@transferwise/components 0.0.0-experimental-1d81581 → 0.0.0-experimental-a06eb0d

package/build/Markup/Markup.js

@@ -28,9 +28,10 @@ function renderLinkNode(node, actions, data, allowLinks, key) {
       }, key)
     );
   }
-  if (node.href && sanitise.isAllowedHref(node.href) && sanitise.isHrefAllowedByMode(node.href, allowLinks)) {
+  const sanitisedHref = node.href ? sanitise.sanitiseHref(node.href) : undefined;
+  if (sanitisedHref && sanitise.isHrefAllowedByMode(sanitisedHref, allowLinks)) {
     return /*#__PURE__*/jsxRuntime.jsx(Link.default, {
-      href: node.href,
+      href: sanitisedHref,
       target: node.target,
       "aria-label": node.accessibilityLabel,
       children: children

package/build/Markup/Markup.js.map

@@ -1 +1 @@
-{"version":3,"file":"Markup.js","sources":["../../src/Markup/Markup.tsx"],"sourcesContent":["import React, { Fragment, useMemo } from 'react';\n\nimport Link from '../Link';\n\nimport { parseMarkup } from './utils/parseMarkup';\nimport { type AllowLinksMode, isAllowedHref, isHrefAllowedByMode } from './utils/sanitise';\nimport type { MarkupActions, MarkupNode, MarkupProps } from './Markup.types';\n\nconst PLACEHOLDER_REGEX = /\\{\\{(\\w+)\\}\\}/g;\n\ntype MarkupData = Record<string, string | number>;\n\nfunction substituteData(text: string, data: MarkupData): string {\n  return text.replace(PLACEHOLDER_REGEX, (match, key: string) =>\n    Object.prototype.hasOwnProperty.call(data, key) ? String(data[key]) : match,\n  );\n}\n\nfunction renderNodes(\n  nodes: MarkupNode[],\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n): React.ReactNode[] {\n  return nodes.map((node, index) => renderNode(node, actions, data, allowLinks, index));\n}\n\nfunction renderLinkNode(\n  node: Extract<MarkupNode, { type: 'link' }>,\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n  key: number,\n): React.ReactNode {\n  const children = renderNodes(node.children, actions, data, allowLinks);\n\n  if (node.action && actions?.[node.action]) {\n    return (\n      // eslint-disable-next-line jsx-a11y/click-events-have-key-events\n      <Link key={key} aria-label={node.accessibilityLabel} onClick={actions[node.action]}>\n        {children}\n      </Link>\n    );\n  }\n\n  if (node.href && isAllowedHref(node.href) && isHrefAllowedByMode(node.href, allowLinks)) {\n    return (\n      <Link key={key} href={node.href} target={node.target} aria-label={node.accessibilityLabel}>\n        {children}\n      </Link>\n    );\n  }\n\n  return <Fragment key={key}>{children}</Fragment>;\n}\n\nfunction renderNode(\n  node: MarkupNode,\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n  key: number,\n): React.ReactNode {\n  switch (node.type) {\n    case 'text':\n      return (\n        <Fragment key={key}>{data ? substituteData(node.content, data) : node.content}</Fragment>\n      );\n    case 'newline':\n      return <br key={key} />;\n    case 'important':\n    case 'positive':\n    case 'negative':\n      return (\n        <em\n          key={key}\n          className={`wds-markup-emphasis wds-markup-emphasis--${node.type}`}\n          aria-label={node.accessibilityLabel}\n        >\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </em>\n      );\n    case 'strong':\n      return (\n        <strong key={key} className=\"wds-markup-strong\" aria-label={node.accessibilityLabel}>\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </strong>\n      );\n    case 'strikethrough':\n      return (\n        <del key={key} className=\"wds-markup-strikethrough\" aria-label={node.accessibilityLabel}>\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </del>\n      );\n    case 'paragraph':\n      return (\n        <p key={key} className=\"wds-markup-paragraph\">\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </p>\n      );\n    case 'link':\n      return renderLinkNode(node, actions, data, allowLinks, key);\n  }\n}\n\nfunction hasParagraph(nodes: MarkupNode[]): boolean {\n  for (const node of nodes) {\n    if (node.type === 'paragraph') {\n      return true;\n    }\n    if ('children' in node && hasParagraph(node.children)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Parses a markup string and renders it as React elements. Supports `<important>`,\n * `<positive>`, `<negative>`, `<strong>`, `<strikethrough>`, `<paragraph>` (alias `<p>`),\n * and `<link>` (alias `<a>`) with secure href validation.\n *\n * It only processes `string` input, while `ReactNode` is passed-through without processing.\n *\n * > The component supersedes [Emphasis](?path=/docs/typography-emphasis--docs), which will be\n * eventually deprecated.\n *\n * @see http://storybook.wise.design/?path=/docs/typography-markup--docs\n * @link ../emphasis/Emphasis | Emphasis\n */\nexport const Markup: React.FC<MarkupProps> = ({\n  children,\n  data,\n  allowLinks = 'internal',\n  actions,\n  as,\n  className,\n  'data-testid': testId,\n}) => {\n  const tree = useMemo(\n    () => (typeof children === 'string' ? parseMarkup(children) : []),\n    [children],\n  );\n\n  if (typeof children !== 'string') {\n    if (children == null) {\n      return null;\n    }\n    return (\n      <span className={className} data-testid={testId}>\n        {children}\n      </span>\n    );\n  }\n\n  if (tree.length === 0) {\n    return null;\n  }\n\n  const Element = as ?? (hasParagraph(tree) ? 'div' : 'span');\n\n  return (\n    <Element className={className} data-testid={testId}>\n      {renderNodes(tree, actions, data, allowLinks)}\n    </Element>\n  );\n};\n\nexport default Markup;\n"],"names":["PLACEHOLDER_REGEX","substituteData","text","data","replace","match","key","Object","prototype","hasOwnProperty","call","String","renderNodes","nodes","actions","allowLinks","map","node","index","renderNode","renderLinkNode","children","action","_jsx","Link","accessibilityLabel","onClick","href","isAllowedHref","isHrefAllowedByMode","target","Fragment","type","content","className","hasParagraph","Markup","as","testId","tree","useMemo","parseMarkup","length","Element"],"mappings":";;;;;;;;;;AAQA,MAAMA,iBAAiB,GAAG,gBAAgB;AAI1C,SAASC,cAAcA,CAACC,IAAY,EAAEC,IAAgB,EAAA;AACpD,EAAA,OAAOD,IAAI,CAACE,OAAO,CAACJ,iBAAiB,EAAE,CAACK,KAAK,EAAEC,GAAW,KACxDC,MAAM,CAACC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACP,IAAI,EAAEG,GAAG,CAAC,GAAGK,MAAM,CAACR,IAAI,CAACG,GAAG,CAAC,CAAC,GAAGD,KAAK,CAC5E;AACH;AAEA,SAASO,WAAWA,CAClBC,KAAmB,EACnBC,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAAA;EAE1B,OAAOF,KAAK,CAACG,GAAG,CAAC,CAACC,IAAI,EAAEC,KAAK,KAAKC,UAAU,CAACF,IAAI,EAAEH,OAAO,EAAEX,IAAI,EAAEY,UAAU,EAAEG,KAAK,CAAC,CAAC;AACvF;AAEA,SAASE,cAAcA,CACrBH,IAA2C,EAC3CH,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAC1BT,GAAW,EAAA;AAEX,EAAA,MAAMe,QAAQ,GAAGT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU,CAAC;EAEtE,IAAIE,IAAI,CAACK,MAAM,IAAIR,OAAO,GAAGG,IAAI,CAACK,MAAM,CAAC,EAAE;AACzC,IAAA;AAAA;AACE;AACAC,MAAAA,cAAA,CAACC,YAAI,EAAA;QAAW,YAAA,EAAYP,IAAI,CAACQ,kBAAmB;AAACC,QAAAA,OAAO,EAAEZ,OAAO,CAACG,IAAI,CAACK,MAAM,CAAE;AAAAD,QAAAA,QAAA,EAChFA;AAAQ,OAAA,EADAf,GAEL;AAAC;AAEX,EAAA;AAEA,EAAA,IAAIW,IAAI,CAACU,IAAI,IAAIC,sBAAa,CAACX,IAAI,CAACU,IAAI,CAAC,IAAIE,4BAAmB,CAACZ,IAAI,CAACU,IAAI,EAAEZ,UAAU,CAAC,EAAE;IACvF,oBACEQ,cAAA,CAACC,YAAI,EAAA;MAAWG,IAAI,EAAEV,IAAI,CAACU,IAAK;MAACG,MAAM,EAAEb,IAAI,CAACa,MAAO;MAAC,YAAA,EAAYb,IAAI,CAACQ,kBAAmB;AAAAJ,MAAAA,QAAA,EACvFA;AAAQ,KAAA,EADAf,GAEL,CAAC;AAEX,EAAA;EAEA,oBAAOiB,cAAA,CAACQ,cAAQ,EAAA;AAAAV,IAAAA,QAAA,EAAYA;AAAQ,GAAA,EAAdf,GAAyB,CAAC;AAClD;AAEA,SAASa,UAAUA,CACjBF,IAAgB,EAChBH,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAC1BT,GAAW,EAAA;EAEX,QAAQW,IAAI,CAACe,IAAI;AACf,IAAA,KAAK,MAAM;MACT,oBACET,cAAA,CAACQ,cAAQ,EAAA;AAAAV,QAAAA,QAAA,EAAYlB,IAAI,GAAGF,cAAc,CAACgB,IAAI,CAACgB,OAAO,EAAE9B,IAAI,CAAC,GAAGc,IAAI,CAACgB;AAAO,OAAA,EAA9D3B,GAAyE,CAAC;AAE7F,IAAA,KAAK,SAAS;MACZ,oBAAOiB,cAAA,CAAA,IAAA,EAAA,EAAA,EAASjB,GAAI,CAAG;AACzB,IAAA,KAAK,WAAW;AAChB,IAAA,KAAK,UAAU;AACf,IAAA,KAAK,UAAU;AACb,MAAA,oBACEiB,cAAA,CAAA,IAAA,EAAA;AAEEW,QAAAA,SAAS,EAAE,CAAA,yCAAA,EAA4CjB,IAAI,CAACe,IAAI,CAAA,CAAG;QACnE,YAAA,EAAYf,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EAEnCT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAJjDT,GAKH,CAAC;AAET,IAAA,KAAK,QAAQ;AACX,MAAA,oBACEiB,cAAA,CAAA,QAAA,EAAA;AAAkBW,QAAAA,SAAS,EAAC,mBAAmB;QAAC,YAAA,EAAYjB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EACjFT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAD3CT,GAEL,CAAC;AAEb,IAAA,KAAK,eAAe;AAClB,MAAA,oBACEiB,cAAA,CAAA,KAAA,EAAA;AAAeW,QAAAA,SAAS,EAAC,0BAA0B;QAAC,YAAA,EAAYjB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EACrFT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAD9CT,GAEL,CAAC;AAEV,IAAA,KAAK,WAAW;AACd,MAAA,oBACEiB,cAAA,CAAA,GAAA,EAAA;AAAaW,QAAAA,SAAS,EAAC,sBAAsB;QAAAb,QAAA,EAC1CT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EADhDT,GAEL,CAAC;AAER,IAAA,KAAK,MAAM;MACT,OAAOc,cAAc,CAACH,IAAI,EAAEH,OAAO,EAAEX,IAAI,EAAEY,UAAU,EAAET,GAAG,CAAC;AAC/D;AACF;AAEA,SAAS6B,YAAYA,CAACtB,KAAmB,EAAA;AACvC,EAAA,KAAK,MAAMI,IAAI,IAAIJ,KAAK,EAAE;AACxB,IAAA,IAAII,IAAI,CAACe,IAAI,KAAK,WAAW,EAAE;AAC7B,MAAA,OAAO,IAAI;AACb,IAAA;IACA,IAAI,UAAU,IAAIf,IAAI,IAAIkB,YAAY,CAAClB,IAAI,CAACI,QAAQ,CAAC,EAAE;AACrD,MAAA,OAAO,IAAI;AACb,IAAA;AACF,EAAA;AACA,EAAA,OAAO,KAAK;AACd;AAEA;;;;;;;;;;;;AAYG;AACI,MAAMe,MAAM,GAA0BA,CAAC;EAC5Cf,QAAQ;EACRlB,IAAI;AACJY,EAAAA,UAAU,GAAG,UAAU;EACvBD,OAAO;EACPuB,EAAE;EACFH,SAAS;AACT,EAAA,aAAa,EAAEI;AAAM,CACtB,KAAI;EACH,MAAMC,IAAI,GAAGC,aAAO,CAClB,MAAO,OAAOnB,QAAQ,KAAK,QAAQ,GAAGoB,uBAAW,CAACpB,QAAQ,CAAC,GAAG,EAAG,EACjE,CAACA,QAAQ,CAAC,CACX;AAED,EAAA,IAAI,OAAOA,QAAQ,KAAK,QAAQ,EAAE;IAChC,IAAIA,QAAQ,IAAI,IAAI,EAAE;AACpB,MAAA,OAAO,IAAI;AACb,IAAA;AACA,IAAA,oBACEE,cAAA,CAAA,MAAA,EAAA;AAAMW,MAAAA,SAAS,EAAEA,SAAU;AAAC,MAAA,aAAA,EAAaI,MAAO;AAAAjB,MAAAA,QAAA,EAC7CA;AAAQ,KACL,CAAC;AAEX,EAAA;AAEA,EAAA,IAAIkB,IAAI,CAACG,MAAM,KAAK,CAAC,EAAE;AACrB,IAAA,OAAO,IAAI;AACb,EAAA;AAEA,EAAA,MAAMC,OAAO,GAAGN,EAAE,KAAKF,YAAY,CAACI,IAAI,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC;EAE3D,oBACEhB,cAAA,CAACoB,OAAO,EAAA;AAACT,IAAAA,SAAS,EAAEA,SAAU;AAAC,IAAA,aAAA,EAAaI,MAAO;IAAAjB,QAAA,EAChDT,WAAW,CAAC2B,IAAI,EAAEzB,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,GACtC,CAAC;AAEd;;;;;"}
+{"version":3,"file":"Markup.js","sources":["../../src/Markup/Markup.tsx"],"sourcesContent":["import React, { Fragment, useMemo } from 'react';\n\nimport Link from '../Link';\n\nimport { parseMarkup } from './utils/parseMarkup';\nimport { type AllowLinksMode, isHrefAllowedByMode, sanitiseHref } from './utils/sanitise';\nimport type { MarkupActions, MarkupNode, MarkupProps } from './Markup.types';\n\nconst PLACEHOLDER_REGEX = /\\{\\{(\\w+)\\}\\}/g;\n\ntype MarkupData = Record<string, string | number>;\n\nfunction substituteData(text: string, data: MarkupData): string {\n  return text.replace(PLACEHOLDER_REGEX, (match, key: string) =>\n    Object.prototype.hasOwnProperty.call(data, key) ? String(data[key]) : match,\n  );\n}\n\nfunction renderNodes(\n  nodes: MarkupNode[],\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n): React.ReactNode[] {\n  return nodes.map((node, index) => renderNode(node, actions, data, allowLinks, index));\n}\n\nfunction renderLinkNode(\n  node: Extract<MarkupNode, { type: 'link' }>,\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n  key: number,\n): React.ReactNode {\n  const children = renderNodes(node.children, actions, data, allowLinks);\n\n  if (node.action && actions?.[node.action]) {\n    return (\n      // eslint-disable-next-line jsx-a11y/click-events-have-key-events\n      <Link key={key} aria-label={node.accessibilityLabel} onClick={actions[node.action]}>\n        {children}\n      </Link>\n    );\n  }\n\n  const sanitisedHref = node.href ? sanitiseHref(node.href) : undefined;\n  if (sanitisedHref && isHrefAllowedByMode(sanitisedHref, allowLinks)) {\n    return (\n      <Link\n        key={key}\n        href={sanitisedHref}\n        target={node.target}\n        aria-label={node.accessibilityLabel}\n      >\n        {children}\n      </Link>\n    );\n  }\n\n  return <Fragment key={key}>{children}</Fragment>;\n}\n\nfunction renderNode(\n  node: MarkupNode,\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n  key: number,\n): React.ReactNode {\n  switch (node.type) {\n    case 'text':\n      return (\n        <Fragment key={key}>{data ? substituteData(node.content, data) : node.content}</Fragment>\n      );\n    case 'newline':\n      return <br key={key} />;\n    case 'important':\n    case 'positive':\n    case 'negative':\n      return (\n        <em\n          key={key}\n          className={`wds-markup-emphasis wds-markup-emphasis--${node.type}`}\n          aria-label={node.accessibilityLabel}\n        >\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </em>\n      );\n    case 'strong':\n      return (\n        <strong key={key} className=\"wds-markup-strong\" aria-label={node.accessibilityLabel}>\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </strong>\n      );\n    case 'strikethrough':\n      return (\n        <del key={key} className=\"wds-markup-strikethrough\" aria-label={node.accessibilityLabel}>\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </del>\n      );\n    case 'paragraph':\n      return (\n        <p key={key} className=\"wds-markup-paragraph\">\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </p>\n      );\n    case 'link':\n      return renderLinkNode(node, actions, data, allowLinks, key);\n  }\n}\n\nfunction hasParagraph(nodes: MarkupNode[]): boolean {\n  for (const node of nodes) {\n    if (node.type === 'paragraph') {\n      return true;\n    }\n    if ('children' in node && hasParagraph(node.children)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Parses a markup string and renders it as React elements. Supports `<important>`,\n * `<positive>`, `<negative>`, `<strong>`, `<strikethrough>`, `<paragraph>` (alias `<p>`),\n * and `<link>` (alias `<a>`) with secure href validation.\n *\n * It only processes `string` input, while `ReactNode` is passed-through without processing.\n *\n * > The component supersedes [Emphasis](?path=/docs/typography-emphasis--docs), which will be\n * eventually deprecated.\n *\n * @see http://storybook.wise.design/?path=/docs/typography-markup--docs\n * @link ../emphasis/Emphasis | Emphasis\n */\nexport const Markup: React.FC<MarkupProps> = ({\n  children,\n  data,\n  allowLinks = 'internal',\n  actions,\n  as,\n  className,\n  'data-testid': testId,\n}) => {\n  const tree = useMemo(\n    () => (typeof children === 'string' ? parseMarkup(children) : []),\n    [children],\n  );\n\n  if (typeof children !== 'string') {\n    if (children == null) {\n      return null;\n    }\n    return (\n      <span className={className} data-testid={testId}>\n        {children}\n      </span>\n    );\n  }\n\n  if (tree.length === 0) {\n    return null;\n  }\n\n  const Element = as ?? (hasParagraph(tree) ? 'div' : 'span');\n\n  return (\n    <Element className={className} data-testid={testId}>\n      {renderNodes(tree, actions, data, allowLinks)}\n    </Element>\n  );\n};\n\nexport default Markup;\n"],"names":["PLACEHOLDER_REGEX","substituteData","text","data","replace","match","key","Object","prototype","hasOwnProperty","call","String","renderNodes","nodes","actions","allowLinks","map","node","index","renderNode","renderLinkNode","children","action","_jsx","Link","accessibilityLabel","onClick","sanitisedHref","href","sanitiseHref","undefined","isHrefAllowedByMode","target","Fragment","type","content","className","hasParagraph","Markup","as","testId","tree","useMemo","parseMarkup","length","Element"],"mappings":";;;;;;;;;;AAQA,MAAMA,iBAAiB,GAAG,gBAAgB;AAI1C,SAASC,cAAcA,CAACC,IAAY,EAAEC,IAAgB,EAAA;AACpD,EAAA,OAAOD,IAAI,CAACE,OAAO,CAACJ,iBAAiB,EAAE,CAACK,KAAK,EAAEC,GAAW,KACxDC,MAAM,CAACC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACP,IAAI,EAAEG,GAAG,CAAC,GAAGK,MAAM,CAACR,IAAI,CAACG,GAAG,CAAC,CAAC,GAAGD,KAAK,CAC5E;AACH;AAEA,SAASO,WAAWA,CAClBC,KAAmB,EACnBC,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAAA;EAE1B,OAAOF,KAAK,CAACG,GAAG,CAAC,CAACC,IAAI,EAAEC,KAAK,KAAKC,UAAU,CAACF,IAAI,EAAEH,OAAO,EAAEX,IAAI,EAAEY,UAAU,EAAEG,KAAK,CAAC,CAAC;AACvF;AAEA,SAASE,cAAcA,CACrBH,IAA2C,EAC3CH,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAC1BT,GAAW,EAAA;AAEX,EAAA,MAAMe,QAAQ,GAAGT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU,CAAC;EAEtE,IAAIE,IAAI,CAACK,MAAM,IAAIR,OAAO,GAAGG,IAAI,CAACK,MAAM,CAAC,EAAE;AACzC,IAAA;AAAA;AACE;AACAC,MAAAA,cAAA,CAACC,YAAI,EAAA;QAAW,YAAA,EAAYP,IAAI,CAACQ,kBAAmB;AAACC,QAAAA,OAAO,EAAEZ,OAAO,CAACG,IAAI,CAACK,MAAM,CAAE;AAAAD,QAAAA,QAAA,EAChFA;AAAQ,OAAA,EADAf,GAEL;AAAC;AAEX,EAAA;AAEA,EAAA,MAAMqB,aAAa,GAAGV,IAAI,CAACW,IAAI,GAAGC,qBAAY,CAACZ,IAAI,CAACW,IAAI,CAAC,GAAGE,SAAS;EACrE,IAAIH,aAAa,IAAII,4BAAmB,CAACJ,aAAa,EAAEZ,UAAU,CAAC,EAAE;IACnE,oBACEQ,cAAA,CAACC,YAAI,EAAA;AAEHI,MAAAA,IAAI,EAAED,aAAc;MACpBK,MAAM,EAAEf,IAAI,CAACe,MAAO;MACpB,YAAA,EAAYf,IAAI,CAACQ,kBAAmB;AAAAJ,MAAAA,QAAA,EAEnCA;AAAQ,KAAA,EALJf,GAMD,CAAC;AAEX,EAAA;EAEA,oBAAOiB,cAAA,CAACU,cAAQ,EAAA;AAAAZ,IAAAA,QAAA,EAAYA;AAAQ,GAAA,EAAdf,GAAyB,CAAC;AAClD;AAEA,SAASa,UAAUA,CACjBF,IAAgB,EAChBH,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAC1BT,GAAW,EAAA;EAEX,QAAQW,IAAI,CAACiB,IAAI;AACf,IAAA,KAAK,MAAM;MACT,oBACEX,cAAA,CAACU,cAAQ,EAAA;AAAAZ,QAAAA,QAAA,EAAYlB,IAAI,GAAGF,cAAc,CAACgB,IAAI,CAACkB,OAAO,EAAEhC,IAAI,CAAC,GAAGc,IAAI,CAACkB;AAAO,OAAA,EAA9D7B,GAAyE,CAAC;AAE7F,IAAA,KAAK,SAAS;MACZ,oBAAOiB,cAAA,CAAA,IAAA,EAAA,EAAA,EAASjB,GAAI,CAAG;AACzB,IAAA,KAAK,WAAW;AAChB,IAAA,KAAK,UAAU;AACf,IAAA,KAAK,UAAU;AACb,MAAA,oBACEiB,cAAA,CAAA,IAAA,EAAA;AAEEa,QAAAA,SAAS,EAAE,CAAA,yCAAA,EAA4CnB,IAAI,CAACiB,IAAI,CAAA,CAAG;QACnE,YAAA,EAAYjB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EAEnCT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAJjDT,GAKH,CAAC;AAET,IAAA,KAAK,QAAQ;AACX,MAAA,oBACEiB,cAAA,CAAA,QAAA,EAAA;AAAkBa,QAAAA,SAAS,EAAC,mBAAmB;QAAC,YAAA,EAAYnB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EACjFT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAD3CT,GAEL,CAAC;AAEb,IAAA,KAAK,eAAe;AAClB,MAAA,oBACEiB,cAAA,CAAA,KAAA,EAAA;AAAea,QAAAA,SAAS,EAAC,0BAA0B;QAAC,YAAA,EAAYnB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EACrFT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAD9CT,GAEL,CAAC;AAEV,IAAA,KAAK,WAAW;AACd,MAAA,oBACEiB,cAAA,CAAA,GAAA,EAAA;AAAaa,QAAAA,SAAS,EAAC,sBAAsB;QAAAf,QAAA,EAC1CT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EADhDT,GAEL,CAAC;AAER,IAAA,KAAK,MAAM;MACT,OAAOc,cAAc,CAACH,IAAI,EAAEH,OAAO,EAAEX,IAAI,EAAEY,UAAU,EAAET,GAAG,CAAC;AAC/D;AACF;AAEA,SAAS+B,YAAYA,CAACxB,KAAmB,EAAA;AACvC,EAAA,KAAK,MAAMI,IAAI,IAAIJ,KAAK,EAAE;AACxB,IAAA,IAAII,IAAI,CAACiB,IAAI,KAAK,WAAW,EAAE;AAC7B,MAAA,OAAO,IAAI;AACb,IAAA;IACA,IAAI,UAAU,IAAIjB,IAAI,IAAIoB,YAAY,CAACpB,IAAI,CAACI,QAAQ,CAAC,EAAE;AACrD,MAAA,OAAO,IAAI;AACb,IAAA;AACF,EAAA;AACA,EAAA,OAAO,KAAK;AACd;AAEA;;;;;;;;;;;;AAYG;AACI,MAAMiB,MAAM,GAA0BA,CAAC;EAC5CjB,QAAQ;EACRlB,IAAI;AACJY,EAAAA,UAAU,GAAG,UAAU;EACvBD,OAAO;EACPyB,EAAE;EACFH,SAAS;AACT,EAAA,aAAa,EAAEI;AAAM,CACtB,KAAI;EACH,MAAMC,IAAI,GAAGC,aAAO,CAClB,MAAO,OAAOrB,QAAQ,KAAK,QAAQ,GAAGsB,uBAAW,CAACtB,QAAQ,CAAC,GAAG,EAAG,EACjE,CAACA,QAAQ,CAAC,CACX;AAED,EAAA,IAAI,OAAOA,QAAQ,KAAK,QAAQ,EAAE;IAChC,IAAIA,QAAQ,IAAI,IAAI,EAAE;AACpB,MAAA,OAAO,IAAI;AACb,IAAA;AACA,IAAA,oBACEE,cAAA,CAAA,MAAA,EAAA;AAAMa,MAAAA,SAAS,EAAEA,SAAU;AAAC,MAAA,aAAA,EAAaI,MAAO;AAAAnB,MAAAA,QAAA,EAC7CA;AAAQ,KACL,CAAC;AAEX,EAAA;AAEA,EAAA,IAAIoB,IAAI,CAACG,MAAM,KAAK,CAAC,EAAE;AACrB,IAAA,OAAO,IAAI;AACb,EAAA;AAEA,EAAA,MAAMC,OAAO,GAAGN,EAAE,KAAKF,YAAY,CAACI,IAAI,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC;EAE3D,oBACElB,cAAA,CAACsB,OAAO,EAAA;AAACT,IAAAA,SAAS,EAAEA,SAAU;AAAC,IAAA,aAAA,EAAaI,MAAO;IAAAnB,QAAA,EAChDT,WAAW,CAAC6B,IAAI,EAAE3B,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,GACtC,CAAC;AAEd;;;;;"}

