@vue/compiler-sfc 3.5.41 → 3.5.43

package/dist/compiler-sfc.cjs.js

@@ -1,5 +1,5 @@
 /**
-* @vue/compiler-sfc v3.5.41
+* @vue/compiler-sfc v3.5.43
 * (c) 2018-present Yuxi (Evan) You and Vue contributors
 * @license MIT
 **/
@@ -157,7 +157,7 @@ function parseCssVars(sfc) {
   const vars = [];
   sfc.styles.forEach((style) => {
     let match;
-    const content = style.content.replace(/\/\*([\s\S]*?)\*\/|\/\/.*/g, "");
+    const content = stripComments$2(style.content);
     while (match = vBindRE.exec(content)) {
       const start = match.index + match[0].length;
       const end = lexBinding(content, start);
@@ -171,6 +171,80 @@ function parseCssVars(sfc) {
   });
   return vars;
 }
+const cssSpecialRE = /[/"'\\(]/g;
+function stripComments$2(content) {
+  const len = content.length;
+  let out = "";
+  let last = 0;
+  let i = 0;
+  cssSpecialRE.lastIndex = 0;
+  while (cssSpecialRE.test(content)) {
+    i = cssSpecialRE.lastIndex - 1;
+    const c = content.charCodeAt(i);
+    if (c === 47) {
+      const next = content.charCodeAt(i + 1);
+      if (next === 42 /* Asterisk */) {
+        out += content.slice(last, i);
+        const end = content.indexOf("*/", i + 2);
+        i = last = end === -1 ? len : end + 2;
+      } else if (next === 47) {
+        out += content.slice(last, i);
+        i += 2;
+        while (i < len && !isNewline(content.charCodeAt(i))) i++;
+        last = i;
+      } else {
+        i++;
+      }
+    } else if (c === 34 || c === 39) {
+      i = skipString(content, i + 1, c);
+    } else if (c === 92 /* Backslash */) {
+      i += 2;
+    } else if (isUrlFunction(content, i)) {
+      i = skipUrl(content, i + 1);
+    } else {
+      i++;
+    }
+    cssSpecialRE.lastIndex = i;
+  }
+  return last === 0 ? content : out + content.slice(last);
+}
+function skipString(s, i, quote) {
+  while (i < s.length) {
+    const c = s.charCodeAt(i);
+    if (c === quote) return i + 1;
+    if (isNewline(c)) return i;
+    if (c === 92 /* Backslash */) {
+      i += s.charCodeAt(i + 1) === 13 && s.charCodeAt(i + 2) === 10 ? 3 : 2;
+    } else {
+      i++;
+    }
+  }
+  return i;
+}
+function isUrlFunction(s, i) {
+  const prev = s.charCodeAt(i - 4);
+  return (s.charCodeAt(i - 3) | 32) === 117 /* LowerU */ && (s.charCodeAt(i - 2) | 32) === 114 /* LowerR */ && (s.charCodeAt(i - 1) | 32) === 108 /* LowerL */ && prev !== 92 /* Backslash */ && !isIdentChar(prev);
+}
+function skipUrl(s, i) {
+  while (isWhitespace(s.charCodeAt(i))) i++;
+  const c = s.charCodeAt(i);
+  if (c === 34 || c === 39) return i;
+  while (i < s.length) {
+    const c2 = s.charCodeAt(i);
+    if (c2 === 41 /* RightParen */) return i + 1;
+    i += c2 === 92 /* Backslash */ ? 2 : 1;
+  }
+  return i;
+}
+function isIdentChar(c) {
+  return c >= 97 && c <= 122 || c >= 65 && c <= 90 || c >= 48 && c <= 57 || c === 45 || c === 95 /* Underscore */ || c >= 128;
+}
+function isNewline(c) {
+  return c === 10 || c === 13;
+}
+function isWhitespace(c) {
+  return c === 32 || c === 9 || c === 12 || isNewline(c);
+}
 function lexBinding(content, start) {
   let state = 0 /* inParens */;
   let parenDepth = 0;
@@ -250,12 +324,7 @@ function genNormalScriptCssVarsCode(cssVars, bindings, id, isProd, defaultVar) {
   return `
 import { ${CSS_VARS_HELPER} as _${CSS_VARS_HELPER} } from 'vue'
 const __injectCSSVars__ = () => {
-${genCssVarsCode(
-    cssVars,
-    bindings,
-    id,
-    isProd
-  )}}
+${genCssVarsCode(cssVars, bindings, id, isProd)}}
 const __setup__ = ${defaultVar}.setup
 ${defaultVar}.setup = __setup__
   ? (props, ctx) => { __injectCSSVars__();return __setup__(props, ctx) }
@@ -7093,8 +7162,9 @@ function requireParser$2 () {
 	    return indexes;
 	}
 	function uniqs() {
-	    var list = Array.prototype.concat.apply([], arguments);
-	    return list.filter(function (item, i) { return i === list.indexOf(item); });
+	    // A Set keeps the first-occurrence order the previous filter/indexOf pass
+	    // produced, without its quadratic cost on long index lists.
+	    return Array.from(new Set(Array.prototype.concat.apply([], arguments)));
 	}
 	var Parser = /** @class */ (function () {
 	    function Parser(rule, options) {
@@ -7139,6 +7209,11 @@ function requireParser$2 () {
 	            attr.push(this.currToken);
 	            this.position++;
 	        }
+	        if (!this.currToken) {
+	            // Ran off the end of the token stream: the attribute was never closed.
+	            // Point at the opening bracket, which is where the author needs to look.
+	            return this.expected("closing square bracket", startingToken[tokenize_1.FIELDS.START_POS]);
+	        }
 	        if (this.currToken[tokenize_1.FIELDS.TYPE] !== tokens.closeSquare) {
 	            return this.expected("closing square bracket", this.currToken[tokenize_1.FIELDS.START_POS]);
 	        }
@@ -7199,7 +7274,7 @@ function requireParser$2 () {
 	                        }
 	                        if (commentBefore) {
 	                            (0, util_1.ensureObject)(node, "raws", "spaces", "attribute");
-	                            node.raws.spaces.attribute.before = spaceBefore;
+	                            node.raws.spaces.attribute.before = commentBefore;
 	                            commentBefore = "";
 	                        }
 	                        node.namespace = (node.namespace || "") + content;
@@ -7623,7 +7698,21 @@ function requireParser$2 () {
 	        return this.error("Unexpected '|'.", this.currToken[tokenize_1.FIELDS.START_POS]);
 	    };
 	    Parser.prototype.namespace = function () {
-	        var before = (this.prevToken && this.content(this.prevToken)) || true;
+	        var prev = this.prevToken;
+	        // Only treat the previous token as a namespace prefix when it can actually
