botframework-webchat-core 4.14.0 → 4.15.1

package/lib/types/external/DirectLineCardAction.d.ts

@@ -1,3 +1,110 @@
-declare type DirectLineCardAction = any;
+declare type CardActionWithImageAndTitle = {
+    image: string;
+} | {
+    title: string;
+} | {
+    image: string;
+    title: string;
+};
+/**
+ * A `call` action represents a telephone number that may be called.
+ *
+ * https://github.com/Microsoft/botframework-sdk/blob/main/specs/botframework-activity/botframework-activity.md#call
+ */
+declare type CallCardAction = CardActionWithImageAndTitle & {
+    type: 'call';
+    value: string;
+};
+/**
+ * A `downloadFile` action represents a hyperlink to be downloaded.
+ *
+ * https://github.com/Microsoft/botframework-sdk/blob/main/specs/botframework-activity/botframework-activity.md#download-file-actions
+ */
+declare type DownloadFileCardAction = CardActionWithImageAndTitle & {
+    type: 'downloadFile';
+    value: string;
+};
+/**
+ * An `imBack` action represents a text response that is added to the chat feed.
+ *
+ * https://github.com/Microsoft/botframework-sdk/blob/main/specs/botframework-activity/botframework-activity.md#im-back
+ */
+declare type IMBackCardAction = CardActionWithImageAndTitle & {
+    type: 'imBack';
+    value: string;
+};
+/**
+ * A `messageBack` action represents a text response to be sent via the chat system.
+ *
+ * https://github.com/Microsoft/botframework-sdk/blob/main/specs/botframework-activity/botframework-activity.md#message-back
+ */
+declare type MessageBackCardAction = CardActionWithImageAndTitle & {
+    displayText?: string;
+    text?: string;
+    type: 'messageBack';
+    value?: {
+        [key: string]: any;
+    };
+};
+/**
+ * An `openUrl` action represents a hyperlink to be handled by the client.
+ *
+ * https://github.com/Microsoft/botframework-sdk/blob/main/specs/botframework-activity/botframework-activity.md#open-url-actions
+ */
+declare type OpenURLCardAction = CardActionWithImageAndTitle & {
+    type: 'openUrl';
+    value: string;
+};
+/**
+ * A `playAudio` action represents audio media that may be played.
+ *
+ * https://github.com/Microsoft/botframework-sdk/blob/main/specs/botframework-activity/botframework-activity.md#play-audio
+ */
+declare type PlayAudioCardAction = CardActionWithImageAndTitle & {
+    type: 'playAudio';
+    value: string;
+};
+/**
+ * A `playVideo` action represents video media that may be played.
+ *
+ * https://github.com/Microsoft/botframework-sdk/blob/main/specs/botframework-activity/botframework-activity.md#play-video
+ */
+declare type PlayVideoCardAction = CardActionWithImageAndTitle & {
+    type: 'playVideo';
+    value: string;
+};
+/**
+ * A `postBack` action represents a text response that is not added to the chat feed.
+ *
+ * https://github.com/Microsoft/botframework-sdk/blob/main/specs/botframework-activity/botframework-activity.md#post-back
+ */
+declare type PostBackCardAction = CardActionWithImageAndTitle & {
+    type: 'postBack';
+    value: any;
+};
+/**
+ * A `showImage` action represents an image that may be displayed.
+ *
+ * https://github.com/Microsoft/botframework-sdk/blob/main/specs/botframework-activity/botframework-activity.md#show-image-file-actions
+ */
+declare type ShowImageCardAction = CardActionWithImageAndTitle & {
+    type: 'showImage';
+    value: string;
+};
+/**
+ * A `signin` action represents a hyperlink to be handled by the client's signin system.
+ *
+ * https://github.com/Microsoft/botframework-sdk/blob/main/specs/botframework-activity/botframework-activity.md#signin
+ */
+declare type SignInCardAction = CardActionWithImageAndTitle & {
+    type: 'signin';
+    value: string;
+};
+/**
+ * A card action represents a clickable or interactive button for use within cards or as suggested actions. They are used to solicit input from users. Despite their name, card actions are not limited to use solely on cards.
+ *
+ * https://github.com/Microsoft/botframework-sdk/blob/main/specs/botframework-activity/botframework-activity.md#card-action
+ */
+declare type DirectLineCardAction = CallCardAction | DownloadFileCardAction | IMBackCardAction | MessageBackCardAction | OpenURLCardAction | PlayAudioCardAction | PlayVideoCardAction | PostBackCardAction | ShowImageCardAction | SignInCardAction;
 export default DirectLineCardAction;
 //# sourceMappingURL=DirectLineCardAction.d.ts.map

