@useinsider/guido 3.9.1-beta.22c4bcc → 3.9.1-beta.23867f9

package/dist/composables/useStripo.js

@@ -10,17 +10,17 @@ import { en as h } from "../config/i18n/en/index.js";
 import { ToasterTypeOptions as L } from "../enums/toaster.js";
 import { useStripoApi as $ } from "../services/stripoApi.js";
 import G from "../static/styles/customEditorStyle.css.js";
-import { useEditorStore as E } from "../stores/editor.js";
+import { useEditorStore as C } from "../stores/editor.js";
 import { dynamicContentToMergeTags as J } from "../utils/genericUtil.js";
 import N from "../package.json.js";
-const ce = (C, l) => {
-  const { features: c, template: w, isFeatureEnabled: u } = R(), { handleError: m, showToaster: b } = H(), { getToken: k, getCustomFonts: T, getSyncModulesStatus: B } = $(), { handleEvent: F } = q(), { getStripoBlocksConfig: v } = U(), V = async (s, r = [], i = !1) => {
+const ce = (E, l) => {
+  const { features: c, template: w, isFeatureEnabled: u } = R(), { handleError: m, showToaster: b } = H(), { getToken: T, getCustomFonts: k, getSyncModulesStatus: B } = $(), { handleEvent: F } = q(), { getStripoBlocksConfig: v } = U(), V = async (s, r = [], i = !1) => {
     var g, S, y;
-    const e = E(), { html: p, css: a } = s, { baseBlocks: o, extensions: d } = await v(), f = ((g = c.value) == null ? void 0 : g.displayConditions) ?? !0, A = ((S = c.value) == null ? void 0 : S.modulesDisabled) ?? !1, M = ((y = w.value) == null ? void 0 : y.forceRecreate) ?? !1;
+    const e = C(), { html: p, css: a } = s, { baseBlocks: t, extensions: d } = await v(), f = ((g = c.value) == null ? void 0 : g.displayConditions) ?? !0, A = ((S = c.value) == null ? void 0 : S.modulesDisabled) ?? !1, M = ((y = w.value) == null ? void 0 : y.forceRecreate) ?? !1;
     await window.UIEditor.initEditor(
       document.querySelector("#guido-editor"),
       {
-        metadata: C,
+        metadata: E,
         html: p,
         css: a,
         forceRecreate: M,
@@ -42,13 +42,12 @@ const ce = (C, l) => {
         messageSettingsEnabled: !0,
         displayGmailAnnotations: !0,
         displayHiddenPreheader: !1,
-        keepModuleStylesEnabled: !0,
         displayTitle: !1,
         displayUTM: !1,
         selectElementAfterDrop: !0,
         sameFontSizeForOutlook: !0,
         allowedScriptSourceDomains: "https://email-static.useinsider.com https://edge.fullstory.com https://rs.fullstory.com",
-        ...o ? { baseBlocks: o } : {},
+        ...t ? { baseBlocks: t } : {},
         editorFonts: {
           showDefaultStandardFonts: !0,
           showDefaultNotStandardFonts: !0,
@@ -62,32 +61,32 @@ const ce = (C, l) => {
             )
           }
         ],
-        async onTokenRefreshRequest(t) {
+        async onTokenRefreshRequest(o) {
           try {
-            const n = await k();
-            t(n);
+            const n = await T();
+            o(n);
           } catch (n) {
             m(n, "Failed to refresh token");
           }
         },
         onTemplateLoaded() {
           try {
-            const { importCss: t } = x(), { activateCustomViewStyles: n, updateTimerInClonedTemplate: P } = I(), { injectFullStory: D } = O();
-            t(), n(), D(), P(), l.onReady(), e.isStripoInitialized = !0, e.loadingStatus = !1, setTimeout(() => {
+            const { importCss: o } = x(), { activateCustomViewStyles: n, updateTimerInClonedTemplate: P } = I(), { injectFullStory: D } = O();
+            o(), n(), D(), P(), l.onReady(), e.isStripoInitialized = !0, e.loadingStatus = !1, setTimeout(() => {
               e.hasChanges = !1;
             }, 1e3);
-          } catch (t) {
-            m(t, "Failed to load custom interface appearance");
+          } catch (o) {
+            m(o, "Failed to load custom interface appearance");
           }
         },
-        onCodeEditorVisibilityChanged(t) {
-          e.isCodeEditorOpen = t;
+        onCodeEditorVisibilityChanged(o) {
+          e.isCodeEditorOpen = o;
         },
-        onEditorVisualModeChanged(t) {
-          e.editorVisualMode = t.toLowerCase();
+        onEditorVisualModeChanged(o) {
+          e.editorVisualMode = o.toLowerCase();
         },
-        onVersionHistoryVisibilityChanged(t) {
-          e.isVersionHistoryOpen = t;
+        onVersionHistoryVisibilityChanged(o) {
+          e.isVersionHistoryOpen = o;
         },
         onDataChanged() {
           e.hasChanges = !0;
@@ -108,19 +107,19 @@ const ce = (C, l) => {
       Promise.resolve(s()).then(r, i);
       return;
     }
-    const e = N.guido, a = `https://email-static.useinsider.com/guido/${(d = e == null ? void 0 : e.stripo) == null ? void 0 : d.version}/UIEditor.js`, o = document.createElement("script");
-    o.id = "UiEditorScript", o.type = "module", o.src = a, o.onload = () => {
+    const e = N.guido, a = `https://email-static.useinsider.com/guido/${(d = e == null ? void 0 : e.stripo) == null ? void 0 : d.version}/UIEditor.js`, t = document.createElement("script");
+    t.id = "UiEditorScript", t.type = "module", t.src = a, t.onload = () => {
       Promise.resolve(s()).then(r, i);
-    }, o.onerror = () => {
+    }, t.onerror = () => {
       i(new Error(`Failed to load Stripo UIEditor script from S3: ${a}`));
-    }, document.body.appendChild(o);
+    }, document.body.appendChild(t);
   });
   return { initPlugin: async (s) => {
-    const r = E();
+    const r = C();
     try {
       await _(async () => {
         const [i, e] = await Promise.all([
-          T(),
+          k(),
           B()
         ]);
         r.syncModulesEnabled = e, await V(s, i, e);

