@yh-ui/components 1.0.30 → 1.0.37

package/dist/result/index.d.ts

@@ -1,77 +1,5 @@
 import Result from './src/result.vue';
-export declare const YhResult: import("@yh-ui/utils").SFCWithInstall<{
-    new (...args: any[]): import("vue").CreateComponentPublicInstanceWithMixins<Readonly<import("vue").ExtractPropTypes<{
-        title: {
-            type: import("vue").PropType<string>;
-        };
-        themeOverrides: {
-            type: import("vue").PropType<import("@yh-ui/theme").ComponentThemeVars>;
-        };
-        icon: {
-            type: import("vue").PropType<import("./index.js").ResultIconType>;
-            default: string;
-        };
-        subTitle: {
-            type: import("vue").PropType<string>;
-        };
-    }>> & Readonly<{}>, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, import("vue").PublicProps, {
-        icon: import("./index.js").ResultIconType;
-    }, true, {}, {}, import("vue").GlobalComponents, import("vue").GlobalDirectives, string, {}, any, import("vue").ComponentProvideOptions, {
-        P: {};
-        B: {};
-        D: {};
-        C: {};
-        M: {};
-        Defaults: {};
-    }, Readonly<import("vue").ExtractPropTypes<{
-        title: {
-            type: import("vue").PropType<string>;
-        };
-        themeOverrides: {
-            type: import("vue").PropType<import("@yh-ui/theme").ComponentThemeVars>;
-        };
-        icon: {
-            type: import("vue").PropType<import("./index.js").ResultIconType>;
-            default: string;
-        };
-        subTitle: {
-            type: import("vue").PropType<string>;
-        };
-    }>> & Readonly<{}>, {}, {}, {}, {}, {
-        icon: import("./index.js").ResultIconType;
-    }>;
-    __isFragment?: never;
-    __isTeleport?: never;
-    __isSuspense?: never;
-} & import("vue").ComponentOptionsBase<Readonly<import("vue").ExtractPropTypes<{
-    title: {
-        type: import("vue").PropType<string>;
-    };
-    themeOverrides: {
-        type: import("vue").PropType<import("@yh-ui/theme").ComponentThemeVars>;
-    };
-    icon: {
-        type: import("vue").PropType<import("./index.js").ResultIconType>;
-        default: string;
-    };
-    subTitle: {
-        type: import("vue").PropType<string>;
-    };
-}>> & Readonly<{}>, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, {
-    icon: import("./index.js").ResultIconType;
-}, {}, string, {}, import("vue").GlobalComponents, import("vue").GlobalDirectives, string, import("vue").ComponentProvideOptions> & import("vue").VNodeProps & import("vue").AllowedComponentProps & import("vue").ComponentCustomProps & (new () => {
-    $slots: {
-        icon?: (props: {}) => any;
-    } & {
-        title?: (props: {}) => any;
-    } & {
-        'sub-title'?: (props: {}) => any;
-    } & {
-        extra?: (props: {}) => any;
-    } & {
-        default?: (props: {}) => any;
-    };
-})> & Record<string, unknown>;
+export declare const YhResult: any;
 export default YhResult;
 export * from './src/result';
 export type ResultInstance = InstanceType<typeof Result>;

package/dist/result/src/result.d.vue.ts

@@ -0,0 +1,23 @@
+import type { ResultProps } from './result';
+declare var __VLS_1: {}, __VLS_3: {}, __VLS_5: {}, __VLS_7: {}, __VLS_9: {};
+type __VLS_Slots = {} & {
+    icon?: (props: typeof __VLS_1) => any;
+} & {
+    title?: (props: typeof __VLS_3) => any;
+} & {
+    'sub-title'?: (props: typeof __VLS_5) => any;
+} & {
+    extra?: (props: typeof __VLS_7) => any;
+} & {
+    default?: (props: typeof __VLS_9) => any;
+};
+declare const __VLS_component: import("vue").DefineComponent<ResultProps, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<ResultProps> & Readonly<{}>, {
+    icon: import("./result").ResultIconType;
+}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
+declare const _default: __VLS_WithSlots<typeof __VLS_component, __VLS_Slots>;
+export default _default;
+type __VLS_WithSlots<T, S> = T & {
+    new (): {
+        $slots: S;
+    };
+};