package/build/Markup/Markup.mjs

@@ -1,7 +1,7 @@
 import { useMemo, Fragment } from 'react';
 import Link from '../Link/Link.mjs';
 import { parseMarkup } from './utils/parseMarkup.mjs';
-import { isAllowedHref, isHrefAllowedByMode } from './utils/sanitise.mjs';
+import { sanitiseHref, isHrefAllowedByMode } from './utils/sanitise.mjs';
 import { jsx } from 'react/jsx-runtime';
 
 const PLACEHOLDER_REGEX = /\{\{(\w+)\}\}/g;
@@ -24,9 +24,10 @@ function renderLinkNode(node, actions, data, allowLinks, key) {
       }, key)
     );
   }
-  if (node.href && isAllowedHref(node.href) && isHrefAllowedByMode(node.href, allowLinks)) {
+  const sanitisedHref = node.href ? sanitiseHref(node.href) : undefined;
+  if (sanitisedHref && isHrefAllowedByMode(sanitisedHref, allowLinks)) {
     return /*#__PURE__*/jsx(Link, {
-      href: node.href,
+      href: sanitisedHref,
       target: node.target,
       "aria-label": node.accessibilityLabel,
       children: children

package/build/Markup/Markup.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"Markup.mjs","sources":["../../src/Markup/Markup.tsx"],"sourcesContent":["import React, { Fragment, useMemo } from 'react';\n\nimport Link from '../Link';\n\nimport { parseMarkup } from './utils/parseMarkup';\nimport { type AllowLinksMode, isAllowedHref, isHrefAllowedByMode } from './utils/sanitise';\nimport type { MarkupActions, MarkupNode, MarkupProps } from './Markup.types';\n\nconst PLACEHOLDER_REGEX = /\\{\\{(\\w+)\\}\\}/g;\n\ntype MarkupData = Record<string, string | number>;\n\nfunction substituteData(text: string, data: MarkupData): string {\n  return text.replace(PLACEHOLDER_REGEX, (match, key: string) =>\n    Object.prototype.hasOwnProperty.call(data, key) ? String(data[key]) : match,\n  );\n}\n\nfunction renderNodes(\n  nodes: MarkupNode[],\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n): React.ReactNode[] {\n  return nodes.map((node, index) => renderNode(node, actions, data, allowLinks, index));\n}\n\nfunction renderLinkNode(\n  node: Extract<MarkupNode, { type: 'link' }>,\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n  key: number,\n): React.ReactNode {\n  const children = renderNodes(node.children, actions, data, allowLinks);\n\n  if (node.action && actions?.[node.action]) {\n    return (\n      // eslint-disable-next-line jsx-a11y/click-events-have-key-events\n      <Link key={key} aria-label={node.accessibilityLabel} onClick={actions[node.action]}>\n        {children}\n      </Link>\n    );\n  }\n\n  if (node.href && isAllowedHref(node.href) && isHrefAllowedByMode(node.href, allowLinks)) {\n    return (\n      <Link key={key} href={node.href} target={node.target} aria-label={node.accessibilityLabel}>\n        {children}\n      </Link>\n    );\n  }\n\n  return <Fragment key={key}>{children}</Fragment>;\n}\n\nfunction renderNode(\n  node: MarkupNode,\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n  key: number,\n): React.ReactNode {\n  switch (node.type) {\n    case 'text':\n      return (\n        <Fragment key={key}>{data ? substituteData(node.content, data) : node.content}</Fragment>\n      );\n    case 'newline':\n      return <br key={key} />;\n    case 'important':\n    case 'positive':\n    case 'negative':\n      return (\n        <em\n          key={key}\n          className={`wds-markup-emphasis wds-markup-emphasis--${node.type}`}\n          aria-label={node.accessibilityLabel}\n        >\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </em>\n      );\n    case 'strong':\n      return (\n        <strong key={key} className=\"wds-markup-strong\" aria-label={node.accessibilityLabel}>\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </strong>\n      );\n    case 'strikethrough':\n      return (\n        <del key={key} className=\"wds-markup-strikethrough\" aria-label={node.accessibilityLabel}>\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </del>\n      );\n    case 'paragraph':\n      return (\n        <p key={key} className=\"wds-markup-paragraph\">\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </p>\n      );\n    case 'link':\n      return renderLinkNode(node, actions, data, allowLinks, key);\n  }\n}\n\nfunction hasParagraph(nodes: MarkupNode[]): boolean {\n  for (const node of nodes) {\n    if (node.type === 'paragraph') {\n      return true;\n    }\n    if ('children' in node && hasParagraph(node.children)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Parses a markup string and renders it as React elements. Supports `<important>`,\n * `<positive>`, `<negative>`, `<strong>`, `<strikethrough>`, `<paragraph>` (alias `<p>`),\n * and `<link>` (alias `<a>`) with secure href validation.\n *\n * It only processes `string` input, while `ReactNode` is passed-through without processing.\n *\n * > The component supersedes [Emphasis](?path=/docs/typography-emphasis--docs), which will be\n * eventually deprecated.\n *\n * @see http://storybook.wise.design/?path=/docs/typography-markup--docs\n * @link ../emphasis/Emphasis | Emphasis\n */\nexport const Markup: React.FC<MarkupProps> = ({\n  children,\n  data,\n  allowLinks = 'internal',\n  actions,\n  as,\n  className,\n  'data-testid': testId,\n}) => {\n  const tree = useMemo(\n    () => (typeof children === 'string' ? parseMarkup(children) : []),\n    [children],\n  );\n\n  if (typeof children !== 'string') {\n    if (children == null) {\n      return null;\n    }\n    return (\n      <span className={className} data-testid={testId}>\n        {children}\n      </span>\n    );\n  }\n\n  if (tree.length === 0) {\n    return null;\n  }\n\n  const Element = as ?? (hasParagraph(tree) ? 'div' : 'span');\n\n  return (\n    <Element className={className} data-testid={testId}>\n      {renderNodes(tree, actions, data, allowLinks)}\n    </Element>\n  );\n};\n\nexport default Markup;\n"],"names":["PLACEHOLDER_REGEX","substituteData","text","data","replace","match","key","Object","prototype","hasOwnProperty","call","String","renderNodes","nodes","actions","allowLinks","map","node","index","renderNode","renderLinkNode","children","action","_jsx","Link","accessibilityLabel","onClick","href","isAllowedHref","isHrefAllowedByMode","target","Fragment","type","content","className","hasParagraph","Markup","as","testId","tree","useMemo","parseMarkup","length","Element"],"mappings":";;;;;;AAQA,MAAMA,iBAAiB,GAAG,gBAAgB;AAI1C,SAASC,cAAcA,CAACC,IAAY,EAAEC,IAAgB,EAAA;AACpD,EAAA,OAAOD,IAAI,CAACE,OAAO,CAACJ,iBAAiB,EAAE,CAACK,KAAK,EAAEC,GAAW,KACxDC,MAAM,CAACC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACP,IAAI,EAAEG,GAAG,CAAC,GAAGK,MAAM,CAACR,IAAI,CAACG,GAAG,CAAC,CAAC,GAAGD,KAAK,CAC5E;AACH;AAEA,SAASO,WAAWA,CAClBC,KAAmB,EACnBC,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAAA;EAE1B,OAAOF,KAAK,CAACG,GAAG,CAAC,CAACC,IAAI,EAAEC,KAAK,KAAKC,UAAU,CAACF,IAAI,EAAEH,OAAO,EAAEX,IAAI,EAAEY,UAAU,EAAEG,KAAK,CAAC,CAAC;AACvF;AAEA,SAASE,cAAcA,CACrBH,IAA2C,EAC3CH,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAC1BT,GAAW,EAAA;AAEX,EAAA,MAAMe,QAAQ,GAAGT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU,CAAC;EAEtE,IAAIE,IAAI,CAACK,MAAM,IAAIR,OAAO,GAAGG,IAAI,CAACK,MAAM,CAAC,EAAE;AACzC,IAAA;AAAA;AACE;AACAC,MAAAA,GAAA,CAACC,IAAI,EAAA;QAAW,YAAA,EAAYP,IAAI,CAACQ,kBAAmB;AAACC,QAAAA,OAAO,EAAEZ,OAAO,CAACG,IAAI,CAACK,MAAM,CAAE;AAAAD,QAAAA,QAAA,EAChFA;AAAQ,OAAA,EADAf,GAEL;AAAC;AAEX,EAAA;AAEA,EAAA,IAAIW,IAAI,CAACU,IAAI,IAAIC,aAAa,CAACX,IAAI,CAACU,IAAI,CAAC,IAAIE,mBAAmB,CAACZ,IAAI,CAACU,IAAI,EAAEZ,UAAU,CAAC,EAAE;IACvF,oBACEQ,GAAA,CAACC,IAAI,EAAA;MAAWG,IAAI,EAAEV,IAAI,CAACU,IAAK;MAACG,MAAM,EAAEb,IAAI,CAACa,MAAO;MAAC,YAAA,EAAYb,IAAI,CAACQ,kBAAmB;AAAAJ,MAAAA,QAAA,EACvFA;AAAQ,KAAA,EADAf,GAEL,CAAC;AAEX,EAAA;EAEA,oBAAOiB,GAAA,CAACQ,QAAQ,EAAA;AAAAV,IAAAA,QAAA,EAAYA;AAAQ,GAAA,EAAdf,GAAyB,CAAC;AAClD;AAEA,SAASa,UAAUA,CACjBF,IAAgB,EAChBH,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAC1BT,GAAW,EAAA;EAEX,QAAQW,IAAI,CAACe,IAAI;AACf,IAAA,KAAK,MAAM;MACT,oBACET,GAAA,CAACQ,QAAQ,EAAA;AAAAV,QAAAA,QAAA,EAAYlB,IAAI,GAAGF,cAAc,CAACgB,IAAI,CAACgB,OAAO,EAAE9B,IAAI,CAAC,GAAGc,IAAI,CAACgB;AAAO,OAAA,EAA9D3B,GAAyE,CAAC;AAE7F,IAAA,KAAK,SAAS;MACZ,oBAAOiB,GAAA,CAAA,IAAA,EAAA,EAAA,EAASjB,GAAI,CAAG;AACzB,IAAA,KAAK,WAAW;AAChB,IAAA,KAAK,UAAU;AACf,IAAA,KAAK,UAAU;AACb,MAAA,oBACEiB,GAAA,CAAA,IAAA,EAAA;AAEEW,QAAAA,SAAS,EAAE,CAAA,yCAAA,EAA4CjB,IAAI,CAACe,IAAI,CAAA,CAAG;QACnE,YAAA,EAAYf,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EAEnCT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAJjDT,GAKH,CAAC;AAET,IAAA,KAAK,QAAQ;AACX,MAAA,oBACEiB,GAAA,CAAA,QAAA,EAAA;AAAkBW,QAAAA,SAAS,EAAC,mBAAmB;QAAC,YAAA,EAAYjB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EACjFT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAD3CT,GAEL,CAAC;AAEb,IAAA,KAAK,eAAe;AAClB,MAAA,oBACEiB,GAAA,CAAA,KAAA,EAAA;AAAeW,QAAAA,SAAS,EAAC,0BAA0B;QAAC,YAAA,EAAYjB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EACrFT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAD9CT,GAEL,CAAC;AAEV,IAAA,KAAK,WAAW;AACd,MAAA,oBACEiB,GAAA,CAAA,GAAA,EAAA;AAAaW,QAAAA,SAAS,EAAC,sBAAsB;QAAAb,QAAA,EAC1CT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EADhDT,GAEL,CAAC;AAER,IAAA,KAAK,MAAM;MACT,OAAOc,cAAc,CAACH,IAAI,EAAEH,OAAO,EAAEX,IAAI,EAAEY,UAAU,EAAET,GAAG,CAAC;AAC/D;AACF;AAEA,SAAS6B,YAAYA,CAACtB,KAAmB,EAAA;AACvC,EAAA,KAAK,MAAMI,IAAI,IAAIJ,KAAK,EAAE;AACxB,IAAA,IAAII,IAAI,CAACe,IAAI,KAAK,WAAW,EAAE;AAC7B,MAAA,OAAO,IAAI;AACb,IAAA;IACA,IAAI,UAAU,IAAIf,IAAI,IAAIkB,YAAY,CAAClB,IAAI,CAACI,QAAQ,CAAC,EAAE;AACrD,MAAA,OAAO,IAAI;AACb,IAAA;AACF,EAAA;AACA,EAAA,OAAO,KAAK;AACd;AAEA;;;;;;;;;;;;AAYG;AACI,MAAMe,MAAM,GAA0BA,CAAC;EAC5Cf,QAAQ;EACRlB,IAAI;AACJY,EAAAA,UAAU,GAAG,UAAU;EACvBD,OAAO;EACPuB,EAAE;EACFH,SAAS;AACT,EAAA,aAAa,EAAEI;AAAM,CACtB,KAAI;EACH,MAAMC,IAAI,GAAGC,OAAO,CAClB,MAAO,OAAOnB,QAAQ,KAAK,QAAQ,GAAGoB,WAAW,CAACpB,QAAQ,CAAC,GAAG,EAAG,EACjE,CAACA,QAAQ,CAAC,CACX;AAED,EAAA,IAAI,OAAOA,QAAQ,KAAK,QAAQ,EAAE;IAChC,IAAIA,QAAQ,IAAI,IAAI,EAAE;AACpB,MAAA,OAAO,IAAI;AACb,IAAA;AACA,IAAA,oBACEE,GAAA,CAAA,MAAA,EAAA;AAAMW,MAAAA,SAAS,EAAEA,SAAU;AAAC,MAAA,aAAA,EAAaI,MAAO;AAAAjB,MAAAA,QAAA,EAC7CA;AAAQ,KACL,CAAC;AAEX,EAAA;AAEA,EAAA,IAAIkB,IAAI,CAACG,MAAM,KAAK,CAAC,EAAE;AACrB,IAAA,OAAO,IAAI;AACb,EAAA;AAEA,EAAA,MAAMC,OAAO,GAAGN,EAAE,KAAKF,YAAY,CAACI,IAAI,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC;EAE3D,oBACEhB,GAAA,CAACoB,OAAO,EAAA;AAACT,IAAAA,SAAS,EAAEA,SAAU;AAAC,IAAA,aAAA,EAAaI,MAAO;IAAAjB,QAAA,EAChDT,WAAW,CAAC2B,IAAI,EAAEzB,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,GACtC,CAAC;AAEd;;;;"}
+{"version":3,"file":"Markup.mjs","sources":["../../src/Markup/Markup.tsx"],"sourcesContent":["import React, { Fragment, useMemo } from 'react';\n\nimport Link from '../Link';\n\nimport { parseMarkup } from './utils/parseMarkup';\nimport { type AllowLinksMode, isHrefAllowedByMode, sanitiseHref } from './utils/sanitise';\nimport type { MarkupActions, MarkupNode, MarkupProps } from './Markup.types';\n\nconst PLACEHOLDER_REGEX = /\\{\\{(\\w+)\\}\\}/g;\n\ntype MarkupData = Record<string, string | number>;\n\nfunction substituteData(text: string, data: MarkupData): string {\n  return text.replace(PLACEHOLDER_REGEX, (match, key: string) =>\n    Object.prototype.hasOwnProperty.call(data, key) ? String(data[key]) : match,\n  );\n}\n\nfunction renderNodes(\n  nodes: MarkupNode[],\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n): React.ReactNode[] {\n  return nodes.map((node, index) => renderNode(node, actions, data, allowLinks, index));\n}\n\nfunction renderLinkNode(\n  node: Extract<MarkupNode, { type: 'link' }>,\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n  key: number,\n): React.ReactNode {\n  const children = renderNodes(node.children, actions, data, allowLinks);\n\n  if (node.action && actions?.[node.action]) {\n    return (\n      // eslint-disable-next-line jsx-a11y/click-events-have-key-events\n      <Link key={key} aria-label={node.accessibilityLabel} onClick={actions[node.action]}>\n        {children}\n      </Link>\n    );\n  }\n\n  const sanitisedHref = node.href ? sanitiseHref(node.href) : undefined;\n  if (sanitisedHref && isHrefAllowedByMode(sanitisedHref, allowLinks)) {\n    return (\n      <Link\n        key={key}\n        href={sanitisedHref}\n        target={node.target}\n        aria-label={node.accessibilityLabel}\n      >\n        {children}\n      </Link>\n    );\n  }\n\n  return <Fragment key={key}>{children}</Fragment>;\n}\n\nfunction renderNode(\n  node: MarkupNode,\n  actions: MarkupActions | undefined,\n  data: MarkupData | undefined,\n  allowLinks: AllowLinksMode,\n  key: number,\n): React.ReactNode {\n  switch (node.type) {\n    case 'text':\n      return (\n        <Fragment key={key}>{data ? substituteData(node.content, data) : node.content}</Fragment>\n      );\n    case 'newline':\n      return <br key={key} />;\n    case 'important':\n    case 'positive':\n    case 'negative':\n      return (\n        <em\n          key={key}\n          className={`wds-markup-emphasis wds-markup-emphasis--${node.type}`}\n          aria-label={node.accessibilityLabel}\n        >\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </em>\n      );\n    case 'strong':\n      return (\n        <strong key={key} className=\"wds-markup-strong\" aria-label={node.accessibilityLabel}>\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </strong>\n      );\n    case 'strikethrough':\n      return (\n        <del key={key} className=\"wds-markup-strikethrough\" aria-label={node.accessibilityLabel}>\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </del>\n      );\n    case 'paragraph':\n      return (\n        <p key={key} className=\"wds-markup-paragraph\">\n          {renderNodes(node.children, actions, data, allowLinks)}\n        </p>\n      );\n    case 'link':\n      return renderLinkNode(node, actions, data, allowLinks, key);\n  }\n}\n\nfunction hasParagraph(nodes: MarkupNode[]): boolean {\n  for (const node of nodes) {\n    if (node.type === 'paragraph') {\n      return true;\n    }\n    if ('children' in node && hasParagraph(node.children)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Parses a markup string and renders it as React elements. Supports `<important>`,\n * `<positive>`, `<negative>`, `<strong>`, `<strikethrough>`, `<paragraph>` (alias `<p>`),\n * and `<link>` (alias `<a>`) with secure href validation.\n *\n * It only processes `string` input, while `ReactNode` is passed-through without processing.\n *\n * > The component supersedes [Emphasis](?path=/docs/typography-emphasis--docs), which will be\n * eventually deprecated.\n *\n * @see http://storybook.wise.design/?path=/docs/typography-markup--docs\n * @link ../emphasis/Emphasis | Emphasis\n */\nexport const Markup: React.FC<MarkupProps> = ({\n  children,\n  data,\n  allowLinks = 'internal',\n  actions,\n  as,\n  className,\n  'data-testid': testId,\n}) => {\n  const tree = useMemo(\n    () => (typeof children === 'string' ? parseMarkup(children) : []),\n    [children],\n  );\n\n  if (typeof children !== 'string') {\n    if (children == null) {\n      return null;\n    }\n    return (\n      <span className={className} data-testid={testId}>\n        {children}\n      </span>\n    );\n  }\n\n  if (tree.length === 0) {\n    return null;\n  }\n\n  const Element = as ?? (hasParagraph(tree) ? 'div' : 'span');\n\n  return (\n    <Element className={className} data-testid={testId}>\n      {renderNodes(tree, actions, data, allowLinks)}\n    </Element>\n  );\n};\n\nexport default Markup;\n"],"names":["PLACEHOLDER_REGEX","substituteData","text","data","replace","match","key","Object","prototype","hasOwnProperty","call","String","renderNodes","nodes","actions","allowLinks","map","node","index","renderNode","renderLinkNode","children","action","_jsx","Link","accessibilityLabel","onClick","sanitisedHref","href","sanitiseHref","undefined","isHrefAllowedByMode","target","Fragment","type","content","className","hasParagraph","Markup","as","testId","tree","useMemo","parseMarkup","length","Element"],"mappings":";;;;;;AAQA,MAAMA,iBAAiB,GAAG,gBAAgB;AAI1C,SAASC,cAAcA,CAACC,IAAY,EAAEC,IAAgB,EAAA;AACpD,EAAA,OAAOD,IAAI,CAACE,OAAO,CAACJ,iBAAiB,EAAE,CAACK,KAAK,EAAEC,GAAW,KACxDC,MAAM,CAACC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACP,IAAI,EAAEG,GAAG,CAAC,GAAGK,MAAM,CAACR,IAAI,CAACG,GAAG,CAAC,CAAC,GAAGD,KAAK,CAC5E;AACH;AAEA,SAASO,WAAWA,CAClBC,KAAmB,EACnBC,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAAA;EAE1B,OAAOF,KAAK,CAACG,GAAG,CAAC,CAACC,IAAI,EAAEC,KAAK,KAAKC,UAAU,CAACF,IAAI,EAAEH,OAAO,EAAEX,IAAI,EAAEY,UAAU,EAAEG,KAAK,CAAC,CAAC;AACvF;AAEA,SAASE,cAAcA,CACrBH,IAA2C,EAC3CH,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAC1BT,GAAW,EAAA;AAEX,EAAA,MAAMe,QAAQ,GAAGT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU,CAAC;EAEtE,IAAIE,IAAI,CAACK,MAAM,IAAIR,OAAO,GAAGG,IAAI,CAACK,MAAM,CAAC,EAAE;AACzC,IAAA;AAAA;AACE;AACAC,MAAAA,GAAA,CAACC,IAAI,EAAA;QAAW,YAAA,EAAYP,IAAI,CAACQ,kBAAmB;AAACC,QAAAA,OAAO,EAAEZ,OAAO,CAACG,IAAI,CAACK,MAAM,CAAE;AAAAD,QAAAA,QAAA,EAChFA;AAAQ,OAAA,EADAf,GAEL;AAAC;AAEX,EAAA;AAEA,EAAA,MAAMqB,aAAa,GAAGV,IAAI,CAACW,IAAI,GAAGC,YAAY,CAACZ,IAAI,CAACW,IAAI,CAAC,GAAGE,SAAS;EACrE,IAAIH,aAAa,IAAII,mBAAmB,CAACJ,aAAa,EAAEZ,UAAU,CAAC,EAAE;IACnE,oBACEQ,GAAA,CAACC,IAAI,EAAA;AAEHI,MAAAA,IAAI,EAAED,aAAc;MACpBK,MAAM,EAAEf,IAAI,CAACe,MAAO;MACpB,YAAA,EAAYf,IAAI,CAACQ,kBAAmB;AAAAJ,MAAAA,QAAA,EAEnCA;AAAQ,KAAA,EALJf,GAMD,CAAC;AAEX,EAAA;EAEA,oBAAOiB,GAAA,CAACU,QAAQ,EAAA;AAAAZ,IAAAA,QAAA,EAAYA;AAAQ,GAAA,EAAdf,GAAyB,CAAC;AAClD;AAEA,SAASa,UAAUA,CACjBF,IAAgB,EAChBH,OAAkC,EAClCX,IAA4B,EAC5BY,UAA0B,EAC1BT,GAAW,EAAA;EAEX,QAAQW,IAAI,CAACiB,IAAI;AACf,IAAA,KAAK,MAAM;MACT,oBACEX,GAAA,CAACU,QAAQ,EAAA;AAAAZ,QAAAA,QAAA,EAAYlB,IAAI,GAAGF,cAAc,CAACgB,IAAI,CAACkB,OAAO,EAAEhC,IAAI,CAAC,GAAGc,IAAI,CAACkB;AAAO,OAAA,EAA9D7B,GAAyE,CAAC;AAE7F,IAAA,KAAK,SAAS;MACZ,oBAAOiB,GAAA,CAAA,IAAA,EAAA,EAAA,EAASjB,GAAI,CAAG;AACzB,IAAA,KAAK,WAAW;AAChB,IAAA,KAAK,UAAU;AACf,IAAA,KAAK,UAAU;AACb,MAAA,oBACEiB,GAAA,CAAA,IAAA,EAAA;AAEEa,QAAAA,SAAS,EAAE,CAAA,yCAAA,EAA4CnB,IAAI,CAACiB,IAAI,CAAA,CAAG;QACnE,YAAA,EAAYjB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EAEnCT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAJjDT,GAKH,CAAC;AAET,IAAA,KAAK,QAAQ;AACX,MAAA,oBACEiB,GAAA,CAAA,QAAA,EAAA;AAAkBa,QAAAA,SAAS,EAAC,mBAAmB;QAAC,YAAA,EAAYnB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EACjFT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAD3CT,GAEL,CAAC;AAEb,IAAA,KAAK,eAAe;AAClB,MAAA,oBACEiB,GAAA,CAAA,KAAA,EAAA;AAAea,QAAAA,SAAS,EAAC,0BAA0B;QAAC,YAAA,EAAYnB,IAAI,CAACQ,kBAAmB;QAAAJ,QAAA,EACrFT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EAD9CT,GAEL,CAAC;AAEV,IAAA,KAAK,WAAW;AACd,MAAA,oBACEiB,GAAA,CAAA,GAAA,EAAA;AAAaa,QAAAA,SAAS,EAAC,sBAAsB;QAAAf,QAAA,EAC1CT,WAAW,CAACK,IAAI,CAACI,QAAQ,EAAEP,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,OAAA,EADhDT,GAEL,CAAC;AAER,IAAA,KAAK,MAAM;MACT,OAAOc,cAAc,CAACH,IAAI,EAAEH,OAAO,EAAEX,IAAI,EAAEY,UAAU,EAAET,GAAG,CAAC;AAC/D;AACF;AAEA,SAAS+B,YAAYA,CAACxB,KAAmB,EAAA;AACvC,EAAA,KAAK,MAAMI,IAAI,IAAIJ,KAAK,EAAE;AACxB,IAAA,IAAII,IAAI,CAACiB,IAAI,KAAK,WAAW,EAAE;AAC7B,MAAA,OAAO,IAAI;AACb,IAAA;IACA,IAAI,UAAU,IAAIjB,IAAI,IAAIoB,YAAY,CAACpB,IAAI,CAACI,QAAQ,CAAC,EAAE;AACrD,MAAA,OAAO,IAAI;AACb,IAAA;AACF,EAAA;AACA,EAAA,OAAO,KAAK;AACd;AAEA;;;;;;;;;;;;AAYG;AACI,MAAMiB,MAAM,GAA0BA,CAAC;EAC5CjB,QAAQ;EACRlB,IAAI;AACJY,EAAAA,UAAU,GAAG,UAAU;EACvBD,OAAO;EACPyB,EAAE;EACFH,SAAS;AACT,EAAA,aAAa,EAAEI;AAAM,CACtB,KAAI;EACH,MAAMC,IAAI,GAAGC,OAAO,CAClB,MAAO,OAAOrB,QAAQ,KAAK,QAAQ,GAAGsB,WAAW,CAACtB,QAAQ,CAAC,GAAG,EAAG,EACjE,CAACA,QAAQ,CAAC,CACX;AAED,EAAA,IAAI,OAAOA,QAAQ,KAAK,QAAQ,EAAE;IAChC,IAAIA,QAAQ,IAAI,IAAI,EAAE;AACpB,MAAA,OAAO,IAAI;AACb,IAAA;AACA,IAAA,oBACEE,GAAA,CAAA,MAAA,EAAA;AAAMa,MAAAA,SAAS,EAAEA,SAAU;AAAC,MAAA,aAAA,EAAaI,MAAO;AAAAnB,MAAAA,QAAA,EAC7CA;AAAQ,KACL,CAAC;AAEX,EAAA;AAEA,EAAA,IAAIoB,IAAI,CAACG,MAAM,KAAK,CAAC,EAAE;AACrB,IAAA,OAAO,IAAI;AACb,EAAA;AAEA,EAAA,MAAMC,OAAO,GAAGN,EAAE,KAAKF,YAAY,CAACI,IAAI,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC;EAE3D,oBACElB,GAAA,CAACsB,OAAO,EAAA;AAACT,IAAAA,SAAS,EAAEA,SAAU;AAAC,IAAA,aAAA,EAAaI,MAAO;IAAAnB,QAAA,EAChDT,WAAW,CAAC6B,IAAI,EAAE3B,OAAO,EAAEX,IAAI,EAAEY,UAAU;AAAC,GACtC,CAAC;AAEd;;;;"}

package/build/Markup/constants.js

@@ -2,20 +2,6 @@
 
 // Only these tags are recognised — anything else is treated as plain text (security allow-list)
 const ALLOWED_TAGS = ['important', 'positive', 'negative', 'strong', 'strikethrough', 'paragraph', 'p', 'link', 'a'];
-/**
- * Matches opening and closing tags from the ALLOWED_TAGS allow-list.
- *
- * Capture groups:
- *  1. `/` if this is a closing tag, undefined otherwise
- *  2. Tag name
- *  3. Raw attribute string between the tag name and `>` (empty for closing tags)
- *
- * The lookahead `(?=[\s>/])` after the tag name ensures we don't match partial
- * words — e.g. `<stronger>` won't be matched as `<strong>`.
- *
- * Global flag (`g`) allows iterative matching via `exec()`.
- */
-const TAG_REGEX = new RegExp(`<(\\/)?(${ALLOWED_TAGS.join('|')})(?=[\\s>/])((?:[^>"']*(?:"[^"]*"|'[^']*'))*[^>"']*)>`, 'g');
 const TAG_ALIASES = {
   p: 'paragraph',
   a: 'link'
@@ -32,5 +18,4 @@ exports.ALLOWED_TAGS = ALLOWED_TAGS;
 exports.ALLOWED_TARGETS = ALLOWED_TARGETS;
 exports.MAX_NESTING_DEPTH = MAX_NESTING_DEPTH;
 exports.TAG_ALIASES = TAG_ALIASES;
-exports.TAG_REGEX = TAG_REGEX;
 //# sourceMappingURL=constants.js.map

package/build/Markup/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sources":["../../src/Markup/constants.ts"],"sourcesContent":["// Only these tags are recognised — anything else is treated as plain text (security allow-list)\nexport const ALLOWED_TAGS = [\n  'important',\n  'positive',\n  'negative',\n  'strong',\n  'strikethrough',\n  'paragraph',\n  'p',\n  'link',\n  'a',\n] as const;\n\n/**\n * Matches opening and closing tags from the ALLOWED_TAGS allow-list.\n *\n * Capture groups:\n *  1. `/` if this is a closing tag, undefined otherwise\n *  2. Tag name\n *  3. Raw attribute string between the tag name and `>` (empty for closing tags)\n *\n * The lookahead `(?=[\\s>/])` after the tag name ensures we don't match partial\n * words — e.g. `<stronger>` won't be matched as `<strong>`.\n *\n * Global flag (`g`) allows iterative matching via `exec()`.\n */\nexport const TAG_REGEX = new RegExp(\n  `<(\\\\/)?(${ALLOWED_TAGS.join('|')})(?=[\\\\s>/])((?:[^>\"']*(?:\"[^\"]*\"|'[^']*'))*[^>\"']*)>`,\n  'g',\n);\n\nexport const TAG_ALIASES: Record<string, string> = { p: 'paragraph', a: 'link' };\n\n// Maximum recursive nesting before the parser emits tags as literal text (DoS protection)\nexport const MAX_NESTING_DEPTH = 32;\n\n// Only these link targets are allowed — others are stripped to prevent iframe breakout\nexport const ALLOWED_TARGETS = ['_blank', '_self'];\n\n// Only these protocols pass href validation — all others are blocked\nexport const ALLOWED_PROTOCOLS = ['https:', 'mailto:'];\n"],"names":["ALLOWED_TAGS","TAG_REGEX","RegExp","join","TAG_ALIASES","p","a","MAX_NESTING_DEPTH","ALLOWED_TARGETS","ALLOWED_PROTOCOLS"],"mappings":";;AAAA;AACO,MAAMA,YAAY,GAAG,CAC1B,WAAW,EACX,UAAU,EACV,UAAU,EACV,QAAQ,EACR,eAAe,EACf,WAAW,EACX,GAAG,EACH,MAAM,EACN,GAAG;AAGL;;;;;;;;;;;;AAYG;MACUC,SAAS,GAAG,IAAIC,MAAM,CACjC,CAAA,QAAA,EAAWF,YAAY,CAACG,IAAI,CAAC,GAAG,CAAC,CAAA,qDAAA,CAAuD,EACxF,GAAG;AAGE,MAAMC,WAAW,GAA2B;AAAEC,EAAAA,CAAC,EAAE,WAAW;AAAEC,EAAAA,CAAC,EAAE;;AAExE;AACO,MAAMC,iBAAiB,GAAG;AAEjC;MACaC,eAAe,GAAG,CAAC,QAAQ,EAAE,OAAO;AAEjD;MACaC,iBAAiB,GAAG,CAAC,QAAQ,EAAE,SAAS;;;;;;;;;"}
+{"version":3,"file":"constants.js","sources":["../../src/Markup/constants.ts"],"sourcesContent":["// Only these tags are recognised — anything else is treated as plain text (security allow-list)\nexport const ALLOWED_TAGS = [\n  'important',\n  'positive',\n  'negative',\n  'strong',\n  'strikethrough',\n  'paragraph',\n  'p',\n  'link',\n  'a',\n] as const;\n\nexport const TAG_ALIASES: Record<string, string> = { p: 'paragraph', a: 'link' };\n\n// Maximum recursive nesting before the parser emits tags as literal text (DoS protection)\nexport const MAX_NESTING_DEPTH = 32;\n\n// Only these link targets are allowed — others are stripped to prevent iframe breakout\nexport const ALLOWED_TARGETS = ['_blank', '_self'];\n\n// Only these protocols pass href validation — all others are blocked\nexport const ALLOWED_PROTOCOLS = ['https:', 'mailto:'];\n"],"names":["ALLOWED_TAGS","TAG_ALIASES","p","a","MAX_NESTING_DEPTH","ALLOWED_TARGETS","ALLOWED_PROTOCOLS"],"mappings":";;AAAA;AACO,MAAMA,YAAY,GAAG,CAC1B,WAAW,EACX,UAAU,EACV,UAAU,EACV,QAAQ,EACR,eAAe,EACf,WAAW,EACX,GAAG,EACH,MAAM,EACN,GAAG;AAGE,MAAMC,WAAW,GAA2B;AAAEC,EAAAA,CAAC,EAAE,WAAW;AAAEC,EAAAA,CAAC,EAAE;;AAExE;AACO,MAAMC,iBAAiB,GAAG;AAEjC;MACaC,eAAe,GAAG,CAAC,QAAQ,EAAE,OAAO;AAEjD;MACaC,iBAAiB,GAAG,CAAC,QAAQ,EAAE,SAAS;;;;;;;;"}

package/build/Markup/constants.mjs

@@ -1,19 +1,5 @@
 // Only these tags are recognised — anything else is treated as plain text (security allow-list)
 const ALLOWED_TAGS = ['important', 'positive', 'negative', 'strong', 'strikethrough', 'paragraph', 'p', 'link', 'a'];
-/**
- * Matches opening and closing tags from the ALLOWED_TAGS allow-list.
- *
- * Capture groups:
- *  1. `/` if this is a closing tag, undefined otherwise
- *  2. Tag name
- *  3. Raw attribute string between the tag name and `>` (empty for closing tags)
- *
- * The lookahead `(?=[\s>/])` after the tag name ensures we don't match partial
- * words — e.g. `<stronger>` won't be matched as `<strong>`.
- *
- * Global flag (`g`) allows iterative matching via `exec()`.
- */
-const TAG_REGEX = new RegExp(`<(\\/)?(${ALLOWED_TAGS.join('|')})(?=[\\s>/])((?:[^>"']*(?:"[^"]*"|'[^']*'))*[^>"']*)>`, 'g');
 const TAG_ALIASES = {
   p: 'paragraph',
   a: 'link'
@@ -25,5 +11,5 @@ const ALLOWED_TARGETS = ['_blank', '_self'];
 // Only these protocols pass href validation — all others are blocked
 const ALLOWED_PROTOCOLS = ['https:', 'mailto:'];
 
