@whitesev/domutils 1.4.8 → 1.5.1

package/dist/types/src/DOMUtilsCommonUtils.d.ts

@@ -7,6 +7,16 @@ declare const DOMUtilsCommonUtils: {
      * @param element
      */
     isShow(element: HTMLElement): boolean;
+    /**
+     * 获取安全的html
+     */
+    getSafeHTML(text: string): any;
+    /**
+     * 在CSP策略下设置innerHTML
+     * @param $el 元素
+     * @param text 文本
+     */
+    setSafeHTML($el: HTMLElement, text: string): void;
     /**
      * 用于显示元素并获取它的高度宽度等其它属性
      * @param element

package/dist/types/src/types/DOMUtilsEvent.d.ts

@@ -17,6 +17,7 @@ export type DOMUtilsCreateElementAttributesMap = {
 
 export interface DOMUtils_MouseEvent {
 	click: MouseEvent | PointerEvent;
+	auxclick: PointerEvent;
 	contextmenu: MouseEvent | PointerEvent;
 	dblclick: MouseEvent | PointerEvent;
 	mousedown: MouseEvent | PointerEvent;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@whitesev/domutils",
-  "version": "1.4.8",
+  "version": "1.5.1",
   "description": "使用js重新对jQuery的部分函数进行了仿写",
   "main": "dist/index.cjs.js",
   "module": "dist/index.esm.js",

package/src/DOMUtils.ts

@@ -20,7 +20,7 @@ class DOMUtils extends DOMUtilsEvent {
 		super(option);
 	}
 	/** 版本号 */
-	version = "2024.12.4";
+	version = "2025.3.2";
 	/**
 	 * 获取元素的属性值
 	 * @param element 目标元素
@@ -112,7 +112,7 @@ class DOMUtils extends DOMUtilsEvent {
 		let DOMUtilsContext = this;
 		let tempElement = DOMUtilsContext.windowApi.document.createElement(tagName);
 		if (typeof property === "string") {
-			tempElement.innerHTML = property;
+			DOMUtilsContext.html(tempElement, property);
 			return tempElement;
 		}
 		if (property == null) {
@@ -123,6 +123,10 @@ class DOMUtils extends DOMUtilsEvent {
 		}
 		Object.keys(property).forEach((key) => {
 			let value = property[key];
+			if (key === "innerHTML") {
+				DOMUtilsContext.html(tempElement, value);
+				return;
+			}
 			(tempElement as any)[key] = value;
 		});
 		Object.keys(attributes).forEach((key) => {
@@ -424,7 +428,7 @@ class DOMUtils extends DOMUtilsEvent {
 				html = html.innerHTML;
 			}
 			if ("innerHTML" in element) {
-				element.innerHTML = html;
+				DOMUtilsCommonUtils.setSafeHTML(element, html);
 			}
 		}
 	}
@@ -627,7 +631,11 @@ class DOMUtils extends DOMUtilsEvent {
 		if (propValue == null) {
 			return Reflect.get(element, propName);
 		} else {
-			Reflect.set(element, propName, propValue);
+			if (element instanceof Element && propName === "innerHTML") {
+				DOMUtilsContext.html(element, propValue);
+			} else {
+				Reflect.set(element, propName, propValue);
+			}
 		}
 	}
 	/**
@@ -859,7 +867,10 @@ class DOMUtils extends DOMUtilsEvent {
 		}
 		function elementAppendChild(ele: HTMLElement, text: HTMLElement | string) {
 			if (typeof content === "string") {
-				ele.insertAdjacentHTML("beforeend", text as string);
+				ele.insertAdjacentHTML(
+					"beforeend",
+					DOMUtilsCommonUtils.getSafeHTML(text as string)
+				);
 			} else {
 				ele.appendChild(text as HTMLElement);
 			}
@@ -904,7 +915,10 @@ class DOMUtils extends DOMUtilsEvent {
 			return;
 		}
 		if (typeof content === "string") {
-			element.insertAdjacentHTML("afterbegin", content);
+			element.insertAdjacentHTML(
+				"afterbegin",
+				DOMUtilsCommonUtils.getSafeHTML(content)
+			);
 		} else {
 			let $firstChild = element.firstChild;
 			if ($firstChild == null) {
@@ -939,7 +953,10 @@ class DOMUtils extends DOMUtilsEvent {
 			return;
 		}
 		if (typeof content === "string") {
-			element.insertAdjacentHTML("afterend", content);
+			element.insertAdjacentHTML(
+				"afterend",
+				DOMUtilsCommonUtils.getSafeHTML(content)
+			);
 		} else {
 			let $parent = element.parentElement;
 			let $nextSlibling = element.nextSibling;
@@ -976,7 +993,10 @@ class DOMUtils extends DOMUtilsEvent {
 			return;
 		}
 		if (typeof content === "string") {
-			element.insertAdjacentHTML("beforebegin", content);
+			element.insertAdjacentHTML(
+				"beforebegin",
+				DOMUtilsCommonUtils.getSafeHTML(content)
+			);
 		} else {
 			let $parent = element.parentElement;
 			if (!$parent) {
@@ -1034,7 +1054,7 @@ class DOMUtils extends DOMUtilsEvent {
 			});
 			return;
 		}
-		element.innerHTML = "";
+		DOMUtilsContext.html(element, "");
 	}
 	/**
 	 * 获取元素相对于文档的偏移坐标（加上文档的滚动条）
@@ -1476,7 +1496,7 @@ class DOMUtils extends DOMUtilsEvent {
 		element = element as HTMLElement;
 		// 创建一个新的div元素，并将wrapperHTML作为其innerHTML
 		let wrapper = DOMUtilsContext.windowApi.document.createElement("div");
-		wrapper.innerHTML = wrapperHTML;
+		DOMUtilsContext.html(wrapper, wrapperHTML);
 
