@whitesev/domutils 1.4.8 → 1.5.1

package/dist/index.system.js

@@ -60,6 +60,46 @@ System.register('DOMUtils', [], (function (exports) {
                 isShow(element) {
                     return Boolean(element.getClientRects().length);
                 },
+                /**
+                 * 获取安全的html
+                 */
+                getSafeHTML(text) {
+                    // @ts-ignore
+                    if (globalThis.trustedTypes) {
+                        // @ts-ignore
+                        const policy = globalThis.trustedTypes.createPolicy("safe-innerHTML", {
+                            createHTML: (html) => html,
+                        });
+                        return policy.createHTML(text);
+                    }
+                    else {
+                        return text;
+                    }
+                },
+                /**
+                 * 在CSP策略下设置innerHTML
+                 * @param $el 元素
+                 * @param text 文本
+                 */
+                setSafeHTML($el, text) {
+                    // 创建 TrustedHTML 策略（需 CSP 允许）
+                    try {
+                        $el.innerHTML = text;
+                    }
+                    catch (error) {
+                        // @ts-ignore
+                        if (globalThis.trustedTypes) {
+                            // @ts-ignore
+                            const policy = globalThis.trustedTypes.createPolicy("safe-innerHTML", {
+                                createHTML: (html) => html,
+                            });
+                            $el.innerHTML = policy.createHTML(text);
+                        }
+                        else {
+                            throw new Error("trustedTypes is not defined");
+                        }
+                    }
+                },
                 /**
                  * 用于显示元素并获取它的高度宽度等其它属性
                  * @param element
@@ -1038,7 +1078,7 @@ System.register('DOMUtils', [], (function (exports) {
                     super(option);
                 }
                 /** 版本号 */
-                version = "2024.12.4";
+                version = "2025.3.2";
                 attr(element, attrName, attrValue) {
                     let DOMUtilsContext = this;
                     if (typeof element === "string") {
@@ -1095,7 +1135,7 @@ System.register('DOMUtils', [], (function (exports) {
                     let DOMUtilsContext = this;
                     let tempElement = DOMUtilsContext.windowApi.document.createElement(tagName);
                     if (typeof property === "string") {
-                        tempElement.innerHTML = property;
+                        DOMUtilsContext.html(tempElement, property);
                         return tempElement;
                     }
                     if (property == null) {
@@ -1106,6 +1146,10 @@ System.register('DOMUtils', [], (function (exports) {
                     }
                     Object.keys(property).forEach((key) => {
                         let value = property[key];
+                        if (key === "innerHTML") {
+                            DOMUtilsContext.html(tempElement, value);
+                            return;
+                        }
                         tempElement[key] = value;
                     });
                     Object.keys(attributes).forEach((key) => {
@@ -1274,7 +1318,7 @@ System.register('DOMUtils', [], (function (exports) {
                             html = html.innerHTML;
                         }
                         if ("innerHTML" in element) {
-                            element.innerHTML = html;
+                            DOMUtilsCommonUtils.setSafeHTML(element, html);
                         }
                     }
                 }
@@ -1380,7 +1424,12 @@ System.register('DOMUtils', [], (function (exports) {
                         return Reflect.get(element, propName);
                     }
                     else {
-                        Reflect.set(element, propName, propValue);
+                        if (element instanceof Element && propName === "innerHTML") {
+                            DOMUtilsContext.html(element, propValue);
+                        }
+                        else {
+                            Reflect.set(element, propName, propValue);
+                        }
                     }
                 }
                 /**
@@ -1596,7 +1645,7 @@ System.register('DOMUtils', [], (function (exports) {
                     }
                     function elementAppendChild(ele, text) {
                         if (typeof content === "string") {
-                            ele.insertAdjacentHTML("beforeend", text);
+                            ele.insertAdjacentHTML("beforeend", DOMUtilsCommonUtils.getSafeHTML(text));
                         }
                         else {
                             ele.appendChild(text);
@@ -1642,7 +1691,7 @@ System.register('DOMUtils', [], (function (exports) {
                         return;
                     }
                     if (typeof content === "string") {
-                        element.insertAdjacentHTML("afterbegin", content);
+                        element.insertAdjacentHTML("afterbegin", DOMUtilsCommonUtils.getSafeHTML(content));
                     }
                     else {
                         let $firstChild = element.firstChild;
@@ -1679,7 +1728,7 @@ System.register('DOMUtils', [], (function (exports) {
                         return;
                     }
                     if (typeof content === "string") {
-                        element.insertAdjacentHTML("afterend", content);
+                        element.insertAdjacentHTML("afterend", DOMUtilsCommonUtils.getSafeHTML(content));
                     }
                     else {
                         let $parent = element.parentElement;
@@ -1718,7 +1767,7 @@ System.register('DOMUtils', [], (function (exports) {
                         return;
                     }
                     if (typeof content === "string") {
-                        element.insertAdjacentHTML("beforebegin", content);
+                        element.insertAdjacentHTML("beforebegin", DOMUtilsCommonUtils.getSafeHTML(content));
                     }
                     else {
                         let $parent = element.parentElement;
@@ -1778,7 +1827,7 @@ System.register('DOMUtils', [], (function (exports) {
                         });
                         return;
                     }
-                    element.innerHTML = "";
+                    DOMUtilsContext.html(element, "");
                 }
                 /**
                  * 获取元素相对于文档的偏移坐标（加上文档的滚动条）
@@ -1988,10 +2037,10 @@ System.register('DOMUtils', [], (function (exports) {
                     if (typeof duration !== "number" || duration <= 0) {
                         throw new TypeError("duration must be a positive number");
                     }
-                    if (typeof callback !== "function" && callback !== void 0) {
+                    if (typeof callback !== "function" && callback !== undefined) {
                         throw new TypeError("callback must be a function or null");
                     }
-                    if (typeof styles !== "object" || styles === void 0) {
+                    if (typeof styles !== "object" || styles === undefined) {
                         throw new TypeError("styles must be an object");
                     }
                     if (Object.keys(styles).length === 0) {
@@ -2050,7 +2099,7 @@ System.register('DOMUtils', [], (function (exports) {
                     element = element;
                     // 创建一个新的div元素，并将wrapperHTML作为其innerHTML
                     let wrapper = DOMUtilsContext.windowApi.document.createElement("div");
-                    wrapper.innerHTML = wrapperHTML;
+                    DOMUtilsContext.html(wrapper, wrapperHTML);
                     let wrapperFirstChild = wrapper.firstChild;
                     // 将要包裹的元素插入目标元素前面
                     let parentElement = element.parentElement;
@@ -2146,7 +2195,7 @@ System.register('DOMUtils', [], (function (exports) {
                     }
                     function parseHTMLByCreateDom() {
                         let tempDIV = DOMUtilsContext.windowApi.document.createElement("div");
-                        tempDIV.innerHTML = html;
+                        DOMUtilsContext.html(tempDIV, html);
                         if (isComplete) {
                             return tempDIV;
                         }