@wavemaker/angular-codegen 11.15.5-rc.647638 → 11.15.5-rc.647771

package/dependencies/pipe-provider.cjs.js

@@ -131194,11 +131194,22 @@ function requireConventions$1 () {
 		XMLNS: 'http://www.w3.org/2000/xmlns/',
 	});
 
+	//[4]   	NameStartChar	   ::=   	":" | [A-Z] | "_" | [a-z] | [#xC0-#xD6] | [#xD8-#xF6] | [#xF8-#x2FF] | [#x370-#x37D] | [#x37F-#x1FFF] | [#x200C-#x200D] | [#x2070-#x218F] | [#x2C00-#x2FEF] | [#x3001-#xD7FF] | [#xF900-#xFDCF] | [#xFDF0-#xFFFD] | [#x10000-#xEFFFF]
+	//[4a]   	NameChar	   ::=   	NameStartChar | "-" | "." | [0-9] | #xB7 | [#x0300-#x036F] | [#x203F-#x2040]
+	//[5]   	Name	   ::=   	NameStartChar (NameChar)*
+	var nameStartChar = /[A-Z_a-z\xC0-\xD6\xD8-\xF6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD]/;//\u10000-\uEFFFF
+	var nameChar = new RegExp("[\\-\\.0-9"+nameStartChar.source.slice(1,-1)+"\\u00B7\\u0300-\\u036F\\u203F-\\u2040]");
+	var tagNamePattern = new RegExp('^'+nameStartChar.source+nameChar.source+'*(?:\:'+nameStartChar.source+nameChar.source+'*)?$');
+	//var tagNamePattern = /^[a-zA-Z_][\w\-\.]*(?:\:[a-zA-Z_][\w\-\.]*)?$/
+
 	conventions$1.assign = assign;
 	conventions$1.find = find;
 	conventions$1.freeze = freeze;
 	conventions$1.MIME_TYPE = MIME_TYPE;
 	conventions$1.NAMESPACE = NAMESPACE;
+	conventions$1.nameStartChar = nameStartChar;
+	conventions$1.nameChar = nameChar;
+	conventions$1.tagNamePattern = tagNamePattern;
 	return conventions$1;
 }
 
@@ -131211,6 +131222,7 @@ function requireDom$1 () {
 
 	var find = conventions.find;
 	var NAMESPACE = conventions.NAMESPACE;
+	var tagNamePattern = conventions.tagNamePattern;
 
 	/**
 	 * A prerequisite for `[].filter`, to drop elements that are empty
@@ -131442,6 +131454,13 @@ function requireDom$1 () {
 	 * used for attributes or DocumentType entities
 	 */
 	function NamedNodeMap() {
+		// nodeName -> Attr membership index; lets the parse-time de-duplication in
+		// setNamedItem resolve an existing attribute in O(1) instead of scanning the
+		// list, so building an element with M attributes costs O(M) rather than O(M^2).
+		// The numbered entries and length remain the sole authority for attribute order.
+		// Object.create(null) so an attribute named __proto__ or constructor is an
+		// ordinary key.
+		this._nameIndex = Object.create(null);
 	}
 	function _findNodeIndex(list,node){
 		var i = list.length;
@@ -131450,12 +131469,27 @@ function requireDom$1 () {
 		}
 	}
 
+	function _nnmIndexAdd(list, attr) {
+		list._nameIndex[attr.nodeName] = attr;
+	}
+	function _nnmIndexRemove(list, attr) {
+		// Only drop the entry if it still points at this attribute; a replacement with
+		// a different nodeName may already have re-keyed it.
+		if (list._nameIndex[attr.nodeName] === attr) {
+			delete list._nameIndex[attr.nodeName];
+		}
+	}
+
 	function _addNamedNode(el,list,newAttr,oldAttr){
 		if(oldAttr){
 			list[_findNodeIndex(list,oldAttr)] = newAttr;
+			// oldAttr leaves the list; drop its index entry (its nodeName may differ
+			// from newAttr's when the replacement came via setNamedItemNS).
+			_nnmIndexRemove(list, oldAttr);
 		}else {
 			list[list.length++] = newAttr;
 		}
+		_nnmIndexAdd(list, newAttr);
 		if(el){
 			newAttr.ownerElement = el;
 			var doc = el.ownerDocument;
@@ -131474,6 +131508,7 @@ function requireDom$1 () {
 				list[i] = list[++i];
 			}
 			list.length = lastIndex;
+			_nnmIndexRemove(list, attr);
 			if(el){
 				var doc = el.ownerDocument;
 				if(doc){
@@ -131507,7 +131542,11 @@ function requireDom$1 () {
 			if(el && el!=this._ownerElement){
 				throw new DOMException(INUSE_ATTRIBUTE_ERR);
 			}
-			var oldAttr = this.getNamedItem(attr.nodeName);
+			// Resolve any existing attribute with the same nodeName through the O(1)
+			// membership index rather than an O(M) scan — this is the parse-dedup hot
+			// path (setAttributeNode per attribute during parse). Absent -> undefined,
+			// matching getNamedItem's contract.
+			var oldAttr = this._nameIndex[attr.nodeName];
 			_addNamedNode(this._ownerElement,this,attr,oldAttr);
 			return oldAttr;
 		},
@@ -131740,9 +131779,38 @@ function requireDom$1 () {
 					while (child) {
 						var next = child.nextSibling;
 						if (next !== null && next.nodeType === TEXT_NODE && child.nodeType === TEXT_NODE) {
-							node.removeChild(next);
-							child.appendData(next.data);
-							// Do not advance child: re-check new nextSibling for another text run
+							// Merge the whole run of adjacent text nodes at once: gather the
+							// following text siblings' data, unlink them in a single pass, and
+							// re-index the child list a single time. Per-sibling `removeChild`
+							// (each an O(K) re-index) plus per-sibling `appendData` (each an O(K)
+							// string rebuild) is O(K^2) over a long run of single-character text
+							// nodes; this keeps it O(K). The first text node of the run survives
+							// and carries the concatenated data, preserving node identity and
+							// locator semantics.
+							var tail = [];
+							var sibling = next;
+							while (sibling !== null && sibling.nodeType === TEXT_NODE) {
+								tail.push(sibling.data);
+								sibling = sibling.nextSibling;
+							}
+							// `sibling` is now the first non-text node after the run, or null.
+							var removed = child.nextSibling;
+							while (removed !== sibling) {
+								var following = removed.nextSibling;
+								removed.parentNode = null;
+								removed.previousSibling = null;
+								removed.nextSibling = null;
+								removed = following;
+							}
+							child.nextSibling = sibling;
+							if (sibling !== null) {
+								sibling.previousSibling = child;
+							} else {
+								node.lastChild = child;
+							}
+							child.appendData(tail.join('')); // single O(K) string rebuild
+							_onUpdateChild(node.ownerDocument, node); // single O(K) re-index
+							child = sibling;
 						} else {
 							child = next;
 						}
@@ -132553,8 +132621,10 @@ function requireDom$1 () {
 		 * - it does not do any input validation on the arguments and doesn't throw "InvalidCharacterError".
 		 *
 		 * Note: When the resulting document is serialized with `requireWellFormed: true`, the
-		 * serializer throws with code `INVALID_STATE_ERR` if `.data` contains `?>` (W3C DOM Parsing
-		 * §3.2.1.7). Without that option the data is emitted verbatim.
+		 * serializer throws with code `INVALID_STATE_ERR` if `.target` is not a valid XML `NCName`
+		 * (a `Name` with no colon) or is an ASCII case-insensitive match for `"xml"`, or if `.data`
+		 * contains `?>` (W3C DOM Parsing §3.2.1.7). Without that option the target and data are
+		 * emitted verbatim.
 		 *
 		 * @param {string} target
 		 * @param {string} data
@@ -132579,7 +132649,27 @@ function requireDom$1 () {
 			node.specified = true;
 			return node;
 		},
+		/**
+		 * Creates an EntityReference object, serialized as `&name;`.
+		 *
+		 * The `name` is validated against the XML `Name` production at creation time; an invalid name
+		 * throws a `DOMException` with code `INVALID_CHARACTER_ERR`. When the resulting node is
+		 * serialized with `requireWellFormed: true`, the serializer re-validates `nodeName` and throws
+		 * a `DOMException` with code `INVALID_STATE_ERR` if a later `nodeName` mutation made it invalid;
+		 * without that option the name is emitted verbatim.
+		 *
+		 * Note: xmldom does not expand entities — the parser resolves entity references inline and never
+		 * constructs `EntityReference` nodes, so this method is the only producer.
+		 *
+		 * @param {string} name The name of the entity to reference.
+		 * @returns {EntityReference}
+		 * @throws {DOMException} With code `INVALID_CHARACTER_ERR` when `name` is not a valid XML `Name`.
+		 * @see https://www.w3.org/TR/DOM-Level-3-Core/core.html#ID-392B75AE
+		 */
 		createEntityReference :	function(name){
+			if (!tagNamePattern.test(name)) {
+				throw new DOMException(INVALID_CHARACTER_ERR, 'not a valid xml name "' + name + '"');
+			}
 			var node = new EntityReference();
 			node.ownerDocument	= this;
 			node.nodeName	= name;
@@ -132791,15 +132881,16 @@ function requireDom$1 () {
 	/**
 	 * Represents a DocumentType node (the `<!DOCTYPE ...>` declaration).
 	 *
-	 * `publicId`, `systemId`, and `internalSubset` are plain own-property assignments.
+	 * `name`, `publicId`, `systemId`, and `internalSubset` are plain own-property assignments.
 	 * xmldom does not enforce the `readonly` constraint declared by the WHATWG DOM spec —
 	 * direct property writes succeed silently. Values are serialized verbatim when
 	 * `requireWellFormed` is false (the default). When the serializer is invoked with
 	 * `requireWellFormed: true` (via the 4th-parameter options object), it validates each
-	 * field and throws `DOMException` with code `INVALID_STATE_ERR` on invalid values.
+	 * field — including `name`, which is checked against the XML `Name` production — and throws
+	 * `DOMException` with code `INVALID_STATE_ERR` on invalid values.
 	 *
 	 * @class
-	 * @see https://developer.mozilla.org/en-US/docs/Web/API/DocumentType MDN
+	 * @see https://developer.mozilla.org/docs/Web/API/DocumentType MDN
 	 */
 	function DocumentType() {
 	}	DocumentType.prototype.nodeType = DOCUMENT_TYPE_NODE;
@@ -132813,6 +132904,20 @@ function requireDom$1 () {
 	}	Entity.prototype.nodeType = ENTITY_NODE;
 	_extends(Entity,Node);
 
