cyberchef 11.1.0 → 11.3.0

package/src/core/vendor/htmlEntities/entity.txt

@@ -0,0 +1,14 @@
+entity.json is the WHATWG named character reference set, retrieved verbatim from:
+
+    https://html.spec.whatwg.org/entities.json
+
+It is used by src/core/config/scripts/generateHTMLEntities.mjs to generate the
+shared HTML entity lookup tables (src/core/lib/HTMLEntities.mjs) consumed by the
+"To HTML Entity" and "From HTML Entity" operations.
+
+Source: HTML Standard — 13.5 Named character references
+    https://html.spec.whatwg.org/multipage/named-characters.html
+
+Copyright and licence
+---------------------
+Copyright © WHATWG (Apple, Google, Mozilla, Microsoft). This work is licensed under a Creative Commons Attribution 4.0 International License. To the extent portions of it are incorporated into source code, such portions in the source code are licensed under the BSD 3-Clause License instead.

package/src/node/api.mjs

@@ -74,7 +74,7 @@ function transformArgs(opArgsList, newArgs) {
     return opArgs.map((arg) => {
         if (arg.type === "option") {
             // pick default option if not already chosen
-            return typeof arg.value === "string" ? arg.value : arg.value[arg.defaultIndex ?? 0];
+            return !Array.isArray(arg.value) ? arg.value : arg.value[arg.defaultIndex ?? 0];
         }
 
         if (arg.type === "editableOption") {
@@ -193,6 +193,8 @@ export function _wrap(OpClass) {
         wrapped = async (input, args=null) => {
             const {transformedInput, transformedArgs} = prepareOp(opInstance, input, args);
 
+            opInstance.validateIngredients(transformedArgs);
+
             // SPECIAL CASE for Magic. Other flowControl operations will
             // not work because the opList is not passed in.
             if (isFlowControl) {
@@ -229,6 +231,7 @@ export function _wrap(OpClass) {
          */
         wrapped = (input, args=null) => {
             const {transformedInput, transformedArgs} = prepareOp(opInstance, input, args);
+            opInstance.validateIngredients(transformedArgs);
             const result = opInstance.run(transformedInput, transformedArgs);
             return new NodeDish({
                 value: result,

