@subiz/widget-v4 4.1.153 → 4.1.155

package/dist/HASH

@@ -1 +1 @@
-197f55a88dc
+19816b2e8ca

package/dist/malicious-app.js

@@ -1,15 +1,17 @@
-let hash = 'XXXXXXXX' // do not change, will be replaced to real hash
+if (!window._subiz_init_2094850928430) {
+	let hash = 'XXXXXXXX' // do not change, will be replaced to real hash
 
-window._subiz_init_2094850928430 = true
-window._subiz_init_2094850928430_keep_loading = true
-var tag = document.createElement('script')
-tag.async = 1
-tag.defer = true
-tag.src = 'https://public-gcs.subiz-cdn.com/widget-v4/public/' + hash + '.app.js'
-document.body.appendChild(tag)
+	window._subiz_init_2094850928430 = true
+	window._subiz_init_2094850928430_keep_loading = true
+	var tag = document.createElement('script')
+	tag.async = 1
+	tag.defer = true
+	tag.src = 'https://public-gcs.subiz-cdn.com/widget-v4/public/' + hash + '.app.js'
+	document.body.appendChild(tag)
 
-if (document.readyState === 'interactive' || document.readyState === 'complete') document.body.appendChild(tag)
-else
-	document.addEventListener('DOMContentLoaded', function (event) {
-		document.body.appendChild(tag)
-	}) //
+	if (document.readyState === 'interactive' || document.readyState === 'complete') document.body.appendChild(tag)
+	else
+		document.addEventListener('DOMContentLoaded', function (event) {
+			document.body.appendChild(tag)
+		}) //
+}

package/dist/screenshoot.js

@@ -3753,7 +3753,7 @@ function jsonifyTextPlain(param, done) {
     _defineProperty(this, "markAsReceived", (cid, messageId) => this.apireq.post(`/accounts/${this.accid}/conversations/${cid}/messages/${messageId}/receive`));
     _defineProperty(this, "markAsSeen", (cid, messageId) => this.apireq.post(`/accounts/${this.accid}/conversations/${cid}/messages/${messageId}/seen`));
     _defineProperty(this, "getConversation", cid => this.apireq.get(`/accounts/${this.accid}/conversations/${cid}`));
-    _defineProperty(this, "getLocaleContent", locale => this.apireq.get(`/accounts/${this.accid}/locales/${locale}`));
+    _defineProperty(this, "getLocaleContent", locale => this.apireq.get(`/accounts/${this.accid}/languages/${locale}`));
     _defineProperty(this, "sendEvent", data => this.apireq.addQuery('shorten', true).addQuery('x-referer', util/* default */.A.get(location, 'origin', '')).post(`/accounts/${this.accid}/users/${this.uid}/events`, data));
     _defineProperty(this, "submitForm", (form_id, page_url, device, data, user) => this.apireq.addQuery('x-referer', util/* default */.A.get(location, 'origin', '')).post(`/accounts/${this.accid}/users/${this.uid}/events`, {
       by: {
@@ -10990,12 +10990,24 @@ function restoreViewport() {
 function modifyViewport() {
   if (document.body && document.body.classList) document.body.classList.add('sbz_no_scroll');
   if (document.documentElement && document.documentElement.classList) document.documentElement.classList.add('sbz_no_scroll');
-  let metatag = document.createElement('meta');
-  metatag.httpEquiv = 'X-UA-Compatible';
-  metatag.name = 'viewport';
-  metatag.id = 'subiz-meta-viewport';
-  metatag.content = 'maximum-scale=1.0, user-scalable=no, width=device-width, initial-scale=1.0';
-  document.getElementsByTagName('head')[0].appendChild(metatag);
+  let currentMetas = document.querySelectorAll('meta[name="viewport"]');
+  let shouldAddMetaTag = true;
+  for (let i = 0; i < currentMetas.length; i++) {
+    let meta = currentMetas[i];
+    let content = meta.getAttribute('content') || '';
+    if (content.indexOf('maximum-scale') > -1) {
+      shouldAddMetaTag = false;
+      break;
+    }
+  }
+  if (shouldAddMetaTag) {
+    let metatag = document.createElement('meta');
+    metatag.httpEquiv = 'X-UA-Compatible';
+    metatag.name = 'viewport';
+    metatag.id = 'subiz-meta-viewport';
+    metatag.content = 'maximum-scale=1.0, user-scalable=no, width=device-width, initial-scale=1.0';
+    document.getElementsByTagName('head')[0].appendChild(metatag);
+  }
 }
 ;// ./src/plugin.js
 

package/malicious-app.js

@@ -1,15 +1,17 @@
-let hash = 'XXXXXXXX' // do not change, will be replaced to real hash
+if (!window._subiz_init_2094850928430) {
+	let hash = 'XXXXXXXX' // do not change, will be replaced to real hash
 
-window._subiz_init_2094850928430 = true
-window._subiz_init_2094850928430_keep_loading = true
-var tag = document.createElement('script')
-tag.async = 1
-tag.defer = true
-tag.src = 'https://public-gcs.subiz-cdn.com/widget-v4/public/' + hash + '.app.js'
-document.body.appendChild(tag)
+	window._subiz_init_2094850928430 = true
+	window._subiz_init_2094850928430_keep_loading = true
+	var tag = document.createElement('script')
+	tag.async = 1
+	tag.defer = true
+	tag.src = 'https://public-gcs.subiz-cdn.com/widget-v4/public/' + hash + '.app.js'
+	document.body.appendChild(tag)
 