package/dist/config/compiler/htmlCompilerRules.js

@@ -122,10 +122,10 @@ const d = [
       ], i = /<head>([\S\s]*)<\/head>/, o = new RegExp(i);
       if (!e.match(o))
         return e;
-      let s = e;
-      return t.forEach((r) => {
-        s = s.replace("</head>", `${r}</head>`);
-      }), s;
+      let r = e;
+      return t.forEach((s) => {
+        r = r.replace("</head>", `${s}</head>`);
+      }), r;
     },
     priority: 30
   },
@@ -156,9 +156,9 @@ const d = [
     type: "custom",
     processor: (e) => {
       const t = (i) => i.toString(16).padStart(2, "0");
-      return e.replace(/rgb\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})\s*\)/gi, (i, o, n, s) => {
-        const [r, a, c] = [Number(o), Number(n), Number(s)];
-        return r > 255 || a > 255 || c > 255 ? i : `#${t(r)}${t(a)}${t(c)}`;
+      return e.replace(/rgb\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})\s*\)/gi, (i, o, n, r) => {
+        const [s, a, c] = [Number(o), Number(n), Number(r)];
+        return s > 255 || a > 255 || c > 255 ? i : `#${t(s)}${t(a)}${t(c)}`;
       }).replace(/#([0-9a-f])\1([0-9a-f])\2([0-9a-f])\3\b/gi, "#$1$2$3");
     },
     priority: 44
@@ -174,6 +174,29 @@ const d = [
     replacement: "",
     flags: "g",
     priority: 45
+  },
+  {
+    id: "remove-script-tags",
+    // SD-145051: parity with HB HtmlCleaner.removeUnsafeHtmlTags — strip <script> from
+    // compiled email. Priority 50 runs after the &lt;/&gt; unescape rules (13/14) so
+    // post-unescape tags are still caught. Do NOT add to AMP_SAFE_RULE_IDS (AMP needs <script>).
+    description: "Strip <script>…<\/script> tags from compiled email",
+    type: "regex",
+    pattern: "<script[^>]*>.*?<\/script>",
+    replacement: "",
+    flags: "gis",
+    priority: 50
+  },
+  {
+    id: "remove-iframe-tags",
+    // SD-145051: parity with HB HtmlCleaner.removeUnsafeHtmlTags — strip <iframe>.
+    // Do NOT add this id to AMP_SAFE_RULE_IDS.
+    description: "Strip <iframe>…</iframe> tags from compiled email",
+    type: "regex",
+    pattern: "<iframe[^>]*>.*?</iframe>",
+    replacement: "",
+    flags: "gis",
+    priority: 51
   }
 ];
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@useinsider/guido",
-  "version": "3.9.1-beta.22c4bcc",
+  "version": "3.9.1-beta.23867f9",
   "description": "Guido is a Vue + TypeScript wrapper for Email Plugin. Easily embed the email editor in your Vue applications.",
   "main": "./dist/guido.umd.cjs",
   "module": "./dist/library.js",