+	        // be one (a type/word or the universal `*`). A comment, comma, combinator
+	        // or whitespace before `|` means an empty namespace, not a prefix.
+	        var before = prev &&
+	            (prev[tokenize_1.FIELDS.TYPE] === tokens.word ||
+	                prev[tokenize_1.FIELDS.TYPE] === tokens.asterisk ||
+	                prev[tokenize_1.FIELDS.TYPE] === tokens.ampersand)
+	            ? this.content(prev)
+	            : true;
+	        if (!this.nextToken) {
+	            // A trailing `|` with nothing after it. `unexpectedPipe` reports against
+	            // `currToken`, which is the pipe itself and always present here.
+	            return this.unexpectedPipe();
+	        }
 	        if (this.nextToken[tokenize_1.FIELDS.TYPE] === tokens.word) {
 	            this.position++;
 	            return this.word(before);
@@ -7653,6 +7742,7 @@ function requireParser$2 () {
 	    Parser.prototype.parentheses = function () {
 	        var last = this.current.last;
 	        var unbalanced = 1;
+	        var openingToken = this.currToken;
 	        this.position++;
 	        if (last && last.type === types.PSEUDO) {
 	            var selector = new selector_1.default({
@@ -7722,7 +7812,9 @@ function requireParser$2 () {
 	            }
 	        }
 	        if (unbalanced) {
-	            return this.expected("closing parenthesis", this.currToken[tokenize_1.FIELDS.START_POS]);
+	            // `currToken` is undefined when the token stream ran out before the
+	            // parenthesis was closed; fall back to the opening one.
+	            return this.expected("closing parenthesis", (this.currToken || openingToken)[tokenize_1.FIELDS.START_POS]);
 	        }
 	    };
 	    Parser.prototype.pseudo = function () {
@@ -7827,8 +7919,14 @@ function requireParser$2 () {
 	        // Eliminate Sass interpolations from the list of id indexes
 	        var interpolations = indexesOf(word, "#{");
 	        if (interpolations.length) {
-	            hasId = hasId.filter(function (hashIndex) { return !~interpolations.indexOf(hashIndex); });
+	            var interpolationIndexes_1 = new Set(interpolations);
+	            hasId = hasId.filter(function (hashIndex) { return !interpolationIndexes_1.has(hashIndex); });
 	        }
+	        // Membership tests are built once. Scanning the arrays per index would make
+	        // a flat selector such as `.a.a.a...` quadratic in its number of class/id
+	        // indexes, which is enough to pin a CPU core on attacker-supplied input.
+	        var classIndexes = new Set(hasClass);
+	        var idIndexes = new Set(hasId);
 	        var indices = (0, sortAscending_1.default)(uniqs(__spreadArray(__spreadArray([0], __read(hasClass), false), __read(hasId), false)));
 	        indices.forEach(function (ind, i) {
 	            var index = indices[i + 1] || word.length;
@@ -7840,7 +7938,7 @@ function requireParser$2 () {
 	            var current = _this.currToken;
 	            var sourceIndex = current[tokenize_1.FIELDS.START_POS] + indices[i];
 	            var source = getSource(current[1], current[2] + ind, current[3], current[2] + (index - 1));
-	            if (~hasClass.indexOf(ind)) {
+	            if (classIndexes.has(ind)) {
 	                var classNameOpts = {
 	                    value: value.slice(1),
 	                    source: source,
@@ -7848,7 +7946,7 @@ function requireParser$2 () {
 	                };
 	                node = new className_1.default(unescapeProp(classNameOpts, "value"));
 	            }
-	            else if (~hasId.indexOf(ind)) {
+	            else if (idIndexes.has(ind)) {
 	                var idOpts = {
 	                    value: value.slice(1),
 	                    source: source,
@@ -23666,6 +23764,7 @@ function resolveExt(filename, fs) {
 }
 const tsConfigCache = createCache();
 const tsConfigRefMap = /* @__PURE__ */ new Map();
+const extendedConfigCache = /* @__PURE__ */ new Map();
 function resolveWithTS(containingFile, source, ts2, fs) {
   var _a, _b;
   const configPath = ts2.findConfigFile(containingFile, fs.fileExists);
@@ -23739,7 +23838,10 @@ function loadTSConfig(configPath, ts2, fs, visited = /* @__PURE__ */ new Set())
     parseConfigHost,
     path$1.dirname(configPath),
     void 0,
-    configPath
+    configPath,
+    void 0,
+    void 0,
+    extendedConfigCache
   );
   const res = [config];
   visited.add(configPath);
@@ -23762,6 +23864,10 @@ function invalidateTypeCache(filename) {
   fileToScopeCache.delete(filename);
   fileToGlobalScopeCache.delete(filename);
   tsConfigCache.delete(filename);
+  if (filename.endsWith(".json")) {
+    extendedConfigCache.clear();
+    tsConfigCache.clear();
+  }
   const affectedConfig = tsConfigRefMap.get(filename);
   if (affectedConfig) tsConfigCache.delete(affectedConfig);
 }
@@ -25714,6 +25820,8 @@ const ${normalScriptDefaultVar} = ${defaultSpecifier.local.name}
           }
           if (child.type === "BlockStatement") {
             scope.push(child.body);
+          } else if (child.type === "SwitchCase") {
+            scope.push(child.consequent);
           }
           if (child.type === "AwaitExpression") {
             hasAwait = true;
@@ -25729,8 +25837,10 @@ const ${normalScriptDefaultVar} = ${defaultSpecifier.local.name}
             );
           }
         },
-        exit(node2) {
-          if (node2.type === "BlockStatement") scope.pop();
+        leave(node2) {
+          if (node2.type === "BlockStatement" || node2.type === "SwitchCase") {
+            scope.pop();
+          }
         }
       });
     }
@@ -26261,7 +26371,7 @@ function mergeSourceMaps(scriptMap, templateMap, templateLineOffset) {
   return generator.toJSON();
 }
 
