@ui5/webcomponents-base 0.0.0-4180fe799 → 0.0.0-4237771ff

package/dist/renderer/executeTemplate.js

@@ -1,17 +1,30 @@
-import { getCustomElementsScopingSuffix, shouldScopeCustomElement } from "../CustomElementsScope.js";
-
+import { getCustomElementsScopingSuffix, shouldScopeCustomElement } from "../CustomElementsScopeUtils.js";
 /**
  * Runs a component's template with the component's current state, while also scoping HTML
  *
  * @param template - the template to execute
  * @param component - the component
  * @public
- * @returns {*}
  */
 const executeTemplate = (template, component) => {
-	const tagsToScope = component.constructor.getUniqueDependencies().map(dep => dep.getMetadata().getPureTag()).filter(shouldScopeCustomElement);
-	const scope = getCustomElementsScopingSuffix();
-	return template(component, tagsToScope, scope);
+    const tagsToScope = getTagsToScope(component);
+    const scope = getCustomElementsScopingSuffix();
+    return template.call(component, component, tagsToScope, scope);
+};
+/**
+ * Returns all tags, used inside component's template subject to scoping.
+ * @param component - the component
+ * @returns {Array[]}
+ * @private
+ */
+const getTagsToScope = (component) => {
+    const ctor = component.constructor;
+    const componentTag = ctor.getMetadata().getPureTag();
+    const tagsToScope = ctor.getUniqueDependencies().map((dep) => dep.getMetadata().getPureTag()).filter(shouldScopeCustomElement);
+    if (shouldScopeCustomElement(componentTag)) {
+        tagsToScope.push(componentTag);
+    }
+    return tagsToScope;
 };
-
 export default executeTemplate;
+//# sourceMappingURL=executeTemplate.js.map

package/dist/renderer/executeTemplate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeTemplate.js","sourceRoot":"","sources":["../../src/renderer/executeTemplate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAM1G;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,CAAC,QAA0B,EAAE,SAAqB,EAA0B,EAAE;IACrG,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,8BAA8B,EAAE,CAAC;IAC/C,OAAO,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,cAAc,GAAG,CAAC,SAAqB,EAAE,EAAE;IAChD,MAAM,IAAI,GAAG,SAAS,CAAC,WAAgC,CAAC;IAExD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,GAAsB,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAElJ,IAAI,wBAAwB,CAAC,YAAY,CAAC,EAAE;QAC3C,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;KAC/B;IAED,OAAO,WAAW,CAAC;AACpB,CAAC,CAAC;AAEF,eAAe,eAAe,CAAC","sourcesContent":["import { getCustomElementsScopingSuffix, shouldScopeCustomElement } from \"../CustomElementsScopeUtils.js\";\nimport type UI5Element from \"../UI5Element.js\";\n\ntype TemplateFunctionResult = object;\ntype TemplateFunction = (component: UI5Element, tagsToScope: Array<string>, scope: string | undefined) => TemplateFunctionResult;\n\n/**\n * Runs a component's template with the component's current state, while also scoping HTML\n *\n * @param template - the template to execute\n * @param component - the component\n * @public\n */\nconst executeTemplate = (template: TemplateFunction, component: UI5Element): TemplateFunctionResult => {\n\tconst tagsToScope = getTagsToScope(component);\n\tconst scope = getCustomElementsScopingSuffix();\n\treturn template.call(component, component, tagsToScope, scope);\n};\n\n/**\n * Returns all tags, used inside component's template subject to scoping.\n * @param component - the component\n * @returns {Array[]}\n * @private\n */\nconst getTagsToScope = (component: UI5Element) => {\n\tconst ctor = component.constructor as typeof UI5Element;\n\n\tconst componentTag = ctor.getMetadata().getPureTag();\n\tconst tagsToScope = ctor.getUniqueDependencies().map((dep: typeof UI5Element) => dep.getMetadata().getPureTag()).filter(shouldScopeCustomElement);\n\n\tif (shouldScopeCustomElement(componentTag)) {\n\t\ttagsToScope.push(componentTag);\n\t}\n\n\treturn tagsToScope;\n};\n\nexport default executeTemplate;\nexport type { TemplateFunction, TemplateFunctionResult };\n"]}