package/lib/types/external/DirectLineCardAction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DirectLineCardAction.d.ts","sourceRoot":"","sources":["../../../src/types/external/DirectLineCardAction.ts"],"names":[],"mappings":"AAEA,aAAK,oBAAoB,GAAG,GAAG,CAAC;AAEhC,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"DirectLineCardAction.d.ts","sourceRoot":"","sources":["../../../src/types/external/DirectLineCardAction.ts"],"names":[],"mappings":"AAAA,aAAK,2BAA2B,GAC5B;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB;IACE,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEN;;;;GAIG;AACH,aAAK,cAAc,GAAG,2BAA2B,GAAG;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;GAIG;AACH,aAAK,sBAAsB,GAAG,2BAA2B,GAAG;IAC1D,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;GAIG;AACH,aAAK,gBAAgB,GAAG,2BAA2B,GAAG;IACpD,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;GAIG;AACH,aAAK,qBAAqB,GAAG,2BAA2B,GAAG;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC;CAChC,CAAC;AAEF;;;;GAIG;AACH,aAAK,iBAAiB,GAAG,2BAA2B,GAAG;IACrD,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;GAIG;AACH,aAAK,mBAAmB,GAAG,2BAA2B,GAAG;IACvD,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;GAIG;AACH,aAAK,mBAAmB,GAAG,2BAA2B,GAAG;IACvD,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;GAIG;AACH,aAAK,kBAAkB,GAAG,2BAA2B,GAAG;IACtD,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,GAAG,CAAC;CACZ,CAAC;AAEF;;;;GAIG;AACH,aAAK,mBAAmB,GAAG,2BAA2B,GAAG;IACvD,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;GAIG;AACH,aAAK,gBAAgB,GAAG,2BAA2B,GAAG;IACpD,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;GAIG;AACH,aAAK,oBAAoB,GACrB,cAAc,GACd,sBAAsB,GACtB,gBAAgB,GAChB,qBAAqB,GACrB,iBAAiB,GACjB,mBAAmB,GACnB,mBAAmB,GACnB,kBAAkB,GAClB,mBAAmB,GACnB,gBAAgB,CAAC;AAErB,eAAe,oBAAoB,CAAC"}

package/lib/utils/deleteKey.js

@@ -17,14 +17,13 @@ function _toPropertyKey(arg) { var key = _toPrimitive(arg, "string"); return _ty
 
 function _toPrimitive(input, hint) { if ((0, _typeof2["default"])(input) !== "object" || input === null) return input; var prim = input[Symbol.toPrimitive]; if (prim !== undefined) { var res = prim.call(input, hint || "default"); if ((0, _typeof2["default"])(res) !== "object") return res; throw new TypeError("@@toPrimitive must return a primitive value."); } return (hint === "string" ? String : Number)(input); }
 
-/* eslint no-unused-vars: ["error", { "varsIgnorePattern": "^deleted$" }] */
 function deleteKey(map, key) {
   if (!map) {
     return map;
   }
 
