handsontable 16.2.0 → 17.0.0-rc1

package/plugins/contextMenu/menu/menu.mjs

@@ -1,5 +1,3 @@
-import "core-js/modules/es.error.cause.js";
-import "core-js/modules/es.array.push.js";
 function _classPrivateFieldInitSpec(e, t, a) { _checkPrivateRedeclaration(e, t), t.set(e, a); }
 function _checkPrivateRedeclaration(e, t) { if (t.has(e)) throw new TypeError("Cannot initialize the same private elements twice on an object"); }
 function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
@@ -294,11 +292,7 @@ export class Menu {
       themeName: this.hot.getCurrentThemeName(),
       beforeRefreshDimensions: () => false,
       beforeOnCellMouseOver: (event, coords) => {
-        if (this.hotMenu.stylesHandler.isClassicTheme()) {
-          _classPrivateFieldGet(_navigator, this).setCurrentPage(coords.row);
-        } else {
-          _classPrivateFieldGet(_navigator, this).setPageCursorAt(coords.row);
-        }
+        _classPrivateFieldGet(_navigator, this).setPageCursorAt(coords.row);
       },
       afterOnCellMouseOver: (event, coords) => {
         if (this.isAllSubMenusClosed()) {
@@ -589,14 +583,8 @@ export class Menu {
       const currentRowHeight = itemCell ? outerHeight(this.hotMenu.getCell(index, 0)) : 0;
       return accumulator + (value.name === SEPARATOR ? 1 : currentRowHeight);
     }, 0);
-    if (this.hotMenu.stylesHandler.isClassicTheme()) {
-      // Additional 3px to menu's size because of additional border around its `table.htCore`.
-      holderStyle.width = `${currentHiderWidth + 3}px`;
-      holderStyle.height = `${realHeight + 3}px`;
-    } else {
-      holderStyle.width = `${currentHiderWidth}px`;
-      holderStyle.height = `${realHeight}px`;
-    }
+    holderStyle.width = `${currentHiderWidth}px`;
+    holderStyle.height = `${realHeight}px`;
     hiderStyle.height = holderStyle.height;
   }
 

package/plugins/contextMenu/menu/menuItemRenderer.js

@@ -23,13 +23,15 @@ function createMenuItemRenderer(mainTableHot) {
    * @param {number} col The visual index.
    * @param {string} prop The column property if used.
    * @param {string} value The cell value.
+   * @param {object} cellProperties The cell meta object (see {@link Core#getCellMeta}).
    */
-  return (menuHot, TD, row, col, prop, value) => {
+  return (menuHot, TD, row, col, prop, value, cellProperties) => {
     const item = menuHot.getSourceDataAtRow(row);
     const wrapper = mainTableHot.rootDocument.createElement('div');
     const itemValue = typeof value === 'function' ? value.call(mainTableHot) : value;
     const ariaLabel = typeof item.ariaLabel === 'function' ? item.ariaLabel.call(mainTableHot) : item.ariaLabel;
     const ariaChecked = typeof item.ariaChecked === 'function' ? item.ariaChecked.call(mainTableHot) : item.ariaChecked;
+    cellProperties.readOnlyCellClassName = '';
     (0, _element.empty)(TD);
     (0, _element.addClass)(wrapper, 'htItemWrapper');
     if (mainTableHot.getSettings().ariaTags) {
@@ -44,7 +46,7 @@ function createMenuItemRenderer(mainTableHot) {
       (0, _element.addClass)(TD, 'htCustomMenuRenderer');
       TD.appendChild(item.renderer(menuHot, wrapper, row, col, prop, itemValue));
     } else {
-      (0, _element.fastInnerHTML)(wrapper, itemValue);
+      (0, _element.fastInnerHTML)(wrapper, itemValue, mainTableHot.getSettings().sanitizer);
     }
     if ((0, _utils.isItemDisabled)(item, mainTableHot)) {
       (0, _element.addClass)(TD, 'htDisabled');