 		let wrapperFirstChild = wrapper.firstChild as HTMLElement;
 		// 将要包裹的元素插入目标元素前面
@@ -1663,7 +1683,7 @@ class DOMUtils extends DOMUtilsEvent {
 		}
 		function parseHTMLByCreateDom() {
 			let tempDIV = DOMUtilsContext.windowApi.document.createElement("div");
-			tempDIV.innerHTML = html;
+			DOMUtilsContext.html(tempDIV, html);
 			if (isComplete) {
 				return tempDIV;
 			} else {

package/src/DOMUtilsCommonUtils.ts

@@ -14,6 +14,30 @@ const DOMUtilsCommonUtils = {
 	isShow(element: HTMLElement) {
 		return Boolean(element.getClientRects().length);
 	},
+	/**
+	 * 获取安全的html
+	 */
+	getSafeHTML(text: string) {
+		// @ts-ignore
+		if (globalThis.trustedTypes) {
+			// @ts-ignore
+			const policy = globalThis.trustedTypes.createPolicy("safe-innerHTML", {
+				createHTML: (html: string) => html,
+			});
+			return policy.createHTML(text);
+		} else {
+			return text;
+		}
+	},
+	/**
+	 * 在CSP策略下设置innerHTML
+	 * @param $el 元素
+	 * @param text 文本
+	 */
+	setSafeHTML($el: HTMLElement, text: string) {
+		// 创建 TrustedHTML 策略（需 CSP 允许）
+		$el.innerHTML = this.getSafeHTML(text);
+	},
 	/**
 	 * 用于显示元素并获取它的高度宽度等其它属性
 	 * @param element

package/src/types/DOMUtilsEvent.d.ts

@@ -17,6 +17,7 @@ export type DOMUtilsCreateElementAttributesMap = {
 
 export interface DOMUtils_MouseEvent {
 	click: MouseEvent | PointerEvent;
+	auxclick: PointerEvent;
 	contextmenu: MouseEvent | PointerEvent;
 	dblclick: MouseEvent | PointerEvent;
 	mousedown: MouseEvent | PointerEvent;