+	/**
+	 * Represents an EntityReference node, serialized as `&nodeName;`.
+	 *
+	 * `nodeName` is the referenced entity's name, stored verbatim. When serialized with
+	 * `requireWellFormed: true`, the serializer validates `nodeName` against the XML `Name` production
+	 * and throws a `DOMException` with code `INVALID_STATE_ERR` if it does not match; without that
+	 * option the name is emitted verbatim between `&` and `;`.
+	 *
+	 * Note: xmldom does not expand entities — the parser resolves entity references inline and never
+	 * constructs `EntityReference` nodes, so the only producer is `Document.createEntityReference`.
+	 *
+	 * @class
+	 * @see https://www.w3.org/TR/xml/#NT-Name
+	 */
 	function EntityReference() {
 	}	EntityReference.prototype.nodeType = ENTITY_REFERENCE_NODE;
 	_extends(EntityReference,Node);
@@ -132850,14 +132955,20 @@ function requireDom$1 () {
 	 * @returns {string}
 	 * @throws {DOMException}
 	 * With code `INVALID_STATE_ERR` when `requireWellFormed` is `true` and:
+	 * - an Element's qualified name (including any namespace prefix) is not a valid XML QName,
+	 * - an attribute's qualified name (including a synthesized `xmlns:` namespace declaration) is
+	 *   not a valid XML QName,
 	 * - a CDATASection node's data contains `"]]>"`,
 	 * - a Comment node's data contains `"-->"` (bare `"--"` does not throw on this branch),
-	 * - a ProcessingInstruction's data contains `"?>"`,
+	 * - a ProcessingInstruction's target is not a valid XML `NCName` (a `Name` with no colon) or is
+	 *   an ASCII case-insensitive match for `"xml"`, or its data contains `"?>"`,
+	 * - a DocumentType's `name` is not a valid XML `Name` (XML 1.0 production [5]),
 	 * - a DocumentType's `publicId` is non-empty and does not match the XML `PubidLiteral`
 	 *   production,
 	 * - a DocumentType's `systemId` is non-empty and does not match the XML `SystemLiteral`
-	 *   production, or
-	 * - a DocumentType's `internalSubset` contains `"]>"`.
+	 *   production,
+	 * - a DocumentType's `internalSubset` contains `"]>"`, or
+	 * - an EntityReference's `nodeName` is not a valid XML `Name` (XML 1.0 production [5]).
 	 * Note: xmldom does not enforce `readonly` on DocumentType fields — direct property
 	 * writes succeed and are covered by the serializer-level checks above.
 	 * @see https://html.spec.whatwg.org/#dom-xmlserializer-serializetostring
@@ -132931,7 +133042,10 @@ function requireDom$1 () {
 	 * @see https://www.w3.org/TR/xml11/#AVNormalize
 	 * @see https://w3c.github.io/DOM-Parsing/#serializing-an-element-s-attributes
 	 */
-	function addSerializedAttribute(buf, qualifiedName, value) {
+	function addSerializedAttribute(buf, qualifiedName, value, requireWellFormed) {
+		if (requireWellFormed && !tagNamePattern.test(qualifiedName)) {
+			throw new DOMException(INVALID_STATE_ERR, 'The attribute name "' + qualifiedName + '" is not a valid XML QName');
+		}
 		buf.push(' ', qualifiedName, '="', value.replace(/[<>&"\t\n\r]/g, _xmlEncoder), '"');
 	}
 
@@ -132997,6 +133111,9 @@ function requireDom$1 () {
 							}
 						}
 
+						if (requireWellFormed && !tagNamePattern.test(prefixedNodeName)) {
+							throw new DOMException(INVALID_STATE_ERR, 'The element name "' + prefixedNodeName + '" is not a valid XML QName');
+						}
 						buf.push('<', prefixedNodeName);
 
 						// Build a fresh namespace snapshot for this element's children.
@@ -133016,7 +133133,7 @@ function requireDom$1 () {
 							if (needNamespaceDefine(attr, html, childNs)) {
 								var attrPrefix = attr.prefix || '';
 								var uri = attr.namespaceURI;
-								addSerializedAttribute(buf, attrPrefix ? 'xmlns:' + attrPrefix : 'xmlns', uri);
+								addSerializedAttribute(buf, attrPrefix ? 'xmlns:' + attrPrefix : 'xmlns', uri, requireWellFormed);
 								childNs.push({ prefix: attrPrefix, namespace: uri });
 							}
 							// Apply nodeFilter and serialize the attribute.
@@ -133025,7 +133142,7 @@ function requireDom$1 () {
 								if (typeof filteredAttr === 'string') {
 									buf.push(filteredAttr);
 								} else {
-									addSerializedAttribute(buf, filteredAttr.name, filteredAttr.value);
+									addSerializedAttribute(buf, filteredAttr.name, filteredAttr.value, requireWellFormed);
 								}
 							}
 						}
@@ -133034,7 +133151,7 @@ function requireDom$1 () {
 						if (nodeName === prefixedNodeName && needNamespaceDefine(n, html, childNs)) {
 							var nodePrefix = n.prefix || '';
 							var uri = n.namespaceURI;
-							addSerializedAttribute(buf, nodePrefix ? 'xmlns:' + nodePrefix : 'xmlns', uri);
+							addSerializedAttribute(buf, nodePrefix ? 'xmlns:' + nodePrefix : 'xmlns', uri, requireWellFormed);
 							childNs.push({ prefix: nodePrefix, namespace: uri });
 						}
 
@@ -133067,7 +133184,7 @@ function requireDom$1 () {
 						return { ns: ns.slice(), isHTML: html, tag: null };
 
 					case ATTRIBUTE_NODE:
-						addSerializedAttribute(buf, n.name, n.value);
+						addSerializedAttribute(buf, n.name, n.value, requireWellFormed);
 						return null;
 
 					case TEXT_NODE:
@@ -133106,6 +133223,9 @@ function requireDom$1 () {
 
 					case DOCUMENT_TYPE_NODE:
 						if (requireWellFormed) {
+							if (!tagNamePattern.test(n.name)) {
+								throw new DOMException(INVALID_STATE_ERR, 'The doctype name "' + n.name + '" is not a valid XML Name');
+							}
 							if (n.publicId && !/^("[\x20\r\na-zA-Z0-9\-()+,.\/:=?;!*#@$_%']*"|'[\x20\r\na-zA-Z0-9\-()+,.\/:=?;!*#@$_%'"]*')$/.test(n.publicId)) {
 								throw new DOMException(INVALID_STATE_ERR, 'DocumentType publicId is not a valid PubidLiteral');
 							}
@@ -133137,13 +133257,27 @@ function requireDom$1 () {
 						return null;
 
 					case PROCESSING_INSTRUCTION_NODE:
-						if (requireWellFormed && n.data.indexOf('?>') !== -1) {
-							throw new DOMException(INVALID_STATE_ERR, 'The ProcessingInstruction data contains "?>"');
+						if (requireWellFormed) {
+							if (!tagNamePattern.test(n.target) || n.target.indexOf(':') !== -1 || n.target.toLowerCase() === 'xml') {
+								throw new DOMException(
+									INVALID_STATE_ERR,
+									'The processing instruction target "' + n.target + '" is not a valid XML NCName or is reserved'
+								);
+							}
+							if (n.data.indexOf('?>') !== -1) {
+								throw new DOMException(INVALID_STATE_ERR, 'The ProcessingInstruction data contains "?>"');
+							}
 						}
 						buf.push('<?', n.target, ' ', n.data, '?>');
 						return null;
 
 					case ENTITY_REFERENCE_NODE:
+						if (requireWellFormed && !tagNamePattern.test(n.nodeName)) {
+							throw new DOMException(
+								INVALID_STATE_ERR,
+								'The entity reference name "' + n.nodeName + '" is not a valid XML Name'
+							);
+						}
 						buf.push('&', n.nodeName, ';');
 						return null;
 