-const version = "3.5.41";
+const version = "3.5.43";
 const parseCache = parseCache$1;
 const errorMessages = {
   ...CompilerDOM.errorMessages,

package/dist/compiler-sfc.esm-browser.js

@@ -1,5 +1,5 @@
 /**
-* @vue/compiler-sfc v3.5.41
+* @vue/compiler-sfc v3.5.43
 * (c) 2018-present Yuxi (Evan) You and Vue contributors
 * @license MIT
 **/
@@ -160,10 +160,10 @@ function normalizeStyle(value) {
 }
 const listDelimiterRE = /;(?![^(]*\))/g;
 const propertyDelimiterRE = /:([^]+)/;
-const styleCommentRE = /\/\*[^]*?\*\//g;
+const styleCommentRE = /"(?:[^"\\]|\\[^])*"|'(?:[^'\\]|\\[^])*'|\\[^]|\/\*[^]*?\*\//g;
 function parseStringStyle(cssText) {
   const ret = {};
-  cssText.replace(styleCommentRE, "").split(listDelimiterRE).forEach((item) => {
+  cssText.replace(styleCommentRE, (match) => match.startsWith("/*") ? "" : match).split(listDelimiterRE).forEach((item) => {
     if (item) {
       const tmp = item.split(propertyDelimiterRE);
       tmp.length > 1 && (ret[tmp[0].trim()] = tmp[1].trim());
@@ -221,7 +221,7 @@ const isBooleanAttr = /* @__PURE__ */ makeMap(
 function includeBooleanAttr(value) {
   return !!value || value === "";
 }
-const unsafeAttrCharRE = /[>/="'\u0009\u000a\u000c\u0020]/;
+const unsafeAttrCharRE = /[>/="'\u0009\u000a\u000c\u000d\u0020]/;
 const attrValidationCache = {};
 function isSSRSafeAttrName(name) {
   if (attrValidationCache.hasOwnProperty(name)) {
@@ -3347,11 +3347,11 @@ const defaultDelimitersClose = new Uint8Array([125, 125]);
 function isTagStartChar(c) {
   return c >= 97 && c <= 122 || c >= 65 && c <= 90;
 }
-function isWhitespace(c) {
+function isWhitespace$1(c) {
   return c === 32 || c === 10 || c === 9 || c === 12 || c === 13;
 }
 function isEndOfTagSection(c) {
-  return c === 47 || c === 62 || isWhitespace(c);
+  return c === 47 || c === 62 || isWhitespace$1(c);
 }
 function toCharCodes(str) {
   const ret = new Uint8Array(str.length);
@@ -3562,7 +3562,7 @@ class Tokenizer {
   /** Look for an end tag. For <title> and <textarea>, also decode entities. */
   stateInRCDATA(c) {
     if (this.sequenceIndex === this.currentSequence.length) {
-      if (c === 62 || isWhitespace(c)) {
+      if (c === 62 || isWhitespace$1(c)) {
         const endOfText = this.index - this.currentSequence.length;
         if (this.sectionStart < endOfText) {
           const actualIndex = this.index;
@@ -3715,7 +3715,7 @@ class Tokenizer {
     this.stateBeforeAttrName(c);
   }
   stateBeforeClosingTagName(c) {
-    if (isWhitespace(c)) ; else if (c === 62) {
+    if (isWhitespace$1(c)) ; else if (c === 62) {
       {
         this.cbs.onerr(14, this.index);
       }
@@ -3727,7 +3727,7 @@ class Tokenizer {
     }
   }
   stateInClosingTagName(c) {
-    if (c === 62 || isWhitespace(c)) {
+    if (c === 62 || isWhitespace$1(c)) {
       this.cbs.onclosetag(this.sectionStart, this.index);
       this.sectionStart = -1;
       this.state = 10;
@@ -3758,7 +3758,7 @@ class Tokenizer {
       this.cbs.onopentagend(this.index);
       this.state = 5;
       this.sectionStart = this.index;
-    } else if (!isWhitespace(c)) {
+    } else if (!isWhitespace$1(c)) {
       if (c === 61) {
         this.cbs.onerr(
           19,
@@ -3787,7 +3787,7 @@ class Tokenizer {
       this.state = 1;
       this.sectionStart = this.index + 1;
       this.inRCDATA = false;
-    } else if (!isWhitespace(c)) {
+    } else if (!isWhitespace$1(c)) {
       this.state = 11;
       this.stateBeforeAttrName(c);
     }
@@ -3866,7 +3866,7 @@ class Tokenizer {
       this.sectionStart = -1;
       this.state = 11;
       this.stateBeforeAttrName(c);
-    } else if (!isWhitespace(c)) {
+    } else if (!isWhitespace$1(c)) {
       this.cbs.onattribend(0, this.sectionStart);
       this.handleAttrStart(c);
     }
@@ -3878,7 +3878,7 @@ class Tokenizer {
     } else if (c === 39) {
       this.state = 20;
       this.sectionStart = this.index + 1;
-    } else if (!isWhitespace(c)) {
+    } else if (!isWhitespace$1(c)) {
       this.sectionStart = this.index;
       this.state = 21;
       this.stateInAttrValueNoQuotes(c);
@@ -3904,7 +3904,7 @@ class Tokenizer {
     this.handleInAttrValue(c, 39);
   }
   stateInAttrValueNoQuotes(c) {
-    if (isWhitespace(c) || c === 62) {
+    if (isWhitespace$1(c) || c === 62) {
       this.cbs.onattribdata(this.sectionStart, this.index);
       this.sectionStart = -1;
       this.cbs.onattribend(1, this.index);
@@ -20089,7 +20089,7 @@ function getMemoedVNodeCall(node) {
 const forAliasRE = /([\s\S]*?)\s+(?:in|of)\s+(\S[\s\S]*)/;
 function isAllWhitespace(str) {