-  var deleted = map[key],
+  var _deleted = map[key],
       nextMap = (0, _objectWithoutProperties2["default"])(map, [key].map(_toPropertyKey));
   return nextMap;
 }
-//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjozLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy91dGlscy9kZWxldGVLZXkuanMiXSwibmFtZXMiOlsiZGVsZXRlS2V5IiwibWFwIiwia2V5IiwiZGVsZXRlZCIsIm5leHRNYXAiXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQTtBQUVlLFNBQVNBLFNBQVQsQ0FBbUJDLEdBQW5CLEVBQXdCQyxHQUF4QixFQUE2QjtBQUMxQyxNQUFJLENBQUNELEdBQUwsRUFBVTtBQUNSLFdBQU9BLEdBQVA7QUFDRDs7QUFIeUMsTUFLM0JFLE9BTDJCLEdBS0hGLEdBTEcsQ0FLakNDLEdBTGlDO0FBQUEsTUFLZkUsT0FMZSw2Q0FLSEgsR0FMRyxHQUtqQ0MsR0FMaUM7QUFPMUMsU0FBT0UsT0FBUDtBQUNEIiwic291cmNlUm9vdCI6ImNvcmU6Ly8vIiwic291cmNlc0NvbnRlbnQiOlsiLyogZXNsaW50IG5vLXVudXNlZC12YXJzOiBbXCJlcnJvclwiLCB7IFwidmFyc0lnbm9yZVBhdHRlcm5cIjogXCJeZGVsZXRlZCRcIiB9XSAqL1xuXG5leHBvcnQgZGVmYXVsdCBmdW5jdGlvbiBkZWxldGVLZXkobWFwLCBrZXkpIHtcbiAgaWYgKCFtYXApIHtcbiAgICByZXR1cm4gbWFwO1xuICB9XG5cbiAgY29uc3QgeyBba2V5XTogZGVsZXRlZCwgLi4ubmV4dE1hcCB9ID0gbWFwO1xuXG4gIHJldHVybiBuZXh0TWFwO1xufVxuIl19
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,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

package/lib/utils/isForbiddenPropertyName.d.ts

@@ -0,0 +1,2 @@
+export default function isForbiddenPropertyName(propertyName: string): boolean;
+//# sourceMappingURL=isForbiddenPropertyName.d.ts.map

package/lib/utils/isForbiddenPropertyName.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isForbiddenPropertyName.d.ts","sourceRoot":"","sources":["../../src/utils/isForbiddenPropertyName.ts"],"names":[],"mappings":"AA8BA,MAAM,CAAC,OAAO,UAAU,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAE7E"}

package/lib/utils/isForbiddenPropertyName.js

@@ -0,0 +1,21 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports["default"] = isForbiddenPropertyName;
+
+var _toConsumableArray2 = _interopRequireDefault(require("@babel/runtime/helpers/toConsumableArray"));
+
+var FORBIDDEN_PROPERTY_NAMES;
+
+function getForbiddenPropertyNames() {
+  return FORBIDDEN_PROPERTY_NAMES || (FORBIDDEN_PROPERTY_NAMES = Object.freeze(Array.from(new Set([].concat((0, _toConsumableArray2["default"])(Object.getOwnPropertyNames(Object.prototype)), ['prototype'])))));
+}
+
+function isForbiddenPropertyName(propertyName) {
+  return getForbiddenPropertyNames().includes(propertyName);
+}
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,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

package/lib/utils/mime-wrapper.js

@@ -9,9 +9,7 @@ exports["default"] = void 0;
 
 var _Mime = _interopRequireDefault(require("mime/Mime"));
 
-/* eslint no-undef: "off"*/
-
-/* eslint node/global-require: "off"*/
+/* eslint no-undef: "off" */
 // We adopted the work from mime-wrapper, at https://github.com/marlon360/mime-wrapper.
 // This file wraps the mime library constructor to include '.json' types. This is needed
 // to support Angular CLI web projects, in which the webpack.config files are hidden away
@@ -46,4 +44,4 @@ var _Mime = _interopRequireDefault(require("mime/Mime"));
 var _default = new _Mime["default"](require('mime/types/standard'), require('mime/types/other'));
 
 exports["default"] = _default;
-//# sourceMappingURL=data:application/json;charset=utf-8;base64,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
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,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

