ecinc-cloud-mappaio 9.6.147 → 9.6.149

package/lib/ecmappaio.common.js

@@ -41119,7 +41119,7 @@ service.interceptors.request.use(function (config) {
   } else if (window.productCode && location.href.indexOf('productCode') === -1) {
     config.headers['productCode'] = window.productCode;
   }
-  config.headers['ecweb-csrf-token'] = decodeURIComponent(sessionStorage.getItem('ecweb-csrf-token')) || '';
+  config.headers['ecweb-csrf-token'] = decodeURIComponent(sessionStorage.getItem('ecweb-csrf-token') || '');
   var language = (0,lang/* getLanguage */.Z0)();
   if (language === 'en') {
     language = 'en-US';
@@ -41466,6 +41466,8 @@ if (sessionStorage.getItem('productCode')) {
   productCode = '-' + sessionStorage.getItem('productCode');
 } else if (location.href.indexOf('productCode=') !== -1) {
   productCode = '-' + location.href.split('productCode=')[1].split('&')[0];
+} else if (window.productCode) {
+  productCode = '-' + window.productCode;
 }
 var TokenKey = (window.jwtTokenKey || 'ECWEB-JWTSSO-TOKEN') + (productCode || port);
 var RoleKey = 'ECWEB-ROLE-CODE-LIST' + (productCode || port);
@@ -68959,6 +68961,97 @@ external_commonjs_vue_commonjs2_vue_root_Vue_default().directive('wfidea-lbl', {
     wfIdeaLblI18nFunc(el, binding, vnode);
   }
 });
+;// CONCATENATED MODULE: ./packages/common/directive/escaped-html/index.js
+
+function escapedHtml(htmlStr) {
+  if (typeof htmlStr !== 'string') {
+    return '';
+  }
+
+  // 1. 基本转义
+  var basic = htmlStr.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#39;').replace(/\//g, '&#x2F;').replace(/`/g, '&#96;');
+
+  // 2. 特殊危险模式处理
+  var patterns = [
+  // 事件处理器
+  {
+    regex: /\bon\w+\s*=\s*["'][^"']*["']/gi,
+    replace: ': '
+  }, {
+    regex: /\bon\w+\s*=\s*[^\s>]+/gi,
+    replace: '='
+  },
+  // JavaScript 协议
+  {
+    regex: /javascript:/gi,
+    escape: ':'
+  }, {
+    regex: /data:/gi,
+    escape: ':'
+  }, {
+    regex: /vbscript:/gi,
+    escape: ':'
+  },
+  // 十六进制/八进制编码
+  {
+    regex: /&#x?[0-9a-f]+;/gi,
+    decode: true
+  },
+  // CSS 危险表达式
+  {
+    regex: /expression\s*\(/gi,
+    escape: '('
+  }, {
+    regex: /url\s*\(\s*["']?javascript:/gi,
+    escape: ':'
+  },
+  // HTML5 新事件
+  {
+    regex: /onpointer\w+/gi,
+    replace: 'on'
+  }, {
+    regex: /ontouch\w+/gi,
+    replace: 'on'
+  },
+  // 内联样式中的 JavaScript
+  {
+    regex: /style\s*=\s*["'][^"']*javascript:[^"']*["']/gi,
+    escape: ':'
+  }];
+  var result = basic;
+  patterns.forEach(function (_ref) {
+    var regex = _ref.regex,
+      replace = _ref.replace,
+      escape = _ref.escape,
+      decode = _ref.decode;
+    result = result.replace(regex, function (match) {
+      if (decode) {
+        // 处理 HTML 实体编码
+        var temp = document.createElement('div');
+        temp.innerHTML = match;
+        return temp.textContent;
+      } else if (replace) {
+        // 替换特定部分
+        return match.replace(new RegExp(replace, 'g'), replace === ':' ? '&#58;' : replace === '=' ? '&#61;' : replace === '(' ? '&#40;' : replace === 'on' ? '&#111;n' : replace);
+      } else if (escape) {
+        // 转义特定字符
+        return match.replace(new RegExp(escape, 'g'), escape === ':' ? '&#58;' : escape === '(' ? '&#40;' : '');
+      }
+      return match;
+    });
+  });
+  return result;
+}
+external_commonjs_vue_commonjs2_vue_root_Vue_default().directive('escaped-html', {
+  inserted: function inserted(el, binding, vnode) {
+    el.innerHTML = escapedHtml(binding.value);
+  },
+  componentUpdated: function componentUpdated(el, binding, vnode) {
+    if (binding.value !== binding.oldValue) {
+      el.innerHTML = escapedHtml(binding.value);
+    }
+  }
+});
 ;// CONCATENATED MODULE: ./packages/common/directive/index.js
 
 
@@ -68969,6 +69062,7 @@ external_commonjs_vue_commonjs2_vue_root_Vue_default().directive('wfidea-lbl', {
 
 
 
