ids-enterprise 4.57.1 → 4.57.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (34) hide show
  1. package/dist/css/theme-classic-contrast.css +3 -3
  2. package/dist/css/theme-classic-contrast.min.css +3 -3
  3. package/dist/css/theme-classic-dark.css +3 -3
  4. package/dist/css/theme-classic-dark.min.css +3 -3
  5. package/dist/css/theme-classic-light.css +3 -3
  6. package/dist/css/theme-classic-light.min.css +3 -3
  7. package/dist/css/theme-new-contrast.css +3 -3
  8. package/dist/css/theme-new-contrast.min.css +3 -3
  9. package/dist/css/theme-new-dark.css +3 -3
  10. package/dist/css/theme-new-dark.min.css +3 -3
  11. package/dist/css/theme-new-light.css +3 -3
  12. package/dist/css/theme-new-light.min.css +3 -3
  13. package/dist/css/theme-soho-contrast.css +3 -3
  14. package/dist/css/theme-soho-contrast.min.css +3 -3
  15. package/dist/css/theme-soho-dark.css +3 -3
  16. package/dist/css/theme-soho-dark.min.css +3 -3
  17. package/dist/css/theme-soho-light.css +3 -3
  18. package/dist/css/theme-soho-light.min.css +3 -3
  19. package/dist/css/theme-uplift-contrast.css +3 -3
  20. package/dist/css/theme-uplift-contrast.min.css +3 -3
  21. package/dist/css/theme-uplift-dark.css +3 -3
  22. package/dist/css/theme-uplift-dark.min.css +3 -3
  23. package/dist/css/theme-uplift-light.css +3 -3
  24. package/dist/css/theme-uplift-light.min.css +3 -3
  25. package/dist/js/sohoxi.esm.js +14 -28
  26. package/dist/js/sohoxi.js +14 -28
  27. package/dist/js/sohoxi.js.map +1 -1
  28. package/dist/js/sohoxi.min.js +4 -4
  29. package/dist/js/sohoxi.min.js.map +1 -1
  30. package/dist/svg/theme-classic-svg-empty.html +5 -5
  31. package/dist/svg/theme-classic-svg.html +197 -197
  32. package/dist/svg/theme-new-svg-empty.html +7 -7
  33. package/dist/svg/theme-new-svg.html +190 -190
  34. package/package.json +1 -1
package/dist/css/theme-classic-contrast.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.57.1
4
- * Date: 2021-11-18T17:59:35.266Z
5
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
3
+ * IDS Enterprise Components - v4.57.2
4
+ * Date: 2021-12-09T20:30:57.341Z
5
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-classic-contrast.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.266Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.341Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-classic-dark.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.57.1
4
- * Date: 2021-11-18T17:59:35.266Z
5
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
3
+ * IDS Enterprise Components - v4.57.2
4
+ * Date: 2021-12-09T20:30:57.341Z
5
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-classic-dark.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.266Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.341Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-classic-light.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.57.1
4
- * Date: 2021-11-18T17:59:35.266Z
5
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
3
+ * IDS Enterprise Components - v4.57.2
4
+ * Date: 2021-12-09T20:30:57.341Z
5
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-classic-light.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.266Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.341Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-new-contrast.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.57.1
4
- * Date: 2021-11-18T17:59:35.266Z
5
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
3
+ * IDS Enterprise Components - v4.57.2
4
+ * Date: 2021-12-09T20:30:57.341Z
5
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-new-contrast.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.266Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.341Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-new-dark.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.57.1
4
- * Date: 2021-11-18T17:59:35.266Z
5
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
3
+ * IDS Enterprise Components - v4.57.2
4
+ * Date: 2021-12-09T20:30:57.341Z
5
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-new-dark.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.266Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.341Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-new-light.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.57.1
4
- * Date: 2021-11-18T17:59:35.266Z
5
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
3
+ * IDS Enterprise Components - v4.57.2
4
+ * Date: 2021-12-09T20:30:57.341Z
5
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-new-light.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.266Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.341Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-soho-contrast.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.57.1
4
- * Date: 2021-11-18T17:59:35.266Z
5
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
3
+ * IDS Enterprise Components - v4.57.2
4
+ * Date: 2021-12-09T20:30:57.341Z
5
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-soho-contrast.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.266Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.341Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-soho-dark.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.57.1
4
- * Date: 2021-11-18T17:59:35.266Z
5
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
3
+ * IDS Enterprise Components - v4.57.2
4
+ * Date: 2021-12-09T20:30:57.341Z
5
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-soho-dark.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.266Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.341Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-soho-light.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.57.1
4
- * Date: 2021-11-18T17:59:35.266Z
5
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
3
+ * IDS Enterprise Components - v4.57.2
4
+ * Date: 2021-12-09T20:30:57.341Z
5
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-soho-light.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.266Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.341Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-uplift-contrast.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.57.1
4
- * Date: 2021-11-18T17:59:35.266Z
5
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
3
+ * IDS Enterprise Components - v4.57.2
4
+ * Date: 2021-12-09T20:30:57.341Z
5
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-uplift-contrast.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.266Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.341Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-uplift-dark.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.57.1
4
- * Date: 2021-11-18T17:59:35.266Z
5
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
3
+ * IDS Enterprise Components - v4.57.2
4
+ * Date: 2021-12-09T20:30:57.341Z
5
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-uplift-dark.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.266Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.341Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-uplift-light.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.57.1
4
- * Date: 2021-11-18T17:59:35.266Z
5
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
3
+ * IDS Enterprise Components - v4.57.2
4
+ * Date: 2021-12-09T20:30:57.341Z
5
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-uplift-light.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.266Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.341Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/js/sohoxi.esm.js CHANGED
@@ -1,7 +1,7 @@
1
1
  /*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.703Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.781Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
@@ -345,7 +345,7 @@ if (!isIE11) {
345
345
 