package/src/node/index.mjs

@@ -35,7 +35,12 @@ import {
     AnalyseUUID as core_AnalyseUUID,
     Argon2 as core_Argon2,
     Argon2Compare as core_Argon2Compare,
+    AsconDecrypt as core_AsconDecrypt,
+    AsconEncrypt as core_AsconEncrypt,
+    AsconHash as core_AsconHash,
+    AsconMAC as core_AsconMAC,
     AtbashCipher as core_AtbashCipher,
+    AutomatedValidationTestOp as core_AutomatedValidationTestOp,
     AvroToJSON as core_AvroToJSON,
     BLAKE2b as core_BLAKE2b,
     BLAKE2s as core_BLAKE2s,
@@ -126,6 +131,7 @@ import {
     EscapeString as core_EscapeString,
     EscapeUnicodeCharacters as core_EscapeUnicodeCharacters,
     ExpandAlphabetRange as core_ExpandAlphabetRange,
+    ExtendedGCD as core_ExtendedGCD,
     ExtractAudioMetadata as core_ExtractAudioMetadata,
     ExtractDates as core_ExtractDates,
     ExtractDomains as core_ExtractDomains,
@@ -168,6 +174,7 @@ import {
     FromBech32 as core_FromBech32,
     FromBinary as core_FromBinary,
     FromBraille as core_FromBraille,
+    FromCOBS as core_FromCOBS,
     FromCaseInsensitiveRegex as core_FromCaseInsensitiveRegex,
     FromCharcode as core_FromCharcode,
     FromDecimal as core_FromDecimal,
@@ -199,6 +206,7 @@ import {
     GenerateImage as core_GenerateImage,
     GenerateLoremIpsum as core_GenerateLoremIpsum,
     GeneratePGPKeyPair as core_GeneratePGPKeyPair,
+    GeneratePrime as core_GeneratePrime,
     GenerateQRCode as core_GenerateQRCode,
     GenerateRSAKeyPair as core_GenerateRSAKeyPair,
     GenerateTOTP as core_GenerateTOTP,
@@ -263,10 +271,12 @@ import {
     MD5 as core_MD5,
     MD6 as core_MD6,
     MIMEDecoding as core_MIMEDecoding,
+    MOD as core_MOD,
     Magic as core_Magic,
     Mean as core_Mean,
     Median as core_Median,
     MicrosoftScriptDecoder as core_MicrosoftScriptDecoder,
+    ModularInverse as core_ModularInverse,
     MultipleBombe as core_MultipleBombe,
     Multiply as core_Multiply,
     MurmurHash3 as core_MurmurHash3,
@@ -290,6 +300,8 @@ import {
     PHPDeserialize as core_PHPDeserialize,
     PHPSerialize as core_PHPSerialize,
     PLISTViewer as core_PLISTViewer,
+    PRESENTDecrypt as core_PRESENTDecrypt,
+    PRESENTEncrypt as core_PRESENTEncrypt,
     PadLines as core_PadLines,
     ParityBit as core_ParityBit,
     ParseASN1HexString as core_ParseASN1HexString,
@@ -341,6 +353,7 @@ import {
     Rabbit as core_Rabbit,
     RailFenceCipherDecode as core_RailFenceCipherDecode,
     RailFenceCipherEncode as core_RailFenceCipherEncode,
+    RandomPrime as core_RandomPrime,
     RandomizeColourPalette as core_RandomizeColourPalette,
     RawDeflate as core_RawDeflate,
     RawInflate as core_RawInflate,
@@ -354,6 +367,7 @@ import {
     RemoveWhitespace as core_RemoveWhitespace,
     RenderImage as core_RenderImage,
     RenderMarkdown as core_RenderMarkdown,
+    RenderPDF as core_RenderPDF,
     ResizeImage as core_ResizeImage,
     Return as core_Return,
     Reverse as core_Reverse,
@@ -410,6 +424,8 @@ import {
     SwapEndianness as core_SwapEndianness,
     SymmetricDifference as core_SymmetricDifference,
     TCPIPChecksum as core_TCPIPChecksum,
+    TEADecrypt as core_TEADecrypt,
+    TEAEncrypt as core_TEAEncrypt,
     Tail as core_Tail,
     TakeBytes as core_TakeBytes,
     TakeNthBytes as core_TakeNthBytes,
@@ -429,6 +445,7 @@ import {
     ToBech32 as core_ToBech32,
     ToBinary as core_ToBinary,
     ToBraille as core_ToBraille,
+    ToCOBS as core_ToCOBS,
     ToCamelCase as core_ToCamelCase,
     ToCaseInsensitiveRegex as core_ToCaseInsensitiveRegex,
     ToCharcode as core_ToCharcode,
@@ -453,6 +470,8 @@ import {
     TranslateDateTimeFormat as core_TranslateDateTimeFormat,
     TripleDESDecrypt as core_TripleDESDecrypt,
     TripleDESEncrypt as core_TripleDESEncrypt,
+    TwofishDecrypt as core_TwofishDecrypt,
+    TwofishEncrypt as core_TwofishEncrypt,
     Typex as core_Typex,