   for (let i = 0; i < str.length; i++) {
-    if (!isWhitespace(str.charCodeAt(i))) {
+    if (!isWhitespace$1(str.charCodeAt(i))) {
       return false;
     }
   }
@@ -20142,10 +20142,10 @@ const tokenizer = new Tokenizer(stack, {
     }
     let innerStart = start + tokenizer.delimiterOpen.length;
     let innerEnd = end - tokenizer.delimiterClose.length;
-    while (isWhitespace(currentInput.charCodeAt(innerStart))) {
+    while (isWhitespace$1(currentInput.charCodeAt(innerStart))) {
       innerStart++;
     }
-    while (isWhitespace(currentInput.charCodeAt(innerEnd - 1))) {
+    while (isWhitespace$1(currentInput.charCodeAt(innerEnd - 1))) {
       innerEnd--;
     }
     let exp = getSlice(innerStart, innerEnd);
@@ -20650,7 +20650,7 @@ function condense(str) {
   let ret = "";
   let prevCharIsWhitespace = false;
   for (let i = 0; i < str.length; i++) {
-    if (isWhitespace(str.charCodeAt(i))) {
+    if (isWhitespace$1(str.charCodeAt(i))) {
       if (!prevCharIsWhitespace) {
         ret += " ";
         prevCharIsWhitespace = true;
@@ -28876,7 +28876,7 @@ function parseCssVars(sfc) {
   const vars = [];
   sfc.styles.forEach((style) => {
     let match;
-    const content = style.content.replace(/\/\*([\s\S]*?)\*\/|\/\/.*/g, "");
+    const content = stripComments$1(style.content);
     while (match = vBindRE.exec(content)) {
       const start = match.index + match[0].length;
       const end = lexBinding(content, start);
@@ -28890,6 +28890,80 @@ function parseCssVars(sfc) {
   });
   return vars;
 }
+const cssSpecialRE = /[/"'\\(]/g;
+function stripComments$1(content) {
+  const len = content.length;
+  let out = "";
+  let last = 0;
+  let i = 0;
+  cssSpecialRE.lastIndex = 0;
+  while (cssSpecialRE.test(content)) {
+    i = cssSpecialRE.lastIndex - 1;
+    const c = content.charCodeAt(i);
+    if (c === 47) {
+      const next = content.charCodeAt(i + 1);
+      if (next === 42 /* Asterisk */) {
+        out += content.slice(last, i);
+        const end = content.indexOf("*/", i + 2);
+        i = last = end === -1 ? len : end + 2;
+      } else if (next === 47) {
+        out += content.slice(last, i);
+        i += 2;
+        while (i < len && !isNewline(content.charCodeAt(i))) i++;
+        last = i;
+      } else {
+        i++;
+      }
+    } else if (c === 34 || c === 39) {
+      i = skipString(content, i + 1, c);
+    } else if (c === 92 /* Backslash */) {
+      i += 2;
+    } else if (isUrlFunction(content, i)) {
+      i = skipUrl(content, i + 1);
+    } else {
+      i++;
+    }
+    cssSpecialRE.lastIndex = i;
+  }
+  return last === 0 ? content : out + content.slice(last);
+}
+function skipString(s, i, quote) {
+  while (i < s.length) {
+    const c = s.charCodeAt(i);
+    if (c === quote) return i + 1;
+    if (isNewline(c)) return i;
+    if (c === 92 /* Backslash */) {
+      i += s.charCodeAt(i + 1) === 13 && s.charCodeAt(i + 2) === 10 ? 3 : 2;
+    } else {
+      i++;
+    }
+  }
+  return i;
+}
+function isUrlFunction(s, i) {
+  const prev = s.charCodeAt(i - 4);
+  return (s.charCodeAt(i - 3) | 32) === 117 /* LowerU */ && (s.charCodeAt(i - 2) | 32) === 114 /* LowerR */ && (s.charCodeAt(i - 1) | 32) === 108 /* LowerL */ && prev !== 92 /* Backslash */ && !isIdentChar(prev);
+}
+function skipUrl(s, i) {
+  while (isWhitespace(s.charCodeAt(i))) i++;
+  const c = s.charCodeAt(i);
+  if (c === 34 || c === 39) return i;
+  while (i < s.length) {
+    const c2 = s.charCodeAt(i);
+    if (c2 === 41 /* RightParen */) return i + 1;
+    i += c2 === 92 /* Backslash */ ? 2 : 1;
+  }
+  return i;
+}
+function isIdentChar(c) {
+  return c >= 97 && c <= 122 || c >= 65 && c <= 90 || c >= 48 && c <= 57 || c === 45 || c === 95 /* Underscore */ || c >= 128;
+}
+function isNewline(c) {
+  return c === 10 || c === 13;
+}
+function isWhitespace(c) {
+  return c === 32 || c === 9 || c === 12 || isNewline(c);
+}
 function lexBinding(content, start) {
   let state = 0 /* inParens */;
   let parenDepth = 0;
@@ -28969,12 +29043,7 @@ function genNormalScriptCssVarsCode(cssVars, bindings, id, isProd, defaultVar) {
   return `
 import { ${CSS_VARS_HELPER} as _${CSS_VARS_HELPER} } from 'vue'
 const __injectCSSVars__ = () => {
-${genCssVarsCode(
-    cssVars,
-    bindings,
-    id,
-    isProd
-  )}}
+${genCssVarsCode(cssVars, bindings, id, isProd)}}
 const __setup__ = ${defaultVar}.setup
 ${defaultVar}.setup = __setup__
   ? (props, ctx) => { __injectCSSVars__();return __setup__(props, ctx) }
@@ -34442,6 +34511,14 @@ function requireStringifier () {
 	  return name + afterName + params
 	}
 
