h17-sspdf 0.5.0 → 1.0.0

package/core/pdf-core.js

@@ -123,6 +123,8 @@ class PDFCore {
     this.pageHeight = this.doc.internal.pageSize.getHeight();
     this.backgroundColor = this._resolveColor(this.page.backgroundColor);
     this.lastDrawnBounds = null;
+    this.documentStateDepth = 0;
+    this.hasDeferredInitialRenderState = Array.isArray(theme.customFonts) && theme.customFonts.length > 0;
     this.defaultRenderState = this._buildDefaultRenderState(this.page);
     this.contentTopY = this.marginTopMm + this.headerHeightMm;
     this.contentBottomY = this.pageHeight - this.marginBottomMm - this.footerHeightMm;
@@ -138,7 +140,12 @@ class PDFCore {
     });
 
     this.paintBackground();
-    this.applyDefaultRenderState();
+    // Custom fonts are registered by renderDocument() after core construction.
+    // Deferring the first setFont() avoids jsPDF warnings when page.defaultText
+    // uses a custom family that is not yet in the font map.
+    if (!this.hasDeferredInitialRenderState) {
+      this.applyDefaultRenderState();
+    }
   }
 
   /**
@@ -178,9 +185,11 @@ class PDFCore {
    * Force a new page and reset cursor to top margin.
    */
   addPage() {
+    const reopenedStateDepth = this._closeDocumentStatesForPageBreak();
     this.doc.addPage();
     this.paintBackground();
     this.applyDefaultRenderState();
+    this._reopenDocumentStatesAfterPageBreak(reopenedStateDepth);
     this.cursorY = this.contentTopY;
   }
 
@@ -198,6 +207,7 @@ class PDFCore {
       && typeof this.doc.restoreGraphicsState === "function";
     if (canSaveGraphicsState) {
       this.doc.saveGraphicsState();
+      this.documentStateDepth += 1;
     }
 
     try {
@@ -205,6 +215,7 @@ class PDFCore {
     } finally {
       if (canSaveGraphicsState) {
         this.doc.restoreGraphicsState();
+        this.documentStateDepth = Math.max(0, this.documentStateDepth - 1);
       }
       this.applyDefaultRenderState();
     }
@@ -498,11 +509,21 @@ class PDFCore {
     const baseline = y + baselineOffsetMm;
 
     if (markerStyle.shape) {
-      // Vector shape marker: renders via core/shapes.js, no text encoding needed
+      // Vector shape marker: renders via core/shapes.js, no text encoding needed.
+      // Wrapped in saveGraphicsState/restoreGraphicsState to isolate draw state
+      // mutations (setLineCap, setFillColor, etc.) from the main content stream.
+      // Without this, accumulated state operators can cause print rendering issues
+      // where printer RIPs interpret the stacked state differently than screen viewers.
       const { renderShape, getShapeWidth } = require("./shapes");
       const shapeColor = markerStyle.shapeColor || markerStyle.color || [0, 0, 0];
       const shapeSize = markerStyle.shapeSize || 1;
+      if (typeof this.doc.saveGraphicsState === "function") {
+        this.doc.saveGraphicsState();
+      }
       renderShape(markerStyle.shape, this.doc, x, baseline, shapeColor, shapeSize, textFontSize);
+      if (typeof this.doc.restoreGraphicsState === "function") {
+        this.doc.restoreGraphicsState();
+      }
       this.applyDefaultRenderState();
     } else {
       // Text-based marker (existing behavior)
@@ -1070,6 +1091,29 @@ class PDFCore {
       fillColor: this._resolveColor(page.defaultFillColor),
     };
   }
+
+  _closeDocumentStatesForPageBreak() {
+    if (this.documentStateDepth <= 0) {
+      return 0;
+    }
+
+    for (let i = 0; i < this.documentStateDepth; i += 1) {
+      this.doc.restoreGraphicsState();
+    }
+
+    return this.documentStateDepth;
+  }
+
+  _reopenDocumentStatesAfterPageBreak(depth) {
+    const count = Number(depth) || 0;
+    if (count <= 0) {
+      return;
+    }
+
+    for (let i = 0; i < count; i += 1) {
+      this.doc.saveGraphicsState();
+    }
+  }
 }
 
 module.exports = {

package/core/render-document.js

@@ -47,6 +47,7 @@ function renderDocument(input) {
 
   const core = new PDFCore(runtimeTheme);
   registerThemeFonts(core, runtimeTheme);
+  core.applyDefaultRenderState();
 
