amos-tool 1.4.6 → 1.4.9

package/lib/utils.js

@@ -1,260 +1,204 @@
 "use strict";
 
-function _typeof(e) {
-  return (_typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(e) {
-    return typeof e
-  } : function(e) {
-    return e && "function" == typeof Symbol && e.constructor === Symbol && e !== Symbol.prototype ? "symbol" : typeof e
-  })(e)
-}
-var _typeOfList = require("./_typeOfList"),
-  ObjProto = Object.prototype,
-  toString = ObjProto.toString,
-  hasOwnProperty = ObjProto.hasOwnProperty,
-  nativeIsArray = Array.isArray,
-  nativeKeys = Object.keys,
-  BUILTIN_OBJECT = _typeOfList.BUILTIN_OBJECT,
-  TYPED_ARRAY = _typeOfList.TYPED_ARRAY,
-  property = function(t) {
-    return function(e) {
-      return null == e ? void 0 : e[t]
-    }
-  },
-  MAX_ARRAY_INDEX = Math.pow(2, 53) - 1,
-  getLength = property("length"),
-  isArrayLike = function(e) {
-    var t = getLength(e);
-    return "number" == typeof t && 0 <= t && t <= MAX_ARRAY_INDEX
-  },
-  isNumber = function(e) {
-    var t = /^(\-|\+)?([0-9]+(\.[0-9]+)?|Infinity)$/.test(e),
-      n = "number" == typeof e && !isNaN(e);
-    return t || n
-  },
-  isFloat = function(e) {
-    return /^-?\d+(\.\d+)?$/.test(e)
-  },
-  isOpacity = function(e) {
-    return /^-?\d+(\.\d+)?$/.test(e)
-  },
-  toFloat = function(e) {
-    return isNumber(e) ? Number(e) : Number(0)
-  },
-  isString = function(e) {
-    return "[object String]" === toString.call(e)
-  },
-  isArray = nativeIsArray || function(e) {
-    return "[object Array]" === toString.call(e)
-  },
-  isArguments = function(e) {
-    return "[object Arguments]" === toString.call(e)
-  },
-  isObject = function(e) {
-    var t = _typeof(e);
-    return "function" === t || "object" === t && !!e
-  },
-  isBoolean = function(e) {
-    return !0 === e || !1 === e || "[object Boolean]" === toString.call(e)
-  },
-  isFunction = function(e) {
-    return "[object Function]" === toString.call(e)
-  },
-  isNull = function(e) {
-    return null === e
-  },
-  isUndefined = function(e) {
-    return void 0 === e
-  },
-  isNil = function(e) {
-    return null == e
-  },
-  isEmptyObject = function(e) {
-    if (e)
-      for (var t in e)
-        if (hasOwnProperty.call(e, t)) return !1;
-    return !0
-  },
-  has = function(e, t) {
-    if (!isArray(t)) return null != e && Object.prototype.hasOwnProperty.call(e, t);
-    for (var n = t.length, r = 0; r < n; r++) {
-      var i = t[r];
-      if (null == e || !Object.prototype.hasOwnProperty.call(e, i)) return !1;
-      e = e[i]
-    }
-    return !!n
-  },
-  keys = function(e) {
-    if (!isObject(e)) return [];
-    if (nativeKeys) return nativeKeys(e);
-    var t = [];
-    for (var n in e) has(e, n) && t.push(n);
-    return t
-  },
-  values = function(e) {
-    for (var t = keys(e), n = t.length, r = Array(n), i = 0; i < n; i++) r[i] = e[t[i]];
-    return r
-  },
-  noop = function() {},
-  isEmpty = function(e) {
-    return null == e || (isArrayLike(e) && (isArray(e) || isString(e) || isArguments(e)) ? 0 === e.length : 0 === keys(e).length)
-  },
-  isElement = function(e) {
-    return !(!e || 1 !== e.nodeType)
-  },
-  isHTMLElement = function(e) {
-    return window.HTMLElement || window.Element ? e instanceof(window.HTMLElement || window.Element) : e && "object" === ("undefined" == typeof n ? "undefined" : _typeof(n)) && 1 === e.nodeType && "string" == typeof e.nodeName
-  },
-  isSVGElement = function(e) {
-    return window.SVGElement && e instanceof window.SVGElement
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault"), _typeof2 = _interopRequireDefault(require("@babel/runtime/helpers/typeof")), _typeOfList = require("./_typeOfList"), ObjProto = Object.prototype, toString = ObjProto.toString, hasOwnProperty = ObjProto.hasOwnProperty, nativeIsArray = Array.isArray, nativeKeys = Object.keys, BUILTIN_OBJECT = _typeOfList.BUILTIN_OBJECT, TYPED_ARRAY = _typeOfList.TYPED_ARRAY, property = function(e) {
+  return function(t) {
+    return null == t ? void 0 : t[e];
   };
+}, MAX_ARRAY_INDEX = Math.pow(2, 53) - 1, getLength = property("length"), isArrayLike = function(e) {
+  var t = getLength(e);
+  return "number" == typeof t && t >= 0 && t <= MAX_ARRAY_INDEX;
+}, isNumber = function(e) {
+  var t = /^(\-|\+)?([0-9]+(\.[0-9]+)?|Infinity)$/.test(e), n = "number" == typeof e && !isNaN(e);
+  return t || n;
+}, isFloat = function(e) {
+  return /^-?\d+(\.\d+)?$/.test(e);
+}, isOpacity = function(e) {
+  return /^-?\d+(\.\d+)?$/.test(e);
+}, toFloat = function(e) {
+  return isNumber(e) ? Number(e) : Number(0);
+}, isString = function(e) {
+  return "[object String]" === toString.call(e);
+}, isArray = nativeIsArray || function(e) {
+  return "[object Array]" === toString.call(e);
+}, isArguments = function(e) {
+  return "[object Arguments]" === toString.call(e);
+}, isObject = function(e) {
+  var t = (0, _typeof2.default)(e);
+  return "function" === t || "object" === t && !!e;
+}, isOnlyObject = function(e) {
+  return "object" === (0, _typeof2.default)(e) && "[object Object]" === toString.call(e) && !!e;
+}, isBoolean = function(e) {
+  return !0 === e || !1 === e || "[object Boolean]" === toString.call(e);
+}, isFunction = function(e) {
+  return "[object Function]" === toString.call(e);
+}, isNull = function(e) {
+  return null === e;
+}, isUndefined = function(e) {
+  return void 0 === e;
+}, isNil = function(e) {
+  return null == e;
+}, isEmptyObject = function(e) {
+  if (e) for (var t in e) if (hasOwnProperty.call(e, t)) return !1;
+  return !0;
+}, has = function(e, t) {
+  if (!isArray(t)) return null != e && Object.prototype.hasOwnProperty.call(e, t);
+  for (var n = t.length, r = 0; r < n; r++) {
+    var i = t[r];
+    if (null == e || !Object.prototype.hasOwnProperty.call(e, i)) return !1;
+    e = e[i];
+  }
+  return !!n;
+}, keys = function(e) {
+  if (!isObject(e)) return [];
+  if (nativeKeys) return nativeKeys(e);
+  var t = [];
+  for (var n in e) has(e, n) && t.push(n);
+  return t;
+}, values = function(e) {
+  for (var t = keys(e), n = t.length, r = Array(n), i = 0; i < n; i++) r[i] = e[t[i]];
+  return r;
+}, noop = function() {}, isEmpty = function(e) {
+  return null == e || (isArrayLike(e) && (isArray(e) || isString(e) || isArguments(e)) ? 0 === e.length : 0 === keys(e).length);
+}, isElement = function(e) {
+  return !(!e || 1 !== e.nodeType);
+}, isHTMLElement = function(e) {
+  return window.HTMLElement || window.Element ? e instanceof (window.HTMLElement || window.Element) : e && "object" === ("undefined" == typeof n ? "undefined" : (0, 
+  _typeof2.default)(n)) && 1 === e.nodeType && "string" == typeof e.nodeName;
+}, isSVGElement = function(e) {
+  return window.SVGElement && e instanceof window.SVGElement;
+};
 