package/dist/sap/base/Log.js

@@ -10,7 +10,7 @@ Log.Level = {
     TRACE: 5,
     ALL: 5 + 1
 };
-var sDefaultComponent, aLog = [], mMaxLevel = { '': Log.Level.ERROR }, iLogEntriesLimit = 3000, oListener = null, bLogSupportInfo = false;
+var aLog = [], mMaxLevel = { '': Log.Level.ERROR }, iLogEntriesLimit = 3000, oListener = null, bLogSupportInfo = false;
 function pad0(i, w) {
     return ('000' + String(i)).slice(-w);
 }
@@ -72,26 +72,26 @@ function getLogEntryListenerInstance() {
     }
     return oListener;
 }
-Log.fatal = function (sMessage, sDetails, sComponent, fnSupportInfo) {
-    log(Log.Level.FATAL, sMessage, sDetails, sComponent, fnSupportInfo);
+Log.fatal = function (sMessage, vDetails, sComponent, fnSupportInfo) {
+    log(Log.Level.FATAL, sMessage, vDetails, sComponent, fnSupportInfo);
 };
-Log.error = function (sMessage, sDetails, sComponent, fnSupportInfo) {
-    log(Log.Level.ERROR, sMessage, sDetails, sComponent, fnSupportInfo);
+Log.error = function (sMessage, vDetails, sComponent, fnSupportInfo) {
+    log(Log.Level.ERROR, sMessage, vDetails, sComponent, fnSupportInfo);
 };
-Log.warning = function (sMessage, sDetails, sComponent, fnSupportInfo) {
-    log(Log.Level.WARNING, sMessage, sDetails, sComponent, fnSupportInfo);
+Log.warning = function (sMessage, vDetails, sComponent, fnSupportInfo) {
+    log(Log.Level.WARNING, sMessage, vDetails, sComponent, fnSupportInfo);
 };
-Log.info = function (sMessage, sDetails, sComponent, fnSupportInfo) {
-    log(Log.Level.INFO, sMessage, sDetails, sComponent, fnSupportInfo);
+Log.info = function (sMessage, vDetails, sComponent, fnSupportInfo) {
+    log(Log.Level.INFO, sMessage, vDetails, sComponent, fnSupportInfo);
 };
-Log.debug = function (sMessage, sDetails, sComponent, fnSupportInfo) {
-    log(Log.Level.DEBUG, sMessage, sDetails, sComponent, fnSupportInfo);
+Log.debug = function (sMessage, vDetails, sComponent, fnSupportInfo) {
+    log(Log.Level.DEBUG, sMessage, vDetails, sComponent, fnSupportInfo);
 };
-Log.trace = function (sMessage, sDetails, sComponent, fnSupportInfo) {
-    log(Log.Level.TRACE, sMessage, sDetails, sComponent, fnSupportInfo);
+Log.trace = function (sMessage, vDetails, sComponent, fnSupportInfo) {
+    log(Log.Level.TRACE, sMessage, vDetails, sComponent, fnSupportInfo);
 };
 Log.setLevel = function (iLogLevel, sComponent, _bDefault) {
-    sComponent = sComponent || sDefaultComponent || '';
+    sComponent = sComponent || '';
     if (!_bDefault || mMaxLevel[sComponent] == null) {
         mMaxLevel[sComponent] = iLogLevel;
         var sLogLevel;
@@ -104,24 +104,23 @@ Log.setLevel = function (iLogLevel, sComponent, _bDefault) {
     }
 };
 Log.getLevel = function (sComponent) {
-    return level(sComponent || sDefaultComponent);
+    return level(sComponent);
 };
 Log.isLoggable = function (iLevel, sComponent) {
-    return (iLevel == null ? Log.Level.DEBUG : iLevel) <= level(sComponent || sDefaultComponent);
+    return (iLevel == null ? Log.Level.DEBUG : iLevel) <= level(sComponent);
 };
 Log.logSupportInfo = function (bEnabled) {
     bLogSupportInfo = bEnabled;
 };
-function log(iLevel, sMessage, sDetails, sComponent, fnSupportInfo) {
-    if (!fnSupportInfo && !sComponent && typeof sDetails === 'function') {
-        fnSupportInfo = sDetails;
-        sDetails = '';
+function log(iLevel, sMessage, vDetails, sComponent, fnSupportInfo) {
+    if (!fnSupportInfo && !sComponent && typeof vDetails === 'function') {
+        fnSupportInfo = vDetails;
+        vDetails = '';
     }
     if (!fnSupportInfo && typeof sComponent === 'function') {
         fnSupportInfo = sComponent;
         sComponent = '';
     }
-    sComponent = sComponent || sDefaultComponent;
     if (iLevel <= level(sComponent)) {
         var fNow = now(), oNow = new Date(fNow), iMicroSeconds = Math.floor((fNow - Math.floor(fNow)) * 1000), oLogEntry = {
                 time: pad0(oNow.getHours(), 2) + ':' + pad0(oNow.getMinutes(), 2) + ':' + pad0(oNow.getSeconds(), 2) + '.' + pad0(oNow.getMilliseconds(), 3) + pad0(iMicroSeconds, 3),
@@ -129,7 +128,7 @@ function log(iLevel, sMessage, sDetails, sComponent, fnSupportInfo) {
                 timestamp: fNow,
                 level: iLevel,
                 message: String(sMessage || ''),
-                details: String(sDetails || ''),
+                details: String(vDetails || ''),
                 component: String(sComponent || '')
             };
         if (bLogSupportInfo && typeof fnSupportInfo === 'function') {
@@ -145,27 +144,27 @@ function log(iLevel, sMessage, sDetails, sComponent, fnSupportInfo) {
             oListener.onLogEntry(oLogEntry);
         }
         if (console) {
-            var isDetailsError = sDetails instanceof Error, logText = oLogEntry.date + ' ' + oLogEntry.time + ' ' + oLogEntry.message + ' - ' + oLogEntry.details + ' ' + oLogEntry.component;
+            var isDetailsError = vDetails instanceof Error, logText = oLogEntry.date + ' ' + oLogEntry.time + ' ' + oLogEntry.message + ' - ' + oLogEntry.details + ' ' + oLogEntry.component;
             switch (iLevel) {
             case Log.Level.FATAL:
             case Log.Level.ERROR:
-                isDetailsError ? console.error(logText, '\n', sDetails) : console.error(logText);
+                isDetailsError ? console.error(logText, '\n', vDetails) : console.error(logText);
                 break;
             case Log.Level.WARNING:
-                isDetailsError ? console.warn(logText, '\n', sDetails) : console.warn(logText);
+                isDetailsError ? console.warn(logText, '\n', vDetails) : console.warn(logText);
                 break;
             case Log.Level.INFO:
                 if (console.info) {
-                    isDetailsError ? console.info(logText, '\n', sDetails) : console.info(logText);
+                    isDetailsError ? console.info(logText, '\n', vDetails) : console.info(logText);
                 } else {
-                    isDetailsError ? console.log(logText, '\n', sDetails) : console.log(logText);
+                    isDetailsError ? console.log(logText, '\n', vDetails) : console.log(logText);
                 }
                 break;
             case Log.Level.DEBUG:
-                isDetailsError ? console.debug(logText, '\n', sDetails) : console.debug(logText);
+                isDetailsError ? console.debug(logText, '\n', vDetails) : console.debug(logText);
                 break;
             case Log.Level.TRACE:
-                isDetailsError ? console.trace(logText, '\n', sDetails) : console.trace(logText);
+                isDetailsError ? console.trace(logText, '\n', vDetails) : console.trace(logText);
                 break;
             }
             if (console.info && oLogEntry.supportInfo) {