-export { ALLOWED_PROTOCOLS, ALLOWED_TAGS, ALLOWED_TARGETS, MAX_NESTING_DEPTH, TAG_ALIASES, TAG_REGEX };
+export { ALLOWED_PROTOCOLS, ALLOWED_TAGS, ALLOWED_TARGETS, MAX_NESTING_DEPTH, TAG_ALIASES };
 //# sourceMappingURL=constants.mjs.map

package/build/Markup/constants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"constants.mjs","sources":["../../src/Markup/constants.ts"],"sourcesContent":["// Only these tags are recognised — anything else is treated as plain text (security allow-list)\nexport const ALLOWED_TAGS = [\n  'important',\n  'positive',\n  'negative',\n  'strong',\n  'strikethrough',\n  'paragraph',\n  'p',\n  'link',\n  'a',\n] as const;\n\n/**\n * Matches opening and closing tags from the ALLOWED_TAGS allow-list.\n *\n * Capture groups:\n *  1. `/` if this is a closing tag, undefined otherwise\n *  2. Tag name\n *  3. Raw attribute string between the tag name and `>` (empty for closing tags)\n *\n * The lookahead `(?=[\\s>/])` after the tag name ensures we don't match partial\n * words — e.g. `<stronger>` won't be matched as `<strong>`.\n *\n * Global flag (`g`) allows iterative matching via `exec()`.\n */\nexport const TAG_REGEX = new RegExp(\n  `<(\\\\/)?(${ALLOWED_TAGS.join('|')})(?=[\\\\s>/])((?:[^>\"']*(?:\"[^\"]*\"|'[^']*'))*[^>\"']*)>`,\n  'g',\n);\n\nexport const TAG_ALIASES: Record<string, string> = { p: 'paragraph', a: 'link' };\n\n// Maximum recursive nesting before the parser emits tags as literal text (DoS protection)\nexport const MAX_NESTING_DEPTH = 32;\n\n// Only these link targets are allowed — others are stripped to prevent iframe breakout\nexport const ALLOWED_TARGETS = ['_blank', '_self'];\n\n// Only these protocols pass href validation — all others are blocked\nexport const ALLOWED_PROTOCOLS = ['https:', 'mailto:'];\n"],"names":["ALLOWED_TAGS","TAG_REGEX","RegExp","join","TAG_ALIASES","p","a","MAX_NESTING_DEPTH","ALLOWED_TARGETS","ALLOWED_PROTOCOLS"],"mappings":"AAAA;AACO,MAAMA,YAAY,GAAG,CAC1B,WAAW,EACX,UAAU,EACV,UAAU,EACV,QAAQ,EACR,eAAe,EACf,WAAW,EACX,GAAG,EACH,MAAM,EACN,GAAG;AAGL;;;;;;;;;;;;AAYG;MACUC,SAAS,GAAG,IAAIC,MAAM,CACjC,CAAA,QAAA,EAAWF,YAAY,CAACG,IAAI,CAAC,GAAG,CAAC,CAAA,qDAAA,CAAuD,EACxF,GAAG;AAGE,MAAMC,WAAW,GAA2B;AAAEC,EAAAA,CAAC,EAAE,WAAW;AAAEC,EAAAA,CAAC,EAAE;;AAExE;AACO,MAAMC,iBAAiB,GAAG;AAEjC;MACaC,eAAe,GAAG,CAAC,QAAQ,EAAE,OAAO;AAEjD;MACaC,iBAAiB,GAAG,CAAC,QAAQ,EAAE,SAAS;;;;"}
+{"version":3,"file":"constants.mjs","sources":["../../src/Markup/constants.ts"],"sourcesContent":["// Only these tags are recognised — anything else is treated as plain text (security allow-list)\nexport const ALLOWED_TAGS = [\n  'important',\n  'positive',\n  'negative',\n  'strong',\n  'strikethrough',\n  'paragraph',\n  'p',\n  'link',\n  'a',\n] as const;\n\nexport const TAG_ALIASES: Record<string, string> = { p: 'paragraph', a: 'link' };\n\n// Maximum recursive nesting before the parser emits tags as literal text (DoS protection)\nexport const MAX_NESTING_DEPTH = 32;\n\n// Only these link targets are allowed — others are stripped to prevent iframe breakout\nexport const ALLOWED_TARGETS = ['_blank', '_self'];\n\n// Only these protocols pass href validation — all others are blocked\nexport const ALLOWED_PROTOCOLS = ['https:', 'mailto:'];\n"],"names":["ALLOWED_TAGS","TAG_ALIASES","p","a","MAX_NESTING_DEPTH","ALLOWED_TARGETS","ALLOWED_PROTOCOLS"],"mappings":"AAAA;AACO,MAAMA,YAAY,GAAG,CAC1B,WAAW,EACX,UAAU,EACV,UAAU,EACV,QAAQ,EACR,eAAe,EACf,WAAW,EACX,GAAG,EACH,MAAM,EACN,GAAG;AAGE,MAAMC,WAAW,GAA2B;AAAEC,EAAAA,CAAC,EAAE,WAAW;AAAEC,EAAAA,CAAC,EAAE;;AAExE;AACO,MAAMC,iBAAiB,GAAG;AAEjC;MACaC,eAAe,GAAG,CAAC,QAAQ,EAAE,OAAO;AAEjD;MACaC,iBAAiB,GAAG,CAAC,QAAQ,EAAE,SAAS;;;;"}

package/build/Markup/utils/parseMarkup.js

@@ -8,6 +8,20 @@ const OBJECT_PROTOTYPE_KEYS = new Set(Object.getOwnPropertyNames(Object.prototyp
 // eslint-disable-next-line regexp/no-control-character
 const CONTROL_CHARS = /[\x00-\x1f\x7f-\x9f]/g;
 const HTML_METACHAR = /[<>"']/g;
+/**
+ * Matches opening and closing tags from the ALLOWED_TAGS allow-list.
+ *
+ * Capture groups:
+ *  1. `/` if this is a closing tag, undefined otherwise
+ *  2. Tag name
+ *  3. Raw attribute string between the tag name and `>` (empty for closing tags)
+ *
+ * The lookahead `(?=[\s>/])` after the tag name ensures we don't match partial
+ * words — e.g. `<stronger>` won't be matched as `<strong>`.
+ *
+ * Global flag (`g`) allows iterative matching via `exec()`.
+ */
+const TAG_REGEX = new RegExp(`<(\\/)?(${constants.ALLOWED_TAGS.join('|')})(?=[\\s>/])((?:[^>"']*(?:"[^"]*"|'[^']*'))*[^>"']*)>`, 'g');
 /**
  * Splits the input string into a flat list of tokens by scanning for known tags.
  * Text between tags is emitted as text/newline tokens. Unrecognised tags are never
@@ -16,8 +30,8 @@ const HTML_METACHAR = /[<>"']/g;
 function tokenise(input) {
   const tokens = [];
   let lastIndex = 0;
-  constants.TAG_REGEX.lastIndex = 0;
-  let match = constants.TAG_REGEX.exec(input);
+  TAG_REGEX.lastIndex = 0;
+  let match = TAG_REGEX.exec(input);
   while (match !== null) {
     if (match.index > lastIndex) {
       pushTextWithNewlines(tokens, input.slice(lastIndex, match.index));
@@ -37,8 +51,8 @@ function tokenise(input) {
         attrs
       });
     }
-    lastIndex = constants.TAG_REGEX.lastIndex;
-    match = constants.TAG_REGEX.exec(input);
+    lastIndex = TAG_REGEX.lastIndex;
+    match = TAG_REGEX.exec(input);
   }
   if (lastIndex < input.length) {
     pushTextWithNewlines(tokens, input.slice(lastIndex));
@@ -167,6 +181,19 @@ function buildNode(rawTag, attrs, children) {
     })
   };
 }
+/**
+ * Matches allow-listed attributes from the raw attribute string captured by TAG_REGEX.
+ * Requires whitespace before each attribute name to prevent matching inside quoted values.
+ *
+ * Example: for input ` href="https://wise.com" target="_blank"`
+ *  - Match 1: groups = ['href', 'https://wise.com', undefined]
+ *  - Match 2: groups = ['target', '_blank', undefined]
+ *
+ * Capture groups:
+ *  1. Attribute name (href, action, target, or accessibilityLabel)
+ *  2. Double-quoted value (if present)
+ *  3. Single-quoted value (if present)
+ */
 const ATTR_REGEX = /(?<=\s)(href|action|target|accessibilityLabel)=(?:"([^"]*)"|'([^']*)')/g;
 /**
  * Extracts allowed attributes from a raw attribute string.
@@ -208,7 +235,7 @@ function sanitizeAttributeValue(key, value) {
     case 'accessibilityLabel':
       return value.replace(HTML_METACHAR, '').slice(0, MAX_ACCESSIBILITY_LABEL_LENGTH);
     default:
-      return value;
+      return undefined;
   }
 }
 /** Entry point: tokenises the input string, then parses the token stream into a MarkupNode tree. */