@@ -135524,14 +135658,8 @@ function requireSax$1 () {
 	if (hasRequiredSax$1) return sax$1;
 	hasRequiredSax$1 = 1;
 	var NAMESPACE = requireConventions$1().NAMESPACE;
+	var tagNamePattern = requireConventions$1().tagNamePattern;
 
-	//[4]   	NameStartChar	   ::=   	":" | [A-Z] | "_" | [a-z] | [#xC0-#xD6] | [#xD8-#xF6] | [#xF8-#x2FF] | [#x370-#x37D] | [#x37F-#x1FFF] | [#x200C-#x200D] | [#x2070-#x218F] | [#x2C00-#x2FEF] | [#x3001-#xD7FF] | [#xF900-#xFDCF] | [#xFDF0-#xFFFD] | [#x10000-#xEFFFF]
-	//[4a]   	NameChar	   ::=   	NameStartChar | "-" | "." | [0-9] | #xB7 | [#x0300-#x036F] | [#x203F-#x2040]
-	//[5]   	Name	   ::=   	NameStartChar (NameChar)*
-	var nameStartChar = /[A-Z_a-z\xC0-\xD6\xD8-\xF6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD]/;//\u10000-\uEFFFF
-	var nameChar = new RegExp("[\\-\\.0-9"+nameStartChar.source.slice(1,-1)+"\\u00B7\\u0300-\\u036F\\u203F-\\u2040]");
-	var tagNamePattern = new RegExp('^'+nameStartChar.source+nameChar.source+'*(?:\:'+nameStartChar.source+nameChar.source+'*)?$');
-	//var tagNamePattern = /^[a-zA-Z_][\w\-\.]*(?:\:[a-zA-Z_][\w\-\.]*)?$/
 	//var handlers = 'resolveEntity,getExternalSubset,characters,endDocument,endElement,endPrefixMapping,ignorableWhitespace,processingInstruction,setDocumentLocator,skippedEntity,startDocument,startElement,startPrefixMapping,notationDecl,unparsedEntityDecl,error,fatalError,warning,attributeDecl,elementDecl,externalEntityDecl,internalEntityDecl,comment,endCDATA,endDTD,endEntity,startCDATA,startDTD,startEntity'.split(',')
 
 	//S_TAG,	S_ATTR,	S_EQ,	S_ATTR_NOQUOT_VALUE
@@ -135642,7 +135770,13 @@ function requireSax$1 () {
 				switch(source.charAt(tagStart+1)){
 				case '/':
 					var end = source.indexOf('>',tagStart+3);
-					var tagName = source.substring(tagStart + 2, end).replace(/[ \t\n\r]+$/g, '');
+					// Anchored trailing-whitespace trim. The former `/[ \t\n\r]+$/g` backtracked
+					// quadratically on a name shaped `whitespace-run + non-whitespace char`
+					// (an end tag `</   …   x>`): from every start position it extended `[ws]+`
+					// to the end and then failed the `$` anchor. This anchored form matches the
+					// whole string once and captures everything up to the last non-whitespace
+					// character, so it trims in linear time with byte-identical output.
+					var tagName = source.substring(tagStart + 2, end).replace(/^([\s\S]*?[^ \t\n\r])?[ \t\n\r]*$/, '$1');
 					var config = parseStack.pop();
 					if(end<0){
 
@@ -135653,6 +135787,14 @@ function requireSax$1 () {
 		        		tagName = tagName.replace(/[\s<].*/,'');
 		        		errorHandler.error("end tag name: "+tagName+' maybe not complete');
 		        		end = tagStart+1+tagName.length;
+					}else if(/[ \t\n\r]/.test(tagName) && tagNamePattern.test(tagName.split(/[ \t\n\r]/)[0])){
+						// The XML `ETag` production is `'</' Name S? '>'`: only optional whitespace may follow
+						// the `Name`. A valid `Name` followed by whitespace and non-whitespace residue (e.g.
+						// `</a\nbogus>` or `</a bogus>`) is not well-formed, but historically it was silently
+						// accepted (the malformed end tag ignored, the residue dropped, the element left on the
+						// stack). Report it as a recoverable `error` (which a custom errorHandler may escalate to
+						// fatal) while keeping the existing recovery so the parsed DOM stays byte-identical.
+						errorHandler.error('end tag name is followed by whitespace and trailing content: "'+tagName+'"');
 					}
 					var localNSMap = config.localNSMap;
 					var endMatch = config.tagName == tagName;
@@ -135776,6 +135918,15 @@ function requireSax$1 () {
 		var s = S_TAG;//status
 		while(true){
 			var c = source.charAt(p);
+			if (s === S_TAG && c === '<') {
+				// A `<` can never occur inside a tag name. Without this guard the scan runs
+				// on to the next `>` (or EOF) before the tag name is rejected, so a document
+				// with many `<` inside a malformed tag makes each one-character recovery step
+				// re-scan to the distant `>` — O(n^2). Stopping at the `<` keeps each recovery
+				// step bounded. The candidate scanned so far is reported raw, consistent with
+				// the sibling invalid-tag-name throw below.
+				throw new Error('unexpected < in tag name: ' + source.slice(start, p));
+			}
 			switch(c){
 			case '=':
 				if(s === S_ATTR){//attrName
@@ -135968,9 +136119,13 @@ function requireSax$1 () {
 			if(nsPrefix !== false){//hack!!
 				if(localNSMap == null){
 					localNSMap = {};
-					//console.log(currentNSMap,0)
-					_copy(currentNSMap,currentNSMap={});
-					//console.log(currentNSMap,1)
+					// Derive the child scope's namespace map by prototype-chain inheritance
+					// instead of a flat copy: lookups inherit ancestor prefixes transparently,
+					// so a document nesting N scopes retains O(N) map entries rather than
+					// sum(1..N) = O(N^2). localNSMap stays a flat own-only record of the
+					// prefixes declared at THIS element, so own-property enumeration
+					// (endPrefixMapping below) still reports only local declarations.
+					currentNSMap = Object.create(currentNSMap);
 				}
 				currentNSMap[nsPrefix] = localNSMap[nsPrefix] = value;
 				a.uri = NAMESPACE.XMLNS;
@@ -143009,7 +143164,7 @@ function requireMomentTimezone$1 () {
 	hasRequiredMomentTimezone$1 = 1;
 	(function (module) {
 		//! moment-timezone.js
-		//! version : 0.6.2
+		//! version : 0.6.5
 		//! Copyright (c) JS Foundation and other contributors
 		//! license : MIT
 		//! github.com/moment/moment-timezone
@@ -143035,12 +143190,18 @@ function requireMomentTimezone$1 () {
 			// 	return moment;
 			// }
 
-			var VERSION = "0.6.2",
+			var VERSION = "0.6.5",
 				zones = {},
 				links = {},
 				countries = {},
 				names = {},
 				guesses = {},
+				parsingInZone = false,
+				parsingNow,
+				parsingNowFunction,
+				hasParsingNow = false,
+				ignoreDefaultZoneForInput,
+				hasIgnoredDefaultZoneInput = false,
 				cachedGuess;
 
 			if (!moment || typeof moment.version !== 'string') {
@@ -143212,17 +143373,16 @@ function requireMomentTimezone$1 () {
 						offsets = this.offsets,
 						untils  = this.untils,
 						max     = untils.length - 1,
-						offset, offsetNext, offsetPrev, i;
+						offset, offsetNext, i;
 
 					for (i = 0; i < max; i++) {
 						offset     = offsets[i];
 						offsetNext = offsets[i + 1];
-						offsetPrev = offsets[i ? i - 1 : i];
 
 						if (offset < offsetNext && tz.moveAmbiguousForward) {
 							offset = offsetNext;
-						} else if (offset > offsetPrev && tz.moveInvalidForward) {
-							offset = offsetPrev;
+						} else if (offset > offsetNext && tz.moveInvalidForward) {
+							offset = offsetNext;
 						}
 
 						if (target < untils[i] - (offset * 60000)) {
@@ -143247,6 +143407,15 @@ function requireMomentTimezone$1 () {
 				}
 			};
 