package/dist/sap/base/assert.js

@@ -1,8 +1,7 @@
-import Log from './Log.js';
 var fnAssert = function (bResult, vMessage) {
-    if (!bResult) {
-        var sMessage = typeof vMessage === 'function' ? vMessage() : vMessage;
-        console.assert(bResult, sMessage);
-    }
+  if (!bResult) {
+    var sMessage = typeof vMessage === "function" ? vMessage() : vMessage;
+    console.assert(bResult, sMessage);
+  }
 };
-export default fnAssert;
+export default fnAssert;

package/dist/sap/base/security/URLListValidator.js

@@ -1,4 +1,4 @@
-var rBasicUrl = /^(?:([^:\/?#]+):)?((?:\/\/((?:\[[^\]]+\]|[^\/?#:]+))(?::([0-9]+))?)?([^?#]*))(?:\?([^#]*))?(?:#(.*))?$/;
+var rBasicUrl = /^(?:([^:\/?#]+):)?((?:[\/\\]{2,}((?:\[[^\]]+\]|[^\/?#:]+))(?::([0-9]+))?)?([^?#]*))(?:\?([^#]*))?(?:#(.*))?$/;
 var rCheckPath = /^([a-z0-9-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*$/i;
 var rCheckQuery = /^([a-z0-9-._~!$&'()*+,;=:@\/?]|%[0-9a-f]{2})*$/i;
 var rCheckFragment = rCheckQuery;
@@ -8,6 +8,8 @@ var rCheckValidIPv4 = /^(([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])\.){3
 var rCheckIPv6 = /^\[[^\]]+\]$/;
 var rCheckValidIPv6 = /^\[(((([0-9a-f]{1,4}:){6}|(::([0-9a-f]{1,4}:){5})|(([0-9a-f]{1,4})?::([0-9a-f]{1,4}:){4})|((([0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::([0-9a-f]{1,4}:){3})|((([0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::([0-9a-f]{1,4}:){2})|((([0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:)|((([0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::))(([0-9a-f]{1,4}:[0-9a-f]{1,4})|(([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])))|((([0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4})|((([0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::))\]$/i;
 var rCheckHostName = /^([a-z0-9]([a-z0-9\-]*[a-z0-9])?\.)*[a-z0-9]([a-z0-9\-]*[a-z0-9])?$/i;
+var rSpecialSchemeURLs = /^((?:ftp|https?|wss?):)([\s\S]+)$/;
+var rCheckWhitespaces = /[\u0009\u000A\u000D]/;
 var oURLListValidator = {};
 oURLListValidator._createEntry = function (protocol, host, port, path) {
   return new URLListValidatorEntry(protocol, host, port, path);
@@ -47,7 +49,16 @@ oURLListValidator.entries = function () {
   return aAllowedEntries.slice();
 };
 oURLListValidator.validate = function (sUrl) {
-  var result = rBasicUrl.exec(sUrl);
+  if (typeof sUrl === "string") {
+    if (rCheckWhitespaces.test(sUrl)) {
+      return false;
+    }
+  }
+  var result = rSpecialSchemeURLs.exec(sUrl);
+  if (result && !(/^[\/\\]{2}/).test(result[2])) {
+    sUrl = result[1] + "//" + result[2];
+  }
+  result = rBasicUrl.exec(sUrl);
   if (!result) {
     return false;
   }

