@trailstash/ultra 3.3.3 → 3.4.0

package/components/help-modal.js

@@ -41,7 +41,7 @@ export class HelpModal extends HTMLElement {
               </li>
               <li>
                 Map powered by
-                <a target="_blank" href="https://maplibre.org/projects/maplibre-gl-js/"
+                <a target="_blank" href="https://github.com/maplibre/maplibre-gl-js/"
                   >MapLibre GL JS</a
                 > <code>${maplibreVersion}</code>
               </li>

package/components/map-popup.js

@@ -1,3 +1,4 @@
+import DOMPurify from "dompurify";
 import { Liquid } from "liquidjs";
 import { h, t } from "../lib/dom.js";
 import { normalizeCSS } from "../lib/normalize.js";
@@ -50,7 +51,7 @@ export class MapPopup extends HTMLElement {
         this.template,
         this.contextBuilder(f),
       );
-      div.appendChild(h("div", {}, html));
+      div.appendChild(h("div", {}, DOMPurify.sanitize(html)));
     }
     shadow.appendChild(div);
   }

package/components/ultra-map.js

@@ -169,7 +169,7 @@ export class UltraMap extends HTMLElement {
       document.title = this.title;
     }
     if (this.icon) {
-      document.querySelector('[rel=icon]').href = this.icon;
+      document.querySelector("[rel=icon]").href = this.icon;
     }
     if (this.description) {
       // TODO?

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "3.3.3",
+  "version": "3.4.0",
   "description": "A web based tool for making MapLibre GL maps with data from sources such as Overpass, GeoJSON, GPX, KML, TCX, etc",
   "main": "index.js",
   "scripts": {
@@ -58,6 +58,9 @@
     "@trailstash/maplibre-component": "^1.0.1",
     "@turf/bbox": "^7.1.0",
     "deep-equal": "^2.2.3",
+    "dompurify": "^3.1.7",
+    "esbuild": "^0.24.0",
+    "esbuild-plugin-copy": "^2.1.1",
     "liquidjs": "^10.17.0",
     "lodash.pick": "^4.4.0",
     "lz-string": "^1.5.0",
@@ -66,9 +69,7 @@
     "normalize.css": "^8.0.1",
     "osmtogeojson": "^3.0.0-beta.5",
     "pmtiles": "^3.2.0",
-    "yaml": "^2.5.1",
-    "esbuild": "^0.24.0",
-    "esbuild-plugin-copy": "^2.1.1"
+    "yaml": "^2.5.1"
   },
   "peerDependencies": {
     "@maplibre/maplibre-gl-style-spec": "20.x"