 function isDom(e) {
-  return "object" === _typeof(e) && "number" == typeof e.nodeType && "object" === _typeof(e.ownerDocument)
+  return "object" === (0, _typeof2.default)(e) && "number" == typeof e.nodeType && "object" === (0, 
+  _typeof2.default)(e.ownerDocument);
 }
 
 function isUrl(e) {
-  return isString(e) && (/^https?:\/\/(?!\-)(?:(([0-9]{1,3}\.){3}[0-9]{1,3}))(:[0-9]{1,4}\/)?/.test(e) || /^https?:\/\/(?!\-)(?:[a-zA-Z\d\-]{0,62}[a-zA-Z\d]\.){1,126}(?!\d+)[a-zA-Z\d]{1,63}/.test(e))
+  return isString(e) && (/^https?:\/\/(?!\-)(?:(([0-9]{1,3}\.){3}[0-9]{1,3}))(:[0-9]{1,4}\/)?/.test(e) || /^https?:\/\/(?!\-)(?:[a-zA-Z\d\-]{0,62}[a-zA-Z\d]\.){1,126}(?!\d+)[a-zA-Z\d]{1,63}/.test(e));
 }
 
 function isBuiltInObject(e) {
-  return !!BUILTIN_OBJECT[toString.call(e)]
+  return !!BUILTIN_OBJECT[toString.call(e)];
 }
+
 var null2default = function(e) {
-    return isNull(e) || isUndefined(e) ? "" : e
-  },
-  isJson = function(e) {
-    return "object" === _typeof(e) && "[object object]" === toString.call(e).toLowerCase() && !e.length
-  },
-  stringIsJson = function e(t) {
-    return "[object String]" === toString.call(t) && (t = t.replace(/\s/g, "").replace(/\n|\r/, ""), /^\{(.*?)\}$/.test(t) ? /"(.*?)":(.*?)/g.test(t) : !!/^\[(.*?)\]$/.test(t) && t.replace(/^\[/, "").replace(/\]$/, "").replace(/},{/g, "}\n{").split(/\n/).map(e).reduce(function(e, t) {
-      return !!t
-    }))
-  },
-  isKeyInObject = function(e, t) {
-    isString(e) && (e = [e]);
-    var n = 0;
-    return e.forEach(function(e) {
-      e in t && n++
-    }), e.length === n
-  },
-  simpleEqual = function(e, t) {
-    if (e === t) return !0;
-    if ("object" !== _typeof(e) || null === e || "object" !== _typeof(t) || null === t) return !1;
-    var n = nativeKeys(e),
-      r = nativeKeys(t);
-    if (n.length !== r.length) return !1;
-    for (var i = hasOwnProperty.bind(t), o = 0; o < n.length; o++)
-      if (!i(n[o]) || e[n[o]] !== t[n[o]]) return !1;
-    return !0
-  },
-  isImageSrc = function() {
-    var t = /data:image\/(jpe?g|png|gif|bmp|ico|tga);base64,/i,
-      n = /.(jpe?g|png|gif|bmp|ico|tga)(\?.*)?$/i;
-    return function(e) {
-      return t.test(e) || n.test(e)
-    }
-  }(),
-  encodeNumber = function(e, t, n, r) {
-    var i = 1 < arguments.length && void 0 !== t ? t : 3,
-      o = 2 < arguments.length && void 0 !== n ? n : 4,
-      s = 3 < arguments.length && void 0 !== r ? r : "*",
-      u = String(e),
-      l = i + o,
-      c = s.repeat(o);
-    return u.length > l ? u.substr(0, i) + c + u.substr(l) : u.substr(0, i) + c
-  },
-  getFileExtension = function(e) {
-    if (e) {
-      var t = e.lastIndexOf(".");
-      return 0 < t ? e.substring(t + 1) : ""
-    }
-    return ""
-  },
-  some = function(e, t, n) {
-    if (null == e) throw new TypeError;
-    var r = Object(e),
-      i = r.length >>> 0;
-    if ("function" != typeof t) throw new TypeError;
-    for (var o = 3 <= arguments.length ? n : void 0, s = 0; s < i; s++)
-      if (s in r && t.call(o, r[s], s, r)) return !0;
-    return !1
-  },
-  every = function(e, t, n) {
-    var r, i;
-    if (null == e) throw new TypeError("arr is null or not defined");
-    var o = Object(e),
-      s = o.length >>> 0;
-    if ("function" != typeof t) throw new TypeError;
-    for (2 < arguments.length && (r = n), i = 0; i < s;) {
-      if (i in o) {
-        var u = o[i];
-        if (!t.call(r, u, i, o)) return !1
-      }
-      i++
-    }
-    return !0
-  },
-  reduce = function(e, t, n) {
-    if (null === e) throw new TypeError("Array.prototype.reduce called on null or undefined");
-    if ("function" != typeof t) throw new TypeError(t + " is not a function");
-    var r, i = Object(e),
-      o = i.length >>> 0,
-      s = 0;
-    if (3 <= arguments.length) r = n;
-    else {