package/dist/sap/base/security/encodeCSS.js

@@ -0,0 +1,14 @@
+import toHex from '../strings/toHex.js';
+var rCSS = /[\x00-\x2f\x3a-\x40\x5b-\x60\x7b-\xff\u2028\u2029][0-9A-Fa-f]?/g;
+var fnCSS = function (sChar) {
+    var iChar = sChar.charCodeAt(0);
+    if (sChar.length === 1) {
+        return '\\' + toHex(iChar);
+    } else {
+        return '\\' + toHex(iChar) + ' ' + sChar.substr(1);
+    }
+};
+var fnEncodeCSS = function (sString) {
+    return sString.replace(rCSS, fnCSS);
+};
+export default fnEncodeCSS;

package/dist/sap/base/security/encodeXML.js

@@ -0,0 +1,23 @@
+import toHex from '../strings/toHex.js';
+var rHtml = /[\x00-\x2b\x2f\x3a-\x40\x5b-\x5e\x60\x7b-\xff\u2028\u2029]/g, rHtmlReplace = /[\x00-\x08\x0b\x0c\x0e-\x1f\x7f-\x9f]/, mHtmlLookup = {
+        '<': '&lt;',
+        '>': '&gt;',
+        '&': '&amp;',
+        '"': '&quot;'
+    };
+var fnHtml = function (sChar) {
+    var sEncoded = mHtmlLookup[sChar];
+    if (!sEncoded) {
+        if (rHtmlReplace.test(sChar)) {
+            sEncoded = '&#xfffd;';
+        } else {
+            sEncoded = '&#x' + toHex(sChar.charCodeAt(0)) + ';';
+        }
+        mHtmlLookup[sChar] = sEncoded;
+    }
+    return sEncoded;
+};
+var fnEncodeXML = function (sString) {
+    return sString.replace(rHtml, fnHtml);
+};
+export default fnEncodeXML;

package/dist/sap/base/strings/toHex.js

@@ -0,0 +1,8 @@
+var fnToHex = function (iChar, iLength) {
+  var sHex = iChar.toString(16);
+  if (iLength) {
+    sHex = sHex.padStart(iLength, "0");
+  }
+  return sHex;
+};
+export default fnToHex;

