@transferwise/components 0.0.0-experimental-bcea1dd → 0.0.0-experimental-1168b1c

package/src/Markup/constants.ts

@@ -1,41 +0,0 @@
-// Only these tags are recognised — anything else is treated as plain text (security allow-list)
-export const ALLOWED_TAGS = [
-  'important',
-  'positive',
-  'negative',
-  'strong',
-  'strikethrough',
-  'paragraph',
-  'p',
-  'link',
-  'a',
-] as const;
-
-/**
- * Matches opening and closing tags from the ALLOWED_TAGS allow-list.
- *
- * Capture groups:
- *  1. `/` if this is a closing tag, undefined otherwise
- *  2. Tag name
- *  3. Raw attribute string between the tag name and `>` (empty for closing tags)
- *
- * The lookahead `(?=[\s>/])` after the tag name ensures we don't match partial
- * words — e.g. `<stronger>` won't be matched as `<strong>`.
- *
- * Global flag (`g`) allows iterative matching via `exec()`.
- */
-export const TAG_REGEX = new RegExp(
-  `<(\\/)?(${ALLOWED_TAGS.join('|')})(?=[\\s>/])((?:[^>"']*(?:"[^"]*"|'[^']*'))*[^>"']*)>`,
-  'g',
-);
-
-export const TAG_ALIASES: Record<string, string> = { p: 'paragraph', a: 'link' };
-
-// Maximum recursive nesting before the parser emits tags as literal text (DoS protection)
-export const MAX_NESTING_DEPTH = 32;
-
-// Only these link targets are allowed — others are stripped to prevent iframe breakout
-export const ALLOWED_TARGETS = ['_blank', '_self'];
-
-// Only these protocols pass href validation — all others are blocked
-export const ALLOWED_PROTOCOLS = ['https:', 'mailto:'];

package/src/Markup/index.ts

@@ -1,2 +0,0 @@
-export { default } from './Markup';
-export type { MarkupActionHandler, MarkupActions, MarkupNode, MarkupProps } from './Markup.types';