@vanduo-oss/vue 0.1.0

package/dist/plugin.d.ts

@@ -0,0 +1,8 @@
+import type { Plugin } from "vue";
+export declare function loadVanduoRuntime(): Promise<unknown>;
+/**
+ * Vue plugin: `app.use(VanduoVue)`. Triggers the client-only runtime load so
+ * the framework's JS components initialise once the app mounts.
+ */
+export declare const VanduoVue: Plugin;
+export default VanduoVue;

package/dist/utils/sanitizeHtml.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Whitelist HTML sanitizer — dependency-free TS port of the framework's
+ * `helpers.js` sanitizeHtml. Used wherever vd2 must mirror the framework's
+ * raw-HTML behaviour (e.g. `data-tooltip-html`) without inheriting an XSS sink.
+ *
+ * Keeps a small set of inline tags, drops everything else to text, and only
+ * permits http/https/mailto on `<a href>`. Event-handler attributes and unknown
+ * attributes are removed. For stronger guarantees prefer DOMPurify / server-side
+ * sanitization; this is a client-side guard.
+ *
+ * Differs from the framework on one intentional point: `style` is DENIED by
+ * default here (the framework defaults it on). Opt in with `allowStyle: true`.
+ */
+export interface SanitizeOptions {
+    allowSvg?: boolean;
+    /** Permit the inline `style` attribute on kept elements. Default: false. */
+    allowStyle?: boolean;
+}
+export declare function sanitizeHtml(input: string, options?: SanitizeOptions): string;