package/dist/sap/ui/thirdparty/caja-html-sanitizer.js

@@ -489,7 +489,10 @@ var cssSchema = (function () {
       },
       'font-weight': {
         'cssPropBits': 0,
-        'cssLitGroup': [ L[ 4 ], L[ 47 ], L[ 55 ] ]
+        'cssLitGroup': [ L[ 4 ], L[ 47 ], L[ 55 ] ],
+        // ##### BEGIN: MODIFIED BY SAP
+        'cssLitNumeric': true
+        // ##### END: MODIFIED BY SAP
       },
       'height': {
         'cssPropBits': 37,
@@ -1217,101 +1220,113 @@ var sanitizeCssProperty = (function () {
       token = (
         // Strip out spaces.  Normally cssparser.js dumps these, but we
         // strip them out in case the content doesn't come via cssparser.js.
-        (cc === ' '.charCodeAt(0)) ? ''
-        : (cc === '"'.charCodeAt(0)) ? (  // Quoted string.
-          (qstringBits === CSS_PROP_BIT_QSTRING_URL && opt_naiveUriRewriter)
-          // Sanitize and convert to url("...") syntax.
-          // Treat url content as case-sensitive.
-          ? (normalizeUrl(safeUri(
-                decodeCss(tokens[i].substring(1, token.length - 1)),
-                property,
-                opt_naiveUriRewriter)))
-          // Drop if plain text content strings not allowed.
-          : (qstringBits === CSS_PROP_BIT_QSTRING_CONTENT) ? token : '')
-        // Preserve hash color literals if allowed.
-        : (cc === '#'.charCodeAt(0) && /^#(?:[0-9a-f]{3}){1,2}$/.test(token))
-        ? (propBits & CSS_PROP_BIT_HASH_VALUE ? token : '')
-        : ('0'.charCodeAt(0) <= cc && cc <= '9'.charCodeAt(0))
-        // A number starting with a digit.
-        ? ((propBits & CSS_PROP_BIT_QUANTITY)
-          ? ((propBits & CSS_PROP_BIT_Z_INDEX)
-            ? (token.match(/^\d{1,7}$/) ? token : '')
-            : token)
-          : '')
-        // Normalize quantities so they don't start with a '.' or '+' sign and
-        // make sure they all have an integer component so can't be confused
-        // with a dotted identifier.
-        // This can't be done in the lexer since ".4" is a valid rule part.
-        : (cc1 = token.charCodeAt(1),
-           cc2 = token.charCodeAt(2),
-           isnum1 = '0'.charCodeAt(0) <= cc1 && cc1 <= '9'.charCodeAt(0),
-           isnum2 = '0'.charCodeAt(0) <= cc2 && cc2 <= '9'.charCodeAt(0),
-           // +.5 -> 0.5 if allowed.
-           (cc === '+'.charCodeAt(0)
-            && (isnum1 || (cc1 === '.'.charCodeAt(0) && isnum2))))
-          ? ((propBits & CSS_PROP_BIT_QUANTITY)
-            ? ((propBits & CSS_PROP_BIT_Z_INDEX)
-              ? (token.match(/^\+\d{1,7}$/) ? token : '')
-              : ((isnum1 ? '' : '0') + token.substring(1)))
-            : '')
-        // -.5 -> -0.5 if allowed otherwise -> 0 if quantities allowed.
-        : (cc === '-'.charCodeAt(0)
-           && (isnum1 || (cc1 === '.'.charCodeAt(0) && isnum2)))
-          ? ((propBits & CSS_PROP_BIT_NEGATIVE_QUANTITY)
-             ? ((propBits & CSS_PROP_BIT_Z_INDEX)
-               ? (token.match(/^\-\d{1,7}$/) ? token : '')
-               : ((isnum1 ? '-' : '-0') + token.substring(1)))
-             : ((propBits & CSS_PROP_BIT_QUANTITY) ? '0' : ''))
-        // .5 -> 0.5 if allowed.
-        : (cc === '.'.charCodeAt(0) && isnum1)
-        ? ((propBits & CSS_PROP_BIT_QUANTITY) ? '0' + token : '')
-        // Handle url("...") by rewriting the body.
-        : ('url(' === token.substring(0, 4))
-        ? ((opt_naiveUriRewriter && (qstringBits & CSS_PROP_BIT_QSTRING_URL))
-           ? normalizeUrl(safeUri(
-                tokens[i].substring(5, token.length - 2),
-                property,
-                opt_naiveUriRewriter))
-           : '')
-        // Handle func(...) and literal tokens
-        // such as keywords and punctuation.
-        : (
-          // Step 1. Combine func(...) into something that can be compared
-          // against propertySchema.cssExtra.
-          (token.charAt(token.length-1) === '(')
-          && (end = normalizeFunctionCall(tokens, i),
-              // When tokens is
-              //   ['x', ' ', 'rgb(', '255', ',', '0', ',', '0', ')', ' ', 'y']
-              // and i is the index of 'rgb(' and end is the index of ')'
-              // splices tokens to where i now is the index of the whole call:
-              //   ['x', ' ', 'rgb( 255 , 0 , 0 )', ' ', 'y']
-              tokens.splice(i, end - i,
-                            token = tokens.slice(i, end).join(' '))),
-          litGroup = propertySchema.cssLitGroup,
-          litMap = (litGroup
-                    ? (propertySchema.cssLitMap
-                       // Lazily compute the union from litGroup.
-                       || (propertySchema.cssLitMap = unionArrays(litGroup)))
-                    : ALLOWED_LITERAL),  // A convenient empty object.
-          (litMap[token] === ALLOWED_LITERAL
-           || propertySchema.cssExtra && propertySchema.cssExtra.test(token)))
-          // Token is in the literal map or matches extra.
-          ? token
-          : (/^\w+$/.test(token)
-             && (qstringBits === CSS_PROP_BIT_QSTRING_CONTENT))
-          // Quote unrecognized keywords so font names like
-          //    Arial Bold
-          // ->
-          //    "Arial Bold"
-          ? (lastQuoted+1 === k
-             // If the last token was also a keyword that was quoted, then
-             // combine this token into that.
-             ? (tokens[lastQuoted] = tokens[lastQuoted]
-                .substring(0, tokens[lastQuoted].length-1) + ' ' + token + '"',
-                token = '')
-             : (lastQuoted = k, '"' + token + '"'))
-          // Disallowed.
-          : '');
+        (cc === ' '.charCodeAt(0))
+          ? ''
+          : (cc === '"'.charCodeAt(0))
+              ? (  // Quoted string.
+                  (qstringBits === CSS_PROP_BIT_QSTRING_URL && opt_naiveUriRewriter)
+                  // Sanitize and convert to url("...") syntax.
+                  // Treat url content as case-sensitive.
+                  ? (normalizeUrl(
+                       safeUri(
+                         decodeCss(tokens[i].substring(1, token.length - 1)),
+                         property,
+                         opt_naiveUriRewriter
+                       )
+                     ))
+                  // Drop if plain text content strings not allowed.
+                  : (qstringBits === CSS_PROP_BIT_QSTRING_CONTENT) ? token : '')
+              // Preserve hash color literals if allowed.
+              : (cc === '#'.charCodeAt(0) && /^#(?:[0-9a-f]{3}){1,2}$/.test(token))
+                  ? (propBits & CSS_PROP_BIT_HASH_VALUE ? token : '')
+                  // ##### BEGIN: MODIFIED BY SAP
+                  // : ('0'.charCodeAt(0) <= cc && cc <= '9'.charCodeAt(0))
+                  : ('0'.charCodeAt(0) <= cc && cc <= '9'.charCodeAt(0) && !propertySchema.cssLitNumeric)
+                  // ##### END: MODIFIED BY SAP
+                      // A number starting with a digit.