package/plugins/contextMenu/menu/menuItemRenderer.mjs

@@ -19,13 +19,15 @@ export function createMenuItemRenderer(mainTableHot) {
    * @param {number} col The visual index.
    * @param {string} prop The column property if used.
    * @param {string} value The cell value.
+   * @param {object} cellProperties The cell meta object (see {@link Core#getCellMeta}).
    */
-  return (menuHot, TD, row, col, prop, value) => {
+  return (menuHot, TD, row, col, prop, value, cellProperties) => {
     const item = menuHot.getSourceDataAtRow(row);
     const wrapper = mainTableHot.rootDocument.createElement('div');
     const itemValue = typeof value === 'function' ? value.call(mainTableHot) : value;
     const ariaLabel = typeof item.ariaLabel === 'function' ? item.ariaLabel.call(mainTableHot) : item.ariaLabel;
     const ariaChecked = typeof item.ariaChecked === 'function' ? item.ariaChecked.call(mainTableHot) : item.ariaChecked;
+    cellProperties.readOnlyCellClassName = '';
     empty(TD);
     addClass(wrapper, 'htItemWrapper');
     if (mainTableHot.getSettings().ariaTags) {
@@ -40,7 +42,7 @@ export function createMenuItemRenderer(mainTableHot) {
       addClass(TD, 'htCustomMenuRenderer');
       TD.appendChild(item.renderer(menuHot, wrapper, row, col, prop, itemValue));
     } else {
-      fastInnerHTML(wrapper, itemValue);
+      fastInnerHTML(wrapper, itemValue, mainTableHot.getSettings().sanitizer);
     }
     if (isItemDisabled(item, mainTableHot)) {
       addClass(TD, 'htDisabled');

package/plugins/contextMenu/menu/positioner.js

@@ -1,7 +1,6 @@
 "use strict";
 
 exports.__esModule = true;
-require("core-js/modules/es.error.cause.js");
 var _cursor2 = require("./cursor");
 function _classPrivateFieldInitSpec(e, t, a) { _checkPrivateRedeclaration(e, t), t.set(e, a); }
 function _checkPrivateRedeclaration(e, t) { if (t.has(e)) throw new TypeError("Cannot initialize the same private elements twice on an object"); }

package/plugins/contextMenu/menu/positioner.mjs

@@ -1,4 +1,3 @@
-import "core-js/modules/es.error.cause.js";
 function _classPrivateFieldInitSpec(e, t, a) { _checkPrivateRedeclaration(e, t), t.set(e, a); }
 function _checkPrivateRedeclaration(e, t) { if (t.has(e)) throw new TypeError("Cannot initialize the same private elements twice on an object"); }
 function _classPrivateFieldGet(s, a) { return s.get(_assertClassBrand(s, a)); }

package/plugins/contextMenu/menu/shortcuts.js

@@ -2,9 +2,6 @@
 
 exports.__esModule = true;
 exports.createKeyboardShortcutsCtrl = createKeyboardShortcutsCtrl;
-require("core-js/modules/es.array.push.js");
-require("core-js/modules/esnext.iterator.constructor.js");
-require("core-js/modules/esnext.iterator.for-each.js");
 var _defaultShortcutsList = require("./defaultShortcutsList");
 const SHORTCUTS_CONTEXT = 'menu';
 const SHORTCUTS_GROUP = SHORTCUTS_CONTEXT;

package/plugins/contextMenu/menu/shortcuts.mjs

@@ -1,6 +1,3 @@
-import "core-js/modules/es.array.push.js";
-import "core-js/modules/esnext.iterator.constructor.js";
-import "core-js/modules/esnext.iterator.for-each.js";
 import { createDefaultShortcutsList } from "./defaultShortcutsList.mjs";
 const SHORTCUTS_CONTEXT = 'menu';
 const SHORTCUTS_GROUP = SHORTCUTS_CONTEXT;

package/plugins/contextMenu/menu/utils.js

@@ -13,7 +13,6 @@ exports.isItemSubMenu = isItemSubMenu;
 exports.isSelectionDisabled = isSelectionDisabled;
 exports.isSeparator = isSeparator;
 exports.normalizeSelection = normalizeSelection;
-require("core-js/modules/es.array.push.js");
 var _array = require("../../../helpers/array");
 var _object = require("../../../helpers/object");
 var _element = require("../../../helpers/dom/element");

package/plugins/contextMenu/menu/utils.mjs

@@ -1,4 +1,3 @@
-import "core-js/modules/es.array.push.js";
 import { arrayEach, arrayMap } from "../../../helpers/array.mjs";
 import { hasOwnProperty } from "../../../helpers/object.mjs";
 import { hasClass } from "../../../helpers/dom/element.mjs";

package/plugins/copyPaste/copyPaste.js

@@ -1,18 +1,13 @@
 "use strict";
 
