commons-shared-web-ui 0.0.47 → 0.0.48

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/index.d.ts CHANGED
@@ -3931,8 +3931,15 @@ declare class SmartTableComponent implements OnInit, OnChanges, AfterViewInit, O
3931
3931
  }
3932
3932
 
3933
3933
  /**
3934
- * Sanitizes and bypasses Angular's DomSanitizer security for HTML content.
3935
- * Prevents execution of unsafe scripts/attributes while allowing safe rendering of formatting tags in [innerHTML].
3934
+ * Marks rich-text HTML (e.g. from a smart-table "html" column, always sourced from this
3935
+ * app's own rich-text editor output, never arbitrary external/user-supplied markup) as
3936
+ * trusted so [innerHTML] renders it without Angular's default HTML sanitizer stripping it.
3937
+ *
3938
+ * Deliberately does NOT run the value through DomSanitizer.sanitize(SecurityContext.HTML, ...)
3939
+ * first — that sanitizer strips `style` attributes entirely (they're not in its allowlist),
3940
+ * which silently destroyed rich-text formatting like text color and highlight color while
3941
+ * leaving semantic-tag formatting (bold/italic/underline) untouched, since only tags — not
3942
+ * inline styles — survive that pass.
3936
3943
  */
3937
3944
  declare class SafeHtmlPipe implements PipeTransform {
3938
3945
  private sanitizer;
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "commons-shared-web-ui",
3
- "version": "0.0.47",
3
+ "version": "0.0.48",
4
4
  "peerDependencies": {
5
5
  "@angular/animations": "20.3.15",
6
6
  "@angular/cdk": "20.2.14",