
     return tslib.__awaiter(this, void 0, void 0, function* () {
+        const sanitizedParameterValues = Object.fromEntries(Object.entries(parameterValues).map(([key, value]) => [key, DOMPurify.sanitize(value)]));
         const serverUrl = getServerUrl({ httpOperation, mockData, chosenServer, corsProxy, serverVariableValues });
         const shouldIncludeBody = ['PUT', 'POST', 'PATCH', 'DELETE'].includes(httpOperation.method.toUpperCase()) && bodyInput !== undefined;
-        const queryParams = getQueryParams({ httpOperation, parameterValues });
+        const queryParams = getQueryParams({ httpOperation, parameterValues: sanitizedParameterValues });
         const rawHeaders = filterOutAuthorizationParams((_b = (_a = httpOperation.request) === null || _a === void 0 ? void 0 : _a.headers) !== null && _b !== void 0 ? _b : [], httpOperation.security)
-            .map(header => { var _a; return ({ name: header.name, value: (_a = parameterValues[header.name]) !== null && _a !== void 0 ? _a : '' }); })
+            .map(header => { var _a; return ({ name: header.name, value: (_a = sanitizedParameterValues[header.name]) !== null && _a !== void 0 ? _a : '' }); })
             .filter(({ value }) => value.length > 0);
         const [queryParamsWithAuth, headersWithAuth] = runAuthRequestEhancements(auth, queryParams, rawHeaders);
-        const expandedPath = uriExpand(httpOperation.path, parameterValues);
+        const expandedPath = uriExpand(httpOperation.path, sanitizedParameterValues);
         const urlObject = new URL(serverUrl + expandedPath);
         urlObject.search = new URLSearchParams(queryParamsWithAuth.map(nameAndValueObjectToPair)).toString();
         const body = typeof bodyInput === 'object' && !(bodyInput instanceof File)

package/index.mjs

@@ -39,6 +39,7 @@ import map from 'lodash/map.js';
 import mapValues from 'lodash/mapValues.js';
 import pickBy from 'lodash/pickBy.js';
 import { CodeEditor } from '@stoplight/mosaic-code-editor';
+import DOMPurify from 'dompurify';
 import compact from 'lodash/compact.js';
 import uniq from 'lodash/uniq.js';
 import orderBy from 'lodash/orderBy.js';
@@ -2161,14 +2162,15 @@ const getQueryParams = ({ httpOperation, parameterValues, }) => {
 function buildFetchRequest({ httpOperation, mediaTypeContent, bodyInput, parameterValues, serverVariableValues, mockData, auth, chosenServer, credentials = 'omit', corsProxy, }) {
     var _a, _b, _c;
     return __awaiter(this, void 0, void 0, function* () {
+        const sanitizedParameterValues = Object.fromEntries(Object.entries(parameterValues).map(([key, value]) => [key, DOMPurify.sanitize(value)]));
         const serverUrl = getServerUrl({ httpOperation, mockData, chosenServer, corsProxy, serverVariableValues });
         const shouldIncludeBody = ['PUT', 'POST', 'PATCH', 'DELETE'].includes(httpOperation.method.toUpperCase()) && bodyInput !== undefined;
-        const queryParams = getQueryParams({ httpOperation, parameterValues });
+        const queryParams = getQueryParams({ httpOperation, parameterValues: sanitizedParameterValues });
         const rawHeaders = filterOutAuthorizationParams((_b = (_a = httpOperation.request) === null || _a === void 0 ? void 0 : _a.headers) !== null && _b !== void 0 ? _b : [], httpOperation.security)
-            .map(header => { var _a; return ({ name: header.name, value: (_a = parameterValues[header.name]) !== null && _a !== void 0 ? _a : '' }); })
+            .map(header => { var _a; return ({ name: header.name, value: (_a = sanitizedParameterValues[header.name]) !== null && _a !== void 0 ? _a : '' }); })
             .filter(({ value }) => value.length > 0);
         const [queryParamsWithAuth, headersWithAuth] = runAuthRequestEhancements(auth, queryParams, rawHeaders);
-        const expandedPath = uriExpand(httpOperation.path, parameterValues);
+        const expandedPath = uriExpand(httpOperation.path, sanitizedParameterValues);
         const urlObject = new URL(serverUrl + expandedPath);
         urlObject.search = new URLSearchParams(queryParamsWithAuth.map(nameAndValueObjectToPair)).toString();
         const body = typeof bodyInput === 'object' && !(bodyInput instanceof File)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stoplight/elements-core",
-  "version": "9.0.25-beta-0.4",
+  "version": "9.0.26-beta-0.0",
   "main": "./index.js",
   "sideEffects": [
     "web-components.min.js",
@@ -40,6 +40,7 @@
     "@stoplight/types": "^14.1.1",
     "@stoplight/yaml": "^4.3.0",
     "classnames": "^2.2.6",
+    "dompurify": "^3.4.15",
     "httpsnippet-lite": "^3.0.5",
     "jotai": "1.3.9",
     "json-schema": "^0.4.0",