package/lib/utils/uniqueID.js

@@ -13,4 +13,4 @@ var _mathRandom = _interopRequireDefault(require("math-random"));
 function uniqueID() {
   return Date.now() + (0, _mathRandom["default"])().toString(36).substr(2);
 }
-//# sourceMappingURL=data:application/json;charset=utf-8;base64,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
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjozLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy91dGlscy91bmlxdWVJRC5qcyJdLCJuYW1lcyI6WyJ1bmlxdWVJRCIsIkRhdGUiLCJub3ciLCJ0b1N0cmluZyIsInN1YnN0ciJdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7O0FBRUE7O0FBRkE7QUFJZSxTQUFTQSxRQUFULEdBQW9CO0FBQ2pDLFNBQU9DLElBQUksQ0FBQ0MsR0FBTCxLQUFhLDhCQUFTQyxRQUFULENBQWtCLEVBQWxCLEVBQXNCQyxNQUF0QixDQUE2QixDQUE3QixDQUFwQjtBQUNEIiwic291cmNlUm9vdCI6ImNvcmU6Ly8vIiwic291cmNlc0NvbnRlbnQiOlsiLyogZXNsaW50IG5vLW1hZ2ljLW51bWJlcnM6IFtcImVycm9yXCIsIHsgXCJpZ25vcmVcIjogWzIsIDM2XSB9XSAqL1xuXG5pbXBvcnQgcmFuZG9tIGZyb20gJ21hdGgtcmFuZG9tJztcblxuZXhwb3J0IGRlZmF1bHQgZnVuY3Rpb24gdW5pcXVlSUQoKSB7XG4gIHJldHVybiBEYXRlLm5vdygpICsgcmFuZG9tKCkudG9TdHJpbmcoMzYpLnN1YnN0cigyKTtcbn1cbiJdfQ==

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "botframework-webchat-core",
-  "version": "4.14.0",
+  "version": "4.15.1",
   "description": "Core of botframework-webchat",
   "main": "lib/index.js",
   "publishConfig": {
@@ -22,40 +22,33 @@
     "build:typescript": "tsc --project src/tsconfig.json",
     "eslint": "npm run precommit",
     "precommit": "npm run precommit:eslint -- src && npm run precommit:typecheck",
-    "precommit:eslint": "eslint",
+    "precommit:eslint": "../../node_modules/.bin/eslint --report-unused-disable-directives --max-warnings 0",
     "precommit:typecheck": "tsc --project ./src --emitDeclarationOnly false --esModuleInterop true --noEmit --pretty false",
-    "prettier": "prettier --check src/**/*.{js,ts,tsx}",
     "prestart": "npm run build:babel",
     "start": "concurrently --kill-others --names \"babel,tsc\" \"npm run start:babel\" \"npm run start:typescript\"",
     "start:babel": "npm run build:babel -- --skip-initial-build --watch",
     "start:typescript": "npm run build:typescript -- --watch"
   },
   "devDependencies": {
-    "@babel/cli": "^7.13.14",
-    "@babel/core": "^7.13.14",
-    "@babel/plugin-transform-runtime": "^7.13.10",
-    "@babel/preset-env": "^7.13.12",
-    "@babel/preset-typescript": "^7.13.0",
-    "@types/node": "^14.14.37",
-    "@typescript-eslint/eslint-plugin": "^4.21.0",
-    "@typescript-eslint/parser": "^4.21.0",
+    "@babel/cli": "^7.14.5",
+    "@babel/core": "^7.14.6",
+    "@babel/plugin-transform-runtime": "^7.14.5",
+    "@babel/preset-env": "^7.14.7",
+    "@babel/preset-typescript": "^7.14.5",
+    "@types/node": "^16.3.1",
     "babel-plugin-istanbul": "^6.0.0",
     "babel-plugin-transform-inline-environment-variables": "^0.4.3",
-    "botframework-directlinejs": "^0.14.1",
-    "concurrently": "^6.0.1",
-    "eslint": "^7.23.0",
-    "eslint-plugin-node": "^11.1.0",
-    "eslint-plugin-prettier": "^3.3.1",
-    "prettier": "^2.2.1",
-    "typescript": "^4.2.3"
+    "botframework-directlinejs": "0.15.1",
+    "concurrently": "^6.3.0",
+    "typescript": "^4.3.5"
   },
   "dependencies": {
-    "@babel/runtime": "7.13.10",
-    "jsonwebtoken": "8.5.1",
+    "@babel/runtime": "7.15.4",
+    "jwt-decode": "3.1.2",
     "math-random": "2.0.1",
     "mime": "2.5.2",
-    "p-defer": "3.0.0",
-    "p-defer-es5": "1.2.1",
+    "p-defer": "4.0.0",
+    "p-defer-es5": "2.0.1",
     "redux": "4.0.5",
     "redux-devtools-extension": "2.13.9",
     "redux-saga": "1.1.3",