     UNIXTimestampToWindowsFiletime as core_UNIXTimestampToWindowsFiletime,
     URLDecode as core_URLDecode,
@@ -479,6 +498,8 @@ import {
     XORChecksum as core_XORChecksum,
     XPathExpression as core_XPathExpression,
     XSalsa20 as core_XSalsa20,
+    XTEADecrypt as core_XTEADecrypt,
+    XTEAEncrypt as core_XTEAEncrypt,
     XXTEADecrypt as core_XXTEADecrypt,
     XXTEAEncrypt as core_XXTEAEncrypt,
     YAMLToJSON as core_YAMLToJSON,
@@ -518,7 +539,12 @@ function generateChef() {
         "analyseUUID": _wrap(core_AnalyseUUID),
         "argon2": _wrap(core_Argon2),
         "argon2Compare": _wrap(core_Argon2Compare),
+        "asconDecrypt": _wrap(core_AsconDecrypt),
+        "asconEncrypt": _wrap(core_AsconEncrypt),
+        "asconHash": _wrap(core_AsconHash),
+        "asconMAC": _wrap(core_AsconMAC),
         "atbashCipher": _wrap(core_AtbashCipher),
+        "automatedValidationTestOp": _wrap(core_AutomatedValidationTestOp),
         "avroToJSON": _wrap(core_AvroToJSON),
         "BLAKE2b": _wrap(core_BLAKE2b),
         "BLAKE2s": _wrap(core_BLAKE2s),
@@ -609,6 +635,7 @@ function generateChef() {
         "escapeString": _wrap(core_EscapeString),
         "escapeUnicodeCharacters": _wrap(core_EscapeUnicodeCharacters),
         "expandAlphabetRange": _wrap(core_ExpandAlphabetRange),
+        "extendedGCD": _wrap(core_ExtendedGCD),
         "extractAudioMetadata": _wrap(core_ExtractAudioMetadata),
         "extractDates": _wrap(core_ExtractDates),
         "extractDomains": _wrap(core_ExtractDomains),
@@ -651,6 +678,7 @@ function generateChef() {
         "fromBech32": _wrap(core_FromBech32),
         "fromBinary": _wrap(core_FromBinary),
         "fromBraille": _wrap(core_FromBraille),
+        "fromCOBS": _wrap(core_FromCOBS),
         "fromCaseInsensitiveRegex": _wrap(core_FromCaseInsensitiveRegex),
         "fromCharcode": _wrap(core_FromCharcode),
         "fromDecimal": _wrap(core_FromDecimal),
@@ -682,6 +710,7 @@ function generateChef() {
         "generateImage": _wrap(core_GenerateImage),
         "generateLoremIpsum": _wrap(core_GenerateLoremIpsum),
         "generatePGPKeyPair": _wrap(core_GeneratePGPKeyPair),
+        "generatePrime": _wrap(core_GeneratePrime),
         "generateQRCode": _wrap(core_GenerateQRCode),
         "generateRSAKeyPair": _wrap(core_GenerateRSAKeyPair),
         "generateTOTP": _wrap(core_GenerateTOTP),
@@ -746,10 +775,12 @@ function generateChef() {
         "MD5": _wrap(core_MD5),
         "MD6": _wrap(core_MD6),
         "MIMEDecoding": _wrap(core_MIMEDecoding),
+        "MOD": _wrap(core_MOD),
         "magic": _wrap(core_Magic),
         "mean": _wrap(core_Mean),
         "median": _wrap(core_Median),
         "microsoftScriptDecoder": _wrap(core_MicrosoftScriptDecoder),
+        "modularInverse": _wrap(core_ModularInverse),
         "multipleBombe": _wrap(core_MultipleBombe),
         "multiply": _wrap(core_Multiply),
         "murmurHash3": _wrap(core_MurmurHash3),
@@ -773,6 +804,8 @@ function generateChef() {
         "PHPDeserialize": _wrap(core_PHPDeserialize),
         "PHPSerialize": _wrap(core_PHPSerialize),
         "PLISTViewer": _wrap(core_PLISTViewer),
+        "PRESENTDecrypt": _wrap(core_PRESENTDecrypt),
+        "PRESENTEncrypt": _wrap(core_PRESENTEncrypt),
         "padLines": _wrap(core_PadLines),
         "parityBit": _wrap(core_ParityBit),
         "parseASN1HexString": _wrap(core_ParseASN1HexString),
@@ -824,6 +857,7 @@ function generateChef() {
         "rabbit": _wrap(core_Rabbit),
         "railFenceCipherDecode": _wrap(core_RailFenceCipherDecode),
         "railFenceCipherEncode": _wrap(core_RailFenceCipherEncode),
+        "randomPrime": _wrap(core_RandomPrime),
         "randomizeColourPalette": _wrap(core_RandomizeColourPalette),
         "rawDeflate": _wrap(core_RawDeflate),
         "rawInflate": _wrap(core_RawInflate),