package/build/Markup/utils/parseMarkup.js.map

@@ -1 +1 @@
-{"version":3,"file":"parseMarkup.js","sources":["../../../src/Markup/utils/parseMarkup.ts"],"sourcesContent":["import { ALLOWED_TARGETS, MAX_NESTING_DEPTH, TAG_ALIASES, TAG_REGEX } from '../constants';\nimport { MarkupNode } from '../Markup.types';\n\nexport { MAX_NESTING_DEPTH };\nexport const MAX_INPUT_LENGTH = 10_000;\nexport const MAX_ACCESSIBILITY_LABEL_LENGTH = 250;\n\nconst OBJECT_PROTOTYPE_KEYS = new Set(Object.getOwnPropertyNames(Object.prototype));\n\n// eslint-disable-next-line regexp/no-control-character\nconst CONTROL_CHARS = /[\\x00-\\x1f\\x7f-\\x9f]/g;\nconst HTML_METACHAR = /[<>\"']/g;\n\ntype Token =\n  | { type: 'text'; content: string }\n  | { type: 'newline' }\n  | { type: 'open'; tag: string; attrs: string }\n  | { type: 'close'; tag: string };\n\n/**\n * Splits the input string into a flat list of tokens by scanning for known tags.\n * Text between tags is emitted as text/newline tokens. Unrecognised tags are never\n * tokenised — they remain part of the surrounding text content.\n */\nfunction tokenise(input: string): Token[] {\n  const tokens: Token[] = [];\n  let lastIndex = 0;\n\n  TAG_REGEX.lastIndex = 0;\n  let match = TAG_REGEX.exec(input);\n\n  while (match !== null) {\n    if (match.index > lastIndex) {\n      pushTextWithNewlines(tokens, input.slice(lastIndex, match.index));\n    }\n\n    const isClose = match[1] === '/';\n    const tag = match[2];\n    const attrs = match[3] || '';\n\n    if (isClose) {\n      tokens.push({ type: 'close', tag });\n    } else {\n      tokens.push({ type: 'open', tag, attrs });\n    }\n\n    lastIndex = TAG_REGEX.lastIndex;\n    match = TAG_REGEX.exec(input);\n  }\n\n  if (lastIndex < input.length) {\n    pushTextWithNewlines(tokens, input.slice(lastIndex));\n  }\n\n  return tokens;\n}\n\n/** Splits a text fragment on newline characters, interleaving newline tokens between parts. */\nfunction pushTextWithNewlines(tokens: Token[], text: string): void {\n  const parts = text.split('\\n');\n  for (let index = 0; index < parts.length; index += 1) {\n    if (index > 0) {\n      tokens.push({ type: 'newline' });\n    }\n    if (parts[index]) {\n      tokens.push({ type: 'text', content: parts[index] });\n    }\n  }\n}\n\ntype ParseResult = { closed: true; nodes: MarkupNode[] } | { closed: false; nodes: MarkupNode[] };\n\n/**\n * Recursive descent parser that consumes tokens and builds a MarkupNode tree.\n *\n * When `untilTag` is provided, the function collects nodes until it finds a matching\n * close token — returning `{ closed: true }`. If it exhausts all tokens without finding\n * the close, it returns `{ closed: false }` so the caller can fall back to plain text\n * (graceful degradation for malformed input).\n *\n * The shared `position` object acts as a cursor across recursive calls, avoiding the\n * need to slice or copy the token array.\n */\nfunction parse(\n  tokens: Token[],\n  position: { index: number },\n  untilTag?: string,\n  depth = 0,\n): ParseResult {\n  const nodes: MarkupNode[] = [];\n\n  while (position.index < tokens.length) {\n    const token = tokens[position.index];\n\n    if (token.type === 'text') {\n      nodes.push({ type: 'text', content: token.content });\n      position.index += 1;\n    } else if (token.type === 'newline') {\n      nodes.push({ type: 'newline' });\n      position.index += 1;\n    } else if (token.type === 'close') {\n      if (token.tag === untilTag) {\n        position.index += 1;\n        return { closed: true, nodes };\n      }\n      // Mismatched close tag — render as literal text\n      nodes.push({ type: 'text', content: `</${token.tag}>` });\n      position.index += 1;\n    } else if (token.type === 'open') {\n      if (depth >= MAX_NESTING_DEPTH) {\n        nodes.push({ type: 'text', content: `<${token.tag}${token.attrs}>` });\n        position.index += 1;\n      } else {\n        position.index += 1;\n        const result = parse(tokens, position, token.tag, depth + 1);\n\n        if (result.closed) {\n          const node = buildNode(token.tag, token.attrs, result.nodes);\n          nodes.push(node);\n        } else {\n          nodes.push({ type: 'text', content: `<${token.tag}${token.attrs}>` });\n          nodes.push(...result.nodes);\n        }\n      }\n    }\n  }\n\n  if (untilTag) {\n    return { closed: false, nodes };\n  }\n\n  return { closed: true, nodes };\n}\n\n/**\n * Maps a raw tag name to a typed MarkupNode. Resolves aliases first (p→paragraph, a→link),\n * then builds the appropriate node shape. Link nodes carry full attributes; other element\n * nodes extract only accessibilityLabel.\n */\nfunction buildNode(rawTag: string, attrs: string, children: MarkupNode[]): MarkupNode {\n  const tag = TAG_ALIASES[rawTag] || rawTag;\n\n  if (tag === 'link') {\n    return { type: 'link', children, ...parseAttributes(attrs) };\n  }\n\n  if (tag === 'paragraph') {\n    return { type: 'paragraph', children };\n  }\n\n  const { accessibilityLabel } = parseAttributes(attrs);\n\n  return {\n    type: tag as MarkupNode['type'],\n    children,\n    ...(accessibilityLabel && { accessibilityLabel }),\n  } as MarkupNode;\n}\n\nconst ATTR_REGEX = /(?<=\\s)(href|action|target|accessibilityLabel)=(?:\"([^\"]*)\"|'([^']*)')/g;\n\ntype ParsedAttributes = {\n  href?: string;\n  action?: string;\n  target?: string;\n  accessibilityLabel?: string;\n};\n\n/**\n * Extracts allowed attributes from a raw attribute string.\n * Supports both double- and single-quoted values. Any attribute not in the\n * allow-list (href, action, target, accessibilityLabel) is silently discarded.\n * First occurrence wins — duplicates are ignored.\n */\nfunction parseAttributes(attrs: string): ParsedAttributes {\n  const result: ParsedAttributes = {};\n  ATTR_REGEX.lastIndex = 0;\n  let match = ATTR_REGEX.exec(attrs);\n\n  while (match !== null) {\n    const key = match[1] as 'href' | 'action' | 'target' | 'accessibilityLabel';\n    const value = match[2] ?? match[3];\n\n    if (!(key in result)) {\n      const sanitized = sanitizeAttributeValue(key, value);\n      if (sanitized !== undefined) {\n        result[key] = sanitized;\n      }\n    }\n\n    match = ATTR_REGEX.exec(attrs);\n  }\n\n  return result;\n}\n\nfunction sanitizeAttributeValue(\n  key: 'href' | 'action' | 'target' | 'accessibilityLabel',\n  value: string,\n): string | undefined {\n  switch (key) {\n    case 'href':\n      return value.replace(CONTROL_CHARS, '');\n    case 'action':\n      if (OBJECT_PROTOTYPE_KEYS.has(value)) {\n        return undefined;\n      }\n      return value;\n    case 'target':\n      if (!ALLOWED_TARGETS.includes(value)) {\n        return undefined;\n      }\n      return value;\n    case 'accessibilityLabel':\n      return value.replace(HTML_METACHAR, '').slice(0, MAX_ACCESSIBILITY_LABEL_LENGTH);\n    default:\n      return value;\n  }\n}\n\n/** Entry point: tokenises the input string, then parses the token stream into a MarkupNode tree. */\nexport function parseMarkup(input: string): MarkupNode[] {\n  if (!input) {\n    return [];\n  }\n\n  if (input.length > MAX_INPUT_LENGTH) {\n    return [{ type: 'text', content: input }];\n  }\n\n  const tokens = tokenise(input);\n  const position = { index: 0 };\n  return parse(tokens, position).nodes;\n}\n"],"names":["MAX_INPUT_LENGTH","MAX_ACCESSIBILITY_LABEL_LENGTH","OBJECT_PROTOTYPE_KEYS","Set","Object","getOwnPropertyNames","prototype","CONTROL_CHARS","HTML_METACHAR","tokenise","input","tokens","lastIndex","TAG_REGEX","match","exec","index","pushTextWithNewlines","slice","isClose","tag","attrs","push","type","length","text","parts","split","content","parse","position","untilTag","depth","nodes","token","closed","MAX_NESTING_DEPTH","result","node","buildNode","rawTag","children","TAG_ALIASES","parseAttributes","accessibilityLabel","ATTR_REGEX","key","value","sanitized","sanitizeAttributeValue","undefined","replace","has","ALLOWED_TARGETS","includes","parseMarkup"],"mappings":";;;;AAIO,MAAMA,gBAAgB,GAAG;AACzB,MAAMC,8BAA8B,GAAG;AAE9C,MAAMC,qBAAqB,GAAG,IAAIC,GAAG,CAACC,MAAM,CAACC,mBAAmB,CAACD,MAAM,CAACE,SAAS,CAAC,CAAC;AAEnF;AACA,MAAMC,aAAa,GAAG,uBAAuB;AAC7C,MAAMC,aAAa,GAAG,SAAS;AAQ/B;;;;AAIG;AACH,SAASC,QAAQA,CAACC,KAAa,EAAA;EAC7B,MAAMC,MAAM,GAAY,EAAE;EAC1B,IAAIC,SAAS,GAAG,CAAC;EAEjBC,mBAAS,CAACD,SAAS,GAAG,CAAC;AACvB,EAAA,IAAIE,KAAK,GAAGD,mBAAS,CAACE,IAAI,CAACL,KAAK,CAAC;EAEjC,OAAOI,KAAK,KAAK,IAAI,EAAE;AACrB,IAAA,IAAIA,KAAK,CAACE,KAAK,GAAGJ,SAAS,EAAE;AAC3BK,MAAAA,oBAAoB,CAACN,MAAM,EAAED,KAAK,CAACQ,KAAK,CAACN,SAAS,EAAEE,KAAK,CAACE,KAAK,CAAC,CAAC;AACnE,IAAA;AAEA,IAAA,MAAMG,OAAO,GAAGL,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;AAChC,IAAA,MAAMM,GAAG,GAAGN,KAAK,CAAC,CAAC,CAAC;AACpB,IAAA,MAAMO,KAAK,GAAGP,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;AAE5B,IAAA,IAAIK,OAAO,EAAE;MACXR,MAAM,CAACW,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,OAAO;AAAEH,QAAAA;AAAG,OAAE,CAAC;AACrC,IAAA,CAAC,MAAM;MACLT,MAAM,CAACW,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;QAAEH,GAAG;AAAEC,QAAAA;AAAK,OAAE,CAAC;AAC3C,IAAA;IAEAT,SAAS,GAAGC,mBAAS,CAACD,SAAS;AAC/BE,IAAAA,KAAK,GAAGD,mBAAS,CAACE,IAAI,CAACL,KAAK,CAAC;AAC/B,EAAA;AAEA,EAAA,IAAIE,SAAS,GAAGF,KAAK,CAACc,MAAM,EAAE;IAC5BP,oBAAoB,CAACN,MAAM,EAAED,KAAK,CAACQ,KAAK,CAACN,SAAS,CAAC,CAAC;AACtD,EAAA;AAEA,EAAA,OAAOD,MAAM;AACf;AAEA;AACA,SAASM,oBAAoBA,CAACN,MAAe,EAAEc,IAAY,EAAA;AACzD,EAAA,MAAMC,KAAK,GAAGD,IAAI,CAACE,KAAK,CAAC,IAAI,CAAC;AAC9B,EAAA,KAAK,IAAIX,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGU,KAAK,CAACF,MAAM,EAAER,KAAK,IAAI,CAAC,EAAE;IACpD,IAAIA,KAAK,GAAG,CAAC,EAAE;MACbL,MAAM,CAACW,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE;AAAS,OAAE,CAAC;AAClC,IAAA;AACA,IAAA,IAAIG,KAAK,CAACV,KAAK,CAAC,EAAE;MAChBL,MAAM,CAACW,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;QAAEK,OAAO,EAAEF,KAAK,CAACV,KAAK;AAAC,OAAE,CAAC;AACtD,IAAA;AACF,EAAA;AACF;AAIA;;;;;;;;;;AAUG;AACH,SAASa,KAAKA,CACZlB,MAAe,EACfmB,QAA2B,EAC3BC,QAAiB,EACjBC,KAAK,GAAG,CAAC,EAAA;EAET,MAAMC,KAAK,GAAiB,EAAE;AAE9B,EAAA,OAAOH,QAAQ,CAACd,KAAK,GAAGL,MAAM,CAACa,MAAM,EAAE;AACrC,IAAA,MAAMU,KAAK,GAAGvB,MAAM,CAACmB,QAAQ,CAACd,KAAK,CAAC;AAEpC,IAAA,IAAIkB,KAAK,CAACX,IAAI,KAAK,MAAM,EAAE;MACzBU,KAAK,CAACX,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;QAAEK,OAAO,EAAEM,KAAK,CAACN;AAAO,OAAE,CAAC;MACpDE,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,IAAA,CAAC,MAAM,IAAIkB,KAAK,CAACX,IAAI,KAAK,SAAS,EAAE;MACnCU,KAAK,CAACX,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE;AAAS,OAAE,CAAC;MAC/BO,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,IAAA,CAAC,MAAM,IAAIkB,KAAK,CAACX,IAAI,KAAK,OAAO,EAAE;AACjC,MAAA,IAAIW,KAAK,CAACd,GAAG,KAAKW,QAAQ,EAAE;QAC1BD,QAAQ,CAACd,KAAK,IAAI,CAAC;QACnB,OAAO;AAAEmB,UAAAA,MAAM,EAAE,IAAI;AAAEF,UAAAA;SAAO;AAChC,MAAA;AACA;MACAA,KAAK,CAACX,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;AAAEK,QAAAA,OAAO,EAAE,CAAA,EAAA,EAAKM,KAAK,CAACd,GAAG,CAAA,CAAA;AAAG,OAAE,CAAC;MACxDU,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,IAAA,CAAC,MAAM,IAAIkB,KAAK,CAACX,IAAI,KAAK,MAAM,EAAE;MAChC,IAAIS,KAAK,IAAII,2BAAiB,EAAE;QAC9BH,KAAK,CAACX,IAAI,CAAC;AAAEC,UAAAA,IAAI,EAAE,MAAM;UAAEK,OAAO,EAAE,IAAIM,KAAK,CAACd,GAAG,CAAA,EAAGc,KAAK,CAACb,KAAK,CAAA,CAAA;AAAG,SAAE,CAAC;QACrES,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,MAAA,CAAC,MAAM;QACLc,QAAQ,CAACd,KAAK,IAAI,CAAC;AACnB,QAAA,MAAMqB,MAAM,GAAGR,KAAK,CAAClB,MAAM,EAAEmB,QAAQ,EAAEI,KAAK,CAACd,GAAG,EAAEY,KAAK,GAAG,CAAC,CAAC;QAE5D,IAAIK,MAAM,CAACF,MAAM,EAAE;AACjB,UAAA,MAAMG,IAAI,GAAGC,SAAS,CAACL,KAAK,CAACd,GAAG,EAAEc,KAAK,CAACb,KAAK,EAAEgB,MAAM,CAACJ,KAAK,CAAC;AAC5DA,UAAAA,KAAK,CAACX,IAAI,CAACgB,IAAI,CAAC;AAClB,QAAA,CAAC,MAAM;UACLL,KAAK,CAACX,IAAI,CAAC;AAAEC,YAAAA,IAAI,EAAE,MAAM;YAAEK,OAAO,EAAE,IAAIM,KAAK,CAACd,GAAG,CAAA,EAAGc,KAAK,CAACb,KAAK,CAAA,CAAA;AAAG,WAAE,CAAC;AACrEY,UAAAA,KAAK,CAACX,IAAI,CAAC,GAAGe,MAAM,CAACJ,KAAK,CAAC;AAC7B,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AAEA,EAAA,IAAIF,QAAQ,EAAE;IACZ,OAAO;AAAEI,MAAAA,MAAM,EAAE,KAAK;AAAEF,MAAAA;KAAO;AACjC,EAAA;EAEA,OAAO;AAAEE,IAAAA,MAAM,EAAE,IAAI;AAAEF,IAAAA;GAAO;AAChC;AAEA;;;;AAIG;AACH,SAASM,SAASA,CAACC,MAAc,EAAEnB,KAAa,EAAEoB,QAAsB,EAAA;AACtE,EAAA,MAAMrB,GAAG,GAAGsB,qBAAW,CAACF,MAAM,CAAC,IAAIA,MAAM;EAEzC,IAAIpB,GAAG,KAAK,MAAM,EAAE;IAClB,OAAO;AAAEG,MAAAA,IAAI,EAAE,MAAM;MAAEkB,QAAQ;MAAE,GAAGE,eAAe,CAACtB,KAAK;KAAG;AAC9D,EAAA;EAEA,IAAID,GAAG,KAAK,WAAW,EAAE;IACvB,OAAO;AAAEG,MAAAA,IAAI,EAAE,WAAW;AAAEkB,MAAAA;KAAU;AACxC,EAAA;EAEA,MAAM;AAAEG,IAAAA;AAAkB,GAAE,GAAGD,eAAe,CAACtB,KAAK,CAAC;EAErD,OAAO;AACLE,IAAAA,IAAI,EAAEH,GAAyB;IAC/BqB,QAAQ;AACR,IAAA,IAAIG,kBAAkB,IAAI;AAAEA,MAAAA;KAAoB;GACnC;AACjB;AAEA,MAAMC,UAAU,GAAG,yEAAyE;AAS5F;;;;;AAKG;AACH,SAASF,eAAeA,CAACtB,KAAa,EAAA;EACpC,MAAMgB,MAAM,GAAqB,EAAE;EACnCQ,UAAU,CAACjC,SAAS,GAAG,CAAC;AACxB,EAAA,IAAIE,KAAK,GAAG+B,UAAU,CAAC9B,IAAI,CAACM,KAAK,CAAC;EAElC,OAAOP,KAAK,KAAK,IAAI,EAAE;AACrB,IAAA,MAAMgC,GAAG,GAAGhC,KAAK,CAAC,CAAC,CAAwD;IAC3E,MAAMiC,KAAK,GAAGjC,KAAK,CAAC,CAAC,CAAC,IAAIA,KAAK,CAAC,CAAC,CAAC;AAElC,IAAA,IAAI,EAAEgC,GAAG,IAAIT,MAAM,CAAC,EAAE;AACpB,MAAA,MAAMW,SAAS,GAAGC,sBAAsB,CAACH,GAAG,EAAEC,KAAK,CAAC;MACpD,IAAIC,SAAS,KAAKE,SAAS,EAAE;AAC3Bb,QAAAA,MAAM,CAACS,GAAG,CAAC,GAAGE,SAAS;AACzB,MAAA;AACF,IAAA;AAEAlC,IAAAA,KAAK,GAAG+B,UAAU,CAAC9B,IAAI,CAACM,KAAK,CAAC;AAChC,EAAA;AAEA,EAAA,OAAOgB,MAAM;AACf;AAEA,SAASY,sBAAsBA,CAC7BH,GAAwD,EACxDC,KAAa,EAAA;AAEb,EAAA,QAAQD,GAAG;AACT,IAAA,KAAK,MAAM;AACT,MAAA,OAAOC,KAAK,CAACI,OAAO,CAAC5C,aAAa,EAAE,EAAE,CAAC;AACzC,IAAA,KAAK,QAAQ;AACX,MAAA,IAAIL,qBAAqB,CAACkD,GAAG,CAACL,KAAK,CAAC,EAAE;AACpC,QAAA,OAAOG,SAAS;AAClB,MAAA;AACA,MAAA,OAAOH,KAAK;AACd,IAAA,KAAK,QAAQ;AACX,MAAA,IAAI,CAACM,yBAAe,CAACC,QAAQ,CAACP,KAAK,CAAC,EAAE;AACpC,QAAA,OAAOG,SAAS;AAClB,MAAA;AACA,MAAA,OAAOH,KAAK;AACd,IAAA,KAAK,oBAAoB;AACvB,MAAA,OAAOA,KAAK,CAACI,OAAO,CAAC3C,aAAa,EAAE,EAAE,CAAC,CAACU,KAAK,CAAC,CAAC,EAAEjB,8BAA8B,CAAC;AAClF,IAAA;AACE,MAAA,OAAO8C,KAAK;AAChB;AACF;AAEA;AACM,SAAUQ,WAAWA,CAAC7C,KAAa,EAAA;EACvC,IAAI,CAACA,KAAK,EAAE;AACV,IAAA,OAAO,EAAE;AACX,EAAA;AAEA,EAAA,IAAIA,KAAK,CAACc,MAAM,GAAGxB,gBAAgB,EAAE;AACnC,IAAA,OAAO,CAAC;AAAEuB,MAAAA,IAAI,EAAE,MAAM;AAAEK,MAAAA,OAAO,EAAElB;AAAK,KAAE,CAAC;AAC3C,EAAA;AAEA,EAAA,MAAMC,MAAM,GAAGF,QAAQ,CAACC,KAAK,CAAC;AAC9B,EAAA,MAAMoB,QAAQ,GAAG;AAAEd,IAAAA,KAAK,EAAE;GAAG;AAC7B,EAAA,OAAOa,KAAK,CAAClB,MAAM,EAAEmB,QAAQ,CAAC,CAACG,KAAK;AACtC;;;;;;;"}