+			var utcDefaultZone = new Zone();
+			utcDefaultZone._set({
+				name : 'UTC',
+				abbrs : ['UTC'],
+				untils : [Infinity],
+				offsets : [0],
+				population : 0
+			});
+
 			/************************************
 				Country object
 			************************************/
@@ -143584,6 +143753,85 @@ function requireMomentTimezone$1 () {
 				return !!(m._a && (m._tzm === undefined) && !isUnixTimestamp);
 			}
 
+			function isObjectInput (input) {
+				var prop;
+
+				if (moment.isMoment(input) || input === null || Object.prototype.toString.call(input) !== '[object Object]') {
+					return false;
+				}
+				if (Object.getOwnPropertyNames) {
+					return Object.getOwnPropertyNames(input).length > 0;
+				}
+				for (prop in input) {
+					if (Object.prototype.hasOwnProperty.call(input, prop)) {
+						return true;
+					}
+				}
+				return false;
+			}
+
+			function parseWithZoneNow (args, name, stringInput) {
+				var savedNow = moment.now,
+					savedDefaultZone = moment.defaultZone,
+					savedParsingInZone = parsingInZone,
+					savedParsingNow = parsingNow,
+					savedParsingNowFunction = parsingNowFunction,
+					savedHasParsingNow = hasParsingNow,
+					now,
+					hasNow = false,
+					zonedNow,
+					wallNow,
+					parsedDateParts,
+					out;
+
+				if (!parsingInZone) {
+					parsingNow = undefined;
+					parsingNowFunction = savedNow;
+					hasParsingNow = false;
+				}
+				parsingInZone = true;
+				moment.now = function () {
+					if (!hasNow) {
+						if (!hasParsingNow) {
+							parsingNow = parsingNowFunction.call(moment);
+							hasParsingNow = true;
+						}
+						now = parsingNow;
+						hasNow = true;
+						zonedNow = moment.tz(now, name);
+						wallNow = zonedNow.valueOf() + zonedNow.utcOffset() * 60000;
+					}
+					return wallNow;
+				};
+				if (stringInput) {
+					moment.defaultZone = utcDefaultZone;
+				}
+				try {
+					out = moment.utc.apply(null, args);
+					if (stringInput && hasNow && out._a && out._tzm !== undefined) {
+						parsedDateParts = out.parsingFlags().parsedDateParts;
+						if (!parsedDateParts || parsedDateParts[0] == null || parsedDateParts[1] == null || parsedDateParts[2] == null) {
+							moment.now = function () {
+								return now;
+							};
+							moment.defaultZone = savedDefaultZone;
+							out = moment.utc.apply(null, args);
+						}
+					}
+				} finally {
+					moment.now = savedNow;
+					moment.defaultZone = savedDefaultZone;
+					parsingInZone = savedParsingInZone;
+					if (!savedParsingInZone) {
+						parsingNow = savedParsingNow;
+						parsingNowFunction = savedParsingNowFunction;
+						hasParsingNow = savedHasParsingNow;
+					}
+				}
+
+				return out;
+			}
+
 			function logError (message) {
 				if (typeof console !== 'undefined' && typeof console.error === 'function') {
 					console.error(message);
@@ -143597,10 +143845,13 @@ function requireMomentTimezone$1 () {
 			function tz (input) {
 				var args = Array.prototype.slice.call(arguments, 0, -1),
 					name = arguments[arguments.length - 1],
-					out  = moment.utc.apply(null, args),
-					zone;
+					objectInput = isObjectInput(input),
+					stringInput = args.length > 0 && typeof input === 'string',
+					zone = objectInput || stringInput ? getZone(name) : null,
+					out = objectInput && zone ? parseWithZoneNow(args, name) :
+						stringInput && zone ? parseWithZoneNow(args, name, true) : moment.utc.apply(null, args);
 
-				if (!moment.isMoment(input) && needsOffset(out) && (zone = getZone(name))) {
+				if (!moment.isMoment(input) && needsOffset(out) && (zone || (!objectInput && (zone = getZone(name))))) {
 					out.add(zone.parse(out), 'minutes');
 				}
 
@@ -143640,10 +143891,49 @@ function requireMomentTimezone$1 () {
 			moment.tz = tz;
 
 			moment.defaultZone = null;
+			var momentGetDefaultDateParts = moment._getDefaultDateParts;
+			if (momentGetDefaultDateParts) {
+				moment._getDefaultDateParts = function (config, now, forWeek) {
+					var zone = moment.defaultZone,
+						zonedNow,
+						dateParts,
+						savedIgnoredInput,
+						savedHasIgnoredInput;
+					forWeek = forWeek || config._isDefaultDatePartsForWeek;
+
+					if (parsingInZone && config._tzm === undefined) {
+						zonedNow = new Date(now);
+						return [zonedNow.getUTCFullYear(), zonedNow.getUTCMonth(), zonedNow.getUTCDate()];
+					}
+
+					if (zone && !config._useUTC && config._tzm === undefined) {
+						zonedNow = new Date(now - zone.utcOffset(now) * 60000);
+						return [zonedNow.getUTCFullYear(), zonedNow.getUTCMonth(), zonedNow.getUTCDate()];
+					}
+
+					if (forWeek && (config._useUTC || config._tzm !== undefined)) {
+						savedIgnoredInput = ignoreDefaultZoneForInput;
+						savedHasIgnoredInput = hasIgnoredDefaultZoneInput;
+						ignoreDefaultZoneForInput = now;
+						hasIgnoredDefaultZoneInput = true;
+						try {
+							dateParts = momentGetDefaultDateParts.call(this, config, now, forWeek);
+						} finally {
+							ignoreDefaultZoneForInput = savedIgnoredInput;
+							hasIgnoredDefaultZoneInput = savedHasIgnoredInput;
+						}
+						return dateParts;
+					}
+
+					return momentGetDefaultDateParts.call(this, config, now, forWeek);
+				};
+			}
 
 			moment.updateOffset = function (mom, keepTime) {
-				var zone = moment.defaultZone,
-					offset;
+				var zone = hasIgnoredDefaultZoneInput && ignoreDefaultZoneForInput === mom._i ? null : moment.defaultZone,
+					offset,
+					localTimestamp,
+					normalizedTimestamp;
 
 				if (mom._z === undefined) {
 					if (zone && needsOffset(mom) && !mom._isUTC && mom.isValid()) {
@@ -143654,6 +143944,20 @@ function requireMomentTimezone$1 () {
 				}
 				if (mom._z) {
 					offset = mom._z.utcOffset(mom);
+					if (keepTime) {
+						// Resolve local times inside a forward gap using the configured
+						// invalid-input policy before applying the new offset.
+						localTimestamp = mom._d.valueOf();
+						if (!mom._isUTC) {
+							localTimestamp -= mom._d.getTimezoneOffset() * 60000;
+						}
+						if (mom._z.utcOffset(localTimestamp + offset * 60000) !== offset) {
+							offset = mom._z.parse(localTimestamp);
+							localTimestamp += offset * 60000;
+							offset = mom._z.utcOffset(localTimestamp);
+							normalizedTimestamp = localTimestamp - offset * 60000;
+						}
+					}
 					if (Math.abs(offset) < 16) {
 						offset = offset / 60;
 					}
@@ -143664,6 +143968,9 @@ function requireMomentTimezone$1 () {
 					} else {
 						mom.zone(offset, keepTime);
 					}
+					if (normalizedTimestamp != null) {
+						mom._d.setTime(normalizedTimestamp);
+					}
 				}
 			};
 
@@ -149568,14 +149875,10 @@ const triggerItemAction$1 = (scope, item) => {
 const getDatasourceFromExpr$1 = (expr, scope) => {
     const isBoundToVariable = startsWith$1(expr, 'Variables.');
     const isBoundToWidget = startsWith$1(expr, 'Widgets.');
-    const isBoundToActivePageVar = startsWith$1(expr, 'App.activePage.Variables.');
     const parts = expr.split('.');
     if (isBoundToVariable) {
         return get$2(scope.viewParent.Variables, parts[1]);
     }
-    if (isBoundToActivePageVar) {
-        return get$2(scope.viewParent?.App?.activePage?.Variables, parts[3]);
-    }
     if (isBoundToWidget) {
         const widgetScope = get$2(scope.viewParent.Widgets, parts[1]);
         const widgetDatasetBoundExpr = widgetScope.$attrs.get('datasetboundexpr');
@@ -188246,11 +188549,22 @@ function requireConventions () {
 		XMLNS: 'http://www.w3.org/2000/xmlns/',
 	});
 