+	// `*--x` is not a custom property: the parser checks the first token, and the
+	// `*`/`_` hack prefix moves from `prop` into `before` only after that.
+	function isCustomProperty(node) {
+	  if (!node.prop.startsWith('--')) return false
+	  let before = node.raws.before;
+	  return typeof before === 'undefined' || !/\S$/.test(before)
+	}
+
 	function pushBody(str, stack, node) {
 	  let nodes = node.nodes;
 	  let last = nodes.length - 1;
@@ -34463,7 +34540,7 @@ function requireStringifier () {
 	      !childSemicolon &&
 	      i < nodes.length - 1 &&
 	      ((child.type === 'atrule' && !child.nodes) ||
-	        (child.type === 'decl' && child.prop.startsWith('--')))
+	        (child.type === 'decl' && isCustomProperty(child)))
 	    ) {
 	      childSemicolon = true;
 	    }
@@ -34817,6 +34894,9 @@ function requireStringifier () {
 	  }
 
 	  root(node) {
+	    if (node.source && node.source.input.hasBOM) {
+	      this.builder('\uFEFF', node, 'start');
+	    }
 	    this.body(node);
 	    if (node.raws.after) {
 	      let after = node.raws.after;
@@ -36058,10 +36138,20 @@ function requirePreviousMap () {
 	if (hasRequiredPreviousMap) return previousMap;
 	hasRequiredPreviousMap = 1;
 
-	let { existsSync, readFileSync } = require$$0$1;
+	let { existsSync, readFileSync, realpathSync } = require$$0$1;
 	let { dirname, isAbsolute, join, relative, sep } = require$$1;
 	let { SourceMapConsumer, SourceMapGenerator } = /*@__PURE__*/ requireSourceMap$1();
 