@@ -837,6 +871,7 @@ function generateChef() {
         "removeWhitespace": _wrap(core_RemoveWhitespace),
         "renderImage": _wrap(core_RenderImage),
         "renderMarkdown": _wrap(core_RenderMarkdown),
+        "renderPDF": _wrap(core_RenderPDF),
         "resizeImage": _wrap(core_ResizeImage),
         "Return": _wrap(core_Return),
         "reverse": _wrap(core_Reverse),
@@ -893,6 +928,8 @@ function generateChef() {
         "swapEndianness": _wrap(core_SwapEndianness),
         "symmetricDifference": _wrap(core_SymmetricDifference),
         "TCPIPChecksum": _wrap(core_TCPIPChecksum),
+        "TEADecrypt": _wrap(core_TEADecrypt),
+        "TEAEncrypt": _wrap(core_TEAEncrypt),
         "tail": _wrap(core_Tail),
         "takeBytes": _wrap(core_TakeBytes),
         "takeNthBytes": _wrap(core_TakeNthBytes),
@@ -912,6 +949,7 @@ function generateChef() {
         "toBech32": _wrap(core_ToBech32),
         "toBinary": _wrap(core_ToBinary),
         "toBraille": _wrap(core_ToBraille),
+        "toCOBS": _wrap(core_ToCOBS),
         "toCamelCase": _wrap(core_ToCamelCase),
         "toCaseInsensitiveRegex": _wrap(core_ToCaseInsensitiveRegex),
         "toCharcode": _wrap(core_ToCharcode),
@@ -936,6 +974,8 @@ function generateChef() {
         "translateDateTimeFormat": _wrap(core_TranslateDateTimeFormat),
         "tripleDESDecrypt": _wrap(core_TripleDESDecrypt),
         "tripleDESEncrypt": _wrap(core_TripleDESEncrypt),
+        "twofishDecrypt": _wrap(core_TwofishDecrypt),
+        "twofishEncrypt": _wrap(core_TwofishEncrypt),
         "typex": _wrap(core_Typex),
         "UNIXTimestampToWindowsFiletime": _wrap(core_UNIXTimestampToWindowsFiletime),
         "URLDecode": _wrap(core_URLDecode),
@@ -962,6 +1002,8 @@ function generateChef() {
         "XORChecksum": _wrap(core_XORChecksum),
         "XPathExpression": _wrap(core_XPathExpression),
         "XSalsa20": _wrap(core_XSalsa20),
+        "XTEADecrypt": _wrap(core_XTEADecrypt),
+        "XTEAEncrypt": _wrap(core_XTEAEncrypt),
         "XXTEADecrypt": _wrap(core_XXTEADecrypt),
         "XXTEAEncrypt": _wrap(core_XXTEAEncrypt),
         "YAMLToJSON": _wrap(core_YAMLToJSON),
@@ -1009,7 +1051,12 @@ const analyseHash = chef.analyseHash;
 const analyseUUID = chef.analyseUUID;
 const argon2 = chef.argon2;
 const argon2Compare = chef.argon2Compare;
+const asconDecrypt = chef.asconDecrypt;
+const asconEncrypt = chef.asconEncrypt;
+const asconHash = chef.asconHash;
+const asconMAC = chef.asconMAC;
 const atbashCipher = chef.atbashCipher;
+const automatedValidationTestOp = chef.automatedValidationTestOp;
 const avroToJSON = chef.avroToJSON;
 const BLAKE2b = chef.BLAKE2b;
 const BLAKE2s = chef.BLAKE2s;
@@ -1102,6 +1149,7 @@ const escapeSmartCharacters = chef.escapeSmartCharacters;
 const escapeString = chef.escapeString;
 const escapeUnicodeCharacters = chef.escapeUnicodeCharacters;
 const expandAlphabetRange = chef.expandAlphabetRange;
+const extendedGCD = chef.extendedGCD;
 const extractAudioMetadata = chef.extractAudioMetadata;
 const extractDates = chef.extractDates;
 const extractDomains = chef.extractDomains;
@@ -1145,6 +1193,7 @@ const fromBase92 = chef.fromBase92;
 const fromBech32 = chef.fromBech32;
 const fromBinary = chef.fromBinary;
 const fromBraille = chef.fromBraille;
+const fromCOBS = chef.fromCOBS;
 const fromCaseInsensitiveRegex = chef.fromCaseInsensitiveRegex;
 const fromCharcode = chef.fromCharcode;
 const fromDecimal = chef.fromDecimal;
@@ -1176,6 +1225,7 @@ const generateHOTP = chef.generateHOTP;
 const generateImage = chef.generateImage;
 const generateLoremIpsum = chef.generateLoremIpsum;
 const generatePGPKeyPair = chef.generatePGPKeyPair;
+const generatePrime = chef.generatePrime;
 const generateQRCode = chef.generateQRCode;
 const generateRSAKeyPair = chef.generateRSAKeyPair;
 const generateTOTP = chef.generateTOTP;
@@ -1245,11 +1295,13 @@ const MD4 = chef.MD4;