   installPageTemplates(core, runtimeTheme, built.pageTemplates);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "h17-sspdf",
-  "version": "0.5.0",
+  "version": "1.0.0",
   "description": "Declarative PDF engine - define layout once, feed it JSON, get consistent PDFs",
   "main": "index.js",
   "author": "Hugo Palma",

package/vendor/jspdf/jspdf.node.js

@@ -1,7 +1,7 @@
 /** @license
  *
  * jsPDF - PDF Document creation from JavaScript
- * Version 4.1.0 Built on 2026-02-02T10:38:25.210Z
+ * Version 4.2.1 Built on 2026-03-17T11:11:27.057Z
  *                      CommitID 00000000
  *
  * Copyright (c) 2010-2025 James Hall <james@parall.ax>, https://github.com/MrRio/jsPDF
@@ -3823,6 +3823,47 @@ function jsPDF(options) {
     });
   });
 
+  var clearDomNode = function(node) {
+    while (node.firstChild) {
+      node.removeChild(node.firstChild);
+    }
+  };
+
+  var initializeNewWindow = function(window) {
+    var targetDocument = window.document;
+    var html = targetDocument.documentElement;
+    var head = targetDocument.head;
+    var body = targetDocument.body;
+    var style;
+
+    if (!head) {
+      head = targetDocument.createElement("head");
+      html.appendChild(head);
+    }
+
+    if (!body) {
+      body = targetDocument.createElement("body");
+      html.appendChild(body);
+    }
+
+    clearDomNode(head);
+    clearDomNode(body);
+
+    style = targetDocument.createElement("style");
+    style.appendChild(
+      targetDocument.createTextNode(
+        "html, body { padding: 0; margin: 0; } iframe { width: 100%; height: 100%; border: 0;}"
+      )
+    );
+
+    head.appendChild(style);
+
+    return {
+      document: targetDocument,
+      body: body
+    };
+  };
+
   /**
    * Generates the PDF document.
    *
@@ -3900,7 +3941,7 @@ function jsPDF(options) {
         }
         return (
           "data:application/pdf;filename=" +
-          options.filename +
+          encodeURIComponent(options.filename) +
           ";base64," +
           dataURI
         );
@@ -3910,29 +3951,34 @@ function jsPDF(options) {
         ) {
           var pdfObjectUrl =
             "https://cdnjs.cloudflare.com/ajax/libs/pdfobject/2.1.1/pdfobject.min.js";
-          var integrity =
-            ' integrity="sha512-4ze/a9/4jqu+tX9dfOqJYSvyYd5M6qum/3HpCLr+/Jqf0whc37VUbkpNGHR7/8pSnCFw47T1fmIpwBV7UySh3g==" crossorigin="anonymous"';
+          var useDefaultPdfObjectUrl = !options.pdfObjectUrl;
 
-          if (options.pdfObjectUrl) {
+          if (!useDefaultPdfObjectUrl) {
             pdfObjectUrl = options.pdfObjectUrl;
-            integrity = "";
           }
 
-          var htmlForNewWindow =
-            "<html>" +
-            '<style>html, body { padding: 0; margin: 0; } iframe { width: 100%; height: 100%; border: 0;}  </style><body><script src="' +
-            pdfObjectUrl +
-            '"' +
-            integrity +
-            '></script><script >PDFObject.embed("' +
-            this.output("dataurlstring") +
-            '", ' +
-            JSON.stringify(options) +
-            ");</script></body></html>";
           var nW = globalObject.open();
 