 exports.__esModule = true;
-require("core-js/modules/es.error.cause.js");
-require("core-js/modules/es.array.push.js");
-require("core-js/modules/es.json.stringify.js");
-require("core-js/modules/esnext.iterator.constructor.js");
-require("core-js/modules/esnext.iterator.filter.js");
-require("core-js/modules/esnext.iterator.map.js");
 var _base = require("../base");
 var _hooks = require("../../core/hooks");
 var _SheetClip = require("../../3rdparty/SheetClip");
 var _array = require("../../helpers/array");
 var _string = require("../../helpers/string");
 var _object = require("../../helpers/object");
+var _console = require("../../helpers/console");
 var _element = require("../../helpers/dom/element");
 var _browser = require("../../helpers/browser");
 var _copy = _interopRequireDefault(require("./contextMenuItem/copy"));
@@ -46,6 +41,7 @@ const PLUGIN_PRIORITY = exports.PLUGIN_PRIORITY = 80;
 const SETTING_KEYS = ['fragmentSelection'];
 const SOURCE_DATA_HTML_MIME_TYPE = 'application/ht-source-data-json-html';
 const META_HEAD = ['<meta name="generator" content="Handsontable"/>', '<style type="text/css">td{white-space:normal}br{mso-data-placement:same-cell}</style>'].join('');
+const sanitizeDeprecatedMessageShown = new WeakSet();
 
 /* eslint-disable jsdoc/require-description-complete-sentence */
 /**
@@ -400,7 +396,7 @@ class CopyPaste extends _base.BasePlugin {
           rowSet.push(this.hot.getColHeader(column, row));
         } else {
           let copyableCellData = useSourceData ? this.hot.getCopyableSourceData(row, column) : this.hot.getCopyableData(row, column);
-          if (useSourceData && (0, _object.isObject)(copyableCellData)) {
+          if (useSourceData && ((0, _object.isObject)(copyableCellData) || Array.isArray(copyableCellData))) {
             copyableCellData = JSON.stringify(copyableCellData);
           }
           rowSet.push(copyableCellData);
@@ -500,18 +496,24 @@ class CopyPaste extends _base.BasePlugin {
    * Prepares new values to populate them into datasource.
    *
    * @private
-   * @param {Array} inputArray An array of the data to populate.
-   * @param {Array} sourceInputArray An array of the source data to populate.
-   * @param {Array} [selection] The selection which indicates from what position the data will be populated.
-   * @returns {Array} Range coordinates after populate data.
+   * @param {object} pasteData An object with the data to populate.
+   * @param {object} pasteData.plainData The plain data to populate.
+   * @param {object} pasteData.sourceData The source data to populate.
+   * @param {object} pasteData.originalPlainData The original plain data before user modifications in beforePaste.
+   * @returns {number[]} Range coordinates after populate data.
    */
-  populateValues(inputArray, sourceInputArray) {
-    let selection = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : this.hot.getSelectedRangeActive();
-    if (!inputArray.length) {
+  populateValues(_ref2) {
+    let {
+      plainData,
+      originalPlainData,
+      sourceData
+    } = _ref2;
+    if (!plainData.length) {
       return [null, null, null, null];
     }
-    const populatedRowsLength = inputArray.length;
-    const populatedColumnsLength = inputArray[0].length;
+    const selection = this.hot.getSelectedRangeActive();
+    const populatedRowsLength = plainData.length;
+    const populatedColumnsLength = plainData[0].length;
     const newRows = [];
     const {
       row: startRow,
@@ -544,12 +546,12 @@ class CopyPaste extends _base.BasePlugin {
       const newRow = [];
       const insertedRow = newRows.length % populatedRowsLength;
       while (newRow.length < populatedColumnsLength || visualColumnForPopulatedData <= endColumnFromSelection) {
-        var _sourceInputArray$ins;
+        var _sourceData$insertedR, _originalPlainData$in;
         const {
           skipColumnOnPaste,
-          visualCol
+          visualCol,
+          parsePastedValue
         } = this.hot.getCellMeta(visualRow, visualColumnForPopulatedData);
-        const sourceDataAtTarget = this.hot.getSourceDataAtCell(visualRow, visualColumnForPopulatedData);
         const insertedColumn = newRow.length % populatedColumnsLength;