346
346
  var name = "ids-enterprise";
347
347
  var slug = "ids-enterprise";
348
- var version = "4.57.1";
348
+ var version = "4.57.2";
349
349
  var description = "Infor Design System (IDS) Enterprise Components for the web";
350
350
  var repository = {
351
351
  type: "git",
@@ -764,25 +764,10 @@ xssUtils.sanitizeConsoleMethods = function (html) {
764
764
 
765
765
 
766
766
  xssUtils.sanitizeHTML = function (html) {
767
- var santizedHtml = html.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/g, '');
768
- santizedHtml = santizedHtml.replace(/<[^>]+/g, function (match) {
769
- var expr = /(\/|\s)on\w+=('|")?/g;
770
- var str = match;
771
-
772
- if ((str.match(expr) || []).length > 0) {
773
- str = str.replace(/(\/|\s)title=('|")(.*)('|")/g, function (m) {
774
- if ((m.match(expr) || []).length > 0) {
775
- return m.replace(expr, function (m2) {
776
- return m2.replace('on', '');
777
- });
778
- }
779
-
780
- return m;
781
- });
782
- }
767
+ // Remove on xxx functions https://regex101.com/r/hsLeFl/1/
768
+ var santizedHtml = html.replace(/\bon\w+=\S+?(?=(>|&|<| |"))/g, ''); // Remove Script tags
783
769
 
784
- return str.replace(/(\/|\s)on\w+=('|")?[^"]*('|")?/g, '');
785
- }); // Remove console methods
770
+ santizedHtml = santizedHtml.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/g, ''); // Remove console methods
786
771
 
787
772
  santizedHtml = this.sanitizeConsoleMethods(santizedHtml); // Remove nested script tags
788
773
 
@@ -855,9 +840,10 @@ xssUtils.escapeHTML = function (value) {
855
840
  '<': '&lt;',
856
841
  '>': '&gt;',
857
842
  '"': '&quot;',
858
- "'": '&apos;'
843
+ "'": '&apos;',
844
+ '\\': '&bsol;'
859
845
  };
860
- var reg = /[&<>"']/ig;
846
+ var reg = /[&<>"'\\]/ig;
861
847
  return newValue.replace(reg, function (match) {
862
848
  return map[match];
863
849
  });
@@ -886,7 +872,7 @@ xssUtils.unescapeHTML = function (value) {
886
872
 