package/src/__tests__/detectSlowConnectionSaga.spec.js

@@ -58,7 +58,7 @@ beforeEach(() => {
     applyMiddleware(sagaMiddleware)
   );
 
-  sagaMiddleware.run(function*() {
+  sagaMiddleware.run(function* () {
     yield fork(connectSaga);
     yield fork(connectionStatusUpdateSaga);
     yield fork(detectSlowConnectionSaga);

package/src/__tests__/observeOnce.spec.js

@@ -36,7 +36,7 @@ describe('observeOnce', () => {
 
   test('should unsubscribe after first next', () =>
     new Promise((resolve, reject) => {
-      runSaga(inputOutput, function*() {
+      runSaga(inputOutput, function* () {
         try {
           const [result] = yield all([observeOnce(observable), call(() => onNext('Hello, World!'))]);
 
@@ -53,7 +53,7 @@ describe('observeOnce', () => {
 
   test('should unsubscribe and throw after first error', () =>
     new Promise((resolve, reject) => {
-      runSaga(inputOutput, function*() {
+      runSaga(inputOutput, function* () {
         try {
           try {
             yield all([observeOnce(observable), call(() => onError(new Error('Hello, World!')))]);
@@ -75,7 +75,7 @@ describe('observeOnce', () => {
 
   test('should unsubscribe after complete', () =>
     new Promise((resolve, reject) => {
-      runSaga(inputOutput, function*() {
+      runSaga(inputOutput, function* () {
         try {
           const [result] = yield all([observeOnce(observable), call(() => onComplete())]);
 

package/src/actions/setNotification.js

@@ -4,12 +4,18 @@ const SET_NOTIFICATION = 'WEB_CHAT/SET_NOTIFICATION';
 
 export default function setNotification({ alt, data, id, level, message }) {
   if (!id || typeof id !== 'string') {
-    console.warn('botframework-webchat: The "id" argument passed to "setNotification" must be a string; defaulting to a random value.');
+    console.warn(
+      'botframework-webchat: The "id" argument passed to "setNotification" must be a string; defaulting to a random value.'
+    );
+
     id = uniqueID();
   }
 
   if (!level || typeof level !== 'string') {
-    console.warn('botframework-webchat: The "level" argument passed to "setNotification" must be a string; defaulting to "info".');
+    console.warn(
+      'botframework-webchat: The "level" argument passed to "setNotification" must be a string; defaulting to "info".'
+    );
+
     level = 'info';
   }
 

package/src/createStore.ts

@@ -1,7 +1,3 @@
-/* eslint-disable @typescript-eslint/explicit-module-boundary-types */
-// This is for the racing between sagaMiddleware and store
-/* eslint no-use-before-define: "off" */
-
 import { applyMiddleware, createStore as createReduxStore, Store } from 'redux';
 import { composeWithDevTools } from 'redux-devtools-extension';
 import createSagaMiddleware from 'redux-saga';
@@ -30,6 +26,8 @@ function createEnhancerAndSagaMiddleware(getStore, ...middlewares) {
 }
 
 export default function createStore(initialState?, ...middlewares): Store {
+  // We are sure the "getStore" (first argument) is not called on "createEnhancerAndSagaMiddleware()".
+  // eslint-disable-next-line @typescript-eslint/no-use-before-define
   const { enhancer, sagaMiddleware } = createEnhancerAndSagaMiddleware(() => store, ...middlewares);
   const store = createReduxStore(reducer, initialState || {}, enhancer);
 