+	function realPath(path) {
+	  try {
+	    return realpathSync(path)
+	  } catch {
+	    // Missing or dangling: keep the literal path. The existsSync() check below
+	    // still gates the read, and a path that does not exist cannot escape.
+	    return path
+	  }
+	}
+
 	function fromBase64(str) {
 	  if (Buffer$1) {
 	    return Buffer$1.from(str, 'base64').toString()
@@ -36147,7 +36237,9 @@ function requirePreviousMap () {
 	      if (!/\.map$/i.test(path)) return undefined
 	      if (!cssFile) return undefined
 
-	      let rel = relative(dirname(cssFile), path);
+	      // Compare *resolved* paths: relative() is textual, so without this a
+	      // symlink at or below the CSS file's directory points the map outside it.
+	      let rel = relative(realPath(dirname(cssFile)), realPath(path));
 	      if (rel === '..' || rel.startsWith('..' + sep) || isAbsolute(rel)) {
 	        return undefined
 	      }
@@ -36615,6 +36707,7 @@ function requireList () {
 	  },
 
 	  split(string, separators, last) {
+	    if (typeof string !== 'string') return []
 	    let array = [];
 	    let current = '';
 	    let split = false;
@@ -36645,7 +36738,8 @@ function requireList () {
 	      }
 
 	      if (split) {
-	        if (current !== '') array.push(current.trim());
+	        let value = current.trim();
+	        if (last || value !== '') array.push(value);
 	        current = '';
 	        split = false;
 	      } else {
@@ -36653,7 +36747,8 @@ function requireList () {
 	      }
 	    }
 
-	    if (last || current !== '') array.push(current.trim());
+	    let value = current.trim();
+	    if (last || value !== '') array.push(value);
 	    return array
 	  }
 	};
@@ -36895,9 +36990,10 @@ function requireMapGenerator () {
 	        }
 	      }
 	    } else if (this.css) {
+	      let annotation = '/*# sourceMappingURL=';
 	      let startIndex;
-	      while ((startIndex = this.css.lastIndexOf('/*#')) !== -1) {
-	        let endIndex = this.css.indexOf('*/', startIndex + 3);
+	      while ((startIndex = this.css.lastIndexOf(annotation)) !== -1) {
+	        let endIndex = this.css.indexOf('*/', startIndex + annotation.length);
 	        if (endIndex === -1) break
 	        while (startIndex > 0 && this.css[startIndex - 1] === '\n') {
 	          startIndex--;
@@ -37558,8 +37654,11 @@ function requireParser$1 () {
 	      if (prev && prev.type === 'rule' && !prev.raws.ownSemicolon) {
 	        prev.raws.ownSemicolon = this.spaces;
 	        this.spaces = '';
+	        // `ownSemicolon` also holds the spaces before the semicolon, but
+	        // the position above is the semicolon itself, so the node ends
+	        // right after it.
 	        prev.source.end = this.getPosition(token[2]);
-	        prev.source.end.offset += prev.raws.ownSemicolon.length;
+	        prev.source.end.offset++;
 	      }
 	    }
 	  }
@@ -38510,14 +38609,24 @@ function requireLazyResult () {
 
 	    if (visit.iterator !== 0) {
 	      let iterator = visit.iterator;
+	      // Advance past the child we just finished visiting. Like
+	      // `Container#each`, the index is incremented only after a child has
+	      // been fully processed, so a node inserted right after the current
+	      // child is not skipped by the `existIndex < index` adjustment in
+	      // `Container#insertAfter()` (which would fire exit events too early).
+	      if (visit.descending) {
+	        visit.descending = false;
+	        node.indexes[iterator] += 1;
+	      }
 	      let child;
 	      while ((child = node.nodes[node.indexes[iterator]])) {
-	        node.indexes[iterator] += 1;
 	        if (!child[isClean]) {
 	          child[isClean] = true;
+	          visit.descending = true;
 	          stack.push(toStack(child));
 	          return
 	        }
+	        node.indexes[iterator] += 1;
 	      }
 	      visit.iterator = 0;
 	      delete node.indexes[iterator];
@@ -38555,12 +38664,22 @@ function requireLazyResult () {
 
 	      if (visit.iterator !== 0) {
 	        let iterator = visit.iterator;
+	        // Advance past the child we just finished visiting. Like
+	        // `Container#each`, the index is incremented only after a child has
+	        // been fully processed. Incrementing before (as this loop used to)
+	        // makes a node inserted right after the current child get skipped by
+	        // the `existIndex < index` adjustment in `Container#insertAfter()`,
+	        // which fires exit events before those new siblings are visited.
+	        if (visit.descending) {
+	          visit.descending = false;
+	          visitNode.indexes[iterator] += 1;
+	        }
 	        let child;
 	        let descended = false;
 	        while ((child = visitNode.nodes[visitNode.indexes[iterator]])) {
-	          visitNode.indexes[iterator] += 1;
 	          if (!child[isClean]) {
 	            child[isClean] = true;
+	            visit.descending = true;
 	            stack.push({
 	              eventIndex: 0,
 	              events: getEvents(child),
@@ -38570,6 +38689,7 @@ function requireLazyResult () {
 	            descended = true;
 	            break
 	          }
+	          visitNode.indexes[iterator] += 1;
 	        }
 	        if (descended) continue
 	        visit.iterator = 0;
@@ -38772,7 +38892,7 @@ function requireProcessor$1 () {
 
 	class Processor {
 	  constructor(plugins = []) {
-	    this.version = '8.5.23';
+	    this.version = '8.5.28';
 	    this.plugins = this.normalize(plugins);
 	  }
 