+{"version":3,"file":"parseMarkup.js","sources":["../../../src/Markup/utils/parseMarkup.ts"],"sourcesContent":["import { ALLOWED_TAGS, ALLOWED_TARGETS, MAX_NESTING_DEPTH, TAG_ALIASES } from '../constants';\nimport { MarkupNode } from '../Markup.types';\n\nexport { MAX_NESTING_DEPTH };\nexport const MAX_INPUT_LENGTH = 10_000;\nexport const MAX_ACCESSIBILITY_LABEL_LENGTH = 250;\n\nconst OBJECT_PROTOTYPE_KEYS = new Set(Object.getOwnPropertyNames(Object.prototype));\n\n// eslint-disable-next-line regexp/no-control-character\nconst CONTROL_CHARS = /[\\x00-\\x1f\\x7f-\\x9f]/g;\nconst HTML_METACHAR = /[<>\"']/g;\n\n/**\n * Matches opening and closing tags from the ALLOWED_TAGS allow-list.\n *\n * Capture groups:\n *  1. `/` if this is a closing tag, undefined otherwise\n *  2. Tag name\n *  3. Raw attribute string between the tag name and `>` (empty for closing tags)\n *\n * The lookahead `(?=[\\s>/])` after the tag name ensures we don't match partial\n * words — e.g. `<stronger>` won't be matched as `<strong>`.\n *\n * Global flag (`g`) allows iterative matching via `exec()`.\n */\nconst TAG_REGEX = new RegExp(\n  `<(\\\\/)?(${ALLOWED_TAGS.join('|')})(?=[\\\\s>/])((?:[^>\"']*(?:\"[^\"]*\"|'[^']*'))*[^>\"']*)>`,\n  'g',\n);\n\ntype Token =\n  | { type: 'text'; content: string }\n  | { type: 'newline' }\n  | { type: 'open'; tag: string; attrs: string }\n  | { type: 'close'; tag: string };\n\n/**\n * Splits the input string into a flat list of tokens by scanning for known tags.\n * Text between tags is emitted as text/newline tokens. Unrecognised tags are never\n * tokenised — they remain part of the surrounding text content.\n */\nfunction tokenise(input: string): Token[] {\n  const tokens: Token[] = [];\n  let lastIndex = 0;\n\n  TAG_REGEX.lastIndex = 0;\n  let match = TAG_REGEX.exec(input);\n\n  while (match !== null) {\n    if (match.index > lastIndex) {\n      pushTextWithNewlines(tokens, input.slice(lastIndex, match.index));\n    }\n\n    const isClose = match[1] === '/';\n    const tag = match[2];\n    const attrs = match[3] || '';\n\n    if (isClose) {\n      tokens.push({ type: 'close', tag });\n    } else {\n      tokens.push({ type: 'open', tag, attrs });\n    }\n\n    lastIndex = TAG_REGEX.lastIndex;\n    match = TAG_REGEX.exec(input);\n  }\n\n  if (lastIndex < input.length) {\n    pushTextWithNewlines(tokens, input.slice(lastIndex));\n  }\n\n  return tokens;\n}\n\n/** Splits a text fragment on newline characters, interleaving newline tokens between parts. */\nfunction pushTextWithNewlines(tokens: Token[], text: string): void {\n  const parts = text.split('\\n');\n  for (let index = 0; index < parts.length; index += 1) {\n    if (index > 0) {\n      tokens.push({ type: 'newline' });\n    }\n    if (parts[index]) {\n      tokens.push({ type: 'text', content: parts[index] });\n    }\n  }\n}\n\ntype ParseResult = { closed: true; nodes: MarkupNode[] } | { closed: false; nodes: MarkupNode[] };\n\n/**\n * Recursive descent parser that consumes tokens and builds a MarkupNode tree.\n *\n * When `untilTag` is provided, the function collects nodes until it finds a matching\n * close token — returning `{ closed: true }`. If it exhausts all tokens without finding\n * the close, it returns `{ closed: false }` so the caller can fall back to plain text\n * (graceful degradation for malformed input).\n *\n * The shared `position` object acts as a cursor across recursive calls, avoiding the\n * need to slice or copy the token array.\n */\nfunction parse(\n  tokens: Token[],\n  position: { index: number },\n  untilTag?: string,\n  depth = 0,\n): ParseResult {\n  const nodes: MarkupNode[] = [];\n\n  while (position.index < tokens.length) {\n    const token = tokens[position.index];\n\n    if (token.type === 'text') {\n      nodes.push({ type: 'text', content: token.content });\n      position.index += 1;\n    } else if (token.type === 'newline') {\n      nodes.push({ type: 'newline' });\n      position.index += 1;\n    } else if (token.type === 'close') {\n      if (token.tag === untilTag) {\n        position.index += 1;\n        return { closed: true, nodes };\n      }\n      // Mismatched close tag — render as literal text\n      nodes.push({ type: 'text', content: `</${token.tag}>` });\n      position.index += 1;\n    } else if (token.type === 'open') {\n      if (depth >= MAX_NESTING_DEPTH) {\n        nodes.push({ type: 'text', content: `<${token.tag}${token.attrs}>` });\n        position.index += 1;\n      } else {\n        position.index += 1;\n        const result = parse(tokens, position, token.tag, depth + 1);\n\n        if (result.closed) {\n          const node = buildNode(token.tag, token.attrs, result.nodes);\n          nodes.push(node);\n        } else {\n          nodes.push({ type: 'text', content: `<${token.tag}${token.attrs}>` });\n          nodes.push(...result.nodes);\n        }\n      }\n    }\n  }\n\n  if (untilTag) {\n    return { closed: false, nodes };\n  }\n\n  return { closed: true, nodes };\n}\n\n/**\n * Maps a raw tag name to a typed MarkupNode. Resolves aliases first (p→paragraph, a→link),\n * then builds the appropriate node shape. Link nodes carry full attributes; other element\n * nodes extract only accessibilityLabel.\n */\nfunction buildNode(rawTag: string, attrs: string, children: MarkupNode[]): MarkupNode {\n  const tag = TAG_ALIASES[rawTag] || rawTag;\n\n  if (tag === 'link') {\n    return { type: 'link', children, ...parseAttributes(attrs) };\n  }\n\n  if (tag === 'paragraph') {\n    return { type: 'paragraph', children };\n  }\n\n  const { accessibilityLabel } = parseAttributes(attrs);\n\n  return {\n    type: tag as MarkupNode['type'],\n    children,\n    ...(accessibilityLabel && { accessibilityLabel }),\n  } as MarkupNode;\n}\n\n/**\n * Matches allow-listed attributes from the raw attribute string captured by TAG_REGEX.\n * Requires whitespace before each attribute name to prevent matching inside quoted values.\n *\n * Example: for input ` href=\"https://wise.com\" target=\"_blank\"`\n *  - Match 1: groups = ['href', 'https://wise.com', undefined]\n *  - Match 2: groups = ['target', '_blank', undefined]\n *\n * Capture groups:\n *  1. Attribute name (href, action, target, or accessibilityLabel)\n *  2. Double-quoted value (if present)\n *  3. Single-quoted value (if present)\n */\nconst ATTR_REGEX = /(?<=\\s)(href|action|target|accessibilityLabel)=(?:\"([^\"]*)\"|'([^']*)')/g;\n\ntype ParsedAttributes = {\n  href?: string;\n  action?: string;\n  target?: string;\n  accessibilityLabel?: string;\n};\n\n/**\n * Extracts allowed attributes from a raw attribute string.\n * Supports both double- and single-quoted values. Any attribute not in the\n * allow-list (href, action, target, accessibilityLabel) is silently discarded.\n * First occurrence wins — duplicates are ignored.\n */\nfunction parseAttributes(attrs: string): ParsedAttributes {\n  const result: ParsedAttributes = {};\n  ATTR_REGEX.lastIndex = 0;\n  let match = ATTR_REGEX.exec(attrs);\n\n  while (match !== null) {\n    const key = match[1] as 'href' | 'action' | 'target' | 'accessibilityLabel';\n    const value = match[2] ?? match[3];\n\n    if (!(key in result)) {\n      const sanitized = sanitizeAttributeValue(key, value);\n      if (sanitized !== undefined) {\n        result[key] = sanitized;\n      }\n    }\n\n    match = ATTR_REGEX.exec(attrs);\n  }\n\n  return result;\n}\n\nfunction sanitizeAttributeValue(\n  key: 'href' | 'action' | 'target' | 'accessibilityLabel',\n  value: string,\n): string | undefined {\n  switch (key) {\n    case 'href':\n      return value.replace(CONTROL_CHARS, '');\n    case 'action':\n      if (OBJECT_PROTOTYPE_KEYS.has(value)) {\n        return undefined;\n      }\n      return value;\n    case 'target':\n      if (!ALLOWED_TARGETS.includes(value)) {\n        return undefined;\n      }\n      return value;\n    case 'accessibilityLabel':\n      return value.replace(HTML_METACHAR, '').slice(0, MAX_ACCESSIBILITY_LABEL_LENGTH);\n    default:\n      return undefined;\n  }\n}\n\n/** Entry point: tokenises the input string, then parses the token stream into a MarkupNode tree. */\nexport function parseMarkup(input: string): MarkupNode[] {\n  if (!input) {\n    return [];\n  }\n\n  if (input.length > MAX_INPUT_LENGTH) {\n    return [{ type: 'text', content: input }];\n  }\n\n  const tokens = tokenise(input);\n  const position = { index: 0 };\n  return parse(tokens, position).nodes;\n}\n"],"names":["MAX_INPUT_LENGTH","MAX_ACCESSIBILITY_LABEL_LENGTH","OBJECT_PROTOTYPE_KEYS","Set","Object","getOwnPropertyNames","prototype","CONTROL_CHARS","HTML_METACHAR","TAG_REGEX","RegExp","ALLOWED_TAGS","join","tokenise","input","tokens","lastIndex","match","exec","index","pushTextWithNewlines","slice","isClose","tag","attrs","push","type","length","text","parts","split","content","parse","position","untilTag","depth","nodes","token","closed","MAX_NESTING_DEPTH","result","node","buildNode","rawTag","children","TAG_ALIASES","parseAttributes","accessibilityLabel","ATTR_REGEX","key","value","sanitized","sanitizeAttributeValue","undefined","replace","has","ALLOWED_TARGETS","includes","parseMarkup"],"mappings":";;;;AAIO,MAAMA,gBAAgB,GAAG;AACzB,MAAMC,8BAA8B,GAAG;AAE9C,MAAMC,qBAAqB,GAAG,IAAIC,GAAG,CAACC,MAAM,CAACC,mBAAmB,CAACD,MAAM,CAACE,SAAS,CAAC,CAAC;AAEnF;AACA,MAAMC,aAAa,GAAG,uBAAuB;AAC7C,MAAMC,aAAa,GAAG,SAAS;AAE/B;;;;;;;;;;;;AAYG;AACH,MAAMC,SAAS,GAAG,IAAIC,MAAM,CAC1B,CAAA,QAAA,EAAWC,sBAAY,CAACC,IAAI,CAAC,GAAG,CAAC,CAAA,qDAAA,CAAuD,EACxF,GAAG,CACJ;AAQD;;;;AAIG;AACH,SAASC,QAAQA,CAACC,KAAa,EAAA;EAC7B,MAAMC,MAAM,GAAY,EAAE;EAC1B,IAAIC,SAAS,GAAG,CAAC;EAEjBP,SAAS,CAACO,SAAS,GAAG,CAAC;AACvB,EAAA,IAAIC,KAAK,GAAGR,SAAS,CAACS,IAAI,CAACJ,KAAK,CAAC;EAEjC,OAAOG,KAAK,KAAK,IAAI,EAAE;AACrB,IAAA,IAAIA,KAAK,CAACE,KAAK,GAAGH,SAAS,EAAE;AAC3BI,MAAAA,oBAAoB,CAACL,MAAM,EAAED,KAAK,CAACO,KAAK,CAACL,SAAS,EAAEC,KAAK,CAACE,KAAK,CAAC,CAAC;AACnE,IAAA;AAEA,IAAA,MAAMG,OAAO,GAAGL,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;AAChC,IAAA,MAAMM,GAAG,GAAGN,KAAK,CAAC,CAAC,CAAC;AACpB,IAAA,MAAMO,KAAK,GAAGP,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;AAE5B,IAAA,IAAIK,OAAO,EAAE;MACXP,MAAM,CAACU,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,OAAO;AAAEH,QAAAA;AAAG,OAAE,CAAC;AACrC,IAAA,CAAC,MAAM;MACLR,MAAM,CAACU,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;QAAEH,GAAG;AAAEC,QAAAA;AAAK,OAAE,CAAC;AAC3C,IAAA;IAEAR,SAAS,GAAGP,SAAS,CAACO,SAAS;AAC/BC,IAAAA,KAAK,GAAGR,SAAS,CAACS,IAAI,CAACJ,KAAK,CAAC;AAC/B,EAAA;AAEA,EAAA,IAAIE,SAAS,GAAGF,KAAK,CAACa,MAAM,EAAE;IAC5BP,oBAAoB,CAACL,MAAM,EAAED,KAAK,CAACO,KAAK,CAACL,SAAS,CAAC,CAAC;AACtD,EAAA;AAEA,EAAA,OAAOD,MAAM;AACf;AAEA;AACA,SAASK,oBAAoBA,CAACL,MAAe,EAAEa,IAAY,EAAA;AACzD,EAAA,MAAMC,KAAK,GAAGD,IAAI,CAACE,KAAK,CAAC,IAAI,CAAC;AAC9B,EAAA,KAAK,IAAIX,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGU,KAAK,CAACF,MAAM,EAAER,KAAK,IAAI,CAAC,EAAE;IACpD,IAAIA,KAAK,GAAG,CAAC,EAAE;MACbJ,MAAM,CAACU,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE;AAAS,OAAE,CAAC;AAClC,IAAA;AACA,IAAA,IAAIG,KAAK,CAACV,KAAK,CAAC,EAAE;MAChBJ,MAAM,CAACU,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;QAAEK,OAAO,EAAEF,KAAK,CAACV,KAAK;AAAC,OAAE,CAAC;AACtD,IAAA;AACF,EAAA;AACF;AAIA;;;;;;;;;;AAUG;AACH,SAASa,KAAKA,CACZjB,MAAe,EACfkB,QAA2B,EAC3BC,QAAiB,EACjBC,KAAK,GAAG,CAAC,EAAA;EAET,MAAMC,KAAK,GAAiB,EAAE;AAE9B,EAAA,OAAOH,QAAQ,CAACd,KAAK,GAAGJ,MAAM,CAACY,MAAM,EAAE;AACrC,IAAA,MAAMU,KAAK,GAAGtB,MAAM,CAACkB,QAAQ,CAACd,KAAK,CAAC;AAEpC,IAAA,IAAIkB,KAAK,CAACX,IAAI,KAAK,MAAM,EAAE;MACzBU,KAAK,CAACX,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;QAAEK,OAAO,EAAEM,KAAK,CAACN;AAAO,OAAE,CAAC;MACpDE,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,IAAA,CAAC,MAAM,IAAIkB,KAAK,CAACX,IAAI,KAAK,SAAS,EAAE;MACnCU,KAAK,CAACX,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE;AAAS,OAAE,CAAC;MAC/BO,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,IAAA,CAAC,MAAM,IAAIkB,KAAK,CAACX,IAAI,KAAK,OAAO,EAAE;AACjC,MAAA,IAAIW,KAAK,CAACd,GAAG,KAAKW,QAAQ,EAAE;QAC1BD,QAAQ,CAACd,KAAK,IAAI,CAAC;QACnB,OAAO;AAAEmB,UAAAA,MAAM,EAAE,IAAI;AAAEF,UAAAA;SAAO;AAChC,MAAA;AACA;MACAA,KAAK,CAACX,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;AAAEK,QAAAA,OAAO,EAAE,CAAA,EAAA,EAAKM,KAAK,CAACd,GAAG,CAAA,CAAA;AAAG,OAAE,CAAC;MACxDU,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,IAAA,CAAC,MAAM,IAAIkB,KAAK,CAACX,IAAI,KAAK,MAAM,EAAE;MAChC,IAAIS,KAAK,IAAII,2BAAiB,EAAE;QAC9BH,KAAK,CAACX,IAAI,CAAC;AAAEC,UAAAA,IAAI,EAAE,MAAM;UAAEK,OAAO,EAAE,IAAIM,KAAK,CAACd,GAAG,CAAA,EAAGc,KAAK,CAACb,KAAK,CAAA,CAAA;AAAG,SAAE,CAAC;QACrES,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,MAAA,CAAC,MAAM;QACLc,QAAQ,CAACd,KAAK,IAAI,CAAC;AACnB,QAAA,MAAMqB,MAAM,GAAGR,KAAK,CAACjB,MAAM,EAAEkB,QAAQ,EAAEI,KAAK,CAACd,GAAG,EAAEY,KAAK,GAAG,CAAC,CAAC;QAE5D,IAAIK,MAAM,CAACF,MAAM,EAAE;AACjB,UAAA,MAAMG,IAAI,GAAGC,SAAS,CAACL,KAAK,CAACd,GAAG,EAAEc,KAAK,CAACb,KAAK,EAAEgB,MAAM,CAACJ,KAAK,CAAC;AAC5DA,UAAAA,KAAK,CAACX,IAAI,CAACgB,IAAI,CAAC;AAClB,QAAA,CAAC,MAAM;UACLL,KAAK,CAACX,IAAI,CAAC;AAAEC,YAAAA,IAAI,EAAE,MAAM;YAAEK,OAAO,EAAE,IAAIM,KAAK,CAACd,GAAG,CAAA,EAAGc,KAAK,CAACb,KAAK,CAAA,CAAA;AAAG,WAAE,CAAC;AACrEY,UAAAA,KAAK,CAACX,IAAI,CAAC,GAAGe,MAAM,CAACJ,KAAK,CAAC;AAC7B,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AAEA,EAAA,IAAIF,QAAQ,EAAE;IACZ,OAAO;AAAEI,MAAAA,MAAM,EAAE,KAAK;AAAEF,MAAAA;KAAO;AACjC,EAAA;EAEA,OAAO;AAAEE,IAAAA,MAAM,EAAE,IAAI;AAAEF,IAAAA;GAAO;AAChC;AAEA;;;;AAIG;AACH,SAASM,SAASA,CAACC,MAAc,EAAEnB,KAAa,EAAEoB,QAAsB,EAAA;AACtE,EAAA,MAAMrB,GAAG,GAAGsB,qBAAW,CAACF,MAAM,CAAC,IAAIA,MAAM;EAEzC,IAAIpB,GAAG,KAAK,MAAM,EAAE;IAClB,OAAO;AAAEG,MAAAA,IAAI,EAAE,MAAM;MAAEkB,QAAQ;MAAE,GAAGE,eAAe,CAACtB,KAAK;KAAG;AAC9D,EAAA;EAEA,IAAID,GAAG,KAAK,WAAW,EAAE;IACvB,OAAO;AAAEG,MAAAA,IAAI,EAAE,WAAW;AAAEkB,MAAAA;KAAU;AACxC,EAAA;EAEA,MAAM;AAAEG,IAAAA;AAAkB,GAAE,GAAGD,eAAe,CAACtB,KAAK,CAAC;EAErD,OAAO;AACLE,IAAAA,IAAI,EAAEH,GAAyB;IAC/BqB,QAAQ;AACR,IAAA,IAAIG,kBAAkB,IAAI;AAAEA,MAAAA;KAAoB;GACnC;AACjB;AAEA;;;;;;;;;;;;AAYG;AACH,MAAMC,UAAU,GAAG,yEAAyE;AAS5F;;;;;AAKG;AACH,SAASF,eAAeA,CAACtB,KAAa,EAAA;EACpC,MAAMgB,MAAM,GAAqB,EAAE;EACnCQ,UAAU,CAAChC,SAAS,GAAG,CAAC;AACxB,EAAA,IAAIC,KAAK,GAAG+B,UAAU,CAAC9B,IAAI,CAACM,KAAK,CAAC;EAElC,OAAOP,KAAK,KAAK,IAAI,EAAE;AACrB,IAAA,MAAMgC,GAAG,GAAGhC,KAAK,CAAC,CAAC,CAAwD;IAC3E,MAAMiC,KAAK,GAAGjC,KAAK,CAAC,CAAC,CAAC,IAAIA,KAAK,CAAC,CAAC,CAAC;AAElC,IAAA,IAAI,EAAEgC,GAAG,IAAIT,MAAM,CAAC,EAAE;AACpB,MAAA,MAAMW,SAAS,GAAGC,sBAAsB,CAACH,GAAG,EAAEC,KAAK,CAAC;MACpD,IAAIC,SAAS,KAAKE,SAAS,EAAE;AAC3Bb,QAAAA,MAAM,CAACS,GAAG,CAAC,GAAGE,SAAS;AACzB,MAAA;AACF,IAAA;AAEAlC,IAAAA,KAAK,GAAG+B,UAAU,CAAC9B,IAAI,CAACM,KAAK,CAAC;AAChC,EAAA;AAEA,EAAA,OAAOgB,MAAM;AACf;AAEA,SAASY,sBAAsBA,CAC7BH,GAAwD,EACxDC,KAAa,EAAA;AAEb,EAAA,QAAQD,GAAG;AACT,IAAA,KAAK,MAAM;AACT,MAAA,OAAOC,KAAK,CAACI,OAAO,CAAC/C,aAAa,EAAE,EAAE,CAAC;AACzC,IAAA,KAAK,QAAQ;AACX,MAAA,IAAIL,qBAAqB,CAACqD,GAAG,CAACL,KAAK,CAAC,EAAE;AACpC,QAAA,OAAOG,SAAS;AAClB,MAAA;AACA,MAAA,OAAOH,KAAK;AACd,IAAA,KAAK,QAAQ;AACX,MAAA,IAAI,CAACM,yBAAe,CAACC,QAAQ,CAACP,KAAK,CAAC,EAAE;AACpC,QAAA,OAAOG,SAAS;AAClB,MAAA;AACA,MAAA,OAAOH,KAAK;AACd,IAAA,KAAK,oBAAoB;AACvB,MAAA,OAAOA,KAAK,CAACI,OAAO,CAAC9C,aAAa,EAAE,EAAE,CAAC,CAACa,KAAK,CAAC,CAAC,EAAEpB,8BAA8B,CAAC;AAClF,IAAA;AACE,MAAA,OAAOoD,SAAS;AACpB;AACF;AAEA;AACM,SAAUK,WAAWA,CAAC5C,KAAa,EAAA;EACvC,IAAI,CAACA,KAAK,EAAE;AACV,IAAA,OAAO,EAAE;AACX,EAAA;AAEA,EAAA,IAAIA,KAAK,CAACa,MAAM,GAAG3B,gBAAgB,EAAE;AACnC,IAAA,OAAO,CAAC;AAAE0B,MAAAA,IAAI,EAAE,MAAM;AAAEK,MAAAA,OAAO,EAAEjB;AAAK,KAAE,CAAC;AAC3C,EAAA;AAEA,EAAA,MAAMC,MAAM,GAAGF,QAAQ,CAACC,KAAK,CAAC;AAC9B,EAAA,MAAMmB,QAAQ,GAAG;AAAEd,IAAAA,KAAK,EAAE;GAAG;AAC7B,EAAA,OAAOa,KAAK,CAACjB,MAAM,EAAEkB,QAAQ,CAAC,CAACG,KAAK;AACtC;;;;;;;"}