           if (nW !== null) {
-            nW.document.write(htmlForNewWindow);
+            var initializedPdfObjectWindow = initializeNewWindow(nW);
+            var pdfObjectScript = initializedPdfObjectWindow.document.createElement(
+              "script"
+            );
+            var scope = this;
+
+            pdfObjectScript.src = pdfObjectUrl;
+
+            if (useDefaultPdfObjectUrl) {
+              pdfObjectScript.integrity =
+                "sha512-4ze/a9/4jqu+tX9dfOqJYSvyYd5M6qum/3HpCLr+/Jqf0whc37VUbkpNGHR7/8pSnCFw47T1fmIpwBV7UySh3g==";
+              pdfObjectScript.crossOrigin = "anonymous";
+            }
+
+            pdfObjectScript.onload = function() {
+              nW.PDFObject.embed(scope.output("dataurlstring"), options);
+            };
+
+            initializedPdfObjectWindow.body.appendChild(pdfObjectScript);
           }
           return nW;
         } else {
@@ -3945,30 +3991,33 @@ function jsPDF(options) {
           Object.prototype.toString.call(globalObject) === "[object Window]"
         ) {
           var pdfJsUrl = options.pdfJsUrl || "examples/PDF.js/web/viewer.html";
-          var htmlForPDFjsNewWindow =
-            "<html>" +
-            "<style>html, body { padding: 0; margin: 0; } iframe { width: 100%; height: 100%; border: 0;}  </style>" +
-            '<body><iframe id="pdfViewer" src="' +
-            pdfJsUrl +
-            "?file=&downloadName=" +
-            options.filename +
-            '" width="500px" height="400px" />' +
-            "</body></html>";
           var PDFjsNewWindow = globalObject.open();
 
           if (PDFjsNewWindow !== null) {
-            PDFjsNewWindow.document.write(htmlForPDFjsNewWindow);
+            var initializedPdfJsWindow = initializeNewWindow(PDFjsNewWindow);
+            var pdfViewer = initializedPdfJsWindow.document.createElement(
+              "iframe"
+            );
+            var pdfJsQueryChar = pdfJsUrl.indexOf("?") === -1 ? "?" : "&";
             var scope = this;
-            PDFjsNewWindow.document.documentElement.querySelector(
-              "#pdfViewer"
-            ).onload = function() {
+
+            pdfViewer.id = "pdfViewer";
+            pdfViewer.width = "500px";
+            pdfViewer.height = "400px";
+            pdfViewer.src =
+              pdfJsUrl +
+              pdfJsQueryChar +
+              "file=&downloadName=" +
+              encodeURIComponent(options.filename);
+
+            pdfViewer.onload = function() {
               PDFjsNewWindow.document.title = options.filename;
-              PDFjsNewWindow.document.documentElement
-                .querySelector("#pdfViewer")
-                .contentWindow.PDFViewerApplication.open(
-                  scope.output("bloburl")
-                );
+              pdfViewer.contentWindow.PDFViewerApplication.open(
+                scope.output("bloburl")
+              );
             };
+
+            initializedPdfJsWindow.body.appendChild(pdfViewer);
           }
           return PDFjsNewWindow;
         } else {
@@ -3980,17 +4029,17 @@ function jsPDF(options) {
         if (
           Object.prototype.toString.call(globalObject) === "[object Window]"
         ) {
-          var htmlForDataURLNewWindow =
-            "<html>" +
-            "<style>html, body { padding: 0; margin: 0; } iframe { width: 100%; height: 100%; border: 0;}  </style>" +
-            "<body>" +
-            '<iframe src="' +
-            this.output("datauristring", options) +
-            '"></iframe>' +
-            "</body></html>";
           var dataURLNewWindow = globalObject.open();
           if (dataURLNewWindow !== null) {
-            dataURLNewWindow.document.write(htmlForDataURLNewWindow);
+            var initializedDataUrlWindow = initializeNewWindow(
+              dataURLNewWindow
+            );
+            var dataUrlFrame = initializedDataUrlWindow.document.createElement(
+              "iframe"
+            );
+
+            dataUrlFrame.src = this.output("datauristring", options);
+            initializedDataUrlWindow.body.appendChild(dataUrlFrame);
             dataURLNewWindow.document.title = options.filename;
           }
           if (dataURLNewWindow || typeof safari === "undefined")
@@ -6902,7 +6951,7 @@ jsPDF.API = {
  * @type {string}
  * @memberof jsPDF#
  */
-jsPDF.version = "4.1.0";
+jsPDF.version = "4.2.1";
 
 /* global jsPDF */
 
@@ -9035,7 +9084,11 @@ var AcroFormButton = function() {
       return _AS;
     },
     set: function(value) {
-      _AS = value;
+      var name = value === undefined || value === null ? "" : value.toString();
+      if (name.substr(0, 1) === "/") {
+        name = name.substr(1);
+      }
+      _AS = "/" + pdfEscapeName(name);
     }
   });
 
@@ -9188,7 +9241,11 @@ var AcroFormChildClass = function() {
       return _AS;
     },
     set: function(value) {
-      _AS = value;
+      var name = value === undefined || value === null ? "" : value.toString();
+      if (name.substr(0, 1) === "/") {
+        name = name.substr(1);
+      }
+      _AS = "/" + pdfEscapeName(name);
     }
   });
 