+	//[4]   	NameStartChar	   ::=   	":" | [A-Z] | "_" | [a-z] | [#xC0-#xD6] | [#xD8-#xF6] | [#xF8-#x2FF] | [#x370-#x37D] | [#x37F-#x1FFF] | [#x200C-#x200D] | [#x2070-#x218F] | [#x2C00-#x2FEF] | [#x3001-#xD7FF] | [#xF900-#xFDCF] | [#xFDF0-#xFFFD] | [#x10000-#xEFFFF]
+	//[4a]   	NameChar	   ::=   	NameStartChar | "-" | "." | [0-9] | #xB7 | [#x0300-#x036F] | [#x203F-#x2040]
+	//[5]   	Name	   ::=   	NameStartChar (NameChar)*
+	var nameStartChar = /[A-Z_a-z\xC0-\xD6\xD8-\xF6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD]/;//\u10000-\uEFFFF
+	var nameChar = new RegExp("[\\-\\.0-9"+nameStartChar.source.slice(1,-1)+"\\u00B7\\u0300-\\u036F\\u203F-\\u2040]");
+	var tagNamePattern = new RegExp('^'+nameStartChar.source+nameChar.source+'*(?:\:'+nameStartChar.source+nameChar.source+'*)?$');
+	//var tagNamePattern = /^[a-zA-Z_][\w\-\.]*(?:\:[a-zA-Z_][\w\-\.]*)?$/
+
 	conventions.assign = assign;
 	conventions.find = find;
 	conventions.freeze = freeze;
 	conventions.MIME_TYPE = MIME_TYPE;
 	conventions.NAMESPACE = NAMESPACE;
+	conventions.nameStartChar = nameStartChar;
+	conventions.nameChar = nameChar;
+	conventions.tagNamePattern = tagNamePattern;
 	return conventions;
 }
 
@@ -188263,6 +188577,7 @@ function requireDom () {
 
 	var find = conventions.find;
 	var NAMESPACE = conventions.NAMESPACE;
+	var tagNamePattern = conventions.tagNamePattern;
 
 	/**
 	 * A prerequisite for `[].filter`, to drop elements that are empty
@@ -188494,6 +188809,13 @@ function requireDom () {
 	 * used for attributes or DocumentType entities
 	 */
 	function NamedNodeMap() {
+		// nodeName -> Attr membership index; lets the parse-time de-duplication in
+		// setNamedItem resolve an existing attribute in O(1) instead of scanning the
+		// list, so building an element with M attributes costs O(M) rather than O(M^2).
+		// The numbered entries and length remain the sole authority for attribute order.
+		// Object.create(null) so an attribute named __proto__ or constructor is an
+		// ordinary key.
+		this._nameIndex = Object.create(null);
 	}
 	function _findNodeIndex(list,node){
 		var i = list.length;
@@ -188502,12 +188824,27 @@ function requireDom () {
 		}
 	}
 
+	function _nnmIndexAdd(list, attr) {
+		list._nameIndex[attr.nodeName] = attr;
+	}
+	function _nnmIndexRemove(list, attr) {
+		// Only drop the entry if it still points at this attribute; a replacement with
+		// a different nodeName may already have re-keyed it.
+		if (list._nameIndex[attr.nodeName] === attr) {
+			delete list._nameIndex[attr.nodeName];
+		}
+	}
+
 	function _addNamedNode(el,list,newAttr,oldAttr){
 		if(oldAttr){
 			list[_findNodeIndex(list,oldAttr)] = newAttr;
+			// oldAttr leaves the list; drop its index entry (its nodeName may differ
+			// from newAttr's when the replacement came via setNamedItemNS).
+			_nnmIndexRemove(list, oldAttr);
 		}else {
 			list[list.length++] = newAttr;
 		}
+		_nnmIndexAdd(list, newAttr);
 		if(el){
 			newAttr.ownerElement = el;
 			var doc = el.ownerDocument;
@@ -188526,6 +188863,7 @@ function requireDom () {
 				list[i] = list[++i];
 			}
 			list.length = lastIndex;
+			_nnmIndexRemove(list, attr);
 			if(el){
 				var doc = el.ownerDocument;
 				if(doc){
@@ -188559,7 +188897,11 @@ function requireDom () {
 			if(el && el!=this._ownerElement){
 				throw new DOMException(INUSE_ATTRIBUTE_ERR);
 			}
-			var oldAttr = this.getNamedItem(attr.nodeName);
+			// Resolve any existing attribute with the same nodeName through the O(1)
+			// membership index rather than an O(M) scan — this is the parse-dedup hot
+			// path (setAttributeNode per attribute during parse). Absent -> undefined,
+			// matching getNamedItem's contract.
+			var oldAttr = this._nameIndex[attr.nodeName];
 			_addNamedNode(this._ownerElement,this,attr,oldAttr);
 			return oldAttr;
 		},
@@ -188792,9 +189134,38 @@ function requireDom () {
 					while (child) {
 						var next = child.nextSibling;
 						if (next !== null && next.nodeType === TEXT_NODE && child.nodeType === TEXT_NODE) {
-							node.removeChild(next);
-							child.appendData(next.data);
-							// Do not advance child: re-check new nextSibling for another text run
+							// Merge the whole run of adjacent text nodes at once: gather the
+							// following text siblings' data, unlink them in a single pass, and
+							// re-index the child list a single time. Per-sibling `removeChild`
+							// (each an O(K) re-index) plus per-sibling `appendData` (each an O(K)
+							// string rebuild) is O(K^2) over a long run of single-character text
+							// nodes; this keeps it O(K). The first text node of the run survives
+							// and carries the concatenated data, preserving node identity and
+							// locator semantics.
+							var tail = [];
+							var sibling = next;
+							while (sibling !== null && sibling.nodeType === TEXT_NODE) {
+								tail.push(sibling.data);
+								sibling = sibling.nextSibling;
+							}
+							// `sibling` is now the first non-text node after the run, or null.
+							var removed = child.nextSibling;
+							while (removed !== sibling) {
+								var following = removed.nextSibling;
+								removed.parentNode = null;
+								removed.previousSibling = null;
+								removed.nextSibling = null;
+								removed = following;
+							}
+							child.nextSibling = sibling;
+							if (sibling !== null) {
+								sibling.previousSibling = child;
+							} else {
+								node.lastChild = child;
+							}
+							child.appendData(tail.join('')); // single O(K) string rebuild
+							_onUpdateChild(node.ownerDocument, node); // single O(K) re-index
+							child = sibling;
 						} else {
 							child = next;
 						}
@@ -189605,8 +189976,10 @@ function requireDom () {
 		 * - it does not do any input validation on the arguments and doesn't throw "InvalidCharacterError".
 		 *
 		 * Note: When the resulting document is serialized with `requireWellFormed: true`, the
-		 * serializer throws with code `INVALID_STATE_ERR` if `.data` contains `?>` (W3C DOM Parsing
-		 * §3.2.1.7). Without that option the data is emitted verbatim.
+		 * serializer throws with code `INVALID_STATE_ERR` if `.target` is not a valid XML `NCName`
+		 * (a `Name` with no colon) or is an ASCII case-insensitive match for `"xml"`, or if `.data`
+		 * contains `?>` (W3C DOM Parsing §3.2.1.7). Without that option the target and data are
+		 * emitted verbatim.
 		 *
 		 * @param {string} target
 		 * @param {string} data
@@ -189631,7 +190004,27 @@ function requireDom () {
 			node.specified = true;
 			return node;
 		},
+		/**
+		 * Creates an EntityReference object, serialized as `&name;`.
+		 *
+		 * The `name` is validated against the XML `Name` production at creation time; an invalid name
+		 * throws a `DOMException` with code `INVALID_CHARACTER_ERR`. When the resulting node is
+		 * serialized with `requireWellFormed: true`, the serializer re-validates `nodeName` and throws
+		 * a `DOMException` with code `INVALID_STATE_ERR` if a later `nodeName` mutation made it invalid;
+		 * without that option the name is emitted verbatim.
+		 *
+		 * Note: xmldom does not expand entities — the parser resolves entity references inline and never
+		 * constructs `EntityReference` nodes, so this method is the only producer.
+		 *
+		 * @param {string} name The name of the entity to reference.
+		 * @returns {EntityReference}
+		 * @throws {DOMException} With code `INVALID_CHARACTER_ERR` when `name` is not a valid XML `Name`.
+		 * @see https://www.w3.org/TR/DOM-Level-3-Core/core.html#ID-392B75AE
+		 */
 		createEntityReference :	function(name){
+			if (!tagNamePattern.test(name)) {
+				throw new DOMException(INVALID_CHARACTER_ERR, 'not a valid xml name "' + name + '"');
+			}
 			var node = new EntityReference();
 			node.ownerDocument	= this;
 			node.nodeName	= name;
@@ -189843,15 +190236,16 @@ function requireDom () {
 	/**
 	 * Represents a DocumentType node (the `<!DOCTYPE ...>` declaration).
 	 *
-	 * `publicId`, `systemId`, and `internalSubset` are plain own-property assignments.
+	 * `name`, `publicId`, `systemId`, and `internalSubset` are plain own-property assignments.
 	 * xmldom does not enforce the `readonly` constraint declared by the WHATWG DOM spec —
 	 * direct property writes succeed silently. Values are serialized verbatim when
 	 * `requireWellFormed` is false (the default). When the serializer is invoked with
 	 * `requireWellFormed: true` (via the 4th-parameter options object), it validates each
-	 * field and throws `DOMException` with code `INVALID_STATE_ERR` on invalid values.
+	 * field — including `name`, which is checked against the XML `Name` production — and throws
+	 * `DOMException` with code `INVALID_STATE_ERR` on invalid values.
 	 *
 	 * @class
-	 * @see https://developer.mozilla.org/en-US/docs/Web/API/DocumentType MDN
+	 * @see https://developer.mozilla.org/docs/Web/API/DocumentType MDN
 	 */
 	function DocumentType() {
 	}	DocumentType.prototype.nodeType = DOCUMENT_TYPE_NODE;
@@ -189865,6 +190259,20 @@ function requireDom () {
 	}	Entity.prototype.nodeType = ENTITY_NODE;
 	_extends(Entity,Node);
 
