@verdocs/web-sdk 6.9.10 → 6.9.12

package/dist/cjs/verdocs-contact-picker.cjs.entry.js

@@ -8,7 +8,7 @@ var utils = require('./utils-BtmSHO0F.js');
 require('./index-FVA5WPhX.js');
 require('./Types-DB6U9iuZ.js');
 
-/*! Axios v1.16.1 Copyright (c) 2026 Matt Zabriskie and contributors */
+/*! Axios v1.17.0 Copyright (c) 2026 Matt Zabriskie and contributors */
 
 var axios_1;
 var hasRequiredAxios;
@@ -440,7 +440,9 @@ function requireAxios () {
 	      return;
 	    }
 
-	    const targetKey = (caseless && findKey(result, key)) || key;
+	    // findKey lowercases the key, so caseless lookup only applies to strings —
+	    // symbol keys are identity-matched.
+	    const targetKey = (caseless && typeof key === 'string' && findKey(result, key)) || key;
 	    // Read via own-prop only — a bare `result[targetKey]` walks the prototype
 	    // chain, so a polluted Object.prototype value could surface here and get
 	    // copied into the merged result.
@@ -457,7 +459,24 @@ function requireAxios () {
 	  };
 
 	  for (let i = 0, l = objs.length; i < l; i++) {
-	    objs[i] && forEach(objs[i], assignValue);
+	    const source = objs[i];
+	    if (!source || isBuffer(source)) {
+	      continue;
+	    }
+
+	    forEach(source, assignValue);
+
+	    if (typeof source !== 'object' || isArray(source)) {
+	      continue;
+	    }
+
+	    const symbols = Object.getOwnPropertySymbols(source);
+	    for (let j = 0; j < symbols.length; j++) {
+	      const symbol = symbols[j];
+	      if (propertyIsEnumerable.call(source, symbol)) {
+	        assignValue(source[symbol], symbol);
+	      }
+	    }
 	  }
 	  return result;
 	}
@@ -686,6 +705,8 @@ function requireAxios () {
 	    hasOwnProperty.call(obj, prop)
 	)(Object.prototype);
 
+	const { propertyIsEnumerable } = Object.prototype;
+
 	/**
 	 * Determine if a value is a RegExp object
 	 *
@@ -1167,7 +1188,7 @@ function requireAxios () {
 	      const lHeader = normalizeHeader(_header);
 
 	      if (!lHeader) {
-	        throw new Error('header name must be a non-empty string');
+	        return;
 	      }
 
 	      const key = utils$1.findKey(self, lHeader);
@@ -1195,7 +1216,7 @@ function requireAxios () {
 	        key;
 	      for (const entry of header) {
 	        if (!utils$1.isArray(entry)) {
-	          throw TypeError('Object iterator must return a key-value pair');
+	          throw new TypeError('Object iterator must return a key-value pair');
 	        }
 
 	        obj[(key = entry[0])] = (dest = obj[key])
@@ -1810,7 +1831,7 @@ function requireAxios () {
 	    }
 
 	    if (stack.indexOf(value) !== -1) {
-	      throw Error('Circular reference detected in ' + path.join('.'));
+	      throw new Error('Circular reference detected in ' + path.join('.'));
 	    }
 
 	    stack.push(value);
@@ -2027,6 +2048,7 @@ function requireAxios () {
 	  forcedJSONParsing: true,
 	  clarifyTimeoutError: false,
 	  legacyInterceptorReqResOrdering: true,
+	  advertiseZstdAcceptEncoding: false,
 	};
 
 	var URLSearchParams$1 = typeof URLSearchParams !== 'undefined' ? URLSearchParams : AxiosURLSearchParams;
@@ -2861,12 +2883,12 @@ function requireAxios () {
 	 *
 	 * @returns {string} UTF-8 bytes as a Latin-1 string
 	 */
-	const encodeUTF8 = (str) =>
+	const encodeUTF8$1 = (str) =>
 	  encodeURIComponent(str).replace(/%([0-9A-F]{2})/gi, (_, hex) =>
 	    String.fromCharCode(parseInt(hex, 16))
 	  );
 
-	var resolveConfig = (config) => {
+	function resolveConfig(config) {
 	  const newConfig = mergeConfig({}, config);
 
 	  // Read only own properties to prevent prototype pollution gadgets
@@ -2887,8 +2909,8 @@ function requireAxios () {
 
 	  newConfig.url = buildURL(
 	    buildFullPath(baseURL, url, allowAbsoluteUrls),
-	    config.params,
-	    config.paramsSerializer
+	    own('params'),
+	    own('paramsSerializer')
 	  );
 