+
 ;// CONCATENATED MODULE: ./packages/ecmapp/Directive/format-value/index.js
 function format_value_typeof(o) { "@babel/helpers - typeof"; return format_value_typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, format_value_typeof(o); }
 

package/lib/ecmappaio.umd.js

@@ -41129,7 +41129,7 @@ service.interceptors.request.use(function (config) {
   } else if (window.productCode && location.href.indexOf('productCode') === -1) {
     config.headers['productCode'] = window.productCode;
   }
-  config.headers['ecweb-csrf-token'] = decodeURIComponent(sessionStorage.getItem('ecweb-csrf-token')) || '';
+  config.headers['ecweb-csrf-token'] = decodeURIComponent(sessionStorage.getItem('ecweb-csrf-token') || '');
   var language = (0,lang/* getLanguage */.Z0)();
   if (language === 'en') {
     language = 'en-US';
@@ -41476,6 +41476,8 @@ if (sessionStorage.getItem('productCode')) {
   productCode = '-' + sessionStorage.getItem('productCode');
 } else if (location.href.indexOf('productCode=') !== -1) {
   productCode = '-' + location.href.split('productCode=')[1].split('&')[0];
+} else if (window.productCode) {
+  productCode = '-' + window.productCode;
 }
 var TokenKey = (window.jwtTokenKey || 'ECWEB-JWTSSO-TOKEN') + (productCode || port);
 var RoleKey = 'ECWEB-ROLE-CODE-LIST' + (productCode || port);
@@ -68969,6 +68971,97 @@ external_commonjs_vue_commonjs2_vue_root_Vue_default().directive('wfidea-lbl', {
     wfIdeaLblI18nFunc(el, binding, vnode);
   }
 });
+;// CONCATENATED MODULE: ./packages/common/directive/escaped-html/index.js
+
+function escapedHtml(htmlStr) {
+  if (typeof htmlStr !== 'string') {
+    return '';
+  }
+
+  // 1. 基本转义
+  var basic = htmlStr.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#39;').replace(/\//g, '&#x2F;').replace(/`/g, '&#96;');
+
+  // 2. 特殊危险模式处理
+  var patterns = [
+  // 事件处理器
+  {
+    regex: /\bon\w+\s*=\s*["'][^"']*["']/gi,
+    replace: ': '
+  }, {
+    regex: /\bon\w+\s*=\s*[^\s>]+/gi,
+    replace: '='
+  },
+  // JavaScript 协议
+  {
+    regex: /javascript:/gi,
+    escape: ':'
+  }, {
+    regex: /data:/gi,
+    escape: ':'
+  }, {
+    regex: /vbscript:/gi,
+    escape: ':'
+  },
+  // 十六进制/八进制编码
+  {
+    regex: /&#x?[0-9a-f]+;/gi,
+    decode: true
+  },
+  // CSS 危险表达式
+  {
+    regex: /expression\s*\(/gi,
+    escape: '('
+  }, {
+    regex: /url\s*\(\s*["']?javascript:/gi,
+    escape: ':'
+  },
+  // HTML5 新事件
+  {
+    regex: /onpointer\w+/gi,
+    replace: 'on'
+  }, {
+    regex: /ontouch\w+/gi,
+    replace: 'on'
+  },
+  // 内联样式中的 JavaScript
+  {
+    regex: /style\s*=\s*["'][^"']*javascript:[^"']*["']/gi,
+    escape: ':'
+  }];
+  var result = basic;
+  patterns.forEach(function (_ref) {
+    var regex = _ref.regex,
+      replace = _ref.replace,
+      escape = _ref.escape,
+      decode = _ref.decode;
+    result = result.replace(regex, function (match) {
+      if (decode) {
+        // 处理 HTML 实体编码
+        var temp = document.createElement('div');
+        temp.innerHTML = match;
+        return temp.textContent;
+      } else if (replace) {
+        // 替换特定部分
+        return match.replace(new RegExp(replace, 'g'), replace === ':' ? '&#58;' : replace === '=' ? '&#61;' : replace === '(' ? '&#40;' : replace === 'on' ? '&#111;n' : replace);
+      } else if (escape) {
+        // 转义特定字符
+        return match.replace(new RegExp(escape, 'g'), escape === ':' ? '&#58;' : escape === '(' ? '&#40;' : '');
+      }
+      return match;
+    });
+  });
+  return result;
+}
+external_commonjs_vue_commonjs2_vue_root_Vue_default().directive('escaped-html', {
+  inserted: function inserted(el, binding, vnode) {
+    el.innerHTML = escapedHtml(binding.value);
+  },
+  componentUpdated: function componentUpdated(el, binding, vnode) {
+    if (binding.value !== binding.oldValue) {
+      el.innerHTML = escapedHtml(binding.value);
+    }
+  }
+});
 ;// CONCATENATED MODULE: ./packages/common/directive/index.js
 
 
@@ -68979,6 +69072,7 @@ external_commonjs_vue_commonjs2_vue_root_Vue_default().directive('wfidea-lbl', {
 
 
 
+
 ;// CONCATENATED MODULE: ./packages/ecmapp/Directive/format-value/index.js
 function format_value_typeof(o) { "@babel/helpers - typeof"; return format_value_typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, format_value_typeof(o); }