+	/**
+	 * Represents an EntityReference node, serialized as `&nodeName;`.
+	 *
+	 * `nodeName` is the referenced entity's name, stored verbatim. When serialized with
+	 * `requireWellFormed: true`, the serializer validates `nodeName` against the XML `Name` production
+	 * and throws a `DOMException` with code `INVALID_STATE_ERR` if it does not match; without that
+	 * option the name is emitted verbatim between `&` and `;`.
+	 *
+	 * Note: xmldom does not expand entities — the parser resolves entity references inline and never
+	 * constructs `EntityReference` nodes, so the only producer is `Document.createEntityReference`.
+	 *
+	 * @class
+	 * @see https://www.w3.org/TR/xml/#NT-Name
+	 */
 	function EntityReference() {
 	}	EntityReference.prototype.nodeType = ENTITY_REFERENCE_NODE;
 	_extends(EntityReference,Node);
@@ -189902,14 +190310,20 @@ function requireDom () {
 	 * @returns {string}
 	 * @throws {DOMException}
 	 * With code `INVALID_STATE_ERR` when `requireWellFormed` is `true` and:
+	 * - an Element's qualified name (including any namespace prefix) is not a valid XML QName,
+	 * - an attribute's qualified name (including a synthesized `xmlns:` namespace declaration) is
+	 *   not a valid XML QName,
 	 * - a CDATASection node's data contains `"]]>"`,
 	 * - a Comment node's data contains `"-->"` (bare `"--"` does not throw on this branch),
-	 * - a ProcessingInstruction's data contains `"?>"`,
+	 * - a ProcessingInstruction's target is not a valid XML `NCName` (a `Name` with no colon) or is
+	 *   an ASCII case-insensitive match for `"xml"`, or its data contains `"?>"`,
+	 * - a DocumentType's `name` is not a valid XML `Name` (XML 1.0 production [5]),
 	 * - a DocumentType's `publicId` is non-empty and does not match the XML `PubidLiteral`
 	 *   production,
 	 * - a DocumentType's `systemId` is non-empty and does not match the XML `SystemLiteral`
-	 *   production, or
-	 * - a DocumentType's `internalSubset` contains `"]>"`.
+	 *   production,
+	 * - a DocumentType's `internalSubset` contains `"]>"`, or
+	 * - an EntityReference's `nodeName` is not a valid XML `Name` (XML 1.0 production [5]).
 	 * Note: xmldom does not enforce `readonly` on DocumentType fields — direct property
 	 * writes succeed and are covered by the serializer-level checks above.
 	 * @see https://html.spec.whatwg.org/#dom-xmlserializer-serializetostring
@@ -189983,7 +190397,10 @@ function requireDom () {
 	 * @see https://www.w3.org/TR/xml11/#AVNormalize
 	 * @see https://w3c.github.io/DOM-Parsing/#serializing-an-element-s-attributes
 	 */
-	function addSerializedAttribute(buf, qualifiedName, value) {
+	function addSerializedAttribute(buf, qualifiedName, value, requireWellFormed) {
+		if (requireWellFormed && !tagNamePattern.test(qualifiedName)) {
+			throw new DOMException(INVALID_STATE_ERR, 'The attribute name "' + qualifiedName + '" is not a valid XML QName');
+		}
 		buf.push(' ', qualifiedName, '="', value.replace(/[<>&"\t\n\r]/g, _xmlEncoder), '"');
 	}
 
@@ -190049,6 +190466,9 @@ function requireDom () {
 							}
 						}
 
+						if (requireWellFormed && !tagNamePattern.test(prefixedNodeName)) {
+							throw new DOMException(INVALID_STATE_ERR, 'The element name "' + prefixedNodeName + '" is not a valid XML QName');
+						}
 						buf.push('<', prefixedNodeName);
 
 						// Build a fresh namespace snapshot for this element's children.
@@ -190068,7 +190488,7 @@ function requireDom () {
 							if (needNamespaceDefine(attr, html, childNs)) {
 								var attrPrefix = attr.prefix || '';
 								var uri = attr.namespaceURI;
-								addSerializedAttribute(buf, attrPrefix ? 'xmlns:' + attrPrefix : 'xmlns', uri);
+								addSerializedAttribute(buf, attrPrefix ? 'xmlns:' + attrPrefix : 'xmlns', uri, requireWellFormed);
 								childNs.push({ prefix: attrPrefix, namespace: uri });
 							}
 							// Apply nodeFilter and serialize the attribute.
@@ -190077,7 +190497,7 @@ function requireDom () {
 								if (typeof filteredAttr === 'string') {
 									buf.push(filteredAttr);
 								} else {
-									addSerializedAttribute(buf, filteredAttr.name, filteredAttr.value);
+									addSerializedAttribute(buf, filteredAttr.name, filteredAttr.value, requireWellFormed);
 								}
 							}
 						}
@@ -190086,7 +190506,7 @@ function requireDom () {
 						if (nodeName === prefixedNodeName && needNamespaceDefine(n, html, childNs)) {
 							var nodePrefix = n.prefix || '';
 							var uri = n.namespaceURI;
-							addSerializedAttribute(buf, nodePrefix ? 'xmlns:' + nodePrefix : 'xmlns', uri);
+							addSerializedAttribute(buf, nodePrefix ? 'xmlns:' + nodePrefix : 'xmlns', uri, requireWellFormed);
 							childNs.push({ prefix: nodePrefix, namespace: uri });
 						}
 
@@ -190119,7 +190539,7 @@ function requireDom () {
 						return { ns: ns.slice(), isHTML: html, tag: null };
 
 					case ATTRIBUTE_NODE:
-						addSerializedAttribute(buf, n.name, n.value);
+						addSerializedAttribute(buf, n.name, n.value, requireWellFormed);
 						return null;
 
 					case TEXT_NODE:
@@ -190158,6 +190578,9 @@ function requireDom () {
 
 					case DOCUMENT_TYPE_NODE:
 						if (requireWellFormed) {
+							if (!tagNamePattern.test(n.name)) {
+								throw new DOMException(INVALID_STATE_ERR, 'The doctype name "' + n.name + '" is not a valid XML Name');
+							}
 							if (n.publicId && !/^("[\x20\r\na-zA-Z0-9\-()+,.\/:=?;!*#@$_%']*"|'[\x20\r\na-zA-Z0-9\-()+,.\/:=?;!*#@$_%'"]*')$/.test(n.publicId)) {
 								throw new DOMException(INVALID_STATE_ERR, 'DocumentType publicId is not a valid PubidLiteral');
 							}
@@ -190189,13 +190612,27 @@ function requireDom () {
 						return null;
 
 					case PROCESSING_INSTRUCTION_NODE:
-						if (requireWellFormed && n.data.indexOf('?>') !== -1) {
-							throw new DOMException(INVALID_STATE_ERR, 'The ProcessingInstruction data contains "?>"');
+						if (requireWellFormed) {
+							if (!tagNamePattern.test(n.target) || n.target.indexOf(':') !== -1 || n.target.toLowerCase() === 'xml') {
+								throw new DOMException(
+									INVALID_STATE_ERR,
+									'The processing instruction target "' + n.target + '" is not a valid XML NCName or is reserved'
+								);
+							}
+							if (n.data.indexOf('?>') !== -1) {
+								throw new DOMException(INVALID_STATE_ERR, 'The ProcessingInstruction data contains "?>"');
+							}
 						}
 						buf.push('<?', n.target, ' ', n.data, '?>');
 						return null;
 
 					case ENTITY_REFERENCE_NODE:
+						if (requireWellFormed && !tagNamePattern.test(n.nodeName)) {
+							throw new DOMException(
+								INVALID_STATE_ERR,
+								'The entity reference name "' + n.nodeName + '" is not a valid XML Name'
+							);
+						}
 						buf.push('&', n.nodeName, ';');
 						return null;
 
