@tixyel/streamelements 7.7.0 → 7.8.0

package/dist/index.d.ts

@@ -2503,6 +2503,18 @@ declare class ElementHelper {
      * ```
      */
     CSS(element: HTMLElement | SVGElement, styles: Partial<Record<keyof CSSStyleProperties | `--${string}`, CSSValue>>): void;
+    /**
+     * Escapes special HTML characters in a string to prevent XSS attacks and ensure safe rendering in HTML contexts.
+     * @param value - The input string that may contain special HTML characters such as &, <, >, ", and '.
+     * @returns A new string with special HTML characters replaced by their corresponding HTML entities.
+     * @example
+     * ```javascript
+     * const unsafeString = '<script>alert("XSS")</script>';
+     * const safeString = escapeHtml(unsafeString);
+     * console.log(safeString); // Output: '&lt;script&gt;alert(&quot;XSS&quot;)&lt;/script&gt;'
+     * ```
+     */
+    escapeHtml(value: string): string;
 }
 type CSSValue = string | number | null | undefined;
 

package/dist/index.es.js

@@ -254,6 +254,16 @@ var e = Object.defineProperty, t = (t, n) => {
 			e.style.setProperty(t, a);
 		}
 	}
+	escapeHtml(e) {
+		let t = {
+			"&": "&",
+			"<": "&lt;",
+			">": "&gt;",
+			"\"": "&quot;",
+			"'": "&#39;"
+		};
+		return e.replace(/[&<>"']/g, (e) => t[e]);
+	}
 }, i = class {
 	flatten(e, t = !0, n = "") {
 		let r = {};