 const MD5 = chef.MD5;
 const MD6 = chef.MD6;
 const MIMEDecoding = chef.MIMEDecoding;
+const MOD = chef.MOD;
 const magic = chef.magic;
 const mean = chef.mean;
 const median = chef.median;
 const merge = chef.merge;
 const microsoftScriptDecoder = chef.microsoftScriptDecoder;
+const modularInverse = chef.modularInverse;
 const multipleBombe = chef.multipleBombe;
 const multiply = chef.multiply;
 const murmurHash3 = chef.murmurHash3;
@@ -1273,6 +1325,8 @@ const PGPVerify = chef.PGPVerify;
 const PHPDeserialize = chef.PHPDeserialize;
 const PHPSerialize = chef.PHPSerialize;
 const PLISTViewer = chef.PLISTViewer;
+const PRESENTDecrypt = chef.PRESENTDecrypt;
+const PRESENTEncrypt = chef.PRESENTEncrypt;
 const padLines = chef.padLines;
 const parityBit = chef.parityBit;
 const parseASN1HexString = chef.parseASN1HexString;
@@ -1324,6 +1378,7 @@ const RSAVerify = chef.RSAVerify;
 const rabbit = chef.rabbit;
 const railFenceCipherDecode = chef.railFenceCipherDecode;
 const railFenceCipherEncode = chef.railFenceCipherEncode;
+const randomPrime = chef.randomPrime;
 const randomizeColourPalette = chef.randomizeColourPalette;
 const rawDeflate = chef.rawDeflate;
 const rawInflate = chef.rawInflate;
@@ -1337,6 +1392,7 @@ const removeNullBytes = chef.removeNullBytes;
 const removeWhitespace = chef.removeWhitespace;
 const renderImage = chef.renderImage;
 const renderMarkdown = chef.renderMarkdown;
+const renderPDF = chef.renderPDF;
 const resizeImage = chef.resizeImage;
 const Return = chef.Return;
 const reverse = chef.reverse;
@@ -1394,6 +1450,8 @@ const swapEndianness = chef.swapEndianness;
 const symmetricDifference = chef.symmetricDifference;
 const syntaxHighlighter = chef.syntaxHighlighter;
 const TCPIPChecksum = chef.TCPIPChecksum;
+const TEADecrypt = chef.TEADecrypt;
+const TEAEncrypt = chef.TEAEncrypt;
 const tail = chef.tail;
 const takeBytes = chef.takeBytes;
 const takeNthBytes = chef.takeNthBytes;
@@ -1413,6 +1471,7 @@ const toBase92 = chef.toBase92;
 const toBech32 = chef.toBech32;
 const toBinary = chef.toBinary;
 const toBraille = chef.toBraille;
+const toCOBS = chef.toCOBS;
 const toCamelCase = chef.toCamelCase;
 const toCaseInsensitiveRegex = chef.toCaseInsensitiveRegex;
 const toCharcode = chef.toCharcode;
@@ -1437,6 +1496,8 @@ const toUpperCase = chef.toUpperCase;
 const translateDateTimeFormat = chef.translateDateTimeFormat;
 const tripleDESDecrypt = chef.tripleDESDecrypt;
 const tripleDESEncrypt = chef.tripleDESEncrypt;
+const twofishDecrypt = chef.twofishDecrypt;
+const twofishEncrypt = chef.twofishEncrypt;
 const typex = chef.typex;
 const UNIXTimestampToWindowsFiletime = chef.UNIXTimestampToWindowsFiletime;
 const URLDecode = chef.URLDecode;
@@ -1463,6 +1524,8 @@ const XORBruteForce = chef.XORBruteForce;
 const XORChecksum = chef.XORChecksum;
 const XPathExpression = chef.XPathExpression;
 const XSalsa20 = chef.XSalsa20;
+const XTEADecrypt = chef.XTEADecrypt;
+const XTEAEncrypt = chef.XTEAEncrypt;
 const XXTEADecrypt = chef.XXTEADecrypt;
 const XXTEAEncrypt = chef.XXTEAEncrypt;
 const YAMLToJSON = chef.YAMLToJSON;
@@ -1494,7 +1557,12 @@ const operations = [
     analyseUUID,
     argon2,
     argon2Compare,
+    asconDecrypt,
+    asconEncrypt,
+    asconHash,
+    asconMAC,
     atbashCipher,
+    automatedValidationTestOp,
     avroToJSON,
     BLAKE2b,
     BLAKE2s,
@@ -1587,6 +1655,7 @@ const operations = [
     escapeString,
     escapeUnicodeCharacters,
     expandAlphabetRange,
+    extendedGCD,
     extractAudioMetadata,
     extractDates,
     extractDomains,
@@ -1630,6 +1699,7 @@ const operations = [
     fromBech32,
     fromBinary,
     fromBraille,
+    fromCOBS,
     fromCaseInsensitiveRegex,
     fromCharcode,
     fromDecimal,
@@ -1661,6 +1731,7 @@ const operations = [
     generateImage,
     generateLoremIpsum,
     generatePGPKeyPair,
+    generatePrime,
     generateQRCode,