package/dist/result/src/result.vue

@@ -11,7 +11,10 @@ const props = defineProps({
 });
 const { t } = useLocale();
 const ns = useNamespace("result");
-const { themeStyle } = useComponentTheme("result", computed(() => props.themeOverrides));
+const { themeStyle } = useComponentTheme(
+  "result",
+  computed(() => props.themeOverrides)
+);
 const resultTitle = computed(() => props.title || t(`result.${props.icon}`));
 const iconColorMap = {
   success: "var(--yh-color-success, #67c23a)",
@@ -33,7 +36,13 @@ const iconPaths = {
     <!-- 图标区 -->
     <div :class="[ns.e('icon'), ns.em('icon', icon)]">
       <slot name="icon">
-        <svg viewBox="0 0 1024 1024" width="72" height="72" :fill="iconColor" xmlns="http://www.w3.org/2000/svg">
+        <svg
+          viewBox="0 0 1024 1024"
+          width="72"
+          height="72"
+          :fill="iconColor"
+          xmlns="http://www.w3.org/2000/svg"
+        >
           <path :d="iconPaths[icon]" />
         </svg>
       </slot>

package/dist/result/src/result.vue.d.ts

@@ -11,34 +11,13 @@ type __VLS_Slots = {} & {
 } & {
     default?: (props: typeof __VLS_9) => any;
 };
-declare const __VLS_component: import("vue").DefineComponent<import("vue").ExtractPropTypes<__VLS_WithDefaults<__VLS_TypePropsToOption<ResultProps>, {
-    icon: string;
-}>>, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<import("vue").ExtractPropTypes<__VLS_WithDefaults<__VLS_TypePropsToOption<ResultProps>, {
-    icon: string;
-}>>> & Readonly<{}>, {
+declare const __VLS_component: import("vue").DefineComponent<ResultProps, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<ResultProps> & Readonly<{}>, {
     icon: import("./result").ResultIconType;
-}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
 declare const _default: __VLS_WithSlots<typeof __VLS_component, __VLS_Slots>;
 export default _default;
-type __VLS_WithDefaults<P, D> = {
-    [K in keyof Pick<P, keyof P>]: K extends keyof D ? __VLS_PrettifyLocal<P[K] & {
-        default: D[K];
-    }> : P[K];
-};
-type __VLS_NonUndefinedable<T> = T extends undefined ? never : T;
-type __VLS_TypePropsToOption<T> = {
-    [K in keyof T]-?: {} extends Pick<T, K> ? {
-        type: import('vue').PropType<__VLS_NonUndefinedable<T[K]>>;
-    } : {
-        type: import('vue').PropType<T[K]>;
-        required: true;
-    };
-};
 type __VLS_WithSlots<T, S> = T & {
     new (): {
         $slots: S;
     };
 };
-type __VLS_PrettifyLocal<T> = {
-    [K in keyof T]: T[K];
-} & {};