@@ -39,6 +37,8 @@ export default function createStore(initialState?, ...middlewares): Store {
 }
 
 export function withDevTools(initialState?, ...middlewares): Store {
+  // We are sure the "getStore" (first argument) is not called on "createEnhancerAndSagaMiddleware()".
+  // eslint-disable-next-line @typescript-eslint/no-use-before-define
   const { enhancer, sagaMiddleware } = createEnhancerAndSagaMiddleware(() => store, ...middlewares);
   const store = createReduxStore(reducer, initialState || {}, composeWithDevTools(enhancer));
 

package/src/index.ts

@@ -19,6 +19,7 @@ import DirectLineVideoCard from './types/external/DirectLineVideoCard';
 import disconnect from './actions/disconnect';
 import dismissNotification from './actions/dismissNotification';
 import emitTypingIndicator from './actions/emitTypingIndicator';
+import isForbiddenPropertyName from './utils/isForbiddenPropertyName';
 import markActivity from './actions/markActivity';
 import OneOrMany from './types/OneOrMany';
 import postActivity from './actions/postActivity';
@@ -54,6 +55,7 @@ export {
   disconnect,
   dismissNotification,
   emitTypingIndicator,
+  isForbiddenPropertyName,
   markActivity,
   postActivity,
   sendEvent,

package/src/reducers/notifications.js

@@ -3,6 +3,7 @@ import updateIn from 'simple-update-in';
 import { DISMISS_NOTIFICATION } from '../actions/dismissNotification';
 import { SAGA_ERROR } from '../actions/sagaError';
 import { SET_NOTIFICATION } from '../actions/setNotification';
+import isForbiddenPropertyName from '../utils/isForbiddenPropertyName';
 
 const DEFAULT_STATE = {};
 
@@ -15,23 +16,28 @@ export default function notifications(state = DEFAULT_STATE, { payload, type })
     state = updateIn(state, ['connectivitystatus', 'message'], () => 'javascripterror');
   } else if (type === SET_NOTIFICATION) {
     const { alt, data, id, level, message } = payload;
-    const notification = state[id];
 
-    if (
-      !notification ||
-      alt !== notification.alt ||
-      !Object.is(data, notification.data) ||
-      level !== notification.level ||
-      message !== notification.message
-    ) {
-      state = updateIn(state, [id], () => ({
-        alt,
-        data,
-        id,
-        level,
-        message,
-        timestamp: now
-      }));
+    if (!isForbiddenPropertyName(id)) {
+      // Mitigated through denylisting.
+      // eslint-disable-next-line security/detect-object-injection
+      const notification = state[id];
+
+      if (
+        !notification ||
+        alt !== notification.alt ||
+        !Object.is(data, notification.data) ||
+        level !== notification.level ||
+        message !== notification.message
+      ) {
+        state = updateIn(state, [id], () => ({
+          alt,
+          data,
+          id,
+          level,
+          message,
+          timestamp: now
+        }));
+      }
     }
   }
 

package/src/sagas/connectSaga.js

@@ -3,7 +3,7 @@
 import { call, cancel, cancelled, fork, put, race, take } from 'redux-saga/effects';
 
 import { ConnectionStatus } from 'botframework-directlinejs';
-import { decode } from 'jsonwebtoken';
+import decode from 'jwt-decode';
 
 import { CONNECT } from '../actions/connect';
 import createPromiseQueue from '../createPromiseQueue';
@@ -39,7 +39,14 @@ function* observeAndPutConnectionStatusUpdate(directLine) {
 // TODO: [P2] We should move this check and rectification to DirectLineJS.
 function rectifyUserID(directLine, userIDFromAction) {
   const { token } = directLine;
-  const { user: userIDFromToken } = decode(token) || {};
+
+  let userIDFromToken;
+
+  // TODO: Add test to make sure "jwt-decode" work as expected.
+  try {
+    userIDFromToken = (decode(token) || {}).user;
+    // eslint-disable-next-line no-empty
+  } catch (err) {}
 
   const result = {
     fromAction: userIDFromAction,

package/src/sagas/connectionStatusToNotificationSaga.js

@@ -78,6 +78,6 @@ function* connectionStatusToNotification({ payload: { directLine } }) {
   }
 }
 