887
873
  var doc = new DOMParser().parseFromString(value, 'text/html'); // Keep leading/trailing spaces
888
874
 
889
- return "".concat(match(/^\s*/)).concat(doc.documentElement.textContent.trim()).concat(match(/\s*$/));
875
+ return "".concat(match(/^\s*|\\/)).concat(doc.documentElement.textContent.trim()).concat(match(/\s*$|\\/));
890
876
  }
891
877
 
892
878
  return value;
@@ -903,7 +889,7 @@ xssUtils.unescapeHTML = function (value) {
903
889
 
904
890
 
905
891
  xssUtils.htmlEntities = function (string) {
906
- return String(string).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
892
+ return String(string).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/\\/g, '&bsol;').replace(/"/g, '&quot;');
907
893
  };
908
894
  /**
909
895
  * Ensure that a link is a local link (relative to the current page)
@@ -95424,7 +95410,7 @@ var editors = {
95424
95410
 
95425
95411
  this.editorWidth = api.setUnit(editorOptions.width || container.outerWidth());
95426
95412
  delete editorOptions.width;
95427
- container[0].innerHTML = "<div class=\"editor-wrapper\" style=\"width: ".concat(this.editorWidth, ";\">\n <div class=\"editor\" data-init=\"false\">").concat(xssUtils.unescapeHTML(value), "</div>\n </div>");
95413
+ container[0].innerHTML = "<div class=\"editor-wrapper\" style=\"width: ".concat(this.editorWidth, ";\">\n <div class=\"editor\" data-init=\"false\">").concat(xssUtils.sanitizeHTML(xssUtils.unescapeHTML(value)), "</div>\n </div>");
95428
95414
  this.td = container.closest('td');
95429
95415
  this.input = $('.editor', container);
95430
95416
  this.input.popover({
@@ -109493,7 +109479,7 @@ Datagrid.prototype = {
109493
109479
  var tooltipContentEl = this.tooltip.querySelector('.tooltip-content');
109494
109480
 
109495
109481
  if (tooltipContentEl) {
109496
- tooltipContentEl.innerHTML = options.content;
109482
+ tooltipContentEl.innerHTML = xssUtils.sanitizeHTML(options.content);
109497
109483
  this.tooltip.classList.remove('is-hidden', 'top', 'right', 'bottom', 'left');
109498
109484
  this.tooltip.style.display = '';
109499
109485
  this.tooltip.classList.add(options.placement || 'top');
package/dist/js/sohoxi.js CHANGED
@@ -1,7 +1,7 @@
1
1
  /*!
2
- * IDS Enterprise Components - v4.57.1
3
- * Date: 2021-11-18T17:59:35.703Z
4
- * Revision: cc21054f9a63cf883f678a6b80e49b8e566053d9
2
+ * IDS Enterprise Components - v4.57.2
3
+ * Date: 2021-12-09T20:30:57.781Z
4
+ * Revision: 8bf0e7b0696db3d0cf6c844d9787aa392906f3d6
5
5
  *
6
6
  *
7
7
  * Apache License
@@ -348,7 +348,7 @@ var Soho = (function (exports) {
348
348
 
349
349
  var name = "ids-enterprise";
350
350
  var slug = "ids-enterprise";
351
- var version = "4.57.1";
351
+ var version = "4.57.2";
352
352
  var description = "Infor Design System (IDS) Enterprise Components for the web";
353
353
  var repository = {
354
354
  type: "git",
@@ -767,25 +767,10 @@ var Soho = (function (exports) {
767
767
 