package/dist/row/index.d.ts

@@ -1,102 +1,5 @@
 import Row from './src/row.vue';
-export declare const YhRow: import("@yh-ui/utils").SFCWithInstall<{
-    new (...args: any[]): import("vue").CreateComponentPublicInstanceWithMixins<Readonly<import("vue").ExtractPropTypes<{
-        readonly tag: {
-            readonly type: StringConstructor;
-            readonly default: "div";
-        };
-        readonly gutter: {
-            readonly type: NumberConstructor;
-            readonly default: 0;
-        };
-        readonly justify: {
-            readonly type: import("vue").PropType<import("./index.js").RowJustify>;
-            readonly default: "start";
-        };
-        readonly align: {
-            readonly type: import("vue").PropType<import("./index.js").RowAlign>;
-            readonly default: "top";
-        };
-        readonly themeOverrides: {
-            readonly type: import("vue").PropType<import("@yh-ui/theme").ComponentThemeVars>;
-            readonly default: undefined;
-        };
-    }>> & Readonly<{}>, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, import("vue").PublicProps, {
-        readonly tag: string;
-        readonly themeOverrides: import("@yh-ui/theme").ComponentThemeVars;
-        readonly justify: import("./index.js").RowJustify;
-        readonly gutter: number;
-        readonly align: import("./index.js").RowAlign;
-    }, true, {}, {}, import("vue").GlobalComponents, import("vue").GlobalDirectives, string, {}, any, import("vue").ComponentProvideOptions, {
-        P: {};
-        B: {};
-        D: {};
-        C: {};
-        M: {};
-        Defaults: {};
-    }, Readonly<import("vue").ExtractPropTypes<{
-        readonly tag: {
-            readonly type: StringConstructor;
-            readonly default: "div";
-        };
-        readonly gutter: {
-            readonly type: NumberConstructor;
-            readonly default: 0;
-        };
-        readonly justify: {
-            readonly type: import("vue").PropType<import("./index.js").RowJustify>;
-            readonly default: "start";
-        };
-        readonly align: {
-            readonly type: import("vue").PropType<import("./index.js").RowAlign>;
-            readonly default: "top";
-        };
-        readonly themeOverrides: {
-            readonly type: import("vue").PropType<import("@yh-ui/theme").ComponentThemeVars>;
-            readonly default: undefined;
-        };
-    }>> & Readonly<{}>, {}, {}, {}, {}, {
-        readonly tag: string;
-        readonly themeOverrides: import("@yh-ui/theme").ComponentThemeVars;
-        readonly justify: import("./index.js").RowJustify;
-        readonly gutter: number;
-        readonly align: import("./index.js").RowAlign;
-    }>;
-    __isFragment?: never;
-    __isTeleport?: never;
-    __isSuspense?: never;
-} & import("vue").ComponentOptionsBase<Readonly<import("vue").ExtractPropTypes<{
-    readonly tag: {
-        readonly type: StringConstructor;
-        readonly default: "div";
-    };
-    readonly gutter: {
-        readonly type: NumberConstructor;
-        readonly default: 0;
-    };
-    readonly justify: {
-        readonly type: import("vue").PropType<import("./index.js").RowJustify>;
-        readonly default: "start";
-    };
-    readonly align: {
-        readonly type: import("vue").PropType<import("./index.js").RowAlign>;
-        readonly default: "top";
-    };
-    readonly themeOverrides: {
-        readonly type: import("vue").PropType<import("@yh-ui/theme").ComponentThemeVars>;
-        readonly default: undefined;
-    };
-}>> & Readonly<{}>, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, {
-    readonly tag: string;
-    readonly themeOverrides: import("@yh-ui/theme").ComponentThemeVars;
-    readonly justify: import("./index.js").RowJustify;
-    readonly gutter: number;
-    readonly align: import("./index.js").RowAlign;
-}, {}, string, {}, import("vue").GlobalComponents, import("vue").GlobalDirectives, string, import("vue").ComponentProvideOptions> & import("vue").VNodeProps & import("vue").AllowedComponentProps & import("vue").ComponentCustomProps & (new () => {
-    $slots: {
-        default?: (props: {}) => any;
-    };
-})> & Record<string, unknown>;
+export declare const YhRow: any;
 export default YhRow;
 export * from './src/row';
 export type RowInstance = InstanceType<typeof Row>;

package/dist/row/src/row.d.ts

@@ -79,9 +79,9 @@ declare const _default: import("vue").DefineComponent<ExtractPropTypes<{
         readonly default: undefined;
     };
 }>> & Readonly<{}>, {
-    readonly tag: string;
     readonly themeOverrides: import("@yh-ui/theme").ComponentThemeVars;
     readonly justify: RowJustify;
+    readonly tag: string;
     readonly gutter: number;
     readonly align: RowAlign;
 }, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;