     generateRSAKeyPair,
     generateTOTP,
@@ -1730,11 +1801,13 @@ const operations = [
     MD5,
     MD6,
     MIMEDecoding,
+    MOD,
     magic,
     mean,
     median,
     merge,
     microsoftScriptDecoder,
+    modularInverse,
     multipleBombe,
     multiply,
     murmurHash3,
@@ -1758,6 +1831,8 @@ const operations = [
     PHPDeserialize,
     PHPSerialize,
     PLISTViewer,
+    PRESENTDecrypt,
+    PRESENTEncrypt,
     padLines,
     parityBit,
     parseASN1HexString,
@@ -1809,6 +1884,7 @@ const operations = [
     rabbit,
     railFenceCipherDecode,
     railFenceCipherEncode,
+    randomPrime,
     randomizeColourPalette,
     rawDeflate,
     rawInflate,
@@ -1822,6 +1898,7 @@ const operations = [
     removeWhitespace,
     renderImage,
     renderMarkdown,
+    renderPDF,
     resizeImage,
     Return,
     reverse,
@@ -1879,6 +1956,8 @@ const operations = [
     symmetricDifference,
     syntaxHighlighter,
     TCPIPChecksum,
+    TEADecrypt,
+    TEAEncrypt,
     tail,
     takeBytes,
     takeNthBytes,
@@ -1898,6 +1977,7 @@ const operations = [
     toBech32,
     toBinary,
     toBraille,
+    toCOBS,
     toCamelCase,
     toCaseInsensitiveRegex,
     toCharcode,
@@ -1922,6 +2002,8 @@ const operations = [
     translateDateTimeFormat,
     tripleDESDecrypt,
     tripleDESEncrypt,
+    twofishDecrypt,
+    twofishEncrypt,
     typex,
     UNIXTimestampToWindowsFiletime,
     URLDecode,
@@ -1948,6 +2030,8 @@ const operations = [
     XORChecksum,
     XPathExpression,
     XSalsa20,
+    XTEADecrypt,
+    XTEAEncrypt,
     XXTEADecrypt,
     XXTEAEncrypt,
     YAMLToJSON,
@@ -1983,7 +2067,12 @@ export {
     analyseUUID,
     argon2,
     argon2Compare,
+    asconDecrypt,
+    asconEncrypt,
+    asconHash,
+    asconMAC,
     atbashCipher,
+    automatedValidationTestOp,
     avroToJSON,
     BLAKE2b,
     BLAKE2s,
@@ -2076,6 +2165,7 @@ export {
     escapeString,
     escapeUnicodeCharacters,
     expandAlphabetRange,
+    extendedGCD,
     extractAudioMetadata,
     extractDates,
     extractDomains,
@@ -2119,6 +2209,7 @@ export {
     fromBech32,
     fromBinary,
     fromBraille,
+    fromCOBS,
     fromCaseInsensitiveRegex,
     fromCharcode,
     fromDecimal,
@@ -2150,6 +2241,7 @@ export {
     generateImage,
     generateLoremIpsum,
     generatePGPKeyPair,
+    generatePrime,
     generateQRCode,
     generateRSAKeyPair,
     generateTOTP,
@@ -2219,11 +2311,13 @@ export {
     MD5,
     MD6,
     MIMEDecoding,
+    MOD,
     magic,
     mean,
     median,
     merge,
     microsoftScriptDecoder,
+    modularInverse,
     multipleBombe,
     multiply,
     murmurHash3,
@@ -2247,6 +2341,8 @@ export {
     PHPDeserialize,
     PHPSerialize,
     PLISTViewer,
+    PRESENTDecrypt,
+    PRESENTEncrypt,
     padLines,
     parityBit,
     parseASN1HexString,
@@ -2298,6 +2394,7 @@ export {
     rabbit,
     railFenceCipherDecode,
     railFenceCipherEncode,
+    randomPrime,
     randomizeColourPalette,
     rawDeflate,
     rawInflate,
@@ -2311,6 +2408,7 @@ export {
     removeWhitespace,
     renderImage,
     renderMarkdown,
+    renderPDF,
     resizeImage,
     Return,
     reverse,
@@ -2368,6 +2466,8 @@ export {
     symmetricDifference,
     syntaxHighlighter,
     TCPIPChecksum,
+    TEADecrypt,
+    TEAEncrypt,
     tail,
     takeBytes,
     takeNthBytes,
@@ -2387,6 +2487,7 @@ export {
     toBech32,
     toBinary,
     toBraille,
+    toCOBS,
     toCamelCase,
     toCaseInsensitiveRegex,
     toCharcode,
@@ -2411,6 +2512,8 @@ export {
     translateDateTimeFormat,
     tripleDESDecrypt,
     tripleDESEncrypt,
+    twofishDecrypt,
+    twofishEncrypt,
     typex,
     UNIXTimestampToWindowsFiletime,
     URLDecode,
@@ -2437,6 +2540,8 @@ export {
     XORChecksum,
     XPathExpression,
     XSalsa20,
+    XTEADecrypt,
+    XTEAEncrypt,
     XXTEADecrypt,
     XXTEAEncrypt,
     YAMLToJSON,

