ids-enterprise 4.58.0 → 4.58.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (34) hide show
  1. package/dist/css/theme-classic-contrast.css +3 -3
  2. package/dist/css/theme-classic-contrast.min.css +3 -3
  3. package/dist/css/theme-classic-dark.css +3 -3
  4. package/dist/css/theme-classic-dark.min.css +3 -3
  5. package/dist/css/theme-classic-light.css +3 -3
  6. package/dist/css/theme-classic-light.min.css +3 -3
  7. package/dist/css/theme-new-contrast.css +3 -3
  8. package/dist/css/theme-new-contrast.min.css +3 -3
  9. package/dist/css/theme-new-dark.css +3 -3
  10. package/dist/css/theme-new-dark.min.css +3 -3
  11. package/dist/css/theme-new-light.css +3 -3
  12. package/dist/css/theme-new-light.min.css +3 -3
  13. package/dist/css/theme-soho-contrast.css +3 -3
  14. package/dist/css/theme-soho-contrast.min.css +3 -3
  15. package/dist/css/theme-soho-dark.css +3 -3
  16. package/dist/css/theme-soho-dark.min.css +3 -3
  17. package/dist/css/theme-soho-light.css +3 -3
  18. package/dist/css/theme-soho-light.min.css +3 -3
  19. package/dist/css/theme-uplift-contrast.css +3 -3
  20. package/dist/css/theme-uplift-contrast.min.css +3 -3
  21. package/dist/css/theme-uplift-dark.css +3 -3
  22. package/dist/css/theme-uplift-dark.min.css +3 -3
  23. package/dist/css/theme-uplift-light.css +3 -3
  24. package/dist/css/theme-uplift-light.min.css +3 -3
  25. package/dist/js/sohoxi.esm.js +14 -28
  26. package/dist/js/sohoxi.js +14 -28
  27. package/dist/js/sohoxi.js.map +1 -1
  28. package/dist/js/sohoxi.min.js +4 -4
  29. package/dist/js/sohoxi.min.js.map +1 -1
  30. package/dist/svg/theme-classic-svg-empty.html +6 -6
  31. package/dist/svg/theme-classic-svg.html +195 -195
  32. package/dist/svg/theme-new-svg-empty.html +3 -3
  33. package/dist/svg/theme-new-svg.html +199 -199
  34. package/package.json +1 -1
package/dist/css/theme-classic-contrast.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.58.0
4
- * Date: 2021-12-03T18:53:19.151Z
5
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
3
+ * IDS Enterprise Components - v4.58.1
4
+ * Date: 2021-12-09T20:38:58.638Z
5
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-classic-contrast.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.151Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:58.638Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-classic-dark.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.58.0
4
- * Date: 2021-12-03T18:53:19.151Z
5
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
3
+ * IDS Enterprise Components - v4.58.1
4
+ * Date: 2021-12-09T20:38:58.638Z
5
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-classic-dark.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.151Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:58.638Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-classic-light.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.58.0
4
- * Date: 2021-12-03T18:53:19.151Z
5
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
3
+ * IDS Enterprise Components - v4.58.1
4
+ * Date: 2021-12-09T20:38:58.638Z
5
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-classic-light.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.151Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:58.638Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-new-contrast.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.58.0
4
- * Date: 2021-12-03T18:53:19.151Z
5
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
3
+ * IDS Enterprise Components - v4.58.1
4
+ * Date: 2021-12-09T20:38:58.638Z
5
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-new-contrast.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.151Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:58.638Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-new-dark.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.58.0
4
- * Date: 2021-12-03T18:53:19.151Z
5
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
3
+ * IDS Enterprise Components - v4.58.1
4
+ * Date: 2021-12-09T20:38:58.638Z
5
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-new-dark.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.151Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:58.638Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-new-light.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.58.0
4
- * Date: 2021-12-03T18:53:19.151Z
5
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
3
+ * IDS Enterprise Components - v4.58.1
4
+ * Date: 2021-12-09T20:38:58.638Z
5
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-new-light.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.151Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:58.638Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-soho-contrast.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.58.0
4
- * Date: 2021-12-03T18:53:19.151Z
5
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
3
+ * IDS Enterprise Components - v4.58.1
4
+ * Date: 2021-12-09T20:38:58.638Z
5
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-soho-contrast.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.151Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:58.638Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-soho-dark.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.58.0
4
- * Date: 2021-12-03T18:53:19.151Z
5
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
3
+ * IDS Enterprise Components - v4.58.1
4
+ * Date: 2021-12-09T20:38:58.638Z
5
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-soho-dark.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.151Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:58.638Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-soho-light.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.58.0
4
- * Date: 2021-12-03T18:53:19.151Z
5
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
3
+ * IDS Enterprise Components - v4.58.1
4
+ * Date: 2021-12-09T20:38:58.638Z
5
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-soho-light.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.151Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:58.638Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-uplift-contrast.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.58.0
4
- * Date: 2021-12-03T18:53:19.151Z
5
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
3
+ * IDS Enterprise Components - v4.58.1
4
+ * Date: 2021-12-09T20:38:58.638Z
5
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-uplift-contrast.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.151Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:58.638Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-uplift-dark.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.58.0
4
- * Date: 2021-12-03T18:53:19.151Z
5
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
3
+ * IDS Enterprise Components - v4.58.1
4
+ * Date: 2021-12-09T20:38:58.638Z
5
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-uplift-dark.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.151Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:58.638Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/css/theme-uplift-light.css CHANGED
@@ -1,8 +1,8 @@
1
1
  @charset "UTF-8";
2
2
  /*!
3
- * IDS Enterprise Components - v4.58.0
4
- * Date: 2021-12-03T18:53:19.151Z
5
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
3
+ * IDS Enterprise Components - v4.58.1
4
+ * Date: 2021-12-09T20:38:58.638Z
5
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
6
6
  *
7
7
  *
8
8
  * Apache License
package/dist/css/theme-uplift-light.min.css CHANGED
@@ -1,7 +1,7 @@
1
1
  @charset "UTF-8";/*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.151Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:58.638Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
package/dist/js/sohoxi.esm.js CHANGED
@@ -1,7 +1,7 @@
1
1
  /*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.756Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:59.163Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
@@ -345,7 +345,7 @@ if (!isIE11) {
345
345
 