+                      ? ((propBits & CSS_PROP_BIT_QUANTITY)
+                           ? ((propBits & CSS_PROP_BIT_Z_INDEX)
+                                ? (token.match(/^\d{1,7}$/) ? token : '')
+                                : token)
+                           : '')
+                      // Normalize quantities so they don't start with a '.' or '+' sign and
+                      // make sure they all have an integer component so can't be confused
+                      // with a dotted identifier.
+                      // This can't be done in the lexer since ".4" is a valid rule part.
+                      : (cc1 = token.charCodeAt(1),
+                         cc2 = token.charCodeAt(2),
+                         isnum1 = '0'.charCodeAt(0) <= cc1 && cc1 <= '9'.charCodeAt(0),
+                         isnum2 = '0'.charCodeAt(0) <= cc2 && cc2 <= '9'.charCodeAt(0),
+                         // +.5 -> 0.5 if allowed.
+                         (cc === '+'.charCodeAt(0)
+                          && (isnum1 || (cc1 === '.'.charCodeAt(0) && isnum2))))
+                           ? ((propBits & CSS_PROP_BIT_QUANTITY)
+                                ? ((propBits & CSS_PROP_BIT_Z_INDEX)
+                                     ? (token.match(/^\+\d{1,7}$/) ? token : '')
+                                     : ((isnum1 ? '' : '0') + token.substring(1)))
+                                : '')
+                           // -.5 -> -0.5 if allowed otherwise -> 0 if quantities allowed.
+                           : (cc === '-'.charCodeAt(0)
+                              && (isnum1 || (cc1 === '.'.charCodeAt(0) && isnum2)))
+                                ? ((propBits & CSS_PROP_BIT_NEGATIVE_QUANTITY)
+                                     ? ((propBits & CSS_PROP_BIT_Z_INDEX)
+                                          ? (token.match(/^\-\d{1,7}$/) ? token : '')
+                                          : ((isnum1 ? '-' : '-0') + token.substring(1)))
+                                     : ((propBits & CSS_PROP_BIT_QUANTITY) ? '0' : ''))
+                                // .5 -> 0.5 if allowed.
+                                : (cc === '.'.charCodeAt(0) && isnum1)
+                                     ? ((propBits & CSS_PROP_BIT_QUANTITY) ? '0' + token : '')
+                                     // Handle url("...") by rewriting the body.
+                                     : ('url(' === token.substring(0, 4))
+                                          ? ((opt_naiveUriRewriter && (qstringBits & CSS_PROP_BIT_QSTRING_URL))
+                                               ? normalizeUrl(
+                                                   safeUri(
+                                                     tokens[i].substring(5, token.length - 2),
+                                                     property,
+                                                     opt_naiveUriRewriter
+                                                   )
+                                                 )
+                                               : '')
+                                          // Handle func(...) and literal tokens
+                                          // such as keywords and punctuation.
+                                          : (
+                                             // Step 1. Combine func(...) into something that can be compared
+                                             // against propertySchema.cssExtra.
+                                             (token.charAt(token.length-1) === '(')
+                                             && (end = normalizeFunctionCall(tokens, i),
+                                               // When tokens is
+                                               //   ['x', ' ', 'rgb(', '255', ',', '0', ',', '0', ')', ' ', 'y']
+                                               // and i is the index of 'rgb(' and end is the index of ')'
+                                               // splices tokens to where i now is the index of the whole call:
+                                               //   ['x', ' ', 'rgb( 255 , 0 , 0 )', ' ', 'y']
+                                               tokens.splice(i, end - i,
+                                                 token = tokens.slice(i, end).join(' '))),
+                                             litGroup = propertySchema.cssLitGroup,
+                                             litMap = (
+                                                litGroup
+                                                ? (propertySchema.cssLitMap
+                                                   // Lazily compute the union from litGroup.
+                                                   || (propertySchema.cssLitMap = unionArrays(litGroup)))
+                                                : ALLOWED_LITERAL),  // A convenient empty object.
+                                             (litMap[token] === ALLOWED_LITERAL
+                                              || propertySchema.cssExtra && propertySchema.cssExtra.test(token)))
+                                                // Token is in the literal map or matches extra.
+                                                ? token
+                                                : (/^\w+$/.test(token)
+                                                   && (qstringBits === CSS_PROP_BIT_QSTRING_CONTENT))
+                                                     // Quote unrecognized keywords so font names like
+                                                      //    Arial Bold
+                                                      // ->
+                                                      //    "Arial Bold"
+                                                      ? (lastQuoted+1 === k
+                                                         // If the last token was also a keyword that was quoted, then
+                                                         // combine this token into that.
+                                                         ? (tokens[lastQuoted] = tokens[lastQuoted]
+                                                            .substring(0, tokens[lastQuoted].length-1) + ' ' + token + '"',
+                                                            token = '')
+                                                         : (lastQuoted = k, '"' + token + '"'))
+                                                      // Disallowed.
+                                                      : '');
       if (token) {
         tokens[k++] = token;
       }
@@ -1989,7 +2004,7 @@ if (typeof window !== 'undefined') {
 }
 /*!
  * OpenUI5
- * (c) Copyright 2009-2021 SAP SE or an SAP affiliate company.
+ * (c) Copyright 2009-2023 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
 // Based on coding from the HTML4 Sanitizer by Google Inc.