         visualColumnForPopulatedData = visualCol + 1;
         if (skipColumnOnPaste === true) {
@@ -557,13 +559,12 @@ class CopyPaste extends _base.BasePlugin {
           continue;
         }
         lastVisualColumn = visualCol;
-        const sourceCellValue = sourceInputArray === null || sourceInputArray === void 0 || (_sourceInputArray$ins = sourceInputArray[insertedRow]) === null || _sourceInputArray$ins === void 0 ? void 0 : _sourceInputArray$ins[insertedColumn];
-        let cellValue = inputArray[insertedRow][insertedColumn];
-        if (sourceInputArray && (0, _string.isJSON)(sourceCellValue)) {
+        const sourceCellValue = sourceData === null || sourceData === void 0 || (_sourceData$insertedR = sourceData[insertedRow]) === null || _sourceData$insertedR === void 0 ? void 0 : _sourceData$insertedR[insertedColumn];
+        const originalCellValue = originalPlainData === null || originalPlainData === void 0 || (_originalPlainData$in = originalPlainData[insertedRow]) === null || _originalPlainData$in === void 0 ? void 0 : _originalPlainData$in[insertedColumn];
+        let cellValue = plainData[insertedRow][insertedColumn];
+        if (parsePastedValue && sourceData && (0, _string.isJSON)(sourceCellValue) && cellValue === originalCellValue) {
           const parsedCellValue = JSON.parse(sourceCellValue);
-          if ((0, _object.isObject)(sourceDataAtTarget) || sourceDataAtTarget === null) {
-            cellValue = parsedCellValue;
-          }
+          cellValue = parsedCellValue;
         }
         newRow.push(cellValue);
       }
@@ -653,11 +654,24 @@ class CopyPaste extends _base.BasePlugin {
         const parsedSourceConfig = (0, _parseTable.htmlToGridSettings)(sourceDataHTML, this.hot.rootDocument);
         pastedSourceData = parsedSourceConfig.data;
       }
-      const textHTML = (0, _string.sanitize)(event.clipboardData.getData('text/html'), {
-        ADD_TAGS: ['meta'],
-        ADD_ATTR: ['content'],
-        FORCE_BODY: true
-      });
+      const rawTextHTML = event.clipboardData.getData('text/html');
+      const {
+        sanitizer
+      } = this.hot.getSettings();
+      let textHTML = rawTextHTML;
+      if (typeof sanitizer === 'function') {
+        textHTML = sanitizer(rawTextHTML, 'CopyPaste.paste');
+      } else {
+        if (!sanitizeDeprecatedMessageShown.has(this.hot)) {
+          sanitizeDeprecatedMessageShown.add(this.hot);
+          (0, _console.deprecatedWarn)('The HTML sanitization using DOMPurify library is deprecated and will be removed in ' + 'the next major release. Use the `sanitizer` option instead.\n\n' + 'Migration guide: https://handsontable.com/docs/migration-from-16.2-to-17.0/\n' + '`sanitizer` documentation: https://handsontable.com/docs/api/options/#sanitizer');
+        }
+        textHTML = (0, _string.sanitize)(rawTextHTML, {
+          ADD_TAGS: ['meta'],
+          ADD_ATTR: ['content'],
+          FORCE_BODY: true
+        });
+      }
       if (textHTML && /(<table)|(<TABLE)/g.test(textHTML)) {
         const parsedConfig = (0, _parseTable.htmlToGridSettings)(textHTML, this.hot.rootDocument);
         pastedData = parsedConfig.data;
@@ -673,10 +687,18 @@ class CopyPaste extends _base.BasePlugin {
     if (pastedData === void 0 || pastedData && pastedData.length === 0) {
       return;
     }
+
+    // Store a copy of the original pasted data before user can modify it in beforePaste hook.
+    // This is needed to detect if user modified values and respect their modifications over source data.
+    const originalPastedData = (0, _object.deepClone)(pastedData);
     if (this.hot.runHooks('beforePaste', pastedData, this.copyableRanges) === false) {
       return;
     }
-    const [startRow, startColumn, endRow, endColumn] = this.populateValues(pastedData, pastedSourceData);
+    const [startRow, startColumn, endRow, endColumn] = this.populateValues({
+      plainData: pastedData,
+      sourceData: pastedSourceData,
+      originalPlainData: originalPastedData
+    });
     if (startRow !== null && startColumn !== null) {
       this.hot.selectCell(startRow, startColumn, Math.min(this.hot.countRows() - 1, endRow), Math.min(this.hot.countCols() - 1, endColumn));
     }