346
346
  var name = "ids-enterprise";
347
347
  var slug = "ids-enterprise";
348
- var version = "4.58.0";
348
+ var version = "4.58.1";
349
349
  var description = "Infor Design System (IDS) Enterprise Components for the web";
350
350
  var repository = {
351
351
  type: "git",
@@ -764,25 +764,10 @@ xssUtils.sanitizeConsoleMethods = function (html) {
764
764
 
765
765
 
766
766
  xssUtils.sanitizeHTML = function (html) {
767
- var santizedHtml = html.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/g, '');
768
- santizedHtml = santizedHtml.replace(/<[^>]+/g, function (match) {
769
- var expr = /(\/|\s)on\w+=('|")?/g;
770
- var str = match;
771
-
772
- if ((str.match(expr) || []).length > 0) {
773
- str = str.replace(/(\/|\s)title=('|")(.*)('|")/g, function (m) {
774
- if ((m.match(expr) || []).length > 0) {
775
- return m.replace(expr, function (m2) {
776
- return m2.replace('on', '');
777
- });
778
- }
779
-
780
- return m;
781
- });
782
- }
767
+ // Remove on xxx functions https://regex101.com/r/hsLeFl/1/
768
+ var santizedHtml = html.replace(/\bon\w+=\S+?(?=(>|&|<| |"))/g, ''); // Remove Script tags
783
769
 
784
- return str.replace(/(\/|\s)on\w+=('|")?[^"]*('|")?/g, '');
785
- }); // Remove console methods
770
+ santizedHtml = santizedHtml.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/g, ''); // Remove console methods
786
771
 
787
772
  santizedHtml = this.sanitizeConsoleMethods(santizedHtml); // Remove nested script tags
788
773
 