package/build/Markup/utils/parseMarkup.mjs

@@ -1,4 +1,4 @@
-import { TAG_REGEX, MAX_NESTING_DEPTH, TAG_ALIASES, ALLOWED_TARGETS } from '../constants.mjs';
+import { MAX_NESTING_DEPTH, ALLOWED_TAGS, TAG_ALIASES, ALLOWED_TARGETS } from '../constants.mjs';
 
 const MAX_INPUT_LENGTH = 10_000;
 const MAX_ACCESSIBILITY_LABEL_LENGTH = 250;
@@ -6,6 +6,20 @@ const OBJECT_PROTOTYPE_KEYS = new Set(Object.getOwnPropertyNames(Object.prototyp
 // eslint-disable-next-line regexp/no-control-character
 const CONTROL_CHARS = /[\x00-\x1f\x7f-\x9f]/g;
 const HTML_METACHAR = /[<>"']/g;
+/**
+ * Matches opening and closing tags from the ALLOWED_TAGS allow-list.
+ *
+ * Capture groups:
+ *  1. `/` if this is a closing tag, undefined otherwise
+ *  2. Tag name
+ *  3. Raw attribute string between the tag name and `>` (empty for closing tags)
+ *
+ * The lookahead `(?=[\s>/])` after the tag name ensures we don't match partial
+ * words — e.g. `<stronger>` won't be matched as `<strong>`.
+ *
+ * Global flag (`g`) allows iterative matching via `exec()`.
+ */
+const TAG_REGEX = new RegExp(`<(\\/)?(${ALLOWED_TAGS.join('|')})(?=[\\s>/])((?:[^>"']*(?:"[^"]*"|'[^']*'))*[^>"']*)>`, 'g');
 /**
  * Splits the input string into a flat list of tokens by scanning for known tags.
  * Text between tags is emitted as text/newline tokens. Unrecognised tags are never
@@ -165,6 +179,19 @@ function buildNode(rawTag, attrs, children) {
     })
   };
 }
+/**
+ * Matches allow-listed attributes from the raw attribute string captured by TAG_REGEX.
+ * Requires whitespace before each attribute name to prevent matching inside quoted values.
+ *
+ * Example: for input ` href="https://wise.com" target="_blank"`
+ *  - Match 1: groups = ['href', 'https://wise.com', undefined]
+ *  - Match 2: groups = ['target', '_blank', undefined]
+ *
+ * Capture groups:
+ *  1. Attribute name (href, action, target, or accessibilityLabel)
+ *  2. Double-quoted value (if present)
+ *  3. Single-quoted value (if present)
+ */
 const ATTR_REGEX = /(?<=\s)(href|action|target|accessibilityLabel)=(?:"([^"]*)"|'([^']*)')/g;
 /**
  * Extracts allowed attributes from a raw attribute string.
@@ -206,7 +233,7 @@ function sanitizeAttributeValue(key, value) {
     case 'accessibilityLabel':
       return value.replace(HTML_METACHAR, '').slice(0, MAX_ACCESSIBILITY_LABEL_LENGTH);
     default:
-      return value;
+      return undefined;
   }
 }
 /** Entry point: tokenises the input string, then parses the token stream into a MarkupNode tree. */

