@whitesev/domutils 1.4.8 → 1.5.1

package/dist/index.umd.js

@@ -61,6 +61,46 @@
         isShow(element) {
             return Boolean(element.getClientRects().length);
         },
+        /**
+         * 获取安全的html
+         */
+        getSafeHTML(text) {
+            // @ts-ignore
+            if (globalThis.trustedTypes) {
+                // @ts-ignore
+                const policy = globalThis.trustedTypes.createPolicy("safe-innerHTML", {
+                    createHTML: (html) => html,
+                });
+                return policy.createHTML(text);
+            }
+            else {
+                return text;
+            }
+        },
+        /**
+         * 在CSP策略下设置innerHTML
+         * @param $el 元素
+         * @param text 文本
+         */
+        setSafeHTML($el, text) {
+            // 创建 TrustedHTML 策略（需 CSP 允许）
+            try {
+                $el.innerHTML = text;
+            }
+            catch (error) {
+                // @ts-ignore
+                if (globalThis.trustedTypes) {
+                    // @ts-ignore
+                    const policy = globalThis.trustedTypes.createPolicy("safe-innerHTML", {
+                        createHTML: (html) => html,
+                    });
+                    $el.innerHTML = policy.createHTML(text);
+                }
+                else {
+                    throw new Error("trustedTypes is not defined");
+                }
+            }
+        },
         /**
          * 用于显示元素并获取它的高度宽度等其它属性
          * @param element
@@ -1039,7 +1079,7 @@
             super(option);
         }
         /** 版本号 */
-        version = "2024.12.4";
+        version = "2025.3.2";
         attr(element, attrName, attrValue) {
             let DOMUtilsContext = this;
             if (typeof element === "string") {
@@ -1096,7 +1136,7 @@
             let DOMUtilsContext = this;
             let tempElement = DOMUtilsContext.windowApi.document.createElement(tagName);
             if (typeof property === "string") {
-                tempElement.innerHTML = property;
+                DOMUtilsContext.html(tempElement, property);
                 return tempElement;
             }
             if (property == null) {
@@ -1107,6 +1147,10 @@
             }
             Object.keys(property).forEach((key) => {
                 let value = property[key];
+                if (key === "innerHTML") {
+                    DOMUtilsContext.html(tempElement, value);
+                    return;
+                }
                 tempElement[key] = value;
             });
             Object.keys(attributes).forEach((key) => {
@@ -1275,7 +1319,7 @@
                     html = html.innerHTML;
                 }
                 if ("innerHTML" in element) {
-                    element.innerHTML = html;
+                    DOMUtilsCommonUtils.setSafeHTML(element, html);
                 }
             }
         }
@@ -1381,7 +1425,12 @@
                 return Reflect.get(element, propName);
             }
             else {
-                Reflect.set(element, propName, propValue);
+                if (element instanceof Element && propName === "innerHTML") {
+                    DOMUtilsContext.html(element, propValue);
+                }
+                else {
+                    Reflect.set(element, propName, propValue);
+                }
             }
         }
         /**
@@ -1597,7 +1646,7 @@
             }
             function elementAppendChild(ele, text) {
                 if (typeof content === "string") {
-                    ele.insertAdjacentHTML("beforeend", text);
+                    ele.insertAdjacentHTML("beforeend", DOMUtilsCommonUtils.getSafeHTML(text));
                 }
                 else {
                     ele.appendChild(text);
@@ -1643,7 +1692,7 @@
                 return;
             }
             if (typeof content === "string") {
-                element.insertAdjacentHTML("afterbegin", content);
+                element.insertAdjacentHTML("afterbegin", DOMUtilsCommonUtils.getSafeHTML(content));
             }
             else {
                 let $firstChild = element.firstChild;
@@ -1680,7 +1729,7 @@
                 return;
             }
             if (typeof content === "string") {
-                element.insertAdjacentHTML("afterend", content);
+                element.insertAdjacentHTML("afterend", DOMUtilsCommonUtils.getSafeHTML(content));
             }
             else {
                 let $parent = element.parentElement;
@@ -1719,7 +1768,7 @@
                 return;
             }
             if (typeof content === "string") {
-                element.insertAdjacentHTML("beforebegin", content);
+                element.insertAdjacentHTML("beforebegin", DOMUtilsCommonUtils.getSafeHTML(content));
             }
             else {
                 let $parent = element.parentElement;
@@ -1779,7 +1828,7 @@
                 });
                 return;
             }
-            element.innerHTML = "";
+            DOMUtilsContext.html(element, "");
         }
         /**
          * 获取元素相对于文档的偏移坐标（加上文档的滚动条）
@@ -1989,10 +2038,10 @@
             if (typeof duration !== "number" || duration <= 0) {
                 throw new TypeError("duration must be a positive number");
             }
-            if (typeof callback !== "function" && callback !== void 0) {
+            if (typeof callback !== "function" && callback !== undefined) {
                 throw new TypeError("callback must be a function or null");
             }
-            if (typeof styles !== "object" || styles === void 0) {
+            if (typeof styles !== "object" || styles === undefined) {
                 throw new TypeError("styles must be an object");
             }
             if (Object.keys(styles).length === 0) {
@@ -2051,7 +2100,7 @@
             element = element;
             // 创建一个新的div元素，并将wrapperHTML作为其innerHTML
             let wrapper = DOMUtilsContext.windowApi.document.createElement("div");
-            wrapper.innerHTML = wrapperHTML;
+            DOMUtilsContext.html(wrapper, wrapperHTML);
             let wrapperFirstChild = wrapper.firstChild;
             // 将要包裹的元素插入目标元素前面
             let parentElement = element.parentElement;
@@ -2147,7 +2196,7 @@
             }
             function parseHTMLByCreateDom() {
                 let tempDIV = DOMUtilsContext.windowApi.document.createElement("div");
-                tempDIV.innerHTML = html;
+                DOMUtilsContext.html(tempDIV, html);
                 if (isComplete) {
                     return tempDIV;
                 }