-      for (; s < o && !(s in i);) s++;
-      if (o <= s) throw new TypeError("Reduce of empty array with no initial value");
-      r = i[s++]
-    }
-    for (; s < o;) s in i && (r = t(r, i[s], s, i)), s++;
-    return r
-  },
-  parse2string = function(e) {
-    return isEmpty(e) ? "" : JSON.stringify(e)
-  },
-  parse2object = function(e) {
-    return isEmpty(e) ? null : JSON.parse(e)
-  },
-  dataToArray = function(e) {
-    return isArray(e) ? e : [e]
+  return isNull(e) || isUndefined(e) ? "" : e;
+}, isJson = function(e) {
+  return "object" === (0, _typeof2.default)(e) && "[object object]" === toString.call(e).toLowerCase() && !e.length;
+}, stringIsJson = function e(t) {
+  return !!isString(t) && (t = t.replace(/\s/g, "").replace(/\n|\r/, ""), /^\{(.*?)\}$/.test(t) ? /"(.*?)":(.*?)/g.test(t) : !!/^\[(.*?)\]$/.test(t) && t.replace(/^\[/, "").replace(/\]$/, "").replace(/},{/g, "}\n{").split(/\n/).map((function(t) {
+    return e(t);
+  })).reduce((function(e, t) {
+    return !!t;
+  })));
+}, isKeyInObject = function(e, t) {
+  isString(e) && (e = [ e ]);
+  var n = 0;
+  return e.forEach((function(e) {
+    e in t && n++;
+  })), e.length === n;
+}, simpleEqual = function(e, t) {
+  if (e === t) return !0;
+  if ("object" !== (0, _typeof2.default)(e) || null === e || "object" !== (0, _typeof2.default)(t) || null === t) return !1;
+  var n = nativeKeys(e), r = nativeKeys(t);
+  if (n.length !== r.length) return !1;
+  for (var i = hasOwnProperty.bind(t), o = 0; o < n.length; o++) if (!i(n[o]) || e[n[o]] !== t[n[o]]) return !1;
+  return !0;
+}, isImageSrc = function() {
+  var e = /data:image\/(jpe?g|png|gif|bmp|ico|tga|svg(\+xml)?);base64,/i, t = /.(jpe?g|png|gif|bmp|ico|tga|svg)(\?.*)?$/i;
+  return function(n) {
+    return e.test(n) || t.test(n);
   };
+}(), encodeNumber = function(e) {
+  var t = arguments.length > 1 && void 0 !== arguments[1] ? arguments[1] : 3, n = arguments.length > 2 && void 0 !== arguments[2] ? arguments[2] : 4, r = arguments.length > 3 && void 0 !== arguments[3] ? arguments[3] : "*", i = String(e), o = t + n, u = r.repeat(n);
+  return i.length > o ? i.substr(0, t) + u + i.substr(o) : i.substr(0, t) + u;
+}, getFileExtension = function(e) {
+  if (e) {
+    var t = e.lastIndexOf(".");
+    return t > 0 ? e.substring(t + 1) : "";
+  }
+  return "";
+}, some = function(e, t) {
+  if (null == e) throw new TypeError;
+  var n = Object(e), r = n.length >>> 0;
+  if ("function" != typeof t) throw new TypeError;
+  for (var i = arguments.length >= 3 ? arguments[2] : void 0, o = 0; o < r; o++) if (o in n && t.call(i, n[o], o, n)) return !0;
+  return !1;
+}, every = function(e, t, n) {
+  var r, i;
+  if (null == e) throw new TypeError("arr is null or not defined");
+  var o = Object(e), u = o.length >>> 0;
+  if ("function" != typeof t) throw new TypeError;
+  for (arguments.length > 2 && (r = n), i = 0; i < u; ) {
+    var s;
+    if (i in o) {
+      s = o[i];
+      var l = t.call(r, s, i, o);
+      if (!l) return !1;
+    }
+    i++;
+  }
+  return !0;
+}, reduce = function(e, t) {
+  if (null === e) throw new TypeError("Array.prototype.reduce called on null or undefined");
+  if ("function" != typeof t) throw new TypeError(t + " is not a function");
+  var n, r = Object(e), i = r.length >>> 0, o = 0;
+  if (arguments.length >= 3) n = arguments[2]; else {
+    for (;o < i && !(o in r); ) o++;
+    if (o >= i) throw new TypeError("Reduce of empty array with no initial value");
+    n = r[o++];
+  }
+  for (;o < i; ) o in r && (n = t(n, r[o], o, r)), o++;
+  return n;
+}, parse2string = function(e) {
+  return isEmpty(e) ? "" : JSON.stringify(e);
+}, parse2object = function(e) {
+  return isEmpty(e) ? null : JSON.parse(e);
+}, dataToArray = function(e) {
+  return isArray(e) ? e : [ e ];
+};
 