package/build/Markup/utils/parseMarkup.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"parseMarkup.mjs","sources":["../../../src/Markup/utils/parseMarkup.ts"],"sourcesContent":["import { ALLOWED_TARGETS, MAX_NESTING_DEPTH, TAG_ALIASES, TAG_REGEX } from '../constants';\nimport { MarkupNode } from '../Markup.types';\n\nexport { MAX_NESTING_DEPTH };\nexport const MAX_INPUT_LENGTH = 10_000;\nexport const MAX_ACCESSIBILITY_LABEL_LENGTH = 250;\n\nconst OBJECT_PROTOTYPE_KEYS = new Set(Object.getOwnPropertyNames(Object.prototype));\n\n// eslint-disable-next-line regexp/no-control-character\nconst CONTROL_CHARS = /[\\x00-\\x1f\\x7f-\\x9f]/g;\nconst HTML_METACHAR = /[<>\"']/g;\n\ntype Token =\n  | { type: 'text'; content: string }\n  | { type: 'newline' }\n  | { type: 'open'; tag: string; attrs: string }\n  | { type: 'close'; tag: string };\n\n/**\n * Splits the input string into a flat list of tokens by scanning for known tags.\n * Text between tags is emitted as text/newline tokens. Unrecognised tags are never\n * tokenised — they remain part of the surrounding text content.\n */\nfunction tokenise(input: string): Token[] {\n  const tokens: Token[] = [];\n  let lastIndex = 0;\n\n  TAG_REGEX.lastIndex = 0;\n  let match = TAG_REGEX.exec(input);\n\n  while (match !== null) {\n    if (match.index > lastIndex) {\n      pushTextWithNewlines(tokens, input.slice(lastIndex, match.index));\n    }\n\n    const isClose = match[1] === '/';\n    const tag = match[2];\n    const attrs = match[3] || '';\n\n    if (isClose) {\n      tokens.push({ type: 'close', tag });\n    } else {\n      tokens.push({ type: 'open', tag, attrs });\n    }\n\n    lastIndex = TAG_REGEX.lastIndex;\n    match = TAG_REGEX.exec(input);\n  }\n\n  if (lastIndex < input.length) {\n    pushTextWithNewlines(tokens, input.slice(lastIndex));\n  }\n\n  return tokens;\n}\n\n/** Splits a text fragment on newline characters, interleaving newline tokens between parts. */\nfunction pushTextWithNewlines(tokens: Token[], text: string): void {\n  const parts = text.split('\\n');\n  for (let index = 0; index < parts.length; index += 1) {\n    if (index > 0) {\n      tokens.push({ type: 'newline' });\n    }\n    if (parts[index]) {\n      tokens.push({ type: 'text', content: parts[index] });\n    }\n  }\n}\n\ntype ParseResult = { closed: true; nodes: MarkupNode[] } | { closed: false; nodes: MarkupNode[] };\n\n/**\n * Recursive descent parser that consumes tokens and builds a MarkupNode tree.\n *\n * When `untilTag` is provided, the function collects nodes until it finds a matching\n * close token — returning `{ closed: true }`. If it exhausts all tokens without finding\n * the close, it returns `{ closed: false }` so the caller can fall back to plain text\n * (graceful degradation for malformed input).\n *\n * The shared `position` object acts as a cursor across recursive calls, avoiding the\n * need to slice or copy the token array.\n */\nfunction parse(\n  tokens: Token[],\n  position: { index: number },\n  untilTag?: string,\n  depth = 0,\n): ParseResult {\n  const nodes: MarkupNode[] = [];\n\n  while (position.index < tokens.length) {\n    const token = tokens[position.index];\n\n    if (token.type === 'text') {\n      nodes.push({ type: 'text', content: token.content });\n      position.index += 1;\n    } else if (token.type === 'newline') {\n      nodes.push({ type: 'newline' });\n      position.index += 1;\n    } else if (token.type === 'close') {\n      if (token.tag === untilTag) {\n        position.index += 1;\n        return { closed: true, nodes };\n      }\n      // Mismatched close tag — render as literal text\n      nodes.push({ type: 'text', content: `</${token.tag}>` });\n      position.index += 1;\n    } else if (token.type === 'open') {\n      if (depth >= MAX_NESTING_DEPTH) {\n        nodes.push({ type: 'text', content: `<${token.tag}${token.attrs}>` });\n        position.index += 1;\n      } else {\n        position.index += 1;\n        const result = parse(tokens, position, token.tag, depth + 1);\n\n        if (result.closed) {\n          const node = buildNode(token.tag, token.attrs, result.nodes);\n          nodes.push(node);\n        } else {\n          nodes.push({ type: 'text', content: `<${token.tag}${token.attrs}>` });\n          nodes.push(...result.nodes);\n        }\n      }\n    }\n  }\n\n  if (untilTag) {\n    return { closed: false, nodes };\n  }\n\n  return { closed: true, nodes };\n}\n\n/**\n * Maps a raw tag name to a typed MarkupNode. Resolves aliases first (p→paragraph, a→link),\n * then builds the appropriate node shape. Link nodes carry full attributes; other element\n * nodes extract only accessibilityLabel.\n */\nfunction buildNode(rawTag: string, attrs: string, children: MarkupNode[]): MarkupNode {\n  const tag = TAG_ALIASES[rawTag] || rawTag;\n\n  if (tag === 'link') {\n    return { type: 'link', children, ...parseAttributes(attrs) };\n  }\n\n  if (tag === 'paragraph') {\n    return { type: 'paragraph', children };\n  }\n\n  const { accessibilityLabel } = parseAttributes(attrs);\n\n  return {\n    type: tag as MarkupNode['type'],\n    children,\n    ...(accessibilityLabel && { accessibilityLabel }),\n  } as MarkupNode;\n}\n\nconst ATTR_REGEX = /(?<=\\s)(href|action|target|accessibilityLabel)=(?:\"([^\"]*)\"|'([^']*)')/g;\n\ntype ParsedAttributes = {\n  href?: string;\n  action?: string;\n  target?: string;\n  accessibilityLabel?: string;\n};\n\n/**\n * Extracts allowed attributes from a raw attribute string.\n * Supports both double- and single-quoted values. Any attribute not in the\n * allow-list (href, action, target, accessibilityLabel) is silently discarded.\n * First occurrence wins — duplicates are ignored.\n */\nfunction parseAttributes(attrs: string): ParsedAttributes {\n  const result: ParsedAttributes = {};\n  ATTR_REGEX.lastIndex = 0;\n  let match = ATTR_REGEX.exec(attrs);\n\n  while (match !== null) {\n    const key = match[1] as 'href' | 'action' | 'target' | 'accessibilityLabel';\n    const value = match[2] ?? match[3];\n\n    if (!(key in result)) {\n      const sanitized = sanitizeAttributeValue(key, value);\n      if (sanitized !== undefined) {\n        result[key] = sanitized;\n      }\n    }\n\n    match = ATTR_REGEX.exec(attrs);\n  }\n\n  return result;\n}\n\nfunction sanitizeAttributeValue(\n  key: 'href' | 'action' | 'target' | 'accessibilityLabel',\n  value: string,\n): string | undefined {\n  switch (key) {\n    case 'href':\n      return value.replace(CONTROL_CHARS, '');\n    case 'action':\n      if (OBJECT_PROTOTYPE_KEYS.has(value)) {\n        return undefined;\n      }\n      return value;\n    case 'target':\n      if (!ALLOWED_TARGETS.includes(value)) {\n        return undefined;\n      }\n      return value;\n    case 'accessibilityLabel':\n      return value.replace(HTML_METACHAR, '').slice(0, MAX_ACCESSIBILITY_LABEL_LENGTH);\n    default:\n      return value;\n  }\n}\n\n/** Entry point: tokenises the input string, then parses the token stream into a MarkupNode tree. */\nexport function parseMarkup(input: string): MarkupNode[] {\n  if (!input) {\n    return [];\n  }\n\n  if (input.length > MAX_INPUT_LENGTH) {\n    return [{ type: 'text', content: input }];\n  }\n\n  const tokens = tokenise(input);\n  const position = { index: 0 };\n  return parse(tokens, position).nodes;\n}\n"],"names":["MAX_INPUT_LENGTH","MAX_ACCESSIBILITY_LABEL_LENGTH","OBJECT_PROTOTYPE_KEYS","Set","Object","getOwnPropertyNames","prototype","CONTROL_CHARS","HTML_METACHAR","tokenise","input","tokens","lastIndex","TAG_REGEX","match","exec","index","pushTextWithNewlines","slice","isClose","tag","attrs","push","type","length","text","parts","split","content","parse","position","untilTag","depth","nodes","token","closed","MAX_NESTING_DEPTH","result","node","buildNode","rawTag","children","TAG_ALIASES","parseAttributes","accessibilityLabel","ATTR_REGEX","key","value","sanitized","sanitizeAttributeValue","undefined","replace","has","ALLOWED_TARGETS","includes","parseMarkup"],"mappings":";;AAIO,MAAMA,gBAAgB,GAAG;AACzB,MAAMC,8BAA8B,GAAG;AAE9C,MAAMC,qBAAqB,GAAG,IAAIC,GAAG,CAACC,MAAM,CAACC,mBAAmB,CAACD,MAAM,CAACE,SAAS,CAAC,CAAC;AAEnF;AACA,MAAMC,aAAa,GAAG,uBAAuB;AAC7C,MAAMC,aAAa,GAAG,SAAS;AAQ/B;;;;AAIG;AACH,SAASC,QAAQA,CAACC,KAAa,EAAA;EAC7B,MAAMC,MAAM,GAAY,EAAE;EAC1B,IAAIC,SAAS,GAAG,CAAC;EAEjBC,SAAS,CAACD,SAAS,GAAG,CAAC;AACvB,EAAA,IAAIE,KAAK,GAAGD,SAAS,CAACE,IAAI,CAACL,KAAK,CAAC;EAEjC,OAAOI,KAAK,KAAK,IAAI,EAAE;AACrB,IAAA,IAAIA,KAAK,CAACE,KAAK,GAAGJ,SAAS,EAAE;AAC3BK,MAAAA,oBAAoB,CAACN,MAAM,EAAED,KAAK,CAACQ,KAAK,CAACN,SAAS,EAAEE,KAAK,CAACE,KAAK,CAAC,CAAC;AACnE,IAAA;AAEA,IAAA,MAAMG,OAAO,GAAGL,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;AAChC,IAAA,MAAMM,GAAG,GAAGN,KAAK,CAAC,CAAC,CAAC;AACpB,IAAA,MAAMO,KAAK,GAAGP,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;AAE5B,IAAA,IAAIK,OAAO,EAAE;MACXR,MAAM,CAACW,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,OAAO;AAAEH,QAAAA;AAAG,OAAE,CAAC;AACrC,IAAA,CAAC,MAAM;MACLT,MAAM,CAACW,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;QAAEH,GAAG;AAAEC,QAAAA;AAAK,OAAE,CAAC;AAC3C,IAAA;IAEAT,SAAS,GAAGC,SAAS,CAACD,SAAS;AAC/BE,IAAAA,KAAK,GAAGD,SAAS,CAACE,IAAI,CAACL,KAAK,CAAC;AAC/B,EAAA;AAEA,EAAA,IAAIE,SAAS,GAAGF,KAAK,CAACc,MAAM,EAAE;IAC5BP,oBAAoB,CAACN,MAAM,EAAED,KAAK,CAACQ,KAAK,CAACN,SAAS,CAAC,CAAC;AACtD,EAAA;AAEA,EAAA,OAAOD,MAAM;AACf;AAEA;AACA,SAASM,oBAAoBA,CAACN,MAAe,EAAEc,IAAY,EAAA;AACzD,EAAA,MAAMC,KAAK,GAAGD,IAAI,CAACE,KAAK,CAAC,IAAI,CAAC;AAC9B,EAAA,KAAK,IAAIX,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGU,KAAK,CAACF,MAAM,EAAER,KAAK,IAAI,CAAC,EAAE;IACpD,IAAIA,KAAK,GAAG,CAAC,EAAE;MACbL,MAAM,CAACW,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE;AAAS,OAAE,CAAC;AAClC,IAAA;AACA,IAAA,IAAIG,KAAK,CAACV,KAAK,CAAC,EAAE;MAChBL,MAAM,CAACW,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;QAAEK,OAAO,EAAEF,KAAK,CAACV,KAAK;AAAC,OAAE,CAAC;AACtD,IAAA;AACF,EAAA;AACF;AAIA;;;;;;;;;;AAUG;AACH,SAASa,KAAKA,CACZlB,MAAe,EACfmB,QAA2B,EAC3BC,QAAiB,EACjBC,KAAK,GAAG,CAAC,EAAA;EAET,MAAMC,KAAK,GAAiB,EAAE;AAE9B,EAAA,OAAOH,QAAQ,CAACd,KAAK,GAAGL,MAAM,CAACa,MAAM,EAAE;AACrC,IAAA,MAAMU,KAAK,GAAGvB,MAAM,CAACmB,QAAQ,CAACd,KAAK,CAAC;AAEpC,IAAA,IAAIkB,KAAK,CAACX,IAAI,KAAK,MAAM,EAAE;MACzBU,KAAK,CAACX,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;QAAEK,OAAO,EAAEM,KAAK,CAACN;AAAO,OAAE,CAAC;MACpDE,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,IAAA,CAAC,MAAM,IAAIkB,KAAK,CAACX,IAAI,KAAK,SAAS,EAAE;MACnCU,KAAK,CAACX,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE;AAAS,OAAE,CAAC;MAC/BO,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,IAAA,CAAC,MAAM,IAAIkB,KAAK,CAACX,IAAI,KAAK,OAAO,EAAE;AACjC,MAAA,IAAIW,KAAK,CAACd,GAAG,KAAKW,QAAQ,EAAE;QAC1BD,QAAQ,CAACd,KAAK,IAAI,CAAC;QACnB,OAAO;AAAEmB,UAAAA,MAAM,EAAE,IAAI;AAAEF,UAAAA;SAAO;AAChC,MAAA;AACA;MACAA,KAAK,CAACX,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;AAAEK,QAAAA,OAAO,EAAE,CAAA,EAAA,EAAKM,KAAK,CAACd,GAAG,CAAA,CAAA;AAAG,OAAE,CAAC;MACxDU,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,IAAA,CAAC,MAAM,IAAIkB,KAAK,CAACX,IAAI,KAAK,MAAM,EAAE;MAChC,IAAIS,KAAK,IAAII,iBAAiB,EAAE;QAC9BH,KAAK,CAACX,IAAI,CAAC;AAAEC,UAAAA,IAAI,EAAE,MAAM;UAAEK,OAAO,EAAE,IAAIM,KAAK,CAACd,GAAG,CAAA,EAAGc,KAAK,CAACb,KAAK,CAAA,CAAA;AAAG,SAAE,CAAC;QACrES,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,MAAA,CAAC,MAAM;QACLc,QAAQ,CAACd,KAAK,IAAI,CAAC;AACnB,QAAA,MAAMqB,MAAM,GAAGR,KAAK,CAAClB,MAAM,EAAEmB,QAAQ,EAAEI,KAAK,CAACd,GAAG,EAAEY,KAAK,GAAG,CAAC,CAAC;QAE5D,IAAIK,MAAM,CAACF,MAAM,EAAE;AACjB,UAAA,MAAMG,IAAI,GAAGC,SAAS,CAACL,KAAK,CAACd,GAAG,EAAEc,KAAK,CAACb,KAAK,EAAEgB,MAAM,CAACJ,KAAK,CAAC;AAC5DA,UAAAA,KAAK,CAACX,IAAI,CAACgB,IAAI,CAAC;AAClB,QAAA,CAAC,MAAM;UACLL,KAAK,CAACX,IAAI,CAAC;AAAEC,YAAAA,IAAI,EAAE,MAAM;YAAEK,OAAO,EAAE,IAAIM,KAAK,CAACd,GAAG,CAAA,EAAGc,KAAK,CAACb,KAAK,CAAA,CAAA;AAAG,WAAE,CAAC;AACrEY,UAAAA,KAAK,CAACX,IAAI,CAAC,GAAGe,MAAM,CAACJ,KAAK,CAAC;AAC7B,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AAEA,EAAA,IAAIF,QAAQ,EAAE;IACZ,OAAO;AAAEI,MAAAA,MAAM,EAAE,KAAK;AAAEF,MAAAA;KAAO;AACjC,EAAA;EAEA,OAAO;AAAEE,IAAAA,MAAM,EAAE,IAAI;AAAEF,IAAAA;GAAO;AAChC;AAEA;;;;AAIG;AACH,SAASM,SAASA,CAACC,MAAc,EAAEnB,KAAa,EAAEoB,QAAsB,EAAA;AACtE,EAAA,MAAMrB,GAAG,GAAGsB,WAAW,CAACF,MAAM,CAAC,IAAIA,MAAM;EAEzC,IAAIpB,GAAG,KAAK,MAAM,EAAE;IAClB,OAAO;AAAEG,MAAAA,IAAI,EAAE,MAAM;MAAEkB,QAAQ;MAAE,GAAGE,eAAe,CAACtB,KAAK;KAAG;AAC9D,EAAA;EAEA,IAAID,GAAG,KAAK,WAAW,EAAE;IACvB,OAAO;AAAEG,MAAAA,IAAI,EAAE,WAAW;AAAEkB,MAAAA;KAAU;AACxC,EAAA;EAEA,MAAM;AAAEG,IAAAA;AAAkB,GAAE,GAAGD,eAAe,CAACtB,KAAK,CAAC;EAErD,OAAO;AACLE,IAAAA,IAAI,EAAEH,GAAyB;IAC/BqB,QAAQ;AACR,IAAA,IAAIG,kBAAkB,IAAI;AAAEA,MAAAA;KAAoB;GACnC;AACjB;AAEA,MAAMC,UAAU,GAAG,yEAAyE;AAS5F;;;;;AAKG;AACH,SAASF,eAAeA,CAACtB,KAAa,EAAA;EACpC,MAAMgB,MAAM,GAAqB,EAAE;EACnCQ,UAAU,CAACjC,SAAS,GAAG,CAAC;AACxB,EAAA,IAAIE,KAAK,GAAG+B,UAAU,CAAC9B,IAAI,CAACM,KAAK,CAAC;EAElC,OAAOP,KAAK,KAAK,IAAI,EAAE;AACrB,IAAA,MAAMgC,GAAG,GAAGhC,KAAK,CAAC,CAAC,CAAwD;IAC3E,MAAMiC,KAAK,GAAGjC,KAAK,CAAC,CAAC,CAAC,IAAIA,KAAK,CAAC,CAAC,CAAC;AAElC,IAAA,IAAI,EAAEgC,GAAG,IAAIT,MAAM,CAAC,EAAE;AACpB,MAAA,MAAMW,SAAS,GAAGC,sBAAsB,CAACH,GAAG,EAAEC,KAAK,CAAC;MACpD,IAAIC,SAAS,KAAKE,SAAS,EAAE;AAC3Bb,QAAAA,MAAM,CAACS,GAAG,CAAC,GAAGE,SAAS;AACzB,MAAA;AACF,IAAA;AAEAlC,IAAAA,KAAK,GAAG+B,UAAU,CAAC9B,IAAI,CAACM,KAAK,CAAC;AAChC,EAAA;AAEA,EAAA,OAAOgB,MAAM;AACf;AAEA,SAASY,sBAAsBA,CAC7BH,GAAwD,EACxDC,KAAa,EAAA;AAEb,EAAA,QAAQD,GAAG;AACT,IAAA,KAAK,MAAM;AACT,MAAA,OAAOC,KAAK,CAACI,OAAO,CAAC5C,aAAa,EAAE,EAAE,CAAC;AACzC,IAAA,KAAK,QAAQ;AACX,MAAA,IAAIL,qBAAqB,CAACkD,GAAG,CAACL,KAAK,CAAC,EAAE;AACpC,QAAA,OAAOG,SAAS;AAClB,MAAA;AACA,MAAA,OAAOH,KAAK;AACd,IAAA,KAAK,QAAQ;AACX,MAAA,IAAI,CAACM,eAAe,CAACC,QAAQ,CAACP,KAAK,CAAC,EAAE;AACpC,QAAA,OAAOG,SAAS;AAClB,MAAA;AACA,MAAA,OAAOH,KAAK;AACd,IAAA,KAAK,oBAAoB;AACvB,MAAA,OAAOA,KAAK,CAACI,OAAO,CAAC3C,aAAa,EAAE,EAAE,CAAC,CAACU,KAAK,CAAC,CAAC,EAAEjB,8BAA8B,CAAC;AAClF,IAAA;AACE,MAAA,OAAO8C,KAAK;AAChB;AACF;AAEA;AACM,SAAUQ,WAAWA,CAAC7C,KAAa,EAAA;EACvC,IAAI,CAACA,KAAK,EAAE;AACV,IAAA,OAAO,EAAE;AACX,EAAA;AAEA,EAAA,IAAIA,KAAK,CAACc,MAAM,GAAGxB,gBAAgB,EAAE;AACnC,IAAA,OAAO,CAAC;AAAEuB,MAAAA,IAAI,EAAE,MAAM;AAAEK,MAAAA,OAAO,EAAElB;AAAK,KAAE,CAAC;AAC3C,EAAA;AAEA,EAAA,MAAMC,MAAM,GAAGF,QAAQ,CAACC,KAAK,CAAC;AAC9B,EAAA,MAAMoB,QAAQ,GAAG;AAAEd,IAAAA,KAAK,EAAE;GAAG;AAC7B,EAAA,OAAOa,KAAK,CAAClB,MAAM,EAAEmB,QAAQ,CAAC,CAACG,KAAK;AACtC;;;;"}