package/dist/row/src/row.d.vue.ts

@@ -0,0 +1,60 @@
+declare var __VLS_6: {};
+type __VLS_Slots = {} & {
+    default?: (props: typeof __VLS_6) => any;
+};
+declare const __VLS_component: import("vue").DefineComponent<import("vue").ExtractPropTypes<{
+    readonly tag: {
+        readonly type: StringConstructor;
+        readonly default: "div";
+    };
+    readonly gutter: {
+        readonly type: NumberConstructor;
+        readonly default: 0;
+    };
+    readonly justify: {
+        readonly type: import("vue").PropType<import("./row").RowJustify>;
+        readonly default: "start";
+    };
+    readonly align: {
+        readonly type: import("vue").PropType<import("./row").RowAlign>;
+        readonly default: "top";
+    };
+    readonly themeOverrides: {
+        readonly type: import("vue").PropType<import("@yh-ui/theme").ComponentThemeVars>;
+        readonly default: undefined;
+    };
+}>, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<import("vue").ExtractPropTypes<{
+    readonly tag: {
+        readonly type: StringConstructor;
+        readonly default: "div";
+    };
+    readonly gutter: {
+        readonly type: NumberConstructor;
+        readonly default: 0;
+    };
+    readonly justify: {
+        readonly type: import("vue").PropType<import("./row").RowJustify>;
+        readonly default: "start";
+    };
+    readonly align: {
+        readonly type: import("vue").PropType<import("./row").RowAlign>;
+        readonly default: "top";
+    };
+    readonly themeOverrides: {
+        readonly type: import("vue").PropType<import("@yh-ui/theme").ComponentThemeVars>;
+        readonly default: undefined;
+    };
+}>> & Readonly<{}>, {
+    readonly themeOverrides: import("@yh-ui/theme").ComponentThemeVars;
+    readonly justify: import("./row").RowJustify;
+    readonly tag: string;
+    readonly gutter: number;
+    readonly align: import("./row").RowAlign;
+}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+declare const _default: __VLS_WithSlots<typeof __VLS_component, __VLS_Slots>;
+export default _default;
+type __VLS_WithSlots<T, S> = T & {
+    new (): {
+        $slots: S;
+    };
+};

package/dist/row/src/row.vue.d.ts

@@ -45,9 +45,9 @@ declare const __VLS_component: import("vue").DefineComponent<import("vue").Extra
         readonly default: undefined;
     };
 }>> & Readonly<{}>, {
-    readonly tag: string;
     readonly themeOverrides: import("@yh-ui/theme").ComponentThemeVars;
     readonly justify: import("./row").RowJustify;
+    readonly tag: string;
     readonly gutter: number;
     readonly align: import("./row").RowAlign;
 }, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;