@@ -38878,7 +38998,7 @@ function requirePostcss () {
 	          ': postcss.plugin was deprecated. Migration guide:\n' +
 	          'https://evilmartians.com/chronicles/postcss-8-plugin-migration'
 	      );
-	      if (browser$1.env.LANG && browser$1.env.LANG.startsWith('cn')) {
+	      if (browser$1.env.LANG && browser$1.env.LANG.startsWith('zh')) {
 	        /* c8 ignore next 7 */
 	        // eslint-disable-next-line no-console
 	        console.warn(
@@ -41636,8 +41756,9 @@ function requireParser () {
 	    return indexes;
 	}
 	function uniqs() {
-	    var list = Array.prototype.concat.apply([], arguments);
-	    return list.filter(function (item, i) { return i === list.indexOf(item); });
+	    // A Set keeps the first-occurrence order the previous filter/indexOf pass
+	    // produced, without its quadratic cost on long index lists.
+	    return Array.from(new Set(Array.prototype.concat.apply([], arguments)));
 	}
 	var Parser = /** @class */ (function () {
 	    function Parser(rule, options) {
@@ -41682,6 +41803,11 @@ function requireParser () {
 	            attr.push(this.currToken);
 	            this.position++;
 	        }
+	        if (!this.currToken) {
+	            // Ran off the end of the token stream: the attribute was never closed.
+	            // Point at the opening bracket, which is where the author needs to look.
+	            return this.expected("closing square bracket", startingToken[tokenize_1.FIELDS.START_POS]);
+	        }
 	        if (this.currToken[tokenize_1.FIELDS.TYPE] !== tokens.closeSquare) {
 	            return this.expected("closing square bracket", this.currToken[tokenize_1.FIELDS.START_POS]);
 	        }
@@ -41742,7 +41868,7 @@ function requireParser () {
 	                        }
 	                        if (commentBefore) {
 	                            (0, util_1.ensureObject)(node, "raws", "spaces", "attribute");
-	                            node.raws.spaces.attribute.before = spaceBefore;
+	                            node.raws.spaces.attribute.before = commentBefore;
 	                            commentBefore = "";
 	                        }
 	                        node.namespace = (node.namespace || "") + content;
@@ -42166,7 +42292,21 @@ function requireParser () {
 	        return this.error("Unexpected '|'.", this.currToken[tokenize_1.FIELDS.START_POS]);
 	    };
 	    Parser.prototype.namespace = function () {
-	        var before = (this.prevToken && this.content(this.prevToken)) || true;
+	        var prev = this.prevToken;
+	        // Only treat the previous token as a namespace prefix when it can actually
+	        // be one (a type/word or the universal `*`). A comment, comma, combinator
+	        // or whitespace before `|` means an empty namespace, not a prefix.
+	        var before = prev &&
+	            (prev[tokenize_1.FIELDS.TYPE] === tokens.word ||
+	                prev[tokenize_1.FIELDS.TYPE] === tokens.asterisk ||
+	                prev[tokenize_1.FIELDS.TYPE] === tokens.ampersand)
+	            ? this.content(prev)
+	            : true;
+	        if (!this.nextToken) {
+	            // A trailing `|` with nothing after it. `unexpectedPipe` reports against
+	            // `currToken`, which is the pipe itself and always present here.
+	            return this.unexpectedPipe();
+	        }
 	        if (this.nextToken[tokenize_1.FIELDS.TYPE] === tokens.word) {
 	            this.position++;
 	            return this.word(before);
@@ -42196,6 +42336,7 @@ function requireParser () {
 	    Parser.prototype.parentheses = function () {
 	        var last = this.current.last;
 	        var unbalanced = 1;
+	        var openingToken = this.currToken;
 	        this.position++;
 	        if (last && last.type === types.PSEUDO) {
 	            var selector = new selector_1.default({
@@ -42265,7 +42406,9 @@ function requireParser () {
 	            }
 	        }
 	        if (unbalanced) {
-	            return this.expected("closing parenthesis", this.currToken[tokenize_1.FIELDS.START_POS]);
+	            // `currToken` is undefined when the token stream ran out before the
+	            // parenthesis was closed; fall back to the opening one.
+	            return this.expected("closing parenthesis", (this.currToken || openingToken)[tokenize_1.FIELDS.START_POS]);
 	        }
 	    };
 	    Parser.prototype.pseudo = function () {
@@ -42370,8 +42513,14 @@ function requireParser () {
 	        // Eliminate Sass interpolations from the list of id indexes
 	        var interpolations = indexesOf(word, "#{");
 	        if (interpolations.length) {
-	            hasId = hasId.filter(function (hashIndex) { return !~interpolations.indexOf(hashIndex); });