+{"version":3,"file":"parseMarkup.mjs","sources":["../../../src/Markup/utils/parseMarkup.ts"],"sourcesContent":["import { ALLOWED_TAGS, ALLOWED_TARGETS, MAX_NESTING_DEPTH, TAG_ALIASES } from '../constants';\nimport { MarkupNode } from '../Markup.types';\n\nexport { MAX_NESTING_DEPTH };\nexport const MAX_INPUT_LENGTH = 10_000;\nexport const MAX_ACCESSIBILITY_LABEL_LENGTH = 250;\n\nconst OBJECT_PROTOTYPE_KEYS = new Set(Object.getOwnPropertyNames(Object.prototype));\n\n// eslint-disable-next-line regexp/no-control-character\nconst CONTROL_CHARS = /[\\x00-\\x1f\\x7f-\\x9f]/g;\nconst HTML_METACHAR = /[<>\"']/g;\n\n/**\n * Matches opening and closing tags from the ALLOWED_TAGS allow-list.\n *\n * Capture groups:\n *  1. `/` if this is a closing tag, undefined otherwise\n *  2. Tag name\n *  3. Raw attribute string between the tag name and `>` (empty for closing tags)\n *\n * The lookahead `(?=[\\s>/])` after the tag name ensures we don't match partial\n * words — e.g. `<stronger>` won't be matched as `<strong>`.\n *\n * Global flag (`g`) allows iterative matching via `exec()`.\n */\nconst TAG_REGEX = new RegExp(\n  `<(\\\\/)?(${ALLOWED_TAGS.join('|')})(?=[\\\\s>/])((?:[^>\"']*(?:\"[^\"]*\"|'[^']*'))*[^>\"']*)>`,\n  'g',\n);\n\ntype Token =\n  | { type: 'text'; content: string }\n  | { type: 'newline' }\n  | { type: 'open'; tag: string; attrs: string }\n  | { type: 'close'; tag: string };\n\n/**\n * Splits the input string into a flat list of tokens by scanning for known tags.\n * Text between tags is emitted as text/newline tokens. Unrecognised tags are never\n * tokenised — they remain part of the surrounding text content.\n */\nfunction tokenise(input: string): Token[] {\n  const tokens: Token[] = [];\n  let lastIndex = 0;\n\n  TAG_REGEX.lastIndex = 0;\n  let match = TAG_REGEX.exec(input);\n\n  while (match !== null) {\n    if (match.index > lastIndex) {\n      pushTextWithNewlines(tokens, input.slice(lastIndex, match.index));\n    }\n\n    const isClose = match[1] === '/';\n    const tag = match[2];\n    const attrs = match[3] || '';\n\n    if (isClose) {\n      tokens.push({ type: 'close', tag });\n    } else {\n      tokens.push({ type: 'open', tag, attrs });\n    }\n\n    lastIndex = TAG_REGEX.lastIndex;\n    match = TAG_REGEX.exec(input);\n  }\n\n  if (lastIndex < input.length) {\n    pushTextWithNewlines(tokens, input.slice(lastIndex));\n  }\n\n  return tokens;\n}\n\n/** Splits a text fragment on newline characters, interleaving newline tokens between parts. */\nfunction pushTextWithNewlines(tokens: Token[], text: string): void {\n  const parts = text.split('\\n');\n  for (let index = 0; index < parts.length; index += 1) {\n    if (index > 0) {\n      tokens.push({ type: 'newline' });\n    }\n    if (parts[index]) {\n      tokens.push({ type: 'text', content: parts[index] });\n    }\n  }\n}\n\ntype ParseResult = { closed: true; nodes: MarkupNode[] } | { closed: false; nodes: MarkupNode[] };\n\n/**\n * Recursive descent parser that consumes tokens and builds a MarkupNode tree.\n *\n * When `untilTag` is provided, the function collects nodes until it finds a matching\n * close token — returning `{ closed: true }`. If it exhausts all tokens without finding\n * the close, it returns `{ closed: false }` so the caller can fall back to plain text\n * (graceful degradation for malformed input).\n *\n * The shared `position` object acts as a cursor across recursive calls, avoiding the\n * need to slice or copy the token array.\n */\nfunction parse(\n  tokens: Token[],\n  position: { index: number },\n  untilTag?: string,\n  depth = 0,\n): ParseResult {\n  const nodes: MarkupNode[] = [];\n\n  while (position.index < tokens.length) {\n    const token = tokens[position.index];\n\n    if (token.type === 'text') {\n      nodes.push({ type: 'text', content: token.content });\n      position.index += 1;\n    } else if (token.type === 'newline') {\n      nodes.push({ type: 'newline' });\n      position.index += 1;\n    } else if (token.type === 'close') {\n      if (token.tag === untilTag) {\n        position.index += 1;\n        return { closed: true, nodes };\n      }\n      // Mismatched close tag — render as literal text\n      nodes.push({ type: 'text', content: `</${token.tag}>` });\n      position.index += 1;\n    } else if (token.type === 'open') {\n      if (depth >= MAX_NESTING_DEPTH) {\n        nodes.push({ type: 'text', content: `<${token.tag}${token.attrs}>` });\n        position.index += 1;\n      } else {\n        position.index += 1;\n        const result = parse(tokens, position, token.tag, depth + 1);\n\n        if (result.closed) {\n          const node = buildNode(token.tag, token.attrs, result.nodes);\n          nodes.push(node);\n        } else {\n          nodes.push({ type: 'text', content: `<${token.tag}${token.attrs}>` });\n          nodes.push(...result.nodes);\n        }\n      }\n    }\n  }\n\n  if (untilTag) {\n    return { closed: false, nodes };\n  }\n\n  return { closed: true, nodes };\n}\n\n/**\n * Maps a raw tag name to a typed MarkupNode. Resolves aliases first (p→paragraph, a→link),\n * then builds the appropriate node shape. Link nodes carry full attributes; other element\n * nodes extract only accessibilityLabel.\n */\nfunction buildNode(rawTag: string, attrs: string, children: MarkupNode[]): MarkupNode {\n  const tag = TAG_ALIASES[rawTag] || rawTag;\n\n  if (tag === 'link') {\n    return { type: 'link', children, ...parseAttributes(attrs) };\n  }\n\n  if (tag === 'paragraph') {\n    return { type: 'paragraph', children };\n  }\n\n  const { accessibilityLabel } = parseAttributes(attrs);\n\n  return {\n    type: tag as MarkupNode['type'],\n    children,\n    ...(accessibilityLabel && { accessibilityLabel }),\n  } as MarkupNode;\n}\n\n/**\n * Matches allow-listed attributes from the raw attribute string captured by TAG_REGEX.\n * Requires whitespace before each attribute name to prevent matching inside quoted values.\n *\n * Example: for input ` href=\"https://wise.com\" target=\"_blank\"`\n *  - Match 1: groups = ['href', 'https://wise.com', undefined]\n *  - Match 2: groups = ['target', '_blank', undefined]\n *\n * Capture groups:\n *  1. Attribute name (href, action, target, or accessibilityLabel)\n *  2. Double-quoted value (if present)\n *  3. Single-quoted value (if present)\n */\nconst ATTR_REGEX = /(?<=\\s)(href|action|target|accessibilityLabel)=(?:\"([^\"]*)\"|'([^']*)')/g;\n\ntype ParsedAttributes = {\n  href?: string;\n  action?: string;\n  target?: string;\n  accessibilityLabel?: string;\n};\n\n/**\n * Extracts allowed attributes from a raw attribute string.\n * Supports both double- and single-quoted values. Any attribute not in the\n * allow-list (href, action, target, accessibilityLabel) is silently discarded.\n * First occurrence wins — duplicates are ignored.\n */\nfunction parseAttributes(attrs: string): ParsedAttributes {\n  const result: ParsedAttributes = {};\n  ATTR_REGEX.lastIndex = 0;\n  let match = ATTR_REGEX.exec(attrs);\n\n  while (match !== null) {\n    const key = match[1] as 'href' | 'action' | 'target' | 'accessibilityLabel';\n    const value = match[2] ?? match[3];\n\n    if (!(key in result)) {\n      const sanitized = sanitizeAttributeValue(key, value);\n      if (sanitized !== undefined) {\n        result[key] = sanitized;\n      }\n    }\n\n    match = ATTR_REGEX.exec(attrs);\n  }\n\n  return result;\n}\n\nfunction sanitizeAttributeValue(\n  key: 'href' | 'action' | 'target' | 'accessibilityLabel',\n  value: string,\n): string | undefined {\n  switch (key) {\n    case 'href':\n      return value.replace(CONTROL_CHARS, '');\n    case 'action':\n      if (OBJECT_PROTOTYPE_KEYS.has(value)) {\n        return undefined;\n      }\n      return value;\n    case 'target':\n      if (!ALLOWED_TARGETS.includes(value)) {\n        return undefined;\n      }\n      return value;\n    case 'accessibilityLabel':\n      return value.replace(HTML_METACHAR, '').slice(0, MAX_ACCESSIBILITY_LABEL_LENGTH);\n    default:\n      return undefined;\n  }\n}\n\n/** Entry point: tokenises the input string, then parses the token stream into a MarkupNode tree. */\nexport function parseMarkup(input: string): MarkupNode[] {\n  if (!input) {\n    return [];\n  }\n\n  if (input.length > MAX_INPUT_LENGTH) {\n    return [{ type: 'text', content: input }];\n  }\n\n  const tokens = tokenise(input);\n  const position = { index: 0 };\n  return parse(tokens, position).nodes;\n}\n"],"names":["MAX_INPUT_LENGTH","MAX_ACCESSIBILITY_LABEL_LENGTH","OBJECT_PROTOTYPE_KEYS","Set","Object","getOwnPropertyNames","prototype","CONTROL_CHARS","HTML_METACHAR","TAG_REGEX","RegExp","ALLOWED_TAGS","join","tokenise","input","tokens","lastIndex","match","exec","index","pushTextWithNewlines","slice","isClose","tag","attrs","push","type","length","text","parts","split","content","parse","position","untilTag","depth","nodes","token","closed","MAX_NESTING_DEPTH","result","node","buildNode","rawTag","children","TAG_ALIASES","parseAttributes","accessibilityLabel","ATTR_REGEX","key","value","sanitized","sanitizeAttributeValue","undefined","replace","has","ALLOWED_TARGETS","includes","parseMarkup"],"mappings":";;AAIO,MAAMA,gBAAgB,GAAG;AACzB,MAAMC,8BAA8B,GAAG;AAE9C,MAAMC,qBAAqB,GAAG,IAAIC,GAAG,CAACC,MAAM,CAACC,mBAAmB,CAACD,MAAM,CAACE,SAAS,CAAC,CAAC;AAEnF;AACA,MAAMC,aAAa,GAAG,uBAAuB;AAC7C,MAAMC,aAAa,GAAG,SAAS;AAE/B;;;;;;;;;;;;AAYG;AACH,MAAMC,SAAS,GAAG,IAAIC,MAAM,CAC1B,CAAA,QAAA,EAAWC,YAAY,CAACC,IAAI,CAAC,GAAG,CAAC,CAAA,qDAAA,CAAuD,EACxF,GAAG,CACJ;AAQD;;;;AAIG;AACH,SAASC,QAAQA,CAACC,KAAa,EAAA;EAC7B,MAAMC,MAAM,GAAY,EAAE;EAC1B,IAAIC,SAAS,GAAG,CAAC;EAEjBP,SAAS,CAACO,SAAS,GAAG,CAAC;AACvB,EAAA,IAAIC,KAAK,GAAGR,SAAS,CAACS,IAAI,CAACJ,KAAK,CAAC;EAEjC,OAAOG,KAAK,KAAK,IAAI,EAAE;AACrB,IAAA,IAAIA,KAAK,CAACE,KAAK,GAAGH,SAAS,EAAE;AAC3BI,MAAAA,oBAAoB,CAACL,MAAM,EAAED,KAAK,CAACO,KAAK,CAACL,SAAS,EAAEC,KAAK,CAACE,KAAK,CAAC,CAAC;AACnE,IAAA;AAEA,IAAA,MAAMG,OAAO,GAAGL,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;AAChC,IAAA,MAAMM,GAAG,GAAGN,KAAK,CAAC,CAAC,CAAC;AACpB,IAAA,MAAMO,KAAK,GAAGP,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;AAE5B,IAAA,IAAIK,OAAO,EAAE;MACXP,MAAM,CAACU,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,OAAO;AAAEH,QAAAA;AAAG,OAAE,CAAC;AACrC,IAAA,CAAC,MAAM;MACLR,MAAM,CAACU,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;QAAEH,GAAG;AAAEC,QAAAA;AAAK,OAAE,CAAC;AAC3C,IAAA;IAEAR,SAAS,GAAGP,SAAS,CAACO,SAAS;AAC/BC,IAAAA,KAAK,GAAGR,SAAS,CAACS,IAAI,CAACJ,KAAK,CAAC;AAC/B,EAAA;AAEA,EAAA,IAAIE,SAAS,GAAGF,KAAK,CAACa,MAAM,EAAE;IAC5BP,oBAAoB,CAACL,MAAM,EAAED,KAAK,CAACO,KAAK,CAACL,SAAS,CAAC,CAAC;AACtD,EAAA;AAEA,EAAA,OAAOD,MAAM;AACf;AAEA;AACA,SAASK,oBAAoBA,CAACL,MAAe,EAAEa,IAAY,EAAA;AACzD,EAAA,MAAMC,KAAK,GAAGD,IAAI,CAACE,KAAK,CAAC,IAAI,CAAC;AAC9B,EAAA,KAAK,IAAIX,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGU,KAAK,CAACF,MAAM,EAAER,KAAK,IAAI,CAAC,EAAE;IACpD,IAAIA,KAAK,GAAG,CAAC,EAAE;MACbJ,MAAM,CAACU,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE;AAAS,OAAE,CAAC;AAClC,IAAA;AACA,IAAA,IAAIG,KAAK,CAACV,KAAK,CAAC,EAAE;MAChBJ,MAAM,CAACU,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;QAAEK,OAAO,EAAEF,KAAK,CAACV,KAAK;AAAC,OAAE,CAAC;AACtD,IAAA;AACF,EAAA;AACF;AAIA;;;;;;;;;;AAUG;AACH,SAASa,KAAKA,CACZjB,MAAe,EACfkB,QAA2B,EAC3BC,QAAiB,EACjBC,KAAK,GAAG,CAAC,EAAA;EAET,MAAMC,KAAK,GAAiB,EAAE;AAE9B,EAAA,OAAOH,QAAQ,CAACd,KAAK,GAAGJ,MAAM,CAACY,MAAM,EAAE;AACrC,IAAA,MAAMU,KAAK,GAAGtB,MAAM,CAACkB,QAAQ,CAACd,KAAK,CAAC;AAEpC,IAAA,IAAIkB,KAAK,CAACX,IAAI,KAAK,MAAM,EAAE;MACzBU,KAAK,CAACX,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;QAAEK,OAAO,EAAEM,KAAK,CAACN;AAAO,OAAE,CAAC;MACpDE,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,IAAA,CAAC,MAAM,IAAIkB,KAAK,CAACX,IAAI,KAAK,SAAS,EAAE;MACnCU,KAAK,CAACX,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE;AAAS,OAAE,CAAC;MAC/BO,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,IAAA,CAAC,MAAM,IAAIkB,KAAK,CAACX,IAAI,KAAK,OAAO,EAAE;AACjC,MAAA,IAAIW,KAAK,CAACd,GAAG,KAAKW,QAAQ,EAAE;QAC1BD,QAAQ,CAACd,KAAK,IAAI,CAAC;QACnB,OAAO;AAAEmB,UAAAA,MAAM,EAAE,IAAI;AAAEF,UAAAA;SAAO;AAChC,MAAA;AACA;MACAA,KAAK,CAACX,IAAI,CAAC;AAAEC,QAAAA,IAAI,EAAE,MAAM;AAAEK,QAAAA,OAAO,EAAE,CAAA,EAAA,EAAKM,KAAK,CAACd,GAAG,CAAA,CAAA;AAAG,OAAE,CAAC;MACxDU,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,IAAA,CAAC,MAAM,IAAIkB,KAAK,CAACX,IAAI,KAAK,MAAM,EAAE;MAChC,IAAIS,KAAK,IAAII,iBAAiB,EAAE;QAC9BH,KAAK,CAACX,IAAI,CAAC;AAAEC,UAAAA,IAAI,EAAE,MAAM;UAAEK,OAAO,EAAE,IAAIM,KAAK,CAACd,GAAG,CAAA,EAAGc,KAAK,CAACb,KAAK,CAAA,CAAA;AAAG,SAAE,CAAC;QACrES,QAAQ,CAACd,KAAK,IAAI,CAAC;AACrB,MAAA,CAAC,MAAM;QACLc,QAAQ,CAACd,KAAK,IAAI,CAAC;AACnB,QAAA,MAAMqB,MAAM,GAAGR,KAAK,CAACjB,MAAM,EAAEkB,QAAQ,EAAEI,KAAK,CAACd,GAAG,EAAEY,KAAK,GAAG,CAAC,CAAC;QAE5D,IAAIK,MAAM,CAACF,MAAM,EAAE;AACjB,UAAA,MAAMG,IAAI,GAAGC,SAAS,CAACL,KAAK,CAACd,GAAG,EAAEc,KAAK,CAACb,KAAK,EAAEgB,MAAM,CAACJ,KAAK,CAAC;AAC5DA,UAAAA,KAAK,CAACX,IAAI,CAACgB,IAAI,CAAC;AAClB,QAAA,CAAC,MAAM;UACLL,KAAK,CAACX,IAAI,CAAC;AAAEC,YAAAA,IAAI,EAAE,MAAM;YAAEK,OAAO,EAAE,IAAIM,KAAK,CAACd,GAAG,CAAA,EAAGc,KAAK,CAACb,KAAK,CAAA,CAAA;AAAG,WAAE,CAAC;AACrEY,UAAAA,KAAK,CAACX,IAAI,CAAC,GAAGe,MAAM,CAACJ,KAAK,CAAC;AAC7B,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AAEA,EAAA,IAAIF,QAAQ,EAAE;IACZ,OAAO;AAAEI,MAAAA,MAAM,EAAE,KAAK;AAAEF,MAAAA;KAAO;AACjC,EAAA;EAEA,OAAO;AAAEE,IAAAA,MAAM,EAAE,IAAI;AAAEF,IAAAA;GAAO;AAChC;AAEA;;;;AAIG;AACH,SAASM,SAASA,CAACC,MAAc,EAAEnB,KAAa,EAAEoB,QAAsB,EAAA;AACtE,EAAA,MAAMrB,GAAG,GAAGsB,WAAW,CAACF,MAAM,CAAC,IAAIA,MAAM;EAEzC,IAAIpB,GAAG,KAAK,MAAM,EAAE;IAClB,OAAO;AAAEG,MAAAA,IAAI,EAAE,MAAM;MAAEkB,QAAQ;MAAE,GAAGE,eAAe,CAACtB,KAAK;KAAG;AAC9D,EAAA;EAEA,IAAID,GAAG,KAAK,WAAW,EAAE;IACvB,OAAO;AAAEG,MAAAA,IAAI,EAAE,WAAW;AAAEkB,MAAAA;KAAU;AACxC,EAAA;EAEA,MAAM;AAAEG,IAAAA;AAAkB,GAAE,GAAGD,eAAe,CAACtB,KAAK,CAAC;EAErD,OAAO;AACLE,IAAAA,IAAI,EAAEH,GAAyB;IAC/BqB,QAAQ;AACR,IAAA,IAAIG,kBAAkB,IAAI;AAAEA,MAAAA;KAAoB;GACnC;AACjB;AAEA;;;;;;;;;;;;AAYG;AACH,MAAMC,UAAU,GAAG,yEAAyE;AAS5F;;;;;AAKG;AACH,SAASF,eAAeA,CAACtB,KAAa,EAAA;EACpC,MAAMgB,MAAM,GAAqB,EAAE;EACnCQ,UAAU,CAAChC,SAAS,GAAG,CAAC;AACxB,EAAA,IAAIC,KAAK,GAAG+B,UAAU,CAAC9B,IAAI,CAACM,KAAK,CAAC;EAElC,OAAOP,KAAK,KAAK,IAAI,EAAE;AACrB,IAAA,MAAMgC,GAAG,GAAGhC,KAAK,CAAC,CAAC,CAAwD;IAC3E,MAAMiC,KAAK,GAAGjC,KAAK,CAAC,CAAC,CAAC,IAAIA,KAAK,CAAC,CAAC,CAAC;AAElC,IAAA,IAAI,EAAEgC,GAAG,IAAIT,MAAM,CAAC,EAAE;AACpB,MAAA,MAAMW,SAAS,GAAGC,sBAAsB,CAACH,GAAG,EAAEC,KAAK,CAAC;MACpD,IAAIC,SAAS,KAAKE,SAAS,EAAE;AAC3Bb,QAAAA,MAAM,CAACS,GAAG,CAAC,GAAGE,SAAS;AACzB,MAAA;AACF,IAAA;AAEAlC,IAAAA,KAAK,GAAG+B,UAAU,CAAC9B,IAAI,CAACM,KAAK,CAAC;AAChC,EAAA;AAEA,EAAA,OAAOgB,MAAM;AACf;AAEA,SAASY,sBAAsBA,CAC7BH,GAAwD,EACxDC,KAAa,EAAA;AAEb,EAAA,QAAQD,GAAG;AACT,IAAA,KAAK,MAAM;AACT,MAAA,OAAOC,KAAK,CAACI,OAAO,CAAC/C,aAAa,EAAE,EAAE,CAAC;AACzC,IAAA,KAAK,QAAQ;AACX,MAAA,IAAIL,qBAAqB,CAACqD,GAAG,CAACL,KAAK,CAAC,EAAE;AACpC,QAAA,OAAOG,SAAS;AAClB,MAAA;AACA,MAAA,OAAOH,KAAK;AACd,IAAA,KAAK,QAAQ;AACX,MAAA,IAAI,CAACM,eAAe,CAACC,QAAQ,CAACP,KAAK,CAAC,EAAE;AACpC,QAAA,OAAOG,SAAS;AAClB,MAAA;AACA,MAAA,OAAOH,KAAK;AACd,IAAA,KAAK,oBAAoB;AACvB,MAAA,OAAOA,KAAK,CAACI,OAAO,CAAC9C,aAAa,EAAE,EAAE,CAAC,CAACa,KAAK,CAAC,CAAC,EAAEpB,8BAA8B,CAAC;AAClF,IAAA;AACE,MAAA,OAAOoD,SAAS;AACpB;AACF;AAEA;AACM,SAAUK,WAAWA,CAAC5C,KAAa,EAAA;EACvC,IAAI,CAACA,KAAK,EAAE;AACV,IAAA,OAAO,EAAE;AACX,EAAA;AAEA,EAAA,IAAIA,KAAK,CAACa,MAAM,GAAG3B,gBAAgB,EAAE;AACnC,IAAA,OAAO,CAAC;AAAE0B,MAAAA,IAAI,EAAE,MAAM;AAAEK,MAAAA,OAAO,EAAEjB;AAAK,KAAE,CAAC;AAC3C,EAAA;AAEA,EAAA,MAAMC,MAAM,GAAGF,QAAQ,CAACC,KAAK,CAAC;AAC9B,EAAA,MAAMmB,QAAQ,GAAG;AAAEd,IAAAA,KAAK,EAAE;GAAG;AAC7B,EAAA,OAAOa,KAAK,CAACjB,MAAM,EAAEkB,QAAQ,CAAC,CAACG,KAAK;AACtC;;;;"}