 	  // HTTP basic authentication
@@ -2896,13 +2918,17 @@ function requireAxios () {
 	    headers.set(
 	      'Authorization',
 	      'Basic ' +
-	        btoa((auth.username || '') + ':' + (auth.password ? encodeUTF8(auth.password) : ''))
+	        btoa((auth.username || '') + ':' + (auth.password ? encodeUTF8$1(auth.password) : ''))
 	    );
 	  }
 
 	  if (utils$1.isFormData(data)) {
-	    if (platform.hasStandardBrowserEnv || platform.hasStandardBrowserWebWorkerEnv) {
-	      headers.setContentType(undefined); // browser handles it
+	    if (
+	      platform.hasStandardBrowserEnv ||
+	      platform.hasStandardBrowserWebWorkerEnv ||
+	      utils$1.isReactNative(data)
+	    ) {
+	      headers.setContentType(undefined); // browser/web worker/RN handles it
 	    } else if (utils$1.isFunction(data.getHeaders)) {
 	      // Node.js FormData (like form-data package)
 	      setFormDataHeaders(headers, data.getHeaders(), own('formDataHeaderPolicy'));
@@ -2934,7 +2960,7 @@ function requireAxios () {
 	  }
 
 	  return newConfig;
-	};
+	}
 
 	const isXHRAdapterSupported = typeof XMLHttpRequest !== 'undefined';
 
@@ -3395,12 +3421,41 @@ function requireAxios () {
 	  return bytes;
 	}
 
-	const VERSION = "1.16.1";
+	const VERSION = "1.17.0";
 
 	const DEFAULT_CHUNK_SIZE = 64 * 1024;
 
 	const { isFunction } = utils$1;
 
+	/**
+	 * Encode a UTF-8 string to a Latin-1 byte string for use with btoa().
+	 * This is a modern replacement for the deprecated unescape(encodeURIComponent(str)) pattern.
+	 *
+	 * @param {string} str The string to encode
+	 *
+	 * @returns {string} UTF-8 bytes as a Latin-1 string
+	 */
+	const encodeUTF8 = (str) =>
+	  encodeURIComponent(str).replace(/%([0-9A-F]{2})/gi, (_, hex) =>
+	    String.fromCharCode(parseInt(hex, 16))
+	  );
+
+	// Node's WHATWG URL parser returns `username` and `password` percent-encoded.
+	// Decode before composing the `auth` option so credentials such as
+	// `my%40email.com:pass` are sent as `my@email.com:pass`. Falls back to the
+	// original value for malformed input so a bad encoding never throws.
+	const decodeURIComponentSafe = (value) => {
+	  if (!utils$1.isString(value)) {
+	    return value;
+	  }
+
+	  try {
+	    return decodeURIComponent(value);
+	  } catch (error) {
+	    return value;
+	  }
+	};
+
 	const test = (fn, ...args) => {
 	  try {
 	    return !!fn(...args);
@@ -3409,6 +3464,15 @@ function requireAxios () {
 	  }
 	};
 
+	const maybeWithAuthCredentials = (url) => {
+	  const protocolIndex = url.indexOf('://');
+	  let urlToCheck = url;
+	  if (protocolIndex !== -1) {
+	    urlToCheck = urlToCheck.slice(protocolIndex + 3);
+	  }
+	  return urlToCheck.includes('@') || urlToCheck.includes(':');
+	};
+
 	const factory = (env) => {
 	  const globalObject =
 	    utils$1.global !== undefined && utils$1.global !== null
@@ -3556,6 +3620,7 @@ function requireAxios () {
 
 	    const hasMaxContentLength = utils$1.isNumber(maxContentLength) && maxContentLength > -1;
 	    const hasMaxBodyLength = utils$1.isNumber(maxBodyLength) && maxBodyLength > -1;
+	    const own = (key) => (utils$1.hasOwnProp(config, key) ? config[key] : undefined);
 
 	    let _fetch = envFetch || fetch;
 
@@ -3578,6 +3643,46 @@ function requireAxios () {
 	    let requestContentLength;
 
 	    try {
+	      // HTTP basic authentication
+	      let auth = undefined;
+	      const configAuth = own('auth');
+
+	      if (configAuth) {
+	        const username = configAuth.username || '';
+	        const password = configAuth.password || '';
+	        auth = {
+	          username,
+	          password
+	        };
+	      }
+
+	      if (maybeWithAuthCredentials(url)) {
+	        const parsedURL = new URL(url, platform.origin);
+
+	        if (!auth && (parsedURL.username || parsedURL.password)) {
+	          const urlUsername = decodeURIComponentSafe(parsedURL.username);
+	          const urlPassword = decodeURIComponentSafe(parsedURL.password);
+	          auth = {
+	            username: urlUsername,
+	            password: urlPassword
+	          };
+	        }
+
+	        if (parsedURL.username || parsedURL.password) {
+	          parsedURL.username = '';
+	          parsedURL.password = '';
+	          url = parsedURL.href;
+	        }
+	      }
+
+	      if (auth) {
+	        headers.delete('authorization');
+	        headers.set(
+	          'Authorization',
+	          'Basic ' + btoa(encodeUTF8((auth.username || '') + ':' + (auth.password || '')))
+	        );
+	      }
+
 	      // Enforce maxContentLength for data: URLs up-front so we never materialize
 	      // an oversized payload. The HTTP adapter applies the same check (see http.js
 	      // "if (protocol === 'data:')" branch).
@@ -4259,6 +4364,7 @@ function requireAxios () {
 	          forcedJSONParsing: validators.transitional(validators.boolean),
 	          clarifyTimeoutError: validators.transitional(validators.boolean),
 	          legacyInterceptorReqResOrdering: validators.transitional(validators.boolean),
+	          advertiseZstdAcceptEncoding: validators.transitional(validators.boolean),
 	        },
 	        false
 	      );