 function clone(e) {
-  if (null == e || "object" != _typeof(e)) return e;
-  var t = e,
-    n = toString.call(e);
+  if (null == e || "object" != (0, _typeof2.default)(e)) return e;
+  var t = e, n = toString.call(e);
   if ("[object Array]" === n) {
     t = [];
-    for (var r = 0, i = e.length; r < i; r++) t[r] = clone(e[r])
+    for (var r = 0, i = e.length; r < i; r++) t[r] = clone(e[r]);
   } else if (TYPED_ARRAY[n]) {
     var o = e.constructor;
-    if (e.constructor.from) t = o.from(e);
-    else {
+    if (e.constructor.from) t = o.from(e); else {
       t = new o(e.length);
-      for (var s = 0, u = e.length; s < u; s++) t[s] = clone(e[s])
+      for (var u = 0, s = e.length; u < s; u++) t[u] = clone(e[u]);
     }
-  } else if (!BUILTIN_OBJECT[n] && !isDom(e))
-    for (var l in t = {}, e) e.hasOwnProperty(l) && (t[l] = clone(e[l]));
-  return t
+  } else if (!BUILTIN_OBJECT[n] && !isDom(e)) for (var l in t = {}, e) e.hasOwnProperty(l) && (t[l] = clone(e[l]));
+  return t;
 }
 
 function merge(e, t, n) {
   if (!isObject(t) || !isObject(e)) return n ? clone(t) : e;
-  for (var r in t) {
-    var i, o;
-    t.hasOwnProperty(r) && (i = e[r], o = t[r], !isObject(o) || !isObject(i) || isArray(o) || isArray(i) || isDom(o) || isDom(i) || isBuiltInObject(o) || isBuiltInObject(i) ? !n && r in e || (e[r] = clone(t[r])) : merge(i, o, n))
+  for (var r in t) if (t.hasOwnProperty(r)) {
+    var i = e[r], o = t[r];
+    !isObject(o) || !isObject(i) || isArray(o) || isArray(i) || isDom(o) || isDom(i) || isBuiltInObject(o) || isBuiltInObject(i) ? !n && r in e || (e[r] = clone(t[r])) : merge(i, o, n);
   }
-  return e
+  return e;
 }
 
