@umbraco-cms/backoffice 14.3.0 → 14.3.1

package/dist-cms/packages/core/utils/sanitize/sanitize-html.function.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Sanitize a HTML string by removing any potentially harmful content such as scripts.
+ * @param {string} html The HTML string to sanitize.
+ * @returns The sanitized HTML string.
+ */
+export declare function sanitizeHTML(html: string): string;

package/dist-cms/packages/core/utils/sanitize/sanitize-html.function.js

@@ -0,0 +1,9 @@
+import { DOMPurify } from '../../../../external/dompurify/index.js';
+/**
+ * Sanitize a HTML string by removing any potentially harmful content such as scripts.
+ * @param {string} html The HTML string to sanitize.
+ * @returns The sanitized HTML string.
+ */
+export function sanitizeHTML(html) {
+    return DOMPurify.sanitize(html);
+}

package/dist-cms/packages/dictionary/workspace/views/workspace-view-dictionary-editor.element.js

@@ -6,11 +6,15 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 };
 import { UMB_DICTIONARY_WORKSPACE_CONTEXT } from '../dictionary-workspace.context-token.js';
 import { UUITextareaEvent } from '../../../../external/uui/index.js';
-import { css, html, customElement, state, repeat, ifDefined, unsafeHTML } from '../../../../external/lit/index.js';
+import { css, html, customElement, state, repeat } from '../../../../external/lit/index.js';
 import { UmbLitElement } from '../../../core/lit-element/index.js';
 import { UmbLanguageCollectionRepository } from '../../../language/index.js';
 import { UMB_CURRENT_USER_CONTEXT } from '../../../user/current-user/index.js';
+import { sanitizeHTML } from '../../../core/utils/index.js';
 let UmbWorkspaceViewDictionaryEditorElement = class UmbWorkspaceViewDictionaryEditorElement extends UmbLitElement {
+    get #dictionaryName() {
+        return typeof this._dictionary?.name !== 'undefined' ? sanitizeHTML(this._dictionary.name) : '...';
+    }
     #languageCollectionRepository;
     #workspaceContext;
     #currentUserContext;
@@ -46,7 +50,7 @@ let UmbWorkspaceViewDictionaryEditorElement = class UmbWorkspaceViewDictionaryEd
         }
     }
     #observeDictionary() {
-        this.observe(this.#workspaceContext.dictionary, (dictionary) => {
+        this.observe(this.#workspaceContext?.dictionary, (dictionary) => {
             this._dictionary = dictionary;
         });
     }
@@ -64,13 +68,13 @@ let UmbWorkspaceViewDictionaryEditorElement = class UmbWorkspaceViewDictionaryEd
             const target = e.composedPath()[0];
             const translation = target.value.toString();
             const isoCode = target.getAttribute('name');
-            this.#workspaceContext.setPropertyValue(isoCode, translation);
+            this.#workspaceContext?.setPropertyValue(isoCode, translation);
         }
     }
     render() {
         return html `
 			<uui-box>
-				${unsafeHTML(this.localize.term('dictionaryItem_description', this._dictionary?.name || '&#8203;'))}
+				${this.localize.term('dictionaryItem_description', this.#dictionaryName)}
 				${repeat(this._languages, (item) => item.unique, (item) => this.#renderTranslation(item))}
 			</uui-box>
 		`;
@@ -85,7 +89,7 @@ let UmbWorkspaceViewDictionaryEditorElement = class UmbWorkspaceViewDictionaryEd
 				name=${language.unique}
 				label="translation"
 				@change=${this.#onTextareaChange}
-				value=${ifDefined(translation?.translation)}
+				.value=${translation?.translation ?? ''}
 				?readonly=${this.#isReadOnly(language.unique)}></uui-textarea>
 		</umb-property-layout>`;
     }

package/dist-cms/packages/markdown-editor/components/input-markdown-editor/input-markdown.element.js

@@ -9,7 +9,6 @@ import { createExtensionApi } from '../../../../libs/extension-api/index.js';
 import { marked } from '../../../../external/marked/index.js';
 import { monaco } from '../../../../external/monaco-editor/index.js';
 import { umbExtensionsRegistry } from '../../../core/extension-registry/index.js';
-import { DOMPurify } from '../../../../external/dompurify/index.js';
 import { UmbChangeEvent } from '../../../core/event/index.js';
 import { UmbLitElement } from '../../../core/lit-element/index.js';
 import { UmbTextStyles } from '../../../core/style/index.js';
@@ -17,6 +16,7 @@ import { UMB_MODAL_MANAGER_CONTEXT } from '../../../core/modal/index.js';
 import { UMB_MEDIA_PICKER_MODAL, UmbMediaUrlRepository } from '../../../media/media/index.js';
 import { UmbCodeEditorLoadedEvent } from '../../../code-editor/index.js';
 import { UmbFormControlMixin } from '../../../core/validation/index.js';
+import { sanitizeHTML } from '../../../core/utils/index.js';
 const elementName = 'umb-input-markdown';
 /**
  * @element umb-input-markdown
@@ -519,7 +519,7 @@ let UmbInputMarkdownElement = class UmbInputMarkdownElement extends UmbFormContr
         if (!this.preview || !this.value)
             return;
         const markdownAsHtml = marked.parse(this.value);
-        const sanitizedHtml = markdownAsHtml ? DOMPurify.sanitize(markdownAsHtml) : '';
+        const sanitizedHtml = markdownAsHtml ? sanitizeHTML(markdownAsHtml) : '';
         return html `<uui-scroll-container id="preview">${unsafeHTML(sanitizedHtml)}</uui-scroll-container>`;
     }
     static { this.styles = [