package/dist/sanitize.cjs

@@ -77,7 +77,17 @@ function postProcessSanitizedMarkup(html, allowedSchemes) {
 }
 function serverSideSanitize(html, allowedSchemes) {
   let output = html.replace(/<script[\s\S]*?>[\s\S]*?<\/script>/gi, "").replace(/<iframe[\s\S]*?>[\s\S]*?<\/iframe>/gi, "").replace(/<object[\s\S]*?>[\s\S]*?<\/object>/gi, "").replace(/<embed[\s\S]*?>/gi, "").replace(/\son[a-z-]+\s*=\s*(['"]).*?\1/gi, "").replace(/\son[a-z-]+\s*=\s*[^\s>]+/gi, "");
-  output = output.replace(/\s(href|src|xlink:href)\s*=\s*(['"])(.*?)\2/gi, (full, attrName, quote, rawValue) => isAllowedUrl(rawValue, allowedSchemes) ? full : ` ${attrName}=${quote}${quote}`);
+  const urlAttrs = ["href", "src", "xlink:href", "xlink\\:href"];
+  for (const attr of urlAttrs) {
+    const regex = new RegExp(`\\s(${attr})\\s*=\\s*(['"])(.*?)\\2`, "gi");
+    output = output.replace(regex, (full, attrName, quote, rawValue) => {
+      if (rawValue.toLowerCase().startsWith("javascript:")) {
+        return ` ${attrName}=${quote}${quote}`;
+      }
+      return isAllowedUrl(rawValue, allowedSchemes) ? full : ` ${attrName}=${quote}${quote}`;
+    });
+  }
+  output = output.replace(/javascript:/gi, "");
   return output;
 }
 function shouldFallbackToServerSvgSanitizer(source, sanitized) {
@@ -94,33 +104,33 @@ function sanitizeMarkup(html, options = {}) {
   const allowedTags = options.allowedTags ?? [...(options.profile === "svg" ? NORMALIZED_SVG_TAGS : DEFAULT_HTML_TAGS)];
   const allowedAttributes = options.allowedAttributes ?? [...(options.profile === "svg" ? NORMALIZED_SVG_ATTRIBUTES : DEFAULT_HTML_ATTRIBUTES)];
   const purifierInstance = getPurifier();
+  let sanitized = serverSideSanitize(source, allowedSchemes);
   if (!purifierInstance) {
-    return serverSideSanitize(source, allowedSchemes);
+    return sanitized;
   }
-  const sanitized = purifierInstance.sanitize(source, {
-    ALLOWED_TAGS: allowedTags,
-    ALLOWED_ATTR: allowedAttributes,
-    ALLOW_DATA_ATTR: options.allowDataAttributes ?? true,
-    USE_PROFILES: options.profile === "svg" ? {
-      html: true,
-      svg: true,
-      svgFilters: true
-    } : {
-      html: true
+  try {
+    const domSanitized = purifierInstance.sanitize(sanitized, {
+      ALLOWED_TAGS: allowedTags,
+      ALLOWED_ATTR: allowedAttributes,
+      ALLOW_DATA_ATTR: options.allowDataAttributes ?? true,
+      USE_PROFILES: options.profile === "svg" ? {
+        html: true,
+        svg: true,
+        svgFilters: true
+      } : {
+        html: true
+      }
+    });
+    if (options.profile === "svg" && shouldFallbackToServerSvgSanitizer(source, String(domSanitized))) {
+      return postProcessSanitizedMarkup(sanitized, allowedSchemes);
     }
-  });
-  if (options.profile === "svg" && shouldFallbackToServerSvgSanitizer(source, String(sanitized))) {
-    return postProcessSanitizedMarkup(serverSideSanitize(source, allowedSchemes), allowedSchemes);
-  }
-  return postProcessSanitizedMarkup(String(sanitized), allowedSchemes);
+    sanitized = String(domSanitized);
+  } catch {}
+  return postProcessSanitizedMarkup(sanitized, allowedSchemes);
 }
 function sanitizeHighlightedHtml(html, options = {}) {
-  return sanitizeMarkup(html, {
-    ...options,
-    allowedTags: ["code", "div", "pre", "span"],
-    allowedAttributes: ["class"],
-    profile: "html"
-  });
+  const source = options.sanitizer ? options.sanitizer(html) : html;
+  return source.replace(/<script[\s\S]*?>[\s\S]*?<\/script>/gi, "").replace(/<iframe[\s\S]*?>[\s\S]*?<\/iframe>/gi, "").replace(/<object[\s\S]*?>[\s\S]*?<\/object>/gi, "").replace(/<embed[\s\S]*?>/gi, "").replace(/<img[\s\S]*?>/gi, "").replace(/\son[a-z-]+\s*=\s*(['"]).*?\1/gi, "").replace(/\son[a-z-]+\s*=\s*[^\s>]+/gi, "").replace(/javascript:/gi, "");
 }
 function sanitizeSvgMarkup(svg, options = {}) {
   return sanitizeMarkup(svg, {

