autoql-fe-utils 1.11.5 → 1.11.6

package/dist/index.global.js

@@ -16037,6 +16037,41 @@
     return array3.slice(0, index).concat(array3.slice(index + 1));
   };
 
+  // src/safeRegex.ts
+  var MAX_PATTERN_LENGTH = Number(process.env.REGEXP_GUARD_MAX_LEN) || 2e3;
+  function isSimpleLiteral(pattern) {
+    return typeof pattern === "string" && /^[A-Za-z0-9 _\-\.,:\/]+$/.test(pattern);
+  }
+  function escapeRegExp(str) {
+    return String(str).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  }
+  function compileSafeRegex(pattern, flags = "") {
+    if (typeof pattern !== "string") return null;
+    if (pattern.length > MAX_PATTERN_LENGTH) return null;
+    try {
+      return new RegExp(pattern, flags);
+    } catch (e) {
+      return null;
+    }
+  }
+  function safeTest(pattern, input, flags = "") {
+    if (pattern == null || input == null) return false;
+    const strInput = String(input);
+    const re2 = compileSafeRegex(String(pattern), flags);
+    if (re2) {
+      try {
+        return re2.test(strInput);
+      } catch (e) {
+        return false;
+      }
+    }
+    if (isSimpleLiteral(pattern)) {
+      const needle = String(pattern);
+      return flags.includes("i") ? strInput.toLowerCase().includes(needle.toLowerCase()) : strInput.includes(needle);
+    }
+    return false;
+  }
+
   // src/HelperFns/filterEngine.ts
   var FilterOperatorEnum = /* @__PURE__ */ ((FilterOperatorEnum2) => {
     FilterOperatorEnum2["LIKE"] = "like";
@@ -16085,8 +16120,7 @@
   var greaterThanMatcher = (cell, cond) => Number(cell) > Number(cond.value);
   var greaterThanEqMatcher = (cell, cond) => Number(cell) >= Number(cond.value);
   var regexMatcher = (cell, cond) => {
-    const reg = new RegExp(String(cond.value));
-    return reg.test(String(cell));
+    return safeTest(cond.value, cell);
   };
   var betweenMatcher = (cell, cond) => {
     if (cell == null) return false;
@@ -16142,9 +16176,6 @@
   function isValidFilterType(t) {
     return FILTER_TYPES.includes(t);
   }
-  function escapeRegExp(str) {
-    return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  }
   function parseLocaleNumber(value, locale3) {
     var _a, _b;
     if (typeof value === "number") return value;
@@ -16156,10 +16187,20 @@
       const group = (_a = parts.find((p) => p.type === "group")) == null ? void 0 : _a.value;
       const decimal = (_b = parts.find((p) => p.type === "decimal")) == null ? void 0 : _b.value;
       if (group) {
-        str = str.replace(new RegExp(escapeRegExp(group), "g"), "");
+        const grpRe = compileSafeRegex(escapeRegExp(group), "g");
+        if (grpRe) {
+          str = str.replace(grpRe, "");
+        } else {
+          str = str.split(group).join("");
+        }
       }
       if (decimal && decimal !== ".") {
-        str = str.replace(new RegExp(escapeRegExp(decimal), "g"), ".");
+        const decRe = compileSafeRegex(escapeRegExp(decimal), "g");
+        if (decRe) {
+          str = str.replace(decRe, ".");
+        } else {
+          str = str.split(decimal).join(".");
+        }
       }
     } catch (e) {
       str = str.replace(/[,']/g, "");
@@ -16180,7 +16221,9 @@
     const trimmed = raw.trim();
     if (trimmed.length === 0) return { operator: defaultOperator, value: "", type };
     const opToken = `${"between" /* BETWEEN */}|[<>!=]=?|not_like`;
-    const opMatch = new RegExp(`^(${opToken})\\s*(.*)$`, "i").exec(trimmed);
+    const opPattern = `^(${opToken})\\s*(.*)$`;
+    const opRe = compileSafeRegex(opPattern, "i");
+    const opMatch = opRe ? opRe.exec(trimmed) : null;
     if (opMatch) {
       let op = String((_a = opMatch[1]) != null ? _a : "").toLowerCase();
       const rest = (_b = opMatch[2]) != null ? _b : "";
@@ -30680,8 +30723,12 @@
   };
   var getSampleQueryRegex = (suggestionValues) => {
     const valueArray = Object.keys(suggestionValues);
-    const valueRegexArray = valueArray.map((value) => `\\b${value}\\b`);
-    const valueRegex = new RegExp(valueRegexArray.join("|"), "gm");
+    const valueRegexArray = valueArray.map((value) => {
+      const esc = String(value).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+      return `\\b${esc}\\b`;
