@vaadin/charts 23.6.5 → 23.6.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vaadin/charts",
-  "version": "23.6.5",
+  "version": "23.6.7",
   "publishConfig": {
     "access": "public"
   },
@@ -36,10 +36,10 @@
   ],
   "dependencies": {
     "@polymer/polymer": "^3.0.0",
-    "@vaadin/component-base": "~23.6.5",
-    "@vaadin/vaadin-lumo-styles": "~23.6.5",
-    "@vaadin/vaadin-material-styles": "~23.6.5",
-    "@vaadin/vaadin-themable-mixin": "~23.6.5",
+    "@vaadin/component-base": "~23.6.7",
+    "@vaadin/vaadin-lumo-styles": "~23.6.7",
+    "@vaadin/vaadin-material-styles": "~23.6.7",
+    "@vaadin/vaadin-themable-mixin": "~23.6.7",
     "highcharts": "9.2.2"
   },
   "devDependencies": {
@@ -52,5 +52,5 @@
     "web-types.json",
     "web-types.lit.json"
   ],
-  "gitHead": "d55853f02f62ce8a506a3ffd4f4a91dfb5cc66a2"
+  "gitHead": "add0b5d410d6f749c901f7b86502cc6b9debf786"
 }

package/src/highcharts-patches.js

@@ -0,0 +1,68 @@
+/**
+ * @license
+ * Copyright (c) 2000 - 2024 Vaadin Ltd.
+ *
+ * This program is available under Vaadin Commercial License and Service Terms.
+ *
+ *
+ * See https://vaadin.com/commercial-license-and-service-terms for the full
+ * license.
+ */
+import Highcharts from 'highcharts/es-modules/masters/highstock.src.js';
+
+// TODO: Remove when upgrading Highcharts, see vaadin/web-components#12213
+
+const { Chart, Point } = Highcharts;
+
+const RESERVED_KEYS = ['__proto__', 'constructor'];
+
+const isReservedKey = (key) => RESERVED_KEYS.includes(key);
+
+const UNSUPPORTED_SCHEMES = ['javascript', 'vbscript', 'data'];
+
+const isUnsupportedLink = (value) => {
+  if (typeof value !== 'string') {
+    return true;
+  }
+  try {
+    // The URL parser normalizes case and whitespace the same way as navigation does
+    return UNSUPPORTED_SCHEMES.includes(new URL(value, document.baseURI).protocol.slice(0, -1));
+  } catch (_) {
+    return true;
+  }
+};
+
+/* eslint-disable no-invalid-this, prefer-arrow-callback */
+
+// Skip reserved option names in point objects
+Highcharts.wrap(Point.prototype, 'optionsToObject', function (proceed, options) {
+  if (
+    options &&
+    typeof options === 'object' &&
+    !Array.isArray(options) &&
+    RESERVED_KEYS.some((key) => Object.prototype.hasOwnProperty.call(options, key))
+  ) {
+    options = Object.fromEntries(Object.entries(options).filter(([key]) => !isReservedKey(key)));
+  }
+  return proceed.call(this, options);
+});
+
+// Skip reserved path segments in point keys
+Highcharts.wrap(Point.prototype, 'setNestedProperty', function (proceed, object, value, key) {
+  if (String(key).split('.').some(isReservedKey)) {
+    return object;
+  }
+  return proceed.call(this, object, value, key);
+});
+
+// Ignore credits links that use an unsupported URL scheme
+Highcharts.wrap(Chart.prototype, 'addCredits', function (proceed, credits) {
+  const options = Highcharts.merge(true, this.options.credits, credits);
+  if (options?.href && isUnsupportedLink(options.href)) {
+    Highcharts.error(33, false, this, { 'Invalid attribute in config': 'credits.href' });
+    delete options.href;
+  }
+  return proceed.call(this, options);
+});
+
+/* eslint-enable no-invalid-this, prefer-arrow-callback */

package/src/vaadin-chart.js

@@ -25,6 +25,7 @@ import 'highcharts/es-modules/masters/modules/timeline.src.js';
 import 'highcharts/es-modules/masters/modules/organization.src.js';
 import 'highcharts/es-modules/masters/modules/xrange.src.js';
 import 'highcharts/es-modules/masters/modules/bullet.src.js';
+import './highcharts-patches.js';
 import { FlattenedNodesObserver } from '@polymer/polymer/lib/utils/flattened-nodes-observer.js';
 import { beforeNextRender } from '@polymer/polymer/lib/utils/render-status.js';
 import { html, PolymerElement } from '@polymer/polymer/polymer-element.js';

package/web-types.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/web-types",
   "name": "@vaadin/charts",
-  "version": "23.6.5",
+  "version": "23.6.7",
   "description-markup": "markdown",
   "contributions": {
     "html": {

package/web-types.lit.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/web-types",
   "name": "@vaadin/charts",
-  "version": "23.6.5",
+  "version": "23.6.7",
   "description-markup": "markdown",
   "framework": "lit",
   "framework-config": {