fds-vue-core 6.0.11 → 6.1.1

package/README.md

@@ -136,6 +136,45 @@ import { FdsButtonPrimary, FdsInput, FdsModal } from 'fds-vue-core'
 
 All components are fully typed. Type definitions are included in the package.
 
+## Commit workflow
+
+Use these commands to create commits with the shared Commitizen adapter and security dependency helper.
+
+### In this repo
+
+```bash
+pnpm commit
+pnpm commit:vuln
+```
+
+- `pnpm commit` starts Commitizen prompts (configured via `scripts/cz/cz-adapter.cjs`).
+- `pnpm commit:vuln` runs `scripts/vuln-commit.mjs` and auto-creates a `vuln(...)` commit from staged `package.json` dependency bumps.
+
+### In a consuming repo
+
+Install dependencies:
+
+```bash
+pnpm add fds-vue-core
+pnpm add -D commitizen
+```
+
+Add this to the consuming repo `package.json`:
+
+```json
+{
+  "scripts": {
+    "commit": "cz",
+    "commit:vuln": "fds-vuln-commit"
+  },
+  "config": {
+    "commitizen": {
+      "path": "fds-vue-core/cz-adapter"
+    }
+  }
+}
+```
+
 ## Further Documentation
 
 - [Usage Guide](./src/docs/Usage.md) - Detailed usage instructions

package/dist/apply.css

@@ -39,7 +39,7 @@
   }
   .link,
   .html a {
-    @apply text-blue-600 hover:text-blue-700 active:text-blue-800 underline focus-visible:outline-dashed focus-visible:outline-2 focus-visible:outline-offset-4 focus-visible:outline-blue-500;
+    @apply text-blue-600 hover:text-blue-700 active:text-blue-800 underline focus-visible:outline-dashed focus-visible:outline-2 focus-visible:outline-offset-4 focus-visible:outline-blue-500 cursor-pointer;
   }
 
   .link--with-parens::before {

package/dist/fds-vue-core.cjs.js

@@ -2510,14 +2510,38 @@ const parseHeaders = (rawHeaders) => {
   return parsed;
 };
 const $internals = /* @__PURE__ */ Symbol("internals");
+const isValidHeaderValue = (value) => !/[\r\n]/.test(value);
+function assertValidHeaderValue(value, header) {
+  if (value === false || value == null) {
+    return;
+  }
+  if (utils$1.isArray(value)) {
+    value.forEach((v) => assertValidHeaderValue(v, header));
+    return;
+  }
+  if (!isValidHeaderValue(String(value))) {
+    throw new Error(`Invalid character in header content ["${header}"]`);
+  }
+}
 function normalizeHeader(header) {
   return header && String(header).trim().toLowerCase();
 }
+function stripTrailingCRLF(str) {
+  let end = str.length;
+  while (end > 0) {
+    const charCode = str.charCodeAt(end - 1);
+    if (charCode !== 10 && charCode !== 13) {
+      break;
+    }
+    end -= 1;
+  }
+  return end === str.length ? str : str.slice(0, end);
+}
 function normalizeValue(value) {
   if (value === false || value == null) {
     return value;
   }
-  return utils$1.isArray(value) ? value.map(normalizeValue) : String(value);
+  return utils$1.isArray(value) ? value.map(normalizeValue) : stripTrailingCRLF(String(value));
 }
 function parseTokens(str) {
   const tokens = /* @__PURE__ */ Object.create(null);
@@ -2573,6 +2597,7 @@ let AxiosHeaders$1 = class AxiosHeaders {
       }
       const key = utils$1.findKey(self2, lHeader);
       if (!key || self2[key] === void 0 || _rewrite === true || _rewrite === void 0 && self2[key] !== false) {
+        assertValidHeaderValue(_value, _header);
         self2[key || _header] = normalizeValue(_value);
       }
     }
@@ -3366,14 +3391,16 @@ const factory = (env) => {
   const encodeText = isFetchSupported && (typeof TextEncoder === "function" ? /* @__PURE__ */ ((encoder) => (str) => encoder.encode(str))(new TextEncoder()) : async (str) => new Uint8Array(await new Request(str).arrayBuffer()));
   const supportsRequestStream = isRequestSupported && isReadableStreamSupported && test(() => {
     let duplexAccessed = false;
+    const body = new ReadableStream$1();
     const hasContentType = new Request(platform.origin, {
-      body: new ReadableStream$1(),
+      body,
       method: "POST",
       get duplex() {
         duplexAccessed = true;
         return "half";
       }
     }).headers.has("Content-Type");
+    body.cancel();
     return duplexAccessed && !hasContentType;
   });
   const supportsResponseStream = isResponseSupported && isReadableStreamSupported && test(() => utils$1.isReadableStream(new Response("").body));
@@ -3655,7 +3682,7 @@ function dispatchRequest(config) {
     }
   );
 }
-const VERSION$1 = "1.13.6";
+const VERSION$1 = "1.15.0";
 const validators$1 = {};
 ["object", "boolean", "number", "function", "string", "symbol"].forEach((type, i) => {
   validators$1[type] = function validator2(thing) {
@@ -3745,12 +3772,23 @@ let Axios$1 = class Axios {
       if (err instanceof Error) {
         let dummy = {};
         Error.captureStackTrace ? Error.captureStackTrace(dummy) : dummy = new Error();
-        const stack = dummy.stack ? dummy.stack.replace(/^.+\n/, "") : "";
+        const stack = (() => {
+          if (!dummy.stack) {
+            return "";
+          }
+          const firstNewlineIndex = dummy.stack.indexOf("\n");
+          return firstNewlineIndex === -1 ? "" : dummy.stack.slice(firstNewlineIndex + 1);
+        })();
         try {
           if (!err.stack) {
             err.stack = stack;
-          } else if (stack && !String(err.stack).endsWith(stack.replace(/^.+\n.+\n/, ""))) {
-            err.stack += "\n" + stack;
+          } else if (stack) {
+            const firstNewlineIndex = stack.indexOf("\n");
+            const secondNewlineIndex = firstNewlineIndex === -1 ? -1 : stack.indexOf("\n", firstNewlineIndex + 1);
+            const stackWithoutTwoTopLines = secondNewlineIndex === -1 ? "" : stack.slice(secondNewlineIndex + 1);
+            if (!String(err.stack).endsWith(stackWithoutTwoTopLines)) {
+              err.stack += "\n" + stack;
+            }
           }
         } catch (e) {
         }