+    });
+    const pattern = valueRegexArray.join("|");
+    const valueRegex = compileSafeRegex(pattern, "gm");
     return valueRegex;
   };
   var getSampleQueryText = (query, values = {}) => {
@@ -30695,9 +30742,14 @@
         var _a;
         const chunk = values[valueKey];
         const replacementText = (_a = chunk == null ? void 0 : chunk.replacement) == null ? void 0 : _a.format_txt;
-        const valueKeyRegex = new RegExp(`\\b${valueKey}\\b`);
+        const pattern = `\\b${valueKey}\\b`;
+        const valueKeyRegex = compileSafeRegex(pattern);
         if (replacementText) {
-          queryText = queryText.replace(valueKeyRegex, replacementText);
+          if (valueKeyRegex) {
+            queryText = queryText.replace(valueKeyRegex, replacementText);
+          } else if (isSimpleLiteral(valueKey)) {
+            queryText = String(queryText).split(valueKey).join(replacementText);
+          }
         }
       });
       return queryText;
@@ -30789,6 +30841,7 @@
     }
   };
   var getSampleQueryChunks = (query, values = {}) => {
+    var _a, _b;
     try {
       const valueArray = Object.keys(values);
       if (!(valueArray == null ? void 0 : valueArray.length)) {
@@ -30800,22 +30853,57 @@
           }
         ];
       }
-      const valueRegexArray = valueArray.map((value) => `(\\b${value}\\b)`);
-      const valueRegex = new RegExp(valueRegexArray.join("|"), "gm");
       let splitStrArray = [query];
-      if (valueArray == null ? void 0 : valueArray.length) {
-        splitStrArray = query.split(valueRegex);
+      if (valueArray.length < 500) {
+        const valueRegexArray = valueArray.map((value) => {
+          const esc = String(value).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+          return `(\\b${esc}\\b)`;
+        });
+        const pattern = valueRegexArray.join("|");
+        const valueRegex = compileSafeRegex(pattern, "gm");
+        if (valueRegex) {
+          splitStrArray = query.split(valueRegex);
+        }
+      }
+      if (splitStrArray.length === 1) {
+        const result = [];
+        let remaining = query;
+        const sortedValues = [...valueArray].sort((a, b) => b.length - a.length);
+        for (const value of sortedValues) {
+          const escaped = String(value).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+          const re2 = compileSafeRegex(`\\b${escaped}\\b`, "i");
+          let match = null;
+          let matchedText = "";
+          if (re2) {
+            match = re2.exec(remaining);
+            matchedText = (_a = match == null ? void 0 : match[0]) != null ? _a : "";
+          } else if (isSimpleLiteral(value)) {
+            const idx = remaining.toLowerCase().indexOf(String(value).toLowerCase());
+            if (idx >= 0) {
+              match = [String(value)];
+              matchedText = remaining.substr(idx, String(value).length);
+              match.index = idx;
+            }
+          }
+          if (match) {
+            const matchIndex = (_b = match.index) != null ? _b : 0;
+            result.push(remaining.substring(0, matchIndex), matchedText || match[0]);
+            remaining = remaining.substring(matchIndex + (matchedText || match[0]).length);
+          }
+        }
+        if (remaining) result.push(remaining);
+        splitStrArray = result;
       }
       const chunkedSuggestion = [];
       splitStrArray.forEach((key) => {
-        var _a, _b;
-        const replacement = (_a = values[key]) == null ? void 0 : _a.replacement;
+        var _a2, _b2;
+        const replacement = (_a2 = values[key]) == null ? void 0 : _a2.replacement;
         const type = getSampleQueryReplacementType(key, replacement);
         const name = key == null ? void 0 : key.trim();
         if (!type || !name) {
           return;
         }
-        let value = (_b = replacement == null ? void 0 : replacement.format_txt) == null ? void 0 : _b.trim();
+        let value = (_b2 = replacement == null ? void 0 : replacement.format_txt) == null ? void 0 : _b2.trim();
         if (type == "TEXT" /* SAMPLE_QUERY_TEXT_TYPE */) {
           value = name;
         }