package/plugins/copyPaste/copyPaste.mjs

@@ -1,9 +1,3 @@
-import "core-js/modules/es.error.cause.js";
-import "core-js/modules/es.array.push.js";
-import "core-js/modules/es.json.stringify.js";
-import "core-js/modules/esnext.iterator.constructor.js";
-import "core-js/modules/esnext.iterator.filter.js";
-import "core-js/modules/esnext.iterator.map.js";
 function _classPrivateMethodInitSpec(e, a) { _checkPrivateRedeclaration(e, a), a.add(e); }
 function _classPrivateFieldInitSpec(e, t, a) { _checkPrivateRedeclaration(e, t), t.set(e, a); }
 function _checkPrivateRedeclaration(e, t) { if (t.has(e)) throw new TypeError("Cannot initialize the same private elements twice on an object"); }
@@ -18,7 +12,8 @@ import { Hooks } from "../../core/hooks/index.mjs";
 import { stringify, parse } from "../../3rdparty/SheetClip/index.mjs";
 import { arrayEach } from "../../helpers/array.mjs";
 import { sanitize, isJSON } from "../../helpers/string.mjs";
-import { isObject } from "../../helpers/object.mjs";
+import { isObject, deepClone } from "../../helpers/object.mjs";
+import { deprecatedWarn } from "../../helpers/console.mjs";
 import { removeContentEditableFromElementAndDeselect, runWithSelectedContendEditableElement, makeElementContentEditableAndSelectItsContent, isHTMLElement, isInternalElement } from "../../helpers/dom/element.mjs";
 import { isSafari } from "../../helpers/browser.mjs";
 import copyItem from "./contextMenuItem/copy.mjs";
@@ -42,6 +37,7 @@ export const PLUGIN_PRIORITY = 80;
 const SETTING_KEYS = ['fragmentSelection'];
 const SOURCE_DATA_HTML_MIME_TYPE = 'application/ht-source-data-json-html';
 const META_HEAD = ['<meta name="generator" content="Handsontable"/>', '<style type="text/css">td{white-space:normal}br{mso-data-placement:same-cell}</style>'].join('');
+const sanitizeDeprecatedMessageShown = new WeakSet();
 