package/dist/theming/CustomStyle.d.ts

@@ -0,0 +1,6 @@
+type CustomCSSChangeCallback = (tag: string) => void;
+declare const attachCustomCSSChange: (listener: CustomCSSChangeCallback) => void;
+declare const detachCustomCSSChange: (listener: CustomCSSChangeCallback) => void;
+declare const addCustomCSS: (tag: string, css: string) => Promise<void>;
+declare const getCustomCSS: (tag: string) => string;
+export { addCustomCSS, getCustomCSS, attachCustomCSSChange, detachCustomCSSChange, };

package/dist/theming/CustomStyle.js

@@ -1,40 +1,48 @@
 import { reRenderAllUI5Elements } from "../Render.js";
+import getSharedResource from "../getSharedResource.js";
 import EventProvider from "../EventProvider.js";
-
-const eventProvider = new EventProvider();
+const getEventProvider = () => getSharedResource("CustomStyle.eventProvider", new EventProvider());
 const CUSTOM_CSS_CHANGE = "CustomCSSChange";
-
-const attachCustomCSSChange = listener => {
-	eventProvider.attachEvent(CUSTOM_CSS_CHANGE, listener);
+const attachCustomCSSChange = (listener) => {
+    getEventProvider().attachEvent(CUSTOM_CSS_CHANGE, listener);
 };
-
-const detachCustomCSSChange = listener => {
-	eventProvider.detachEvent(CUSTOM_CSS_CHANGE, listener);
+const detachCustomCSSChange = (listener) => {
+    getEventProvider().detachEvent(CUSTOM_CSS_CHANGE, listener);
 };
-
-const fireCustomCSSChange = tag => {
-	return eventProvider.fireEvent(CUSTOM_CSS_CHANGE, tag);
+const fireCustomCSSChange = (tag) => {
+    return getEventProvider().fireEvent(CUSTOM_CSS_CHANGE, tag);
 };
-
-const customCSSFor = {};
-
+const getCustomCSSFor = () => getSharedResource("CustomStyle.customCSSFor", {});
+// Listen to the eventProvider, in case other copies of this CustomStyle module fire this
+// event, and this copy would therefore need to reRender the ui5 webcomponents; but
+// don't reRender if it was this copy that fired the event to begin with.
+let skipRerender;
+attachCustomCSSChange((tag) => {
+    if (!skipRerender) {
+        reRenderAllUI5Elements({ tag });
+    }
+});
 const addCustomCSS = (tag, css) => {
-	if (!customCSSFor[tag]) {
-		customCSSFor[tag] = [];
-	}
-	customCSSFor[tag].push(css);
-	fireCustomCSSChange(tag);
-
-	return reRenderAllUI5Elements({ tag });
+    const customCSSFor = getCustomCSSFor();
+    if (!customCSSFor[tag]) {
+        customCSSFor[tag] = [];
+    }
+    customCSSFor[tag].push(css);
+    skipRerender = true;
+    try {
+        // The event is fired and the attached event listeners are all called synchronously
+        // The skipRerender flag will be used to avoid calling reRenderAllUI5Elements twice when it is this copy
+        // of CustomStyle.js which is firing the `CustomCSSChange` event.
+        fireCustomCSSChange(tag);
+    }
+    finally {
+        skipRerender = false;
+    }
+    return reRenderAllUI5Elements({ tag });
 };
-
-const getCustomCSS = tag => {
-	return customCSSFor[tag] ? customCSSFor[tag].join("") : "";
-};
-
-export {
-	addCustomCSS,
-	getCustomCSS,
-	attachCustomCSSChange,
-	detachCustomCSSChange,
+const getCustomCSS = (tag) => {
+    const customCSSFor = getCustomCSSFor();
+    return customCSSFor[tag] ? customCSSFor[tag].join("") : "";
 };
+export { addCustomCSS, getCustomCSS, attachCustomCSSChange, detachCustomCSSChange, };
+//# sourceMappingURL=CustomStyle.js.map