@@ -855,9 +840,10 @@ xssUtils.escapeHTML = function (value) {
855
840
  '<': '&lt;',
856
841
  '>': '&gt;',
857
842
  '"': '&quot;',
858
- "'": '&apos;'
843
+ "'": '&apos;',
844
+ '\\': '&bsol;'
859
845
  };
860
- var reg = /[&<>"']/ig;
846
+ var reg = /[&<>"'\\]/ig;
861
847
  return newValue.replace(reg, function (match) {
862
848
  return map[match];
863
849
  });
@@ -886,7 +872,7 @@ xssUtils.unescapeHTML = function (value) {
886
872
 
887
873
  var doc = new DOMParser().parseFromString(value, 'text/html'); // Keep leading/trailing spaces
888
874
 
889
- return "".concat(match(/^\s*/)).concat(doc.documentElement.textContent.trim()).concat(match(/\s*$/));
875
+ return "".concat(match(/^\s*|\\/)).concat(doc.documentElement.textContent.trim()).concat(match(/\s*$|\\/));
890
876
  }
891
877
 
892
878
  return value;
@@ -903,7 +889,7 @@ xssUtils.unescapeHTML = function (value) {
903
889
 
904
890
 
905
891
  xssUtils.htmlEntities = function (string) {
906
- return String(string).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
892
+ return String(string).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/\\/g, '&bsol;').replace(/"/g, '&quot;');
907
893
  };
908
894
  /**
909
895
  * Ensure that a link is a local link (relative to the current page)
@@ -95800,7 +95786,7 @@ var editors = {
95800
95786
 
95801
95787
  this.editorWidth = api.setUnit(editorOptions.width || container.outerWidth());
95802
95788
  delete editorOptions.width;
95803
- container[0].innerHTML = "<div class=\"editor-wrapper\" style=\"width: ".concat(this.editorWidth, ";\">\n <div class=\"editor\" data-init=\"false\">").concat(xssUtils.unescapeHTML(value), "</div>\n </div>");
95789
+ container[0].innerHTML = "<div class=\"editor-wrapper\" style=\"width: ".concat(this.editorWidth, ";\">\n <div class=\"editor\" data-init=\"false\">").concat(xssUtils.sanitizeHTML(xssUtils.unescapeHTML(value)), "</div>\n </div>");
95804
95790
  this.td = container.closest('td');
95805
95791
  this.input = $('.editor', container);
95806
95792
  this.input.popover({
@@ -109899,7 +109885,7 @@ Datagrid.prototype = {
109899
109885
  var tooltipContentEl = this.tooltip.querySelector('.tooltip-content');
109900
109886
 
109901
109887
  if (tooltipContentEl) {
109902
- tooltipContentEl.innerHTML = options.content;
109888
+ tooltipContentEl.innerHTML = xssUtils.sanitizeHTML(options.content);
109903
109889
  this.tooltip.classList.remove('is-hidden', 'top', 'right', 'bottom', 'left');
109904
109890
  this.tooltip.style.display = '';
109905
109891
  this.tooltip.classList.add(options.placement || 'top');
package/dist/js/sohoxi.js CHANGED
@@ -1,7 +1,7 @@
1
1
  /*!
2
- * IDS Enterprise Components - v4.58.0
3
- * Date: 2021-12-03T18:53:19.756Z
4
- * Revision: 739b4a71409bd057a772df13b12ea20b1790da37
2
+ * IDS Enterprise Components - v4.58.1
3
+ * Date: 2021-12-09T20:38:59.163Z
4
+ * Revision: b0ce67f313c9e15fb7f3ada1a4e7130af9f3b1dc
5
5
  *
6
6
  *
7
7
  * Apache License
@@ -348,7 +348,7 @@ var Soho = (function (exports) {
348
348
 
349
349
  var name = "ids-enterprise";
350
350
  var slug = "ids-enterprise";
351
- var version = "4.58.0";
351
+ var version = "4.58.1";
352
352
  var description = "Infor Design System (IDS) Enterprise Components for the web";
353
353
  var repository = {
354
354
  type: "git",
@@ -767,25 +767,10 @@ var Soho = (function (exports) {
767
767
 