 /* eslint-disable jsdoc/require-description-complete-sentence */
 /**
@@ -396,7 +392,7 @@ export class CopyPaste extends BasePlugin {
           rowSet.push(this.hot.getColHeader(column, row));
         } else {
           let copyableCellData = useSourceData ? this.hot.getCopyableSourceData(row, column) : this.hot.getCopyableData(row, column);
-          if (useSourceData && isObject(copyableCellData)) {
+          if (useSourceData && (isObject(copyableCellData) || Array.isArray(copyableCellData))) {
             copyableCellData = JSON.stringify(copyableCellData);
           }
           rowSet.push(copyableCellData);
@@ -496,18 +492,24 @@ export class CopyPaste extends BasePlugin {
    * Prepares new values to populate them into datasource.
    *
    * @private
-   * @param {Array} inputArray An array of the data to populate.
-   * @param {Array} sourceInputArray An array of the source data to populate.
-   * @param {Array} [selection] The selection which indicates from what position the data will be populated.
-   * @returns {Array} Range coordinates after populate data.
+   * @param {object} pasteData An object with the data to populate.
+   * @param {object} pasteData.plainData The plain data to populate.
+   * @param {object} pasteData.sourceData The source data to populate.
+   * @param {object} pasteData.originalPlainData The original plain data before user modifications in beforePaste.
+   * @returns {number[]} Range coordinates after populate data.
    */
-  populateValues(inputArray, sourceInputArray) {
-    let selection = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : this.hot.getSelectedRangeActive();
-    if (!inputArray.length) {
+  populateValues(_ref2) {
+    let {
+      plainData,
+      originalPlainData,
+      sourceData
+    } = _ref2;
+    if (!plainData.length) {
       return [null, null, null, null];
     }
-    const populatedRowsLength = inputArray.length;
-    const populatedColumnsLength = inputArray[0].length;
+    const selection = this.hot.getSelectedRangeActive();
+    const populatedRowsLength = plainData.length;
+    const populatedColumnsLength = plainData[0].length;
     const newRows = [];
     const {
       row: startRow,
@@ -540,12 +542,12 @@ export class CopyPaste extends BasePlugin {
       const newRow = [];
       const insertedRow = newRows.length % populatedRowsLength;
       while (newRow.length < populatedColumnsLength || visualColumnForPopulatedData <= endColumnFromSelection) {
-        var _sourceInputArray$ins;
+        var _sourceData$insertedR, _originalPlainData$in;
         const {
           skipColumnOnPaste,
-          visualCol
+          visualCol,
+          parsePastedValue
         } = this.hot.getCellMeta(visualRow, visualColumnForPopulatedData);
-        const sourceDataAtTarget = this.hot.getSourceDataAtCell(visualRow, visualColumnForPopulatedData);
         const insertedColumn = newRow.length % populatedColumnsLength;
         visualColumnForPopulatedData = visualCol + 1;
         if (skipColumnOnPaste === true) {
@@ -553,13 +555,12 @@ export class CopyPaste extends BasePlugin {
           continue;
         }
         lastVisualColumn = visualCol;
-        const sourceCellValue = sourceInputArray === null || sourceInputArray === void 0 || (_sourceInputArray$ins = sourceInputArray[insertedRow]) === null || _sourceInputArray$ins === void 0 ? void 0 : _sourceInputArray$ins[insertedColumn];
-        let cellValue = inputArray[insertedRow][insertedColumn];
-        if (sourceInputArray && isJSON(sourceCellValue)) {
+        const sourceCellValue = sourceData === null || sourceData === void 0 || (_sourceData$insertedR = sourceData[insertedRow]) === null || _sourceData$insertedR === void 0 ? void 0 : _sourceData$insertedR[insertedColumn];
+        const originalCellValue = originalPlainData === null || originalPlainData === void 0 || (_originalPlainData$in = originalPlainData[insertedRow]) === null || _originalPlainData$in === void 0 ? void 0 : _originalPlainData$in[insertedColumn];
+        let cellValue = plainData[insertedRow][insertedColumn];
+        if (parsePastedValue && sourceData && isJSON(sourceCellValue) && cellValue === originalCellValue) {
           const parsedCellValue = JSON.parse(sourceCellValue);
-          if (isObject(sourceDataAtTarget) || sourceDataAtTarget === null) {
-            cellValue = parsedCellValue;
-          }
+          cellValue = parsedCellValue;
         }
         newRow.push(cellValue);
       }
@@ -649,11 +650,24 @@ export class CopyPaste extends BasePlugin {
         const parsedSourceConfig = htmlToGridSettings(sourceDataHTML, this.hot.rootDocument);
         pastedSourceData = parsedSourceConfig.data;
       }
-      const textHTML = sanitize(event.clipboardData.getData('text/html'), {
-        ADD_TAGS: ['meta'],
-        ADD_ATTR: ['content'],
-        FORCE_BODY: true
-      });
+      const rawTextHTML = event.clipboardData.getData('text/html');
+      const {
+        sanitizer
+      } = this.hot.getSettings();
+      let textHTML = rawTextHTML;
+      if (typeof sanitizer === 'function') {
+        textHTML = sanitizer(rawTextHTML, 'CopyPaste.paste');
+      } else {
+        if (!sanitizeDeprecatedMessageShown.has(this.hot)) {
+          sanitizeDeprecatedMessageShown.add(this.hot);
+          deprecatedWarn('The HTML sanitization using DOMPurify library is deprecated and will be removed in ' + 'the next major release. Use the `sanitizer` option instead.\n\n' + 'Migration guide: https://handsontable.com/docs/migration-from-16.2-to-17.0/\n' + '`sanitizer` documentation: https://handsontable.com/docs/api/options/#sanitizer');
+        }
+        textHTML = sanitize(rawTextHTML, {
+          ADD_TAGS: ['meta'],
+          ADD_ATTR: ['content'],
+          FORCE_BODY: true
+        });
+      }
       if (textHTML && /(<table)|(<TABLE)/g.test(textHTML)) {
         const parsedConfig = htmlToGridSettings(textHTML, this.hot.rootDocument);
         pastedData = parsedConfig.data;
@@ -669,10 +683,18 @@ export class CopyPaste extends BasePlugin {
     if (pastedData === void 0 || pastedData && pastedData.length === 0) {
       return;
     }
+
+    // Store a copy of the original pasted data before user can modify it in beforePaste hook.
+    // This is needed to detect if user modified values and respect their modifications over source data.
+    const originalPastedData = deepClone(pastedData);
     if (this.hot.runHooks('beforePaste', pastedData, this.copyableRanges) === false) {
       return;
     }
-    const [startRow, startColumn, endRow, endColumn] = this.populateValues(pastedData, pastedSourceData);
+    const [startRow, startColumn, endRow, endColumn] = this.populateValues({
+      plainData: pastedData,
+      sourceData: pastedSourceData,
+      originalPlainData: originalPastedData
+    });
     if (startRow !== null && startColumn !== null) {
       this.hot.selectCell(startRow, startColumn, Math.min(this.hot.countRows() - 1, endRow), Math.min(this.hot.countCols() - 1, endColumn));
     }