-export default function*() {
+export default function* () {
   yield takeLatest(CONNECT, connectionStatusToNotification);
 }

package/src/sagas/queueIncomingActivitySaga.js

@@ -50,51 +50,52 @@ function* waitForActivityId(replyToId, initialActivities) {
 }
 
 function* queueIncomingActivity({ userID }) {
-  yield takeEveryAndSelect(QUEUE_INCOMING_ACTIVITY, activitiesSelector, function* queueIncomingActivity(
-    { payload: { activity } },
-    initialActivities
-  ) {
-    // This is for resolving an accessibility issue.
-    // If the incoming activity has "replyToId" field, hold on it until the activity replied to is in the transcript, then release this one.
-    const { replyToId } = activity;
-    const initialBotActivities = initialActivities.filter(({ from: { role } }) => role === 'bot');
-
-    // To speed up the first activity render time, we do not delay the first activity from the bot.
-    // Even if it is the first activity from the bot, the bot might be "replying" to the "conversationUpdate" event.
-    // Thus, the "replyToId" will always be there even it is the first activity in the conversation.
-    if (replyToId && initialBotActivities.length) {
-      // Either the activity replied to is in the transcript or after timeout.
-      const result = yield race({
-        _: waitForActivityId(replyToId, initialActivities),
-        timeout: call(sleep, REPLY_TIMEOUT)
-      });
-
-      if ('timeout' in result) {
-        console.warn(
-          `botframework-webchat: Timed out while waiting for activity "${replyToId}" which activity "${activity.id}" is replying to.`,
-          {
-            activity,
-            replyToId
-          }
-        );
+  yield takeEveryAndSelect(
+    QUEUE_INCOMING_ACTIVITY,
+    activitiesSelector,
+    function* queueIncomingActivity({ payload: { activity } }, initialActivities) {
+      // This is for resolving an accessibility issue.
+      // If the incoming activity has "replyToId" field, hold on it until the activity replied to is in the transcript, then release this one.
+      const { replyToId } = activity;
+      const initialBotActivities = initialActivities.filter(({ from: { role } }) => role === 'bot');
+
+      // To speed up the first activity render time, we do not delay the first activity from the bot.
+      // Even if it is the first activity from the bot, the bot might be "replying" to the "conversationUpdate" event.
+      // Thus, the "replyToId" will always be there even it is the first activity in the conversation.
+      if (replyToId && initialBotActivities.length) {
+        // Either the activity replied to is in the transcript or after timeout.
+        const result = yield race({
+          _: waitForActivityId(replyToId, initialActivities),
+          timeout: call(sleep, REPLY_TIMEOUT)
+        });
+
+        if ('timeout' in result) {
+          console.warn(
+            `botframework-webchat: Timed out while waiting for activity "${replyToId}" which activity "${activity.id}" is replying to.`,
+            {
+              activity,
+              replyToId
+            }
+          );
+        }
       }
-    }
 
-    yield put(incomingActivity(activity));
+      yield put(incomingActivity(activity));
 
-    // Update suggested actions
-    // TODO: [P3] We could put this logic inside reducer to minimize number of actions dispatched.
-    const messageActivities = yield select(activitiesOfType('message'));
-    const lastMessageActivity = messageActivities[messageActivities.length - 1];
+      // Update suggested actions
+      // TODO: [P3] We could put this logic inside reducer to minimize number of actions dispatched.
+      const messageActivities = yield select(activitiesOfType('message'));
+      const lastMessageActivity = messageActivities[messageActivities.length - 1];
 
-    if (activityFromBot(lastMessageActivity)) {
-      const { suggestedActions: { actions, to } = {} } = lastMessageActivity;
+      if (activityFromBot(lastMessageActivity)) {
+        const { suggestedActions: { actions, to } = {} } = lastMessageActivity;
 
