html2canvas-pro 2.2.0 → 2.2.1

package/dist/lib/core/render-element.js

@@ -64,7 +64,8 @@ const renderElement = async (element, opts, config) => {
         imageTimeout: opts.imageTimeout ?? 15000,
         proxy: opts.proxy,
         useCORS: opts.useCORS ?? false,
-        customIsSameOrigin: opts.customIsSameOrigin
+        customIsSameOrigin: opts.customIsSameOrigin,
+        maxCacheSize: opts.maxCacheSize
     };
     const contextOptions = {
         logging: opts.logging ?? true,

package/dist/lib/css/index.js

@@ -310,10 +310,16 @@ const parse = (context, descriptor, style) => {
         valueCache = new Map();
         parseCache.set(descriptor, valueCache);
     }
-    if (valueCache.size >= constants_1.PARSE_CACHE_MAX_PER_DESCRIPTOR) {
-        const oldestKey = valueCache.keys().next().value;
-        valueCache.delete(oldestKey);
+    // Skip caching for image descriptors — their parse() has the critical
+    // side effect of calling context.cache.addImage(url) which must run
+    // on every render pass (different cache instances per html2canvas call).
+    const skipCache = descriptor.type === 3 /* PropertyDescriptorParsingType.TYPE_VALUE */ && descriptor.format === 'image';
+    if (!skipCache) {
+        if (valueCache.size >= constants_1.PARSE_CACHE_MAX_PER_DESCRIPTOR) {
+            const oldestKey = valueCache.keys().next().value;
+            valueCache.delete(oldestKey);
+        }
+        valueCache.set(rawValue, result);
     }
-    valueCache.set(rawValue, result);
     return result;
 };

package/dist/lib/render/canvas/effects-renderer.js

@@ -67,7 +67,14 @@ class EffectsRenderer {
             this.ctx.globalCompositeOperation = effect.compositeOperation;
         }
         else if ((0, effects_1.isFilterEffect)(effect)) {
-            this.ctx.filter = effect.filterString;
+            // Canvas 2D `ctx.filter` accepts CSS filter strings including
+            // drop-shadow(). However, using drop-shadow() on the canvas context
+            // can taint the canvas in some browsers (Chrome, Firefox) even for
+            // same-origin content.  Our filter parser wraps shadows with
+            // drop-shadow(...) — strip that single function so we never set
+            // a filter that could taint the canvas.
+            const safe = effect.filterString.replace(/drop-shadow\([^)]+\)\s*/g, '').trim();
+            this.ctx.filter = safe || 'none';
         }
         this.activeEffects.push(effect);
     }

package/package.json

@@ -19,7 +19,7 @@
       "default": "./dist/html2canvas-pro.esm.js"
     }
   },
-  "version": "2.2.0",
+  "version": "2.2.1",
   "author": {
     "name": "yorickshan",
     "email": "yorickshan@gmail.com",