package/plugins/copyPaste/copyableRanges.js

@@ -2,8 +2,6 @@
 
 exports.__esModule = true;
 exports.normalizeRanges = normalizeRanges;
-require("core-js/modules/es.error.cause.js");
-require("core-js/modules/es.array.push.js");
 var _array = require("../../helpers/array");
 var _number = require("../../helpers/number");
 function _classPrivateMethodInitSpec(e, a) { _checkPrivateRedeclaration(e, a), a.add(e); }

package/plugins/copyPaste/copyableRanges.mjs

@@ -1,5 +1,3 @@
-import "core-js/modules/es.error.cause.js";
-import "core-js/modules/es.array.push.js";
 function _classPrivateMethodInitSpec(e, a) { _checkPrivateRedeclaration(e, a), a.add(e); }
 function _classPrivateFieldInitSpec(e, t, a) { _checkPrivateRedeclaration(e, t), t.set(e, a); }
 function _checkPrivateRedeclaration(e, t) { if (t.has(e)) throw new TypeError("Cannot initialize the same private elements twice on an object"); }

package/plugins/customBorders/customBorders.js

@@ -1,11 +1,8 @@
 "use strict";
 
 exports.__esModule = true;
-require("core-js/modules/es.error.cause.js");
-require("core-js/modules/es.array.push.js");
-require("core-js/modules/esnext.iterator.constructor.js");
-require("core-js/modules/esnext.iterator.for-each.js");
 var _base = require("../base");
+var _errors = require("../../helpers/errors");
 var _object = require("../../helpers/object");
 var _console = require("../../helpers/console");
 var _number = require("../../helpers/number");
@@ -703,10 +700,10 @@ class CustomBorders extends _base.BasePlugin {
     const hasLeftOrRight = (0, _utils.hasLeftRightTypeOptions)(customBorders);
     const hasStartOrEnd = (0, _utils.hasStartEndTypeOptions)(customBorders);
     if (hasLeftOrRight && hasStartOrEnd) {
-      throw new Error('The "left"/"right" and "start"/"end" options should not be used together. ' + 'Please use only the option "start"/"end".');
+      (0, _errors.throwWithCause)('The "left"/"right" and "start"/"end" options should not be used together. ' + 'Please use only the option "start"/"end".');
     }
     if (this.hot.isRtl() && hasLeftOrRight) {
-      throw new Error('The "left"/"right" properties are not supported for RTL. Please use option "start"/"end".');
+      (0, _errors.throwWithCause)('The "left"/"right" properties are not supported for RTL. Please use option "start"/"end".');
     }
     _assertClassBrand(_CustomBorders_brand, this, _validateStyleSettings).call(this, customBorders);
   }

package/plugins/customBorders/customBorders.mjs

@@ -1,7 +1,3 @@
-import "core-js/modules/es.error.cause.js";
-import "core-js/modules/es.array.push.js";
-import "core-js/modules/esnext.iterator.constructor.js";
-import "core-js/modules/esnext.iterator.for-each.js";
 function _classPrivateMethodInitSpec(e, a) { _checkPrivateRedeclaration(e, a), a.add(e); }
 function _checkPrivateRedeclaration(e, t) { if (t.has(e)) throw new TypeError("Cannot initialize the same private elements twice on an object"); }
 function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
@@ -9,6 +5,7 @@ function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol"
 function _toPrimitive(t, r) { if ("object" != typeof t || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != typeof i) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
 function _assertClassBrand(e, t, n) { if ("function" == typeof e ? e === t : e.has(t)) return arguments.length < 3 ? t : n; throw new TypeError("Private element is not present on this object"); }
 import { BasePlugin } from "../base/index.mjs";
+import { throwWithCause } from "../../helpers/errors.mjs";
 import { hasOwnProperty, deepClone } from "../../helpers/object.mjs";
 import { warn } from "../../helpers/console.mjs";
 import { rangeEach } from "../../helpers/number.mjs";
@@ -699,10 +696,10 @@ export class CustomBorders extends BasePlugin {
     const hasLeftOrRight = hasLeftRightTypeOptions(customBorders);
     const hasStartOrEnd = hasStartEndTypeOptions(customBorders);
     if (hasLeftOrRight && hasStartOrEnd) {
-      throw new Error('The "left"/"right" and "start"/"end" options should not be used together. ' + 'Please use only the option "start"/"end".');
+      throwWithCause('The "left"/"right" and "start"/"end" options should not be used together. ' + 'Please use only the option "start"/"end".');
     }
     if (this.hot.isRtl() && hasLeftOrRight) {
-      throw new Error('The "left"/"right" properties are not supported for RTL. Please use option "start"/"end".');
+      throwWithCause('The "left"/"right" properties are not supported for RTL. Please use option "start"/"end".');
     }
     _assertClassBrand(_CustomBorders_brand, this, _validateStyleSettings).call(this, customBorders);
   }

package/plugins/customBorders/utils.js

@@ -14,8 +14,6 @@ exports.hasStartEndTypeOptions = hasStartEndTypeOptions;
 exports.markSelected = markSelected;
 exports.normalizeBorder = normalizeBorder;
 exports.toInlinePropName = toInlinePropName;
-require("core-js/modules/esnext.iterator.constructor.js");
-require("core-js/modules/esnext.iterator.some.js");
 var _object = require("../../helpers/object");
 var _mixed = require("../../helpers/mixed");
 var _array = require("../../helpers/array");

package/plugins/customBorders/utils.mjs

@@ -1,5 +1,3 @@
-import "core-js/modules/esnext.iterator.constructor.js";
-import "core-js/modules/esnext.iterator.some.js";
 import { hasOwnProperty, isObject } from "../../helpers/object.mjs";
 import { isDefined } from "../../helpers/mixed.mjs";
 import { arrayEach } from "../../helpers/array.mjs";

package/plugins/dialog/dialog.js

@@ -1,12 +1,8 @@
 "use strict";
 