768
768
 
769
769
  xssUtils.sanitizeHTML = function (html) {
770
- var santizedHtml = html.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/g, '');
771
- santizedHtml = santizedHtml.replace(/<[^>]+/g, function (match) {
772
- var expr = /(\/|\s)on\w+=('|")?/g;
773
- var str = match;
774
-
775
- if ((str.match(expr) || []).length > 0) {
776
- str = str.replace(/(\/|\s)title=('|")(.*)('|")/g, function (m) {
777
- if ((m.match(expr) || []).length > 0) {
778
- return m.replace(expr, function (m2) {
779
- return m2.replace('on', '');
780
- });
781
- }
782
-
783
- return m;
784
- });
785
- }
770
+ // Remove on xxx functions https://regex101.com/r/hsLeFl/1/
771
+ var santizedHtml = html.replace(/\bon\w+=\S+?(?=(>|&|<| |"))/g, ''); // Remove Script tags
786
772
 
787
- return str.replace(/(\/|\s)on\w+=('|")?[^"]*('|")?/g, '');
788
- }); // Remove console methods
773
+ santizedHtml = santizedHtml.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/g, ''); // Remove console methods
789
774
 
790
775
  santizedHtml = this.sanitizeConsoleMethods(santizedHtml); // Remove nested script tags
791
776
 
@@ -858,9 +843,10 @@ var Soho = (function (exports) {
858
843
  '<': '&lt;',
859
844
  '>': '&gt;',
860
845
  '"': '&quot;',
861
- "'": '&apos;'
846
+ "'": '&apos;',
847
+ '\\': '&bsol;'
862
848
  };
863
- var reg = /[&<>"']/ig;
849
+ var reg = /[&<>"'\\]/ig;
864
850
  return newValue.replace(reg, function (match) {
865
851
  return map[match];
866
852
  });
@@ -889,7 +875,7 @@ var Soho = (function (exports) {
889
875
 
890
876
  var doc = new DOMParser().parseFromString(value, 'text/html'); // Keep leading/trailing spaces
891
877
 
892
- return "".concat(match(/^\s*/)).concat(doc.documentElement.textContent.trim()).concat(match(/\s*$/));
878
+ return "".concat(match(/^\s*|\\/)).concat(doc.documentElement.textContent.trim()).concat(match(/\s*$|\\/));
893
879
  }
894
880
 
895
881
  return value;
@@ -906,7 +892,7 @@ var Soho = (function (exports) {
906
892
 
907
893
 
908
894
  xssUtils.htmlEntities = function (string) {
909
- return String(string).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
895
+ return String(string).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/\\/g, '&bsol;').replace(/"/g, '&quot;');
910
896
  };
911
897
  /**
912
898
  * Ensure that a link is a local link (relative to the current page)
@@ -95427,7 +95413,7 @@ var Soho = (function (exports) {
95427
95413
 
95428
95414
  this.editorWidth = api.setUnit(editorOptions.width || container.outerWidth());
95429
95415
  delete editorOptions.width;
95430
- container[0].innerHTML = "<div class=\"editor-wrapper\" style=\"width: ".concat(this.editorWidth, ";\">\n <div class=\"editor\" data-init=\"false\">").concat(xssUtils.unescapeHTML(value), "</div>\n </div>");
95416
+ container[0].innerHTML = "<div class=\"editor-wrapper\" style=\"width: ".concat(this.editorWidth, ";\">\n <div class=\"editor\" data-init=\"false\">").concat(xssUtils.sanitizeHTML(xssUtils.unescapeHTML(value)), "</div>\n </div>");
95431
95417
  this.td = container.closest('td');
95432
95418
  this.input = $('.editor', container);
95433
95419
  this.input.popover({
@@ -109496,7 +109482,7 @@ var Soho = (function (exports) {
109496
109482
  var tooltipContentEl = this.tooltip.querySelector('.tooltip-content');
109497
109483
 
109498
109484
  if (tooltipContentEl) {
109499
- tooltipContentEl.innerHTML = options.content;
109485
+ tooltipContentEl.innerHTML = xssUtils.sanitizeHTML(options.content);
109500
109486
  this.tooltip.classList.remove('is-hidden', 'top', 'right', 'bottom', 'left');
109501
109487
  this.tooltip.style.display = '';
109502
109488
  this.tooltip.classList.add(options.placement || 'top');