768
768
 
769
769
  xssUtils.sanitizeHTML = function (html) {
770
- var santizedHtml = html.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/g, '');
771
- santizedHtml = santizedHtml.replace(/<[^>]+/g, function (match) {
772
- var expr = /(\/|\s)on\w+=('|")?/g;
773
- var str = match;
774
-
775
- if ((str.match(expr) || []).length > 0) {
776
- str = str.replace(/(\/|\s)title=('|")(.*)('|")/g, function (m) {
777
- if ((m.match(expr) || []).length > 0) {
778
- return m.replace(expr, function (m2) {
779
- return m2.replace('on', '');
780
- });
781
- }
782
-
783
- return m;
784
- });
785
- }
770
+ // Remove on xxx functions https://regex101.com/r/hsLeFl/1/
771
+ var santizedHtml = html.replace(/\bon\w+=\S+?(?=(>|&|<| |"))/g, ''); // Remove Script tags
786
772
 
787
- return str.replace(/(\/|\s)on\w+=('|")?[^"]*('|")?/g, '');
788
- }); // Remove console methods
773
+ santizedHtml = santizedHtml.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/g, ''); // Remove console methods
789
774
 
790
775
  santizedHtml = this.sanitizeConsoleMethods(santizedHtml); // Remove nested script tags
791
776
 
@@ -858,9 +843,10 @@ var Soho = (function (exports) {
858
843
  '<': '&lt;',
859
844
  '>': '&gt;',
860
845
  '"': '&quot;',
861
- "'": '&apos;'
846
+ "'": '&apos;',
847
+ '\\': '&bsol;'
862
848
  };
863
- var reg = /[&<>"']/ig;
849
+ var reg = /[&<>"'\\]/ig;
864
850
  return newValue.replace(reg, function (match) {
865
851
  return map[match];
866
852
  });
@@ -889,7 +875,7 @@ var Soho = (function (exports) {
889
875
 
890
876
  var doc = new DOMParser().parseFromString(value, 'text/html'); // Keep leading/trailing spaces
891
877
 
892
- return "".concat(match(/^\s*/)).concat(doc.documentElement.textContent.trim()).concat(match(/\s*$/));
878
+ return "".concat(match(/^\s*|\\/)).concat(doc.documentElement.textContent.trim()).concat(match(/\s*$|\\/));
893
879
  }
894
880
 
895
881
  return value;
@@ -906,7 +892,7 @@ var Soho = (function (exports) {
906
892
 
907
893
 
908
894
  xssUtils.htmlEntities = function (string) {
909
- return String(string).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
895
+ return String(string).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/\\/g, '&bsol;').replace(/"/g, '&quot;');
910
896
  };
911
897
  /**
912
898
  * Ensure that a link is a local link (relative to the current page)
@@ -95803,7 +95789,7 @@ var Soho = (function (exports) {
95803
95789
 
95804
95790
  this.editorWidth = api.setUnit(editorOptions.width || container.outerWidth());
95805
95791
  delete editorOptions.width;
95806
- container[0].innerHTML = "<div class=\"editor-wrapper\" style=\"width: ".concat(this.editorWidth, ";\">\n <div class=\"editor\" data-init=\"false\">").concat(xssUtils.unescapeHTML(value), "</div>\n </div>");
95792
+ container[0].innerHTML = "<div class=\"editor-wrapper\" style=\"width: ".concat(this.editorWidth, ";\">\n <div class=\"editor\" data-init=\"false\">").concat(xssUtils.sanitizeHTML(xssUtils.unescapeHTML(value)), "</div>\n </div>");
95807
95793
  this.td = container.closest('td');
95808
95794
  this.input = $('.editor', container);
95809
95795
  this.input.popover({
@@ -109902,7 +109888,7 @@ var Soho = (function (exports) {
109902
109888
  var tooltipContentEl = this.tooltip.querySelector('.tooltip-content');
109903
109889
 
109904
109890
  if (tooltipContentEl) {
109905
- tooltipContentEl.innerHTML = options.content;
109891
+ tooltipContentEl.innerHTML = xssUtils.sanitizeHTML(options.content);
109906
109892
  this.tooltip.classList.remove('is-hidden', 'top', 'right', 'bottom', 'left');
109907
109893
  this.tooltip.style.display = '';
109908
109894
  this.tooltip.classList.add(options.placement || 'top');