@@ -192576,14 +193013,8 @@ function requireSax () {
 	if (hasRequiredSax) return sax;
 	hasRequiredSax = 1;
 	var NAMESPACE = requireConventions().NAMESPACE;
+	var tagNamePattern = requireConventions().tagNamePattern;
 
-	//[4]   	NameStartChar	   ::=   	":" | [A-Z] | "_" | [a-z] | [#xC0-#xD6] | [#xD8-#xF6] | [#xF8-#x2FF] | [#x370-#x37D] | [#x37F-#x1FFF] | [#x200C-#x200D] | [#x2070-#x218F] | [#x2C00-#x2FEF] | [#x3001-#xD7FF] | [#xF900-#xFDCF] | [#xFDF0-#xFFFD] | [#x10000-#xEFFFF]
-	//[4a]   	NameChar	   ::=   	NameStartChar | "-" | "." | [0-9] | #xB7 | [#x0300-#x036F] | [#x203F-#x2040]
-	//[5]   	Name	   ::=   	NameStartChar (NameChar)*
-	var nameStartChar = /[A-Z_a-z\xC0-\xD6\xD8-\xF6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD]/;//\u10000-\uEFFFF
-	var nameChar = new RegExp("[\\-\\.0-9"+nameStartChar.source.slice(1,-1)+"\\u00B7\\u0300-\\u036F\\u203F-\\u2040]");
-	var tagNamePattern = new RegExp('^'+nameStartChar.source+nameChar.source+'*(?:\:'+nameStartChar.source+nameChar.source+'*)?$');
-	//var tagNamePattern = /^[a-zA-Z_][\w\-\.]*(?:\:[a-zA-Z_][\w\-\.]*)?$/
 	//var handlers = 'resolveEntity,getExternalSubset,characters,endDocument,endElement,endPrefixMapping,ignorableWhitespace,processingInstruction,setDocumentLocator,skippedEntity,startDocument,startElement,startPrefixMapping,notationDecl,unparsedEntityDecl,error,fatalError,warning,attributeDecl,elementDecl,externalEntityDecl,internalEntityDecl,comment,endCDATA,endDTD,endEntity,startCDATA,startDTD,startEntity'.split(',')
 
 	//S_TAG,	S_ATTR,	S_EQ,	S_ATTR_NOQUOT_VALUE
@@ -192694,7 +193125,13 @@ function requireSax () {
 				switch(source.charAt(tagStart+1)){
 				case '/':
 					var end = source.indexOf('>',tagStart+3);
-					var tagName = source.substring(tagStart + 2, end).replace(/[ \t\n\r]+$/g, '');
+					// Anchored trailing-whitespace trim. The former `/[ \t\n\r]+$/g` backtracked
+					// quadratically on a name shaped `whitespace-run + non-whitespace char`
+					// (an end tag `</   …   x>`): from every start position it extended `[ws]+`
+					// to the end and then failed the `$` anchor. This anchored form matches the
+					// whole string once and captures everything up to the last non-whitespace
+					// character, so it trims in linear time with byte-identical output.
+					var tagName = source.substring(tagStart + 2, end).replace(/^([\s\S]*?[^ \t\n\r])?[ \t\n\r]*$/, '$1');
 					var config = parseStack.pop();
 					if(end<0){
 
@@ -192705,6 +193142,14 @@ function requireSax () {
 		        		tagName = tagName.replace(/[\s<].*/,'');
 		        		errorHandler.error("end tag name: "+tagName+' maybe not complete');
 		        		end = tagStart+1+tagName.length;
+					}else if(/[ \t\n\r]/.test(tagName) && tagNamePattern.test(tagName.split(/[ \t\n\r]/)[0])){
+						// The XML `ETag` production is `'</' Name S? '>'`: only optional whitespace may follow
+						// the `Name`. A valid `Name` followed by whitespace and non-whitespace residue (e.g.
+						// `</a\nbogus>` or `</a bogus>`) is not well-formed, but historically it was silently
+						// accepted (the malformed end tag ignored, the residue dropped, the element left on the
+						// stack). Report it as a recoverable `error` (which a custom errorHandler may escalate to
+						// fatal) while keeping the existing recovery so the parsed DOM stays byte-identical.
+						errorHandler.error('end tag name is followed by whitespace and trailing content: "'+tagName+'"');
 					}
 					var localNSMap = config.localNSMap;
 					var endMatch = config.tagName == tagName;
@@ -192828,6 +193273,15 @@ function requireSax () {
 		var s = S_TAG;//status
 		while(true){
 			var c = source.charAt(p);
+			if (s === S_TAG && c === '<') {
+				// A `<` can never occur inside a tag name. Without this guard the scan runs
+				// on to the next `>` (or EOF) before the tag name is rejected, so a document
+				// with many `<` inside a malformed tag makes each one-character recovery step
+				// re-scan to the distant `>` — O(n^2). Stopping at the `<` keeps each recovery
+				// step bounded. The candidate scanned so far is reported raw, consistent with
+				// the sibling invalid-tag-name throw below.
+				throw new Error('unexpected < in tag name: ' + source.slice(start, p));
+			}
 			switch(c){
 			case '=':
 				if(s === S_ATTR){//attrName
@@ -193020,9 +193474,13 @@ function requireSax () {
 			if(nsPrefix !== false){//hack!!
 				if(localNSMap == null){
 					localNSMap = {};
-					//console.log(currentNSMap,0)
-					_copy(currentNSMap,currentNSMap={});
-					//console.log(currentNSMap,1)
+					// Derive the child scope's namespace map by prototype-chain inheritance
+					// instead of a flat copy: lookups inherit ancestor prefixes transparently,
+					// so a document nesting N scopes retains O(N) map entries rather than
+					// sum(1..N) = O(N^2). localNSMap stays a flat own-only record of the
+					// prefixes declared at THIS element, so own-property enumeration
+					// (endPrefixMapping below) still reports only local declarations.
+					currentNSMap = Object.create(currentNSMap);
 				}
 				currentNSMap[nsPrefix] = localNSMap[nsPrefix] = value;
 				a.uri = NAMESPACE.XMLNS;
@@ -200061,7 +200519,7 @@ function requireMomentTimezone () {
 	hasRequiredMomentTimezone = 1;
 	(function (module) {
 		//! moment-timezone.js
-		//! version : 0.6.2
+		//! version : 0.6.5
 		//! Copyright (c) JS Foundation and other contributors
 		//! license : MIT
 		//! github.com/moment/moment-timezone
@@ -200087,12 +200545,18 @@ function requireMomentTimezone () {
 			// 	return moment;
 			// }
 
-			var VERSION = "0.6.2",
+			var VERSION = "0.6.5",
 				zones = {},
 				links = {},
 				countries = {},
 				names = {},
 				guesses = {},
+				parsingInZone = false,
+				parsingNow,
+				parsingNowFunction,
+				hasParsingNow = false,
+				ignoreDefaultZoneForInput,
+				hasIgnoredDefaultZoneInput = false,
 				cachedGuess;
 
 			if (!moment || typeof moment.version !== 'string') {
@@ -200264,17 +200728,16 @@ function requireMomentTimezone () {
 						offsets = this.offsets,
 						untils  = this.untils,
 						max     = untils.length - 1,
-						offset, offsetNext, offsetPrev, i;
+						offset, offsetNext, i;
 
 					for (i = 0; i < max; i++) {
 						offset     = offsets[i];
 						offsetNext = offsets[i + 1];
-						offsetPrev = offsets[i ? i - 1 : i];
 
 						if (offset < offsetNext && tz.moveAmbiguousForward) {
 							offset = offsetNext;
-						} else if (offset > offsetPrev && tz.moveInvalidForward) {
-							offset = offsetPrev;
+						} else if (offset > offsetNext && tz.moveInvalidForward) {
+							offset = offsetNext;
 						}
 
 						if (target < untils[i] - (offset * 60000)) {
@@ -200299,6 +200762,15 @@ function requireMomentTimezone () {
 				}
 			};
 