 function mergeAll(e, t) {
   for (var n = e[0], r = 1, i = e.length; r < i; r++) n = merge(n, e[r], t);
-  return n
+  return n;
 }
+
+function subObjectEqual(e, t) {
+  return !(!isEmpty(e) && !isEmpty(t)) || (e === t || !Object.keys(t).some((function(n) {
+    return n in e && t[n] !== e[n];
+  })));
+}
+
 module.exports = {
   isString: isString,
   isArray: isArray,
   isObject: isObject,
+  isOnlyObject: isOnlyObject,
   isBoolean: isBoolean,
   isFunction: isFunction,
   isNumber: isNumber,
@@ -291,5 +235,6 @@ module.exports = {
   dataToArray: dataToArray,
   clone: clone,
   merge: merge,
-  mergeAll: mergeAll
-};
+  mergeAll: mergeAll,
+  subObjectEqual: subObjectEqual
+};

package/lib/xss/htmlEncode.js

@@ -1,4 +1,5 @@
 "use strict";
+
 module.exports = function(e) {
-  return null == e || 0 == e.length ? "" : e.replace(/&/g, "&gt;").replace(/</g, "&lt").replace(/>/, "&gt").replace(/\s/g, "&nbsp;").replace(/\'/g, "&#39;").replace(/\"/g, "&quot;").replace(/(\r\n|\r|\n)/g, "<br/>")
-};
+  return null == e || 0 == e.length ? "" : e.replace(/&/g, "&gt;").replace(/</g, "&lt").replace(/>/, "&gt").replace(/\s/g, "&nbsp;").replace(/\'/g, "&#39;").replace(/\"/g, "&quot;").replace(/(\r\n|\r|\n)/g, "<br/>");
+};