-	        }
+	            var interpolationIndexes_1 = new Set(interpolations);
+	            hasId = hasId.filter(function (hashIndex) { return !interpolationIndexes_1.has(hashIndex); });
+	        }
+	        // Membership tests are built once. Scanning the arrays per index would make
+	        // a flat selector such as `.a.a.a...` quadratic in its number of class/id
+	        // indexes, which is enough to pin a CPU core on attacker-supplied input.
+	        var classIndexes = new Set(hasClass);
+	        var idIndexes = new Set(hasId);
 	        var indices = (0, sortAscending_1.default)(uniqs(__spreadArray(__spreadArray([0], __read(hasClass), false), __read(hasId), false)));
 	        indices.forEach(function (ind, i) {
 	            var index = indices[i + 1] || word.length;
@@ -42383,7 +42532,7 @@ function requireParser () {
 	            var current = _this.currToken;
 	            var sourceIndex = current[tokenize_1.FIELDS.START_POS] + indices[i];
 	            var source = getSource(current[1], current[2] + ind, current[3], current[2] + (index - 1));
-	            if (~hasClass.indexOf(ind)) {
+	            if (classIndexes.has(ind)) {
 	                var classNameOpts = {
 	                    value: value.slice(1),
 	                    source: source,
@@ -42391,7 +42540,7 @@ function requireParser () {
 	                };
 	                node = new className_1.default(unescapeProp(classNameOpts, "value"));
 	            }
-	            else if (~hasId.indexOf(ind)) {
+	            else if (idIndexes.has(ind)) {
 	                var idOpts = {
 	                    value: value.slice(1),
 	                    source: source,
@@ -49337,6 +49486,7 @@ function resolveExt(filename, fs) {
 }
 const tsConfigCache = createCache();
 const tsConfigRefMap = /* @__PURE__ */ new Map();
+const extendedConfigCache = /* @__PURE__ */ new Map();
 function resolveWithTS(containingFile, source, ts2, fs) {
   return;
 }
@@ -49347,6 +49497,10 @@ function invalidateTypeCache(filename) {
   fileToScopeCache.delete(filename);
   fileToGlobalScopeCache.delete(filename);
   tsConfigCache.delete(filename);
+  if (filename.endsWith(".json")) {
+    extendedConfigCache.clear();
+    tsConfigCache.clear();
+  }
   const affectedConfig = tsConfigRefMap.get(filename);
   if (affectedConfig) tsConfigCache.delete(affectedConfig);
 }
@@ -51318,6 +51472,8 @@ const ${normalScriptDefaultVar} = ${defaultSpecifier.local.name}
           }
           if (child.type === "BlockStatement") {
             scope.push(child.body);
+          } else if (child.type === "SwitchCase") {
+            scope.push(child.consequent);
           }
           if (child.type === "AwaitExpression") {
             hasAwait = true;
@@ -51333,8 +51489,10 @@ const ${normalScriptDefaultVar} = ${defaultSpecifier.local.name}
             );
           }
         },
-        exit(node2) {
-          if (node2.type === "BlockStatement") scope.pop();
+        leave(node2) {
+          if (node2.type === "BlockStatement" || node2.type === "SwitchCase") {
+            scope.pop();
+          }
         }
       });
     }
@@ -51876,7 +52034,7 @@ var __spreadValues = (a, b) => {
     }
   return a;
 };
-const version = "3.5.41";
+const version = "3.5.43";
 const parseCache = parseCache$1;
 const errorMessages = __spreadValues(__spreadValues({}, errorMessages$1), DOMErrorMessages);
 const walk = walk$2;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vue/compiler-sfc",
-  "version": "3.5.41",
+  "version": "3.5.43",
   "description": "@vue/compiler-sfc",
   "main": "dist/compiler-sfc.cjs.js",
   "module": "dist/compiler-sfc.esm-browser.js",
@@ -43,14 +43,14 @@
   "homepage": "https://github.com/vuejs/core/tree/main/packages/compiler-sfc#readme",
   "dependencies": {
     "@babel/parser": "^7.29.8",
+    "@vue/compiler-core": "3.5.43",
+    "@vue/compiler-dom": "3.5.43",
+    "@vue/compiler-ssr": "3.5.43",
+    "@vue/shared": "3.5.43",
     "estree-walker": "^2.0.2",
     "magic-string": "^0.30.21",
-    "postcss": "^8.5.19",
-    "source-map-js": "^1.2.1",
-    "@vue/compiler-core": "3.5.41",
-    "@vue/shared": "3.5.41",
-    "@vue/compiler-dom": "3.5.41",
-    "@vue/compiler-ssr": "3.5.41"
+    "postcss": "^8.5.28",
+    "source-map-js": "^1.2.1"
   },
   "devDependencies": {
     "@babel/types": "^7.29.8",
@@ -60,8 +60,8 @@
     "merge-source-map": "^1.1.0",
     "minimatch": "~10.2.6",
     "postcss-modules": "^6.0.1",
-    "postcss-selector-parser": "^7.1.4",
+    "postcss-selector-parser": "^7.1.6",
     "pug": "^3.0.4",
-    "sass": "^1.102.0"
+    "sass": "^1.104.1"
   }
 }