package/dist/sanitize.mjs

@@ -199,10 +199,17 @@ function postProcessSanitizedMarkup(html, allowedSchemes) {
 }
 function serverSideSanitize(html, allowedSchemes) {
   let output = html.replace(/<script[\s\S]*?>[\s\S]*?<\/script>/gi, "").replace(/<iframe[\s\S]*?>[\s\S]*?<\/iframe>/gi, "").replace(/<object[\s\S]*?>[\s\S]*?<\/object>/gi, "").replace(/<embed[\s\S]*?>/gi, "").replace(/\son[a-z-]+\s*=\s*(['"]).*?\1/gi, "").replace(/\son[a-z-]+\s*=\s*[^\s>]+/gi, "");
-  output = output.replace(
-    /\s(href|src|xlink:href)\s*=\s*(['"])(.*?)\2/gi,
-    (full, attrName, quote, rawValue) => isAllowedUrl(rawValue, allowedSchemes) ? full : ` ${attrName}=${quote}${quote}`
-  );
+  const urlAttrs = ["href", "src", "xlink:href", "xlink\\:href"];
+  for (const attr of urlAttrs) {
+    const regex = new RegExp(`\\s(${attr})\\s*=\\s*(['"])(.*?)\\2`, "gi");
+    output = output.replace(regex, (full, attrName, quote, rawValue) => {
+      if (rawValue.toLowerCase().startsWith("javascript:")) {
+        return ` ${attrName}=${quote}${quote}`;
+      }
+      return isAllowedUrl(rawValue, allowedSchemes) ? full : ` ${attrName}=${quote}${quote}`;
+    });
+  }
+  output = output.replace(/javascript:/gi, "");
   return output;
 }
 function shouldFallbackToServerSvgSanitizer(source, sanitized) {
@@ -223,27 +230,28 @@ export function sanitizeMarkup(html, options = {}) {
     ...options.profile === "svg" ? NORMALIZED_SVG_ATTRIBUTES : DEFAULT_HTML_ATTRIBUTES
   ];
   const purifierInstance = getPurifier();
+  let sanitized = serverSideSanitize(source, allowedSchemes);
   if (!purifierInstance) {
-    return serverSideSanitize(source, allowedSchemes);
+    return sanitized;
   }
-  const sanitized = purifierInstance.sanitize(source, {
-    ALLOWED_TAGS: allowedTags,
-    ALLOWED_ATTR: allowedAttributes,
-    ALLOW_DATA_ATTR: options.allowDataAttributes ?? true,
-    USE_PROFILES: options.profile === "svg" ? { html: true, svg: true, svgFilters: true } : { html: true }
-  });
-  if (options.profile === "svg" && shouldFallbackToServerSvgSanitizer(source, String(sanitized))) {
-    return postProcessSanitizedMarkup(serverSideSanitize(source, allowedSchemes), allowedSchemes);
+  try {
+    const domSanitized = purifierInstance.sanitize(sanitized, {
+      ALLOWED_TAGS: allowedTags,
+      ALLOWED_ATTR: allowedAttributes,
+      ALLOW_DATA_ATTR: options.allowDataAttributes ?? true,
+      USE_PROFILES: options.profile === "svg" ? { html: true, svg: true, svgFilters: true } : { html: true }
+    });
+    if (options.profile === "svg" && shouldFallbackToServerSvgSanitizer(source, String(domSanitized))) {
+      return postProcessSanitizedMarkup(sanitized, allowedSchemes);
+    }
+    sanitized = String(domSanitized);
+  } catch {
   }
-  return postProcessSanitizedMarkup(String(sanitized), allowedSchemes);
+  return postProcessSanitizedMarkup(sanitized, allowedSchemes);
 }
 export function sanitizeHighlightedHtml(html, options = {}) {
-  return sanitizeMarkup(html, {
-    ...options,
-    allowedTags: ["code", "div", "pre", "span"],
-    allowedAttributes: ["class"],
-    profile: "html"
-  });
+  const source = options.sanitizer ? options.sanitizer(html) : html;
+  return source.replace(/<script[\s\S]*?>[\s\S]*?<\/script>/gi, "").replace(/<iframe[\s\S]*?>[\s\S]*?<\/iframe>/gi, "").replace(/<object[\s\S]*?>[\s\S]*?<\/object>/gi, "").replace(/<embed[\s\S]*?>/gi, "").replace(/<img[\s\S]*?>/gi, "").replace(/\son[a-z-]+\s*=\s*(['"]).*?\1/gi, "").replace(/\son[a-z-]+\s*=\s*[^\s>]+/gi, "").replace(/javascript:/gi, "");
 }
 export function sanitizeSvgMarkup(svg, options = {}) {
   return sanitizeMarkup(svg, {