package/lib/xss/implementEncode.js

@@ -1,40 +1,39 @@
 "use strict";
+
 var attributes = {
-    CASE_INSENSITIVE: "i",
-    MULTILINE: "",
-    DOTALL: ""
-  },
-  events = ["oncontrolselect", "oncopy", "oncut", "ondataavailable", "ondatasetchanged", "ondatasetcomplete", "ondblclick", "ondeactivate", "ondrag", "ondragend", "ondragenter", "ondragleave", "ondragover", "ondragstart", "ondrop", "onerror=", "onerroupdate", "onfilterchange", "onfinish", "onfocus", "onfocusin", "onfocusout", "onhelp", "onkeydown", "onkeypress", "onkeyup", "onlayoutcomplete", "onload", "onlosecapture", "onmousedown", "onmouseenter", "onmouseleave", "onmousemove", "onmousout", "onmouseover", "onmouseup", "onmousewheel", "onmove", "onmoveend", "onmovestart", "onabort", "onactivate", "onafterprint", "onafterupdate", "onbefore", "onbeforeactivate", "onbeforecopy", "onbeforecut", "onbeforedeactivate", "onbeforeeditocus", "onbeforepaste", "onbeforeprint", "onbeforeunload", "onbeforeupdate", "onblur", "onbounce", "oncellchange", "onchange", "onclick", "oncontextmenu", "onpaste", "onpropertychange", "onreadystatechange", "onreset", "onresize", "onresizend", "onresizestart", "onrowenter", "onrowexit", "onrowsdelete", "onrowsinserted", "onscroll", "onselect", "onselectionchange", "onselectstart", "onstart", "onstop", "onsubmit", "onunload"],
-  eventStr = "<+\\s*\\w*\\s*(oncontrolselect|oncopy|oncut|ondataavailable|ondatasetchanged|ondatasetcomplete|ondblclick|ondeactivate|ondrag|ondragend|ondragenter|ondragleave|ondragover|ondragstart|ondrop|onerror=|onerroupdate|onfilterchange|onfinish|onfocus|onfocusin|onfocusout|onhelp|onkeydown|onkeypress|onkeyup|onlayoutcomplete|onload|onlosecapture|onmousedown|onmouseenter|onmouseleave|onmousemove|onmousout|onmouseover|onmouseup|onmousewheel|onmove|onmoveend|onmovestart|onabort|onactivate|onafterprint|onafterupdate|onbefore|onbeforeactivate|onbeforecopy|onbeforecut|onbeforedeactivate|onbeforeeditocus|onbeforepaste|onbeforeprint|onbeforeunload|onbeforeupdate|onblur|onbounce|oncellchange|onchange|onclick|oncontextmenu|onpaste|onpropertychange|onreadystatechange|onreset|onresize|onresizend|onresizestart|onrowenter|onrowexit|onrowsdelete|onrowsinserted|onscroll|onselect|onselectionchange|onselectstart|onstart|onstop|onsubmit|onunload)+\\s*=+",
-  getXssPatternList = function() {
-    var o = [];
-    return o.push({
-      pattern: "<(no)?script[^>]*>.*?</(no)?script>",
-      flags: [attributes.CASE_INSENSITIVE]
-    }), o.push({
-      pattern: "eval\\((.*?)\\)",
-      flags: [attributes.CASE_INSENSITIVE, attributes.MULTILINE, attributes.DOTALL]
-    }), o.push({
-      pattern: "expression\\((.*?)\\)",
-      flags: [attributes.CASE_INSENSITIVE, attributes.MULTILINE, attributes.DOTALL]
-    }), o.push({
-      pattern: "(javascript:|vbscript:|view-source:)*",
-      flags: [attributes.CASE_INSENSITIVE]
-    }), o.push({
-      pattern: "<(\"[^\"]*\"|'[^']*'|[^'\">])*>",
-      flags: [attributes.CASE_INSENSITIVE, attributes.MULTILINE, attributes.DOTALL]
-    }), o.push({
-      pattern: "(window\\.location|window\\.|\\.location|document\\.cookie|document\\.|alert\\(.*?\\)|window\\.open\\()*",
-      flags: [attributes.CASE_INSENSITIVE, attributes.MULTILINE, attributes.DOTALL]
-    }), o.push({
-      pattern: eventStr,
-      flags: [attributes.CASE_INSENSITIVE, attributes.MULTILINE, attributes.DOTALL]
-    }), o
-  };
-module.exports = function(n) {
-  var t = [];
-  return getXssPatternList().forEach(function(o) {
-    var e = new RegExp(o.pattern, o.flags.join(""));