package/src/web/HTMLOperation.mjs

@@ -56,9 +56,10 @@ class HTMLOperation {
 
         if (this.description) {
             const infoLink = this.infoURL ? `<hr>${titleFromWikiLink(this.infoURL)}` : "";
+            const content = Utils.escapeHtml(this.description + infoLink);
 
             html += ` data-container='body' data-toggle='popover' data-placement='right'
-                data-content="${this.description}${infoLink}" data-html='true' data-trigger='hover'
+                data-content="${content}" data-html='true' data-trigger='hover'
                 data-boundary='viewport' role='button'`;
         }
 

package/src/web/stylesheets/layout/_io.css

@@ -24,6 +24,14 @@
     height: 100%;
     user-select: auto;
 }
+
+#output-html > img {
+    display: block;
+    max-width: 100%;
+    max-height: 100%;
+    margin: auto;
+}
+
 #output-text.html-output .cm-line .cm-widgetBuffer,
 #output-text.html-output .cm-line>br {
     display: none;

package/tests/browser/00_nightwatch.js

@@ -56,6 +56,32 @@ module.exports = {
         browser.expect.element("//li[contains(@class, 'operation') and text()='Play Media']").to.be.present;
         browser.expect.element("//li[contains(@class, 'operation') and text()='Disassemble x86']").to.be.present;
         browser.expect.element("//li[contains(@class, 'operation') and text()='Register']").to.be.present;
+        browser.expect.element("//li[contains(@class, 'operation') and text()='Escape Smart Characters']").to.be.present;
+    },
+
+    "Operation popover descriptions render HTML safely": browser => {
+        const favouritesCat = "//a[contains(@class, 'category-title') and contains(@data-target, '#catFavourites')]",
+            op = "//ul[@id='search-results']//li[contains(@class, 'operation') and contains(., 'Escape Smart Characters')]";
+
+        browser
+            .useCss()
+            .clearValue("#search")
+            .setValue("#search", "Escape Smart Characters")
+            .useXpath()
+            .waitForElementVisible(op, 1000)
+            .moveToElement(op, 10, 10)
+            .useCss()
+            .waitForElementVisible(".popover-body code:last-of-type", 1000)
+            .expect.element(".popover-body code:last-of-type").text.to.contain("\"Hello\" -- world...");
+
+        browser
+            .useCss()
+            .moveToElement("#operations .title", 1, 1)
+            .waitForElementNotPresent(".popover-body", 1000)
+            .clearValue("#search")
+            .useXpath()
+            .getLocationInView(favouritesCat)
+            .click(favouritesCat);
     },
 
