@trops/dash-core 0.1.644 → 0.1.646

package/dist/index.js

@@ -28,6 +28,7 @@ var reactInstantsearchHooksWeb = require('react-instantsearch-hooks-web');
 var ReactDOM = require('react-dom');
 var reactRouterDom = require('react-router-dom');
 var marked = require('marked');
+var DOMPurify = require('dompurify');
 var PropTypes = require('prop-types');
 
 function _interopNamespaceDefault(e) {
@@ -69054,6 +69055,58 @@ var ToolCallBlock = function ToolCallBlock(_ref) {
   });
 };
 
+/**
+ * safeMarkdown.js
+ *
+ * Markdown → HTML that is safe to insert with dangerouslySetInnerHTML.
+ *
+ * AI replies are Markdown, and they can quote untrusted content (emails, web
+ * pages, tool results). `marked` passes raw HTML through untouched, so a reply
+ * containing `<img onerror=…>` or `<script>` would run in the app window —
+ * which can reach window.mainApi. Every Markdown render of model or tool text
+ * goes through here: `marked`, then DOMPurify.
+ *
+ * Kept: normal formatting (headings, emphasis, lists, code, tables, links).
+ * Removed: scripts, event-handler attributes, javascript:/data: URLs,
+ * iframes/objects/embeds/forms/styles, and inline style. Links get
+ * rel="noopener noreferrer" (the app also blocks in-window navigation).
+ */
+var FORBID_TAGS = ["style", "iframe", "object", "embed", "form", "input", "button", "textarea", "select", "link", "meta", "base"];
+var FORBID_ATTR = ["style"];
+// http(s), mailto, and in-page anchors only.
+var ALLOWED_URI_REGEXP = /^(?:(?:https?|mailto):|#)/i;
+var hooked = false;
+function ensureLinkHook() {
+  if (hooked || typeof DOMPurify.addHook !== "function") return;
+  DOMPurify.addHook("afterSanitizeAttributes", function (node) {
+    if (node.tagName === "A" && node.hasAttribute("href")) {
+      node.setAttribute("rel", "noopener noreferrer");
+      node.setAttribute("target", "_blank");
+    }
+  });
+  hooked = true;
+}
+
+/**
+ * @param {string} text Markdown (from a model, a tool, or a user)
+ * @returns {string} sanitized HTML
+ */
+function renderSafeMarkdown(text) {
+  if (!text) return "";
+  ensureLinkHook();
+  var html = marked.marked(String(text), {
+    breaks: true
+  });
+  return DOMPurify.sanitize(html, {
+    USE_PROFILES: {
+      html: true
+    },
+    FORBID_TAGS: FORBID_TAGS,
+    FORBID_ATTR: FORBID_ATTR,
+    ALLOWED_URI_REGEXP: ALLOWED_URI_REGEXP
+  });
+}
+
 function ownKeys$3(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread$3(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys$3(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys$3(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 function _createForOfIteratorHelper$4(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$4(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
@@ -69062,9 +69115,10 @@ function _arrayLikeToArray$4(r, a) { (null == a || a > r.length) && (a = r.lengt
 function AssistantTextContent(_ref) {
   var text = _ref.text;
   if (!text) return null;
-  var html = marked.marked(text, {
-    breaks: true
-  });
+
+  // Sanitized: replies can quote untrusted content (emails, web pages), and
+  // this HTML is inserted into the app window.
+  var html = renderSafeMarkdown(text);
   return /*#__PURE__*/jsxRuntime.jsx("div", {
     className: "prose prose-invert prose-sm max-w-none prose-p:my-2 prose-headings:my-3 prose-ul:my-2 prose-ol:my-2 prose-li:my-0.5 prose-pre:bg-black/40 prose-pre:text-gray-300 prose-code:text-indigo-300 prose-a:text-indigo-400 leading-relaxed",
     dangerouslySetInnerHTML: {
@@ -72008,6 +72062,7 @@ exports.renderGridLayout = renderGridLayout;
 exports.renderGridLayoutFlow = renderGridLayoutFlow;
 exports.renderLayout = _renderLayout;
 exports.renderLayoutMenu = renderLayoutMenu;
+exports.renderSafeMarkdown = renderSafeMarkdown;
 exports.replaceItemInLayout = replaceItemInLayout;
 exports.resolveGateWidgetId = resolveGateWidgetId;
 exports.resolveIcon = resolveIcon;