-    t.push(e), n = n.replace(e, "")
-  }), n
+  CASE_INSENSITIVE: "i",
+  MULTILINE: "",
+  DOTALL: ""
+}, events = [ "oncontrolselect", "oncopy", "oncut", "ondataavailable", "ondatasetchanged", "ondatasetcomplete", "ondblclick", "ondeactivate", "ondrag", "ondragend", "ondragenter", "ondragleave", "ondragover", "ondragstart", "ondrop", "onerror=", "onerroupdate", "onfilterchange", "onfinish", "onfocus", "onfocusin", "onfocusout", "onhelp", "onkeydown", "onkeypress", "onkeyup", "onlayoutcomplete", "onload", "onlosecapture", "onmousedown", "onmouseenter", "onmouseleave", "onmousemove", "onmousout", "onmouseover", "onmouseup", "onmousewheel", "onmove", "onmoveend", "onmovestart", "onabort", "onactivate", "onafterprint", "onafterupdate", "onbefore", "onbeforeactivate", "onbeforecopy", "onbeforecut", "onbeforedeactivate", "onbeforeeditocus", "onbeforepaste", "onbeforeprint", "onbeforeunload", "onbeforeupdate", "onblur", "onbounce", "oncellchange", "onchange", "onclick", "oncontextmenu", "onpaste", "onpropertychange", "onreadystatechange", "onreset", "onresize", "onresizend", "onresizestart", "onrowenter", "onrowexit", "onrowsdelete", "onrowsinserted", "onscroll", "onselect", "onselectionchange", "onselectstart", "onstart", "onstop", "onsubmit", "onunload" ], eventStr = "<+\\s*\\w*\\s*(oncontrolselect|oncopy|oncut|ondataavailable|ondatasetchanged|ondatasetcomplete|ondblclick|ondeactivate|ondrag|ondragend|ondragenter|ondragleave|ondragover|ondragstart|ondrop|onerror=|onerroupdate|onfilterchange|onfinish|onfocus|onfocusin|onfocusout|onhelp|onkeydown|onkeypress|onkeyup|onlayoutcomplete|onload|onlosecapture|onmousedown|onmouseenter|onmouseleave|onmousemove|onmousout|onmouseover|onmouseup|onmousewheel|onmove|onmoveend|onmovestart|onabort|onactivate|onafterprint|onafterupdate|onbefore|onbeforeactivate|onbeforecopy|onbeforecut|onbeforedeactivate|onbeforeeditocus|onbeforepaste|onbeforeprint|onbeforeunload|onbeforeupdate|onblur|onbounce|oncellchange|onchange|onclick|oncontextmenu|onpaste|onpropertychange|onreadystatechange|onreset|onresize|onresizend|onresizestart|onrowenter|onrowexit|onrowsdelete|onrowsinserted|onscroll|onselect|onselectionchange|onselectstart|onstart|onstop|onsubmit|onunload)+\\s*=+", getXssPatternList = function() {
+  var o = [];
+  return o.push({
+    pattern: "<(no)?script[^>]*>.*?</(no)?script>",
+    flags: [ attributes.CASE_INSENSITIVE ]
+  }), o.push({
+    pattern: "eval\\((.*?)\\)",
+    flags: [ attributes.CASE_INSENSITIVE, attributes.MULTILINE, attributes.DOTALL ]
+  }), o.push({
+    pattern: "expression\\((.*?)\\)",
+    flags: [ attributes.CASE_INSENSITIVE, attributes.MULTILINE, attributes.DOTALL ]
+  }), o.push({
+    pattern: "(javascript:|vbscript:|view-source:)*",
+    flags: [ attributes.CASE_INSENSITIVE ]
+  }), o.push({
+    pattern: "<(\"[^\"]*\"|'[^']*'|[^'\">])*>",
+    flags: [ attributes.CASE_INSENSITIVE, attributes.MULTILINE, attributes.DOTALL ]
+  }), o.push({
+    pattern: "(window\\.location|window\\.|\\.location|document\\.cookie|document\\.|alert\\(.*?\\)|window\\.open\\()*",
+    flags: [ attributes.CASE_INSENSITIVE, attributes.MULTILINE, attributes.DOTALL ]
+  }), o.push({
+    pattern: eventStr,
+    flags: [ attributes.CASE_INSENSITIVE, attributes.MULTILINE, attributes.DOTALL ]
+  }), o;
 };
+
+module.exports = function(o) {
+  var e = [];
+  return getXssPatternList().forEach((function(n) {
+    var t = new RegExp(n.pattern, n.flags.join(""));
+    e.push(t), o = o.replace(t, "");
+  })), o;
+};