@@ -9205,7 +9262,11 @@ var AcroFormChildClass = function() {
       return _AS.substr(1, _AS.length - 1);
     },
     set: function(value) {
-      _AS = "/" + value;
+      var name = value === undefined || value === null ? "" : value.toString();
+      if (name.substr(0, 1) === "/") {
+        name = name.substr(1);
+      }
+      _AS = "/" + pdfEscapeName(name);
     }
   });
   this.caption = "l";
@@ -11214,6 +11275,9 @@ var AcroForm = jsPDF.AcroForm;
               getVerticalCoordinateString(anno.bounds.y + anno.bounds.h) +
               "] ";
             var color = anno.color || "#000000";
+            var defaultStyle =
+              "font: Helvetica,sans-serif 12.0pt; text-align:left; color:#" +
+              color;
             line =
               "<</Type /Annot /Subtype /" +
               "FreeText" +
@@ -11222,10 +11286,7 @@ var AcroForm = jsPDF.AcroForm;
               "/Contents (" +
               escape(encryptor(anno.contents)) +
               ")";
-            line +=
-              " /DS(font: Helvetica,sans-serif 12.0pt; text-align:left; color:#" +
-              color +
-              ")";
+            line += " /DS(" + escape(encryptor(defaultStyle)) + ")";
             line += " /Border [0 0 0]";
             line += " >>";
             this.internal.write(line);
@@ -17156,12 +17217,32 @@ function parseFontFamily(input) {
    * @returns {jsPDF}
    */
   jsPDFAPI.addJS = function(javascript) {
-    // FIX: Move variables inside function scope to prevent shared state
-    // between multiple jsPDF instances
     var jsNamesObj;
     var jsJsObj;
-    var text = javascript;
-    
+    // Escape only unescaped parentheses, without double-escaping already escaped ones
+    function escapeParens(str) {
+      let out = "";
+      for (let i = 0; i < str.length; i++) {
+        const ch = str[i];
+        if (ch === "(" || ch === ")") {
+          // Count preceding backslashes to determine if the paren is already escaped
+          let bs = 0;
+          for (let j = i - 1; j >= 0 && str[j] === "\\"; j--) {
+            bs++;
+          }
+          if (bs % 2 === 0) {
+            out += "\\" + ch;
+          } else {
+            out += ch;
+          }
+        } else {
+          out += ch;
+        }
+      }
+      return out;
+    }
+    const text = escapeParens(javascript);
+
     this.internal.events.subscribe("postPutResources", function() {
       jsNamesObj = this.internal.newObject();
       this.internal.out("<<");
@@ -17172,10 +17253,12 @@ function parseFontFamily(input) {
       jsJsObj = this.internal.newObject();
       this.internal.out("<<");
       this.internal.out("/S /JavaScript");
+      // The sanitized 'text' is now safe to be enclosed in parentheses
       this.internal.out("/JS (" + text + ")");
       this.internal.out(">>");
       this.internal.out("endobj");
     });
+
     this.internal.events.subscribe("putCatalog", function() {
       if (jsNamesObj !== undefined && jsJsObj !== undefined) {
         this.internal.out("/Names <</JavaScript " + jsNamesObj + " 0 R>>");
@@ -18330,6 +18413,11 @@ function GifReader(buf) {
   this.decodeAndBlitFrameBGRA = function(frame_num, pixels) {
     var frame = this.frameInfo(frame_num);
     var num_pixels = frame.width * frame.height;
+
+    if (num_pixels > 512 * 1024 * 1024) {
+      throw new Error("Image dimensions exceed 512MB, which is too large.");
+    }
+
     var index_stream = new Uint8Array(num_pixels); // At most 8-bit indices.
     GifReaderLZWOutputIndexStream(
       buf,
@@ -18402,6 +18490,11 @@ function GifReader(buf) {
   this.decodeAndBlitFrameRGBA = function(frame_num, pixels) {
     var frame = this.frameInfo(frame_num);
     var num_pixels = frame.width * frame.height;
+
+    if (num_pixels > 512 * 1024 * 1024) {
+      throw new Error("Image dimensions exceed 512MB, which is too large.");
+    }
+
     var index_stream = new Uint8Array(num_pixels); // At most 8-bit indices.
     GifReaderLZWOutputIndexStream(
       buf,