+			var utcDefaultZone = new Zone();
+			utcDefaultZone._set({
+				name : 'UTC',
+				abbrs : ['UTC'],
+				untils : [Infinity],
+				offsets : [0],
+				population : 0
+			});
+
 			/************************************
 				Country object
 			************************************/
@@ -200636,6 +201108,85 @@ function requireMomentTimezone () {
 				return !!(m._a && (m._tzm === undefined) && !isUnixTimestamp);
 			}
 
+			function isObjectInput (input) {
+				var prop;
+
+				if (moment.isMoment(input) || input === null || Object.prototype.toString.call(input) !== '[object Object]') {
+					return false;
+				}
+				if (Object.getOwnPropertyNames) {
+					return Object.getOwnPropertyNames(input).length > 0;
+				}
+				for (prop in input) {
+					if (Object.prototype.hasOwnProperty.call(input, prop)) {
+						return true;
+					}
+				}
+				return false;
+			}
+
+			function parseWithZoneNow (args, name, stringInput) {
+				var savedNow = moment.now,
+					savedDefaultZone = moment.defaultZone,
+					savedParsingInZone = parsingInZone,
+					savedParsingNow = parsingNow,
+					savedParsingNowFunction = parsingNowFunction,
+					savedHasParsingNow = hasParsingNow,
+					now,
+					hasNow = false,
+					zonedNow,
+					wallNow,
+					parsedDateParts,
+					out;
+
+				if (!parsingInZone) {
+					parsingNow = undefined;
+					parsingNowFunction = savedNow;
+					hasParsingNow = false;
+				}
+				parsingInZone = true;
+				moment.now = function () {
+					if (!hasNow) {
+						if (!hasParsingNow) {
+							parsingNow = parsingNowFunction.call(moment);
+							hasParsingNow = true;
+						}
+						now = parsingNow;
+						hasNow = true;
+						zonedNow = moment.tz(now, name);
+						wallNow = zonedNow.valueOf() + zonedNow.utcOffset() * 60000;
+					}
+					return wallNow;
+				};
+				if (stringInput) {
+					moment.defaultZone = utcDefaultZone;
+				}
+				try {
+					out = moment.utc.apply(null, args);
+					if (stringInput && hasNow && out._a && out._tzm !== undefined) {
+						parsedDateParts = out.parsingFlags().parsedDateParts;
+						if (!parsedDateParts || parsedDateParts[0] == null || parsedDateParts[1] == null || parsedDateParts[2] == null) {
+							moment.now = function () {
+								return now;
+							};
+							moment.defaultZone = savedDefaultZone;
+							out = moment.utc.apply(null, args);
+						}
+					}
+				} finally {
+					moment.now = savedNow;
+					moment.defaultZone = savedDefaultZone;
+					parsingInZone = savedParsingInZone;
+					if (!savedParsingInZone) {
+						parsingNow = savedParsingNow;
+						parsingNowFunction = savedParsingNowFunction;
+						hasParsingNow = savedHasParsingNow;
+					}
+				}
+
+				return out;
+			}
+
 			function logError (message) {
 				if (typeof console !== 'undefined' && typeof console.error === 'function') {
 					console.error(message);
@@ -200649,10 +201200,13 @@ function requireMomentTimezone () {
 			function tz (input) {
 				var args = Array.prototype.slice.call(arguments, 0, -1),
 					name = arguments[arguments.length - 1],
-					out  = moment.utc.apply(null, args),
-					zone;
+					objectInput = isObjectInput(input),
+					stringInput = args.length > 0 && typeof input === 'string',
+					zone = objectInput || stringInput ? getZone(name) : null,
+					out = objectInput && zone ? parseWithZoneNow(args, name) :
+						stringInput && zone ? parseWithZoneNow(args, name, true) : moment.utc.apply(null, args);
 
-				if (!moment.isMoment(input) && needsOffset(out) && (zone = getZone(name))) {
+				if (!moment.isMoment(input) && needsOffset(out) && (zone || (!objectInput && (zone = getZone(name))))) {
 					out.add(zone.parse(out), 'minutes');
 				}
 
@@ -200692,10 +201246,49 @@ function requireMomentTimezone () {
 			moment.tz = tz;
 
 			moment.defaultZone = null;
+			var momentGetDefaultDateParts = moment._getDefaultDateParts;
+			if (momentGetDefaultDateParts) {
+				moment._getDefaultDateParts = function (config, now, forWeek) {
+					var zone = moment.defaultZone,
+						zonedNow,
+						dateParts,
+						savedIgnoredInput,
+						savedHasIgnoredInput;
+					forWeek = forWeek || config._isDefaultDatePartsForWeek;
+
+					if (parsingInZone && config._tzm === undefined) {
+						zonedNow = new Date(now);
+						return [zonedNow.getUTCFullYear(), zonedNow.getUTCMonth(), zonedNow.getUTCDate()];
+					}
+
+					if (zone && !config._useUTC && config._tzm === undefined) {
+						zonedNow = new Date(now - zone.utcOffset(now) * 60000);
+						return [zonedNow.getUTCFullYear(), zonedNow.getUTCMonth(), zonedNow.getUTCDate()];
+					}
+
+					if (forWeek && (config._useUTC || config._tzm !== undefined)) {
+						savedIgnoredInput = ignoreDefaultZoneForInput;
+						savedHasIgnoredInput = hasIgnoredDefaultZoneInput;
+						ignoreDefaultZoneForInput = now;
+						hasIgnoredDefaultZoneInput = true;
+						try {
+							dateParts = momentGetDefaultDateParts.call(this, config, now, forWeek);
+						} finally {
+							ignoreDefaultZoneForInput = savedIgnoredInput;
+							hasIgnoredDefaultZoneInput = savedHasIgnoredInput;
+						}
+						return dateParts;
+					}
+
+					return momentGetDefaultDateParts.call(this, config, now, forWeek);
+				};
+			}
 
 			moment.updateOffset = function (mom, keepTime) {
-				var zone = moment.defaultZone,
-					offset;
+				var zone = hasIgnoredDefaultZoneInput && ignoreDefaultZoneForInput === mom._i ? null : moment.defaultZone,
+					offset,
+					localTimestamp,
+					normalizedTimestamp;
 
 				if (mom._z === undefined) {
 					if (zone && needsOffset(mom) && !mom._isUTC && mom.isValid()) {
@@ -200706,6 +201299,20 @@ function requireMomentTimezone () {
 				}
 				if (mom._z) {
 					offset = mom._z.utcOffset(mom);
+					if (keepTime) {
+						// Resolve local times inside a forward gap using the configured
+						// invalid-input policy before applying the new offset.
+						localTimestamp = mom._d.valueOf();
+						if (!mom._isUTC) {
+							localTimestamp -= mom._d.getTimezoneOffset() * 60000;
+						}
+						if (mom._z.utcOffset(localTimestamp + offset * 60000) !== offset) {
+							offset = mom._z.parse(localTimestamp);
+							localTimestamp += offset * 60000;
+							offset = mom._z.utcOffset(localTimestamp);
+							normalizedTimestamp = localTimestamp - offset * 60000;
+						}
+					}
 					if (Math.abs(offset) < 16) {
 						offset = offset / 60;
 					}
@@ -200716,6 +201323,9 @@ function requireMomentTimezone () {
 					} else {
 						mom.zone(offset, keepTime);
 					}
+					if (normalizedTimestamp != null) {
+						mom._d.setTime(normalizedTimestamp);
+					}
 				}
 			};
 
@@ -205555,14 +206165,10 @@ const triggerItemAction = (scope, item) => {
 const getDatasourceFromExpr = (expr, scope) => {
     const isBoundToVariable = startsWith(expr, 'Variables.');
     const isBoundToWidget = startsWith(expr, 'Widgets.');
-    const isBoundToActivePageVar = startsWith(expr, 'App.activePage.Variables.');
     const parts = expr.split('.');
     if (isBoundToVariable) {
         return get(scope.viewParent.Variables, parts[1]);
     }
-    if (isBoundToActivePageVar) {
-        return get(scope.viewParent?.App?.activePage?.Variables, parts[3]);
-    }
     if (isBoundToWidget) {
         const widgetScope = get(scope.viewParent.Widgets, parts[1]);
         const widgetDatasetBoundExpr = widgetScope.$attrs.get('datasetboundexpr');