     "Recipe can be run": browser => {

package/tests/browser/02_ops.js

@@ -218,6 +218,7 @@ module.exports = {
         testOpHtml(browser, "JSON Beautify", "{a:1}", ".json-dict .json-literal", "1");
         // testOp(browser, "JSON Minify", "test input", "test_output");
     // testOp(browser, "JSON to CSV", "test input", "test_output");
+        testOp(browser, "Jsonata Query", '{"a": "SGVsbG8gV29ybGQh"}', '"Hello World!"', ["$base64decode($.a)"]);
     // testOp(browser, "JWT Decode", "test input", "test_output");
     // testOp(browser, "JWT Sign", "test input", "test_output");
     // testOp(browser, "JWT Verify", "test input", "test_output");
@@ -277,7 +278,7 @@ module.exports = {
         // testOp(browser, "Parse TLV", "test input", "test_output");
         testOpHtml(browser, "Parse UDP", "04 89 00 35 00 2c 01 01", "tr:last-child td:last-child", "0x0101");
         // testOp(browser, "Parse UNIX file permissions", "test input", "test_output");
-        // testOp(browser, "Parse URI", "test input", "test_output");
+        testOp(browser, "Parse URI", "https://example.com/?constructor=ok&__proto__=hello", /Arguments:\s+constructor = ok\s+__proto__\s+= hello/);
         testOp(browser, "Parse User Agent", "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0 ", /Architecture: amd64/);
         // testOp(browser, "Parse X.509 certificate", "test input", "test_output");
         testOpFile(browser, "Play Media", "files/mp3example.mp3", "audio", "");
@@ -345,8 +346,8 @@ module.exports = {
         // testOp(browser, "Strip HTTP headers", "test input", "test_output");
         // testOp(browser, "Subsection", "test input", "test_output");
         // testOp(browser, "Substitute", "test input", "test_output");
-        // testOp(browser, "Subtract", "test input", "test_output");
-    // testOp(browser, "Sum", "test input", "test_output");
+        testOp(browser, "Subtract", "321,123,test", "198", ["Comma"]);
+        testOp(browser, "Sum", "321,123,test", "444", ["Comma"]);
         // testOp(browser, "Swap endianness", "test input", "test_output");
         // testOp(browser, "Symmetric Difference", "test input", "test_output");
         testOpHtml(browser, "Syntax highlighter", "var a = [4,5,6]", ".hljs-selector-attr", "[4,5,6]");
@@ -492,7 +493,22 @@ function testOpImage(browser, opName, filename, args=[]) {
 
     browser
         .waitForElementVisible("#output-html img")
-        .expect.element("#output-html img").to.have.css("width").which.matches(/^[^0]\d*px/);
+        .expect.element("#output-html img").to.have.css("width").which.matches(/^(?!0+(?:\.0+)?px$)\d+(?:\.\d+)?px$/);
+
+    browser.execute(function() {
+        const output = document.getElementById("output-html");
+        const img = output.querySelector("img");
+        const outputRect = output.getBoundingClientRect();
+        const imgRect = img.getBoundingClientRect();
+
+        return {
+            imageFitsWidth: imgRect.width <= outputRect.width,
+            imageFitsHeight: imgRect.height <= outputRect.height,
+        };
+    }, [], function({value}) {
+        browser.expect(value.imageFitsWidth).to.be.equal(true);
+        browser.expect(value.imageFitsHeight).to.be.equal(true);
+    });
 }
 
 /** @function