package/dist/theming/CustomStyle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomStyle.js","sourceRoot":"","sources":["../../src/theming/CustomStyle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,iBAAiB,MAAM,yBAAyB,CAAC;AACxD,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAIhD,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,EAAE,IAAI,aAAa,EAAgB,CAAC,CAAC;AACjH,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAE5C,MAAM,qBAAqB,GAAG,CAAC,QAAiC,EAAE,EAAE;IACnE,gBAAgB,EAAE,CAAC,WAAW,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,QAAiC,EAAE,EAAE;IACnE,gBAAgB,EAAE,CAAC,WAAW,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAAE,EAAE;IAC3C,OAAO,gBAAgB,EAAE,CAAC,SAAS,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAgC,0BAA0B,EAAE,EAAE,CAAC,CAAC;AAE/G,yFAAyF;AACzF,mFAAmF;AACnF,yEAAyE;AACzE,IAAI,YAAqB,CAAC;AAC1B,qBAAqB,CAAC,CAAC,GAAW,EAAE,EAAE;IACrC,IAAI,CAAC,YAAY,EAAE;QAClB,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;KAChC;AACF,CAAC,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,GAAW,EAAE,EAAE;IACjD,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;QACvB,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;KACvB;IACD,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5B,YAAY,GAAG,IAAI,CAAC;IACpB,IAAI;QACH,mFAAmF;QACnF,wGAAwG;QACxG,iEAAiE;QACjE,mBAAmB,CAAC,GAAG,CAAC,CAAC;KACzB;YAAS;QACT,YAAY,GAAG,KAAK,CAAC;KACrB;IAED,OAAO,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,EAAE;IACpC,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5D,CAAC,CAAC;AAEF,OAAO,EACN,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,qBAAqB,GACrB,CAAC","sourcesContent":["import { reRenderAllUI5Elements } from \"../Render.js\";\nimport getSharedResource from \"../getSharedResource.js\";\nimport EventProvider from \"../EventProvider.js\";\n\ntype CustomCSSChangeCallback = (tag: string) => void;\n\nconst getEventProvider = () => getSharedResource(\"CustomStyle.eventProvider\", new EventProvider<string, void>());\nconst CUSTOM_CSS_CHANGE = \"CustomCSSChange\";\n\nconst attachCustomCSSChange = (listener: CustomCSSChangeCallback) => {\n\tgetEventProvider().attachEvent(CUSTOM_CSS_CHANGE, listener);\n};\n\nconst detachCustomCSSChange = (listener: CustomCSSChangeCallback) => {\n\tgetEventProvider().detachEvent(CUSTOM_CSS_CHANGE, listener);\n};\n\nconst fireCustomCSSChange = (tag: string) => {\n\treturn getEventProvider().fireEvent(CUSTOM_CSS_CHANGE, tag);\n};\n\nconst getCustomCSSFor = () => getSharedResource<Record<string, Array<string>>>(\"CustomStyle.customCSSFor\", {});\n\n// Listen to the eventProvider, in case other copies of this CustomStyle module fire this\n// event, and this copy would therefore need to reRender the ui5 webcomponents; but\n// don't reRender if it was this copy that fired the event to begin with.\nlet skipRerender: boolean;\nattachCustomCSSChange((tag: string) => {\n\tif (!skipRerender) {\n\t\treRenderAllUI5Elements({ tag });\n\t}\n});\n\nconst addCustomCSS = (tag: string, css: string) => {\n\tconst customCSSFor = getCustomCSSFor();\n\tif (!customCSSFor[tag]) {\n\t\tcustomCSSFor[tag] = [];\n\t}\n\tcustomCSSFor[tag].push(css);\n\n\tskipRerender = true;\n\ttry {\n\t\t// The event is fired and the attached event listeners are all called synchronously\n\t\t// The skipRerender flag will be used to avoid calling reRenderAllUI5Elements twice when it is this copy\n\t\t// of CustomStyle.js which is firing the `CustomCSSChange` event.\n\t\tfireCustomCSSChange(tag);\n\t} finally {\n\t\tskipRerender = false;\n\t}\n\n\treturn reRenderAllUI5Elements({ tag });\n};\n\nconst getCustomCSS = (tag: string) => {\n\tconst customCSSFor = getCustomCSSFor();\n\treturn customCSSFor[tag] ? customCSSFor[tag].join(\"\") : \"\";\n};\n\nexport {\n\taddCustomCSS,\n\tgetCustomCSS,\n\tattachCustomCSSChange,\n\tdetachCustomCSSChange,\n};\n"]}

package/dist/theming/ThemeLoaded.d.ts

@@ -0,0 +1,5 @@
+type ThemeLoadedCallback = (theme: string) => void;
+declare const attachThemeLoaded: (listener: ThemeLoadedCallback) => void;
+declare const detachThemeLoaded: (listener: ThemeLoadedCallback) => void;
+declare const fireThemeLoaded: (theme: string) => void[];
+export { attachThemeLoaded, detachThemeLoaded, fireThemeLoaded, };