package/lib/xss/index.js

@@ -1,7 +1,8 @@
 "use strict";
-var htmlEncode = require("./htmlEncode"),
-  implementEncode = require("./implementEncode");
+
+var htmlEncode = require("./htmlEncode"), implementEncode = require("./implementEncode");
+
 module.exports = {
   htmlEncode: htmlEncode,
   implementEncode: implementEncode
-};
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "amos-tool",
-  "version": "1.4.6",
+  "version": "1.4.9",
   "description": "amos ui tool",
   "main": "index.js",
   "directories": {
@@ -12,8 +12,9 @@
     "testFilter": "mocha tests/tablefilter.test",
     "docs": "node_modules/.bin/jsdoc -c jsdoc-ori.json --readme README.md",
     "build": "ac-build babel-es5",
+    "build2": "rollup -c",
     "doc": "ac-doc docall",
-    "pub": "npm run build && npm publish"
+    "pub": "npm run doc && npm run build && npm publish"
   },
   "repository": {
     "type": "git",
@@ -30,16 +31,16 @@
   },
   "types": "index.d.ts",
   "homepage": "",
-  "dependencies": {},
+  "dependencies": {
+  },
   "devDependencies": {
-    "ac-build": "^2.x",
     "assert": "^1.4.1",
     "chai": "~3.4.1",
-    "docdash": "0.4.0",
-    "eslint-config-ray": "^2.x",
-    "jsdoc": "3.5.3",
+    "docdash": "1.2.0",
+    "jsdoc": "3.6.6",
     "mocha": "^3.4.2",
-    "mochawesome": "^2.2.0"
+    "mochawesome": "^2.2.0",
+    "rollup-toolkit": "^1.x"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"