jq79 0.3.20 → 0.3.22

package/src/dom.ts

@@ -1,16 +1,25 @@
 // DOM helpers: tiny query/create utilities, also injected into component
 // scripts as $, $$ and $create
 
-export const $ = (selectorOrEl: string | Element, selector?: string) => 
-  typeof selectorOrEl === "string"
+// $(selector) queries the document; $(el, selector) queries within el. The
+// selector is required in the element form - an empty one is a SyntaxError
+export function $(selector: string): Element | null
+export function $(el: Element, selector: string): Element | null
+export function $(selectorOrEl: string | Element, selector?: string): Element | null {
+  return typeof selectorOrEl === "string"
     ? document.querySelector(selectorOrEl)
-    : selectorOrEl.querySelector(selector || "")
+    : selectorOrEl.querySelector(selector!)
+}
 
-export const $$ = (selectorOrEl: string | Element, selector?: string) => Array.from(
-  typeof selectorOrEl === "string"
-    ? document.querySelectorAll(selectorOrEl)
-    : selectorOrEl.querySelectorAll(selector || "")
-)
+export function $$(selector: string): Element[]
+export function $$(el: Element, selector: string): Element[]
+export function $$(selectorOrEl: string | Element, selector?: string): Element[] {
+  return Array.from(
+    typeof selectorOrEl === "string"
+      ? document.querySelectorAll(selectorOrEl)
+      : selectorOrEl.querySelectorAll(selector!)
+  )
+}
 
 // $create(tag, attrs): attrs are set as attributes, except className, which
 // may be a string or an array of class names.
@@ -87,11 +96,8 @@ function sanitizeNode(node: HTMLElement): HTMLElement | null {
     clean.setAttribute(name, attr.value);
   }
 
-  // fuerza rel seguro en enlaces
-  if (tag === 'a') {
-    clean.setAttribute('rel', 'noopener noreferrer');
-    if (clean.hasAttribute('target')) clean.removeAttribute('target');
-  }
+  // fuerza rel seguro en enlaces (target nunca se copia: no está permitido)
+  if (tag === 'a') clean.setAttribute('rel', 'noopener noreferrer');
 
   appendSanitizedChildren(node, clean);
 

package/src/jq79.ts

@@ -601,9 +601,15 @@ const runFactoryScript = (code: string, scope: Record<string, any>, effect: (run
     const merge = (bindings: any) => {
       if (bindings && typeof bindings === "object") Object.assign(scope, bindings)
     }
-    const returned = factory({ $data: scope, $effect: effect, ...instanceHelpers })
-    if (returned instanceof Promise) returned.then(merge).catch(logError)
-    else merge(returned)
+    // the sync path is invoked straight from render(), so a throwing factory
+    // must be caught here too - not just by the `result` rejection handler
+    try {
+      const returned = factory({ $data: scope, $effect: effect, ...instanceHelpers })
+      if (returned instanceof Promise) returned.then(merge).catch(logError)
+      else merge(returned)
+    } catch (error) {
+      logError(error)
+    }
   }
 
   result.then(invoke, logError)

package/src/vite.ts

@@ -37,7 +37,6 @@ const IMPORT_LITERAL_RE = /(?<![\w$.])import\s*\(\s*(["'])([^"'\n]+?)\1\s*\)/g
 const STATIC_IMPORT_LITERAL_RE = /(?<![\w$.])import\s*(?:[\w$\s,{}*]+?\s*from\s*)?(["'])([^"'\n]+)\1/g
 
 const isHtmlUrl = (spec: string) => /\.html?([?#]|$)/.test(spec)
-const isRelative = (spec: string) => spec.startsWith("./") || spec.startsWith("../")
 const isExternalUrl = (spec: string) => /^[a-z][a-z0-9+.-]*:/i.test(spec) || spec.startsWith("/")
 
 // literal import specifiers in the component's script blocks - dynamic