-      // If suggested actions is not destined to anyone, or is destined to the user, show it.
-      // In other words, if suggested actions is destined to someone else, don't show it.
-      yield put(setSuggestedActions(to && to.length && !to.includes(userID) ? null : actions));
+        // If suggested actions is not destined to anyone, or is destined to the user, show it.
+        // In other words, if suggested actions is destined to someone else, don't show it.
+        yield put(setSuggestedActions(to && to.length && !to.includes(userID) ? null : actions));
+      }
     }
-  });
+  );
 }
 
 export default function* queueIncomingActivitySaga() {

package/src/sagas/sendMessageBackToPostActivitySaga.js

@@ -3,7 +3,6 @@ import postActivity from '../actions/postActivity';
 import { SEND_MESSAGE_BACK } from '../actions/sendMessageBack';
 import whileConnected from './effects/whileConnected';
 
-
 // https://github.com/microsoft/botframework-sdk/blob/main/specs/botframework-activity/botframework-activity.md#message-back
 function* postActivityWithMessageBack({ payload: { displayText, text, value } }) {
   yield put(

package/src/sagas/sendTypingIndicatorOnSetSendBoxSaga.js

@@ -34,7 +34,7 @@ function* sendTypingIndicatorOnSetSendBox() {
         // When the user type, and then post the activity at t = 1500, we still have a pending typing indicator at t = 3000.
         // This code is to cancel the typing indicator at t = 3000.
         (type === POST_ACTIVITY && payload.activity.type !== 'typing'),
-      function*({ payload, type }) {
+      function* ({ payload, type }) {
         if (type === SET_SEND_BOX) {
           const interval = SEND_INTERVAL - Date.now() + lastSend;
 

package/src/sagas/speakActivityAndStartDictateOnIncomingActivityFromOthersSaga.js

@@ -16,7 +16,7 @@ function* speakActivityAndStartDictateOnIncomingActivityFromOthers({ userID }) {
       // In Direct Line Speech, we do not know the user ID, but "role" is filled with "bot" or "user".
       // Here, we do two checks: the speakable activity must not have user ID, and must not have role === 'user'
       type === INCOMING_ACTIVITY && payload.activity.from.id !== userID && payload.activity.from.role !== 'user',
-    function*({ payload: { activity } }) {
+    function* ({ payload: { activity } }) {
       const shouldSpeakIncomingActivity = yield select(shouldSpeakIncomingActivitySelector);
       const shouldSpeak = speakableActivity(activity) && shouldSpeakIncomingActivity;
 

package/src/sagas/startSpeakActivityOnPostActivitySaga.js

@@ -8,7 +8,7 @@ function* startSpeakActivityOnPostActivity() {
   yield takeEvery(
     ({ meta, payload, type }) =>
       type === POST_ACTIVITY_PENDING && meta.method === 'speech' && payload.activity.type === 'message',
-    function*() {
+    function* () {
       yield put(startSpeakingActivity());
     }
   );

package/src/sagas/stopSpeakingActivityOnInputSaga.js

@@ -14,7 +14,7 @@ function* stopSpeakingActivityOnInput() {
       // So, right now, we are using best-effort by listening to POST_ACTIVITY_PENDING with a "message" event
       // We filter out speech because we will call startSpeakingActivity() for POST_ACTIVITY_PENDING dispatched by speech
       (type === POST_ACTIVITY_PENDING && meta.method !== 'speech' && payload.activity.type === 'message'),
-    function*() {
+    function* () {
       yield put(stopSpeakingActivity());
     }
   );

package/src/sagas/submitSendBoxSaga.js

@@ -7,7 +7,7 @@ import setSendBox from '../actions/setSendBox';
 import whileConnected from './effects/whileConnected';
 
 function* submitSendBox() {
-  yield takeEvery(SUBMIT_SEND_BOX, function*({ payload: { channelData, method } }) {
+  yield takeEvery(SUBMIT_SEND_BOX, function* ({ payload: { channelData, method } }) {
     const sendBoxValue = yield select(sendBoxValueSelector);
 
     if (sendBoxValue) {