-if (document.readyState === 'interactive' || document.readyState === 'complete') document.body.appendChild(tag)
-else
-	document.addEventListener('DOMContentLoaded', function (event) {
-		document.body.appendChild(tag)
-	}) //
+	if (document.readyState === 'interactive' || document.readyState === 'complete') document.body.appendChild(tag)
+	else
+		document.addEventListener('DOMContentLoaded', function (event) {
+			document.body.appendChild(tag)
+		}) //
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@subiz/widget-v4",
-	"version": "4.1.153",
+	"version": "4.1.155",
 	"main": "./compiled_src/lib.js",
 	"scripts": {
 		"dev": "npx webpack serve --config webpack.dev.js",
@@ -16,7 +16,7 @@
 		"core-js": "^3.44.0",
 		"css-loader": "5.2.7",
 		"file-loader": "^6.2.0",
-		"less": "^4.3.0",
+		"less": "^4.4.0",
 		"less-loader": "^12.3.0",
 		"preact": "10.19.3"
 	},
@@ -29,8 +29,8 @@
 		"babel-loader": "^10.0.0",
 		"babel-plugin-syntax-jsx": "^6.18.0",
 		"html-webpack-plugin": "^5.6.3",
-		"puppeteer": "^24.12.1",
-		"webpack": "^5.100.1",
+		"puppeteer": "^24.15.0",
+		"webpack": "^5.101.0",
 		"webpack-bundle-analyzer": "^4.10.2",
 		"webpack-cli": "^6.0.1",
 		"webpack-dev-server": "^5.2.2"

package/src/chatbox/main.js

@@ -217,10 +217,23 @@ function modifyViewport() {
 	if (document.body && document.body.classList) document.body.classList.add('sbz_no_scroll')
 	if (document.documentElement && document.documentElement.classList)
 		document.documentElement.classList.add('sbz_no_scroll')
-	let metatag = document.createElement('meta')
-	metatag.httpEquiv = 'X-UA-Compatible'
-	metatag.name = 'viewport'
-	metatag.id = 'subiz-meta-viewport'
-	metatag.content = 'maximum-scale=1.0, user-scalable=no, width=device-width, initial-scale=1.0'
-	document.getElementsByTagName('head')[0].appendChild(metatag)
+
+	let currentMetas = document.querySelectorAll('meta[name="viewport"]')
+	let shouldAddMetaTag = true
+	for (let i = 0; i < currentMetas.length; i++) {
+		let meta = currentMetas[i]
+		let content = meta.getAttribute('content') || ''
+		if (content.indexOf('maximum-scale') > -1) {
+			shouldAddMetaTag = false
+			break
+		}
+	}
+	if (shouldAddMetaTag) {
+		let metatag = document.createElement('meta')
+		metatag.httpEquiv = 'X-UA-Compatible'
+		metatag.name = 'viewport'
+		metatag.id = 'subiz-meta-viewport'
+		metatag.content = 'maximum-scale=1.0, user-scalable=no, width=device-width, initial-scale=1.0'
+		document.getElementsByTagName('head')[0].appendChild(metatag)
+	}
 }

package/src/store/api.js

@@ -15,7 +15,7 @@ export default class {
 		this.FileURL = FileURL
 		this.ApiURL = ApiURL
 		this.api41 = ajax
-			.setBaseUrl('https://api5.subiz.com.vn/4.1')
+			.setBaseUrl('https://api.sbz.vn/4.1')
 			.withCredentials(true)
 			.setContentType('text/plain')
 			.beforeHook(jsonifyTextPlain)
@@ -270,6 +270,55 @@ export default class {
 	}
 
 	uploadToS3 = async (file) => {
+		let name = file.name.replace(/\s+/g, '_')
+
+		var {body, error} = await this.apireq
+			.setBaseUrl('https://api5.subiz.com.vn/4.1')
+			.setQuery({
+				'account-id': this.accid,
+				description: 'upload\n user-client: web-widget',
+				name: name,
+				presign: true,
+				size: file.size,
+				type: file.type,
+			})
+			.post('/files')
+		if (error) return {body, error}
+
+		let signedurl = body.signed_url
+		let fileid = body.id
+
+		// Step 2: Upload the file to the signed_url
+		let err = await new Promise((resolve) => {
+			const xhr = new sb.XMLHttpRequest()
+			xhr.open('PUT', signedurl, true)
+			xhr.setRequestHeader('Content-Type', file.mimetype)
+			xhr.onload = function () {
+				if (xhr.status === 200) {
+					resolve()
+				} else {
+					resolve(new Error(`Upload failed: ${xhr.statusText}`))
+				}
+			}
+
+			xhr.onerror = function () {
+				resolve(new Error('Network error during upload.'))
+			}
+
+			xhr.send(file)
+		})
+		if (err) return {error: err}
+
+		// Step 3: Notify server of upload completion
+		var {body, error} = await this.apireq
+			.setBaseUrl('https://api5.subiz.com.vn/4.1')
+			.setQuery({'account-id': this.accid})
+			.post(`/files/${fileid}/uploaded`)
+		if (error) return {error}
+		return {url: sb.get(body, 'file.url', '')}
+	}
+
+	uploadToS32 = async (file) => {
 		var {body, error} = await ajax
 			.setBaseUrl('https://api5.subiz.com.vn/4.1')
 			.withCredentials(true)