 exports.__esModule = true;
-require("core-js/modules/es.error.cause.js");
-require("core-js/modules/es.array.at.js");
-require("core-js/modules/es.string.at-alternative.js");
-require("core-js/modules/esnext.iterator.constructor.js");
-require("core-js/modules/esnext.iterator.every.js");
 var _base = require("../base");
+var _errors = require("../../helpers/errors");
 var _ui2 = require("./ui");
 var _object = require("../../helpers/object");
 var C = _interopRequireWildcard(require("../../i18n/constants"));
@@ -256,6 +252,7 @@ class Dialog extends _base.BasePlugin {
     if (!_classPrivateFieldGet(_ui, this)) {
       _classPrivateFieldSet(_ui, this, new _ui2.DialogUI({
         rootElement: this.hot.rootGridElement,
+        sanitizer: this.hot.getSettings().sanitizer,
         isRtl: this.hot.isRtl()
       }));
     }
@@ -393,7 +390,7 @@ class Dialog extends _base.BasePlugin {
     this.updatePluginSettings(options);
     const templateValue = this.getSetting('template');
     if (templateValue !== Dialog.DEFAULT_SETTINGS.template && this.getSetting('content') !== Dialog.DEFAULT_SETTINGS.content) {
-      throw new Error('The `template` option cannot be used together with the `content` option.');
+      (0, _errors.throwWithCause)('The `template` option cannot be used together with the `content` option.');
     }
     if (templateValue) {
       _classPrivateFieldGet(_ui, this).useTemplate(templateValue.type, {

package/plugins/dialog/dialog.mjs

@@ -1,8 +1,3 @@
-import "core-js/modules/es.error.cause.js";
-import "core-js/modules/es.array.at.js";
-import "core-js/modules/es.string.at-alternative.js";
-import "core-js/modules/esnext.iterator.constructor.js";
-import "core-js/modules/esnext.iterator.every.js";
 function _classPrivateMethodInitSpec(e, a) { _checkPrivateRedeclaration(e, a), a.add(e); }
 function _classPrivateFieldInitSpec(e, t, a) { _checkPrivateRedeclaration(e, t), t.set(e, a); }
 function _checkPrivateRedeclaration(e, t) { if (t.has(e)) throw new TypeError("Cannot initialize the same private elements twice on an object"); }
@@ -10,6 +5,7 @@ function _classPrivateFieldSet(s, a, r) { return s.set(_assertClassBrand(s, a),
 function _classPrivateFieldGet(s, a) { return s.get(_assertClassBrand(s, a)); }
 function _assertClassBrand(e, t, n) { if ("function" == typeof e ? e === t : e.has(t)) return arguments.length < 3 ? t : n; throw new TypeError("Private element is not present on this object"); }
 import { BasePlugin } from "../base/index.mjs";
+import { throwWithCause } from "../../helpers/errors.mjs";
 import { DialogUI } from "./ui.mjs";
 import { isObject } from "../../helpers/object.mjs";
 import * as C from "../../i18n/constants.mjs";
@@ -252,6 +248,7 @@ export class Dialog extends BasePlugin {
     if (!_classPrivateFieldGet(_ui, this)) {
       _classPrivateFieldSet(_ui, this, new DialogUI({
         rootElement: this.hot.rootGridElement,
+        sanitizer: this.hot.getSettings().sanitizer,
         isRtl: this.hot.isRtl()
       }));
     }
@@ -389,7 +386,7 @@ export class Dialog extends BasePlugin {
     this.updatePluginSettings(options);
     const templateValue = this.getSetting('template');
     if (templateValue !== Dialog.DEFAULT_SETTINGS.template && this.getSetting('content') !== Dialog.DEFAULT_SETTINGS.content) {
-      throw new Error('The `template` option cannot be used together with the `content` option.');
+      throwWithCause('The `template` option cannot be used together with the `content` option.');
     }
     if (templateValue) {
       _classPrivateFieldGet(_ui, this).useTemplate(templateValue.type, {

package/plugins/dialog/templates/base.js

@@ -2,8 +2,8 @@
 
 exports.__esModule = true;
 exports.baseTemplate = baseTemplate;
-require("core-js/modules/es.error.cause.js");
 var _constants = require("../constants");
+var _errors = require("../../../helpers/errors");
 var _templateLiteralTag = require("../../../helpers/templateLiteralTag");
 /**
  * The `baseTemplate` function returns a HTML string with the base template.
@@ -43,7 +43,7 @@ function baseTemplate() {
    */
   function focusableElements() {
     if (fragment === null) {
-      throw new Error('Compile the template first.');
+      (0, _errors.throwWithCause)('Compile the template first.');
     }
     return [];
   }