@subiz/widget-v4 4.1.152 → 4.1.155

package/malicious-app.js

@@ -1,15 +1,17 @@
-let hash = 'XXXXXXXX' // do not change, will be replaced to real hash
+if (!window._subiz_init_2094850928430) {
+	let hash = 'XXXXXXXX' // do not change, will be replaced to real hash
 
-window._subiz_init_2094850928430 = true
-window._subiz_init_2094850928430_keep_loading = true
-var tag = document.createElement('script')
-tag.async = 1
-tag.defer = true
-tag.src = 'https://public-gcs.subiz-cdn.com/widget-v4/public/' + hash + '.app.js'
-document.body.appendChild(tag)
+	window._subiz_init_2094850928430 = true
+	window._subiz_init_2094850928430_keep_loading = true
+	var tag = document.createElement('script')
+	tag.async = 1
+	tag.defer = true
+	tag.src = 'https://public-gcs.subiz-cdn.com/widget-v4/public/' + hash + '.app.js'
+	document.body.appendChild(tag)
 
-if (document.readyState === 'interactive' || document.readyState === 'complete') document.body.appendChild(tag)
-else
-	document.addEventListener('DOMContentLoaded', function (event) {
-		document.body.appendChild(tag)
-	}) //
+	if (document.readyState === 'interactive' || document.readyState === 'complete') document.body.appendChild(tag)
+	else
+		document.addEventListener('DOMContentLoaded', function (event) {
+			document.body.appendChild(tag)
+		}) //
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@subiz/widget-v4",
-	"version": "4.1.152",
+	"version": "4.1.155",
 	"main": "./compiled_src/lib.js",
 	"scripts": {
 		"dev": "npx webpack serve --config webpack.dev.js",
@@ -13,24 +13,24 @@
 		"@subiz/flow": "^1.1.0",
 		"@subiz/wsclient": "^4.0.34",
 		"cookie_js": "1.4.2",
-		"core-js": "^3.43.0",
+		"core-js": "^3.44.0",
 		"css-loader": "5.2.7",
 		"file-loader": "^6.2.0",
-		"less": "^4.3.0",
+		"less": "^4.4.0",
 		"less-loader": "^12.3.0",
 		"preact": "10.19.3"
 	},
 	"devDependencies": {
-		"@babel/cli": "^7.27.2",
-		"@babel/core": "^7.27.7",
+		"@babel/cli": "^7.28.0",
+		"@babel/core": "^7.28.0",
 		"@babel/plugin-proposal-class-properties": "^7.18.6",
 		"@babel/plugin-transform-react-jsx": "^7.27.1",
-		"@babel/preset-env": "^7.27.2",
+		"@babel/preset-env": "^7.28.0",
 		"babel-loader": "^10.0.0",
 		"babel-plugin-syntax-jsx": "^6.18.0",
 		"html-webpack-plugin": "^5.6.3",
-		"puppeteer": "^24.11.1",
-		"webpack": "^5.99.9",
+		"puppeteer": "^24.15.0",
+		"webpack": "^5.101.0",
 		"webpack-bundle-analyzer": "^4.10.2",
 		"webpack-cli": "^6.0.1",
 		"webpack-dev-server": "^5.2.2"

package/src/chatbox/main.js

@@ -217,10 +217,23 @@ function modifyViewport() {
 	if (document.body && document.body.classList) document.body.classList.add('sbz_no_scroll')
 	if (document.documentElement && document.documentElement.classList)
 		document.documentElement.classList.add('sbz_no_scroll')
-	let metatag = document.createElement('meta')
-	metatag.httpEquiv = 'X-UA-Compatible'
-	metatag.name = 'viewport'
-	metatag.id = 'subiz-meta-viewport'
-	metatag.content = 'maximum-scale=1.0, user-scalable=no, width=device-width, initial-scale=1.0'
-	document.getElementsByTagName('head')[0].appendChild(metatag)
+
+	let currentMetas = document.querySelectorAll('meta[name="viewport"]')
+	let shouldAddMetaTag = true
+	for (let i = 0; i < currentMetas.length; i++) {
+		let meta = currentMetas[i]
+		let content = meta.getAttribute('content') || ''
+		if (content.indexOf('maximum-scale') > -1) {
+			shouldAddMetaTag = false
+			break
+		}
+	}
+	if (shouldAddMetaTag) {
+		let metatag = document.createElement('meta')
+		metatag.httpEquiv = 'X-UA-Compatible'
+		metatag.name = 'viewport'
+		metatag.id = 'subiz-meta-viewport'
+		metatag.content = 'maximum-scale=1.0, user-scalable=no, width=device-width, initial-scale=1.0'
+		document.getElementsByTagName('head')[0].appendChild(metatag)
+	}
 }

package/src/store/api.js

@@ -15,7 +15,7 @@ export default class {
 		this.FileURL = FileURL
 		this.ApiURL = ApiURL
 		this.api41 = ajax
-			.setBaseUrl('https://api5.subiz.com.vn/4.1')
+			.setBaseUrl('https://api.sbz.vn/4.1')
 			.withCredentials(true)
 			.setContentType('text/plain')
 			.beforeHook(jsonifyTextPlain)
@@ -230,7 +230,7 @@ export default class {
 		this.apireq.post(`/accounts/${this.accid}/conversations/${cid}/messages/${messageId}/seen`)
 
 	getConversation = (cid) => this.apireq.get(`/accounts/${this.accid}/conversations/${cid}`)
-	getLocaleContent = (locale) => this.apireq.get(`/accounts/${this.accid}/locales/${locale}`)
+	getLocaleContent = (locale) => this.apireq.get(`/accounts/${this.accid}/languages/${locale}`)
 	sendEvent = (data) =>
 		this.apireq
 			.addQuery('shorten', true)
@@ -270,6 +270,55 @@ export default class {
 	}
 
 	uploadToS3 = async (file) => {
+		let name = file.name.replace(/\s+/g, '_')
+
+		var {body, error} = await this.apireq
+			.setBaseUrl('https://api5.subiz.com.vn/4.1')
+			.setQuery({
+				'account-id': this.accid,
+				description: 'upload\n user-client: web-widget',
+				name: name,
+				presign: true,
+				size: file.size,
+				type: file.type,
+			})
+			.post('/files')
+		if (error) return {body, error}
+
+		let signedurl = body.signed_url
+		let fileid = body.id
+
+		// Step 2: Upload the file to the signed_url
+		let err = await new Promise((resolve) => {
+			const xhr = new sb.XMLHttpRequest()
+			xhr.open('PUT', signedurl, true)
+			xhr.setRequestHeader('Content-Type', file.mimetype)
+			xhr.onload = function () {
+				if (xhr.status === 200) {
+					resolve()
+				} else {
+					resolve(new Error(`Upload failed: ${xhr.statusText}`))
+				}
+			}
+
+			xhr.onerror = function () {
+				resolve(new Error('Network error during upload.'))
+			}
+
+			xhr.send(file)
+		})
+		if (err) return {error: err}
+
+		// Step 3: Notify server of upload completion
+		var {body, error} = await this.apireq
+			.setBaseUrl('https://api5.subiz.com.vn/4.1')
+			.setQuery({'account-id': this.accid})
+			.post(`/files/${fileid}/uploaded`)
+		if (error) return {error}
+		return {url: sb.get(body, 'file.url', '')}
+	}
+
+	uploadToS32 = async (file) => {
 		var {body, error} = await ajax
 			.setBaseUrl('https://api5.subiz.com.vn/4.1')
 			.withCredentials(true)