markdown-to-jsx 9.3.4 → 9.4.0

package/dist/native.d.cts

@@ -177,6 +177,7 @@ type RequireAtLeastOne<
 		attrs?: Record<string, any>;
 		children?: ASTNode[] | undefined;
 		noInnerParse?: Boolean;
+		rawAttrs?: string;
 		tag: string;
 		text?: string | undefined;
 	}
@@ -228,6 +229,31 @@ type RequireAtLeastOne<
 		*/
 		enforceAtxHeadings: boolean;
 		/**
+		* **⚠️ SECURITY WARNING: STRONGLY DISCOURAGED FOR USER INPUTS**
+		*
+		* When enabled, attempts to eval expressions in JSX props that cannot be serialized
+		* as JSON (functions, variables, complex expressions). This uses `eval()` which can
+		* execute arbitrary code.
+		*
+		* **ONLY use this option when:**
+		* - The markdown source is completely trusted (e.g., your own documentation)
+		* - You control all JSX components and their props
+		* - The content is NOT user-generated or user-editable
+		*
+		* **DO NOT use this option when:**
+		* - Processing user-submitted markdown
+		* - Rendering untrusted content
+		* - Building public-facing applications with user content
+		*
+		* Example unsafe input: `<Component onClick={() => fetch('/admin/delete-all')} />`
+		*
+		* When disabled (default), unserializable expressions remain as strings that can be
+		* safely inspected or handled on a case-by-case basis via custom renderRule logic.
+		*
+		* @default false
+		*/
+		evalUnserializableExpressions?: boolean;
+		/**
 		* Forces the compiler to always output content with a block-level wrapper
 		* (`<p>` or any block-level syntax your markdown already contains.)
 		*/
@@ -336,6 +362,7 @@ declare global {
 declare function parser(source: string, options?: MarkdownToJSX.Options): MarkdownToJSX.ASTNode[];
 declare function sanitizer(input: string): string | null;
 declare function slugify(str: string): string;
+declare const MarkdownContext: React2.Context<NativeOptions | undefined>;
 type NativeStyleKey = "text" | "paragraph" | "heading1" | "heading2" | "heading3" | "heading4" | "heading5" | "heading6" | "link" | "image" | "codeBlock" | "codeInline" | "blockquote" | "listOrdered" | "listUnordered" | "listItem" | "listItemBullet" | "listItemNumber" | "thematicBreak" | "table" | "tableHeader" | "tableHeaderCell" | "tableRow" | "tableCell" | "em" | "strong" | "del" | "gfmTask" | "div" | "section" | "article" | "aside" | "header" | "footer" | "main" | "nav" | "figure" | "figcaption" | "ul" | "ol" | "li" | "th" | "td";
 type NativeOptions = Omit<MarkdownToJSX.Options, "wrapperProps"> & {
 	onLinkPress?: (url: string, title?: string) => void;
@@ -345,8 +372,12 @@ type NativeOptions = Omit<MarkdownToJSX.Options, "wrapperProps"> & {
 };
 declare function astToNative(ast: MarkdownToJSX.ASTNode[], options?: NativeOptions): React2.ReactNode;
 declare function compiler(markdown?: string, options?: NativeOptions): React2.ReactNode;
+declare const MarkdownProvider: React2.FC<{
+	options?: NativeOptions;
+	children: React2.ReactNode;
+}>;
 declare const Markdown: React2.FC<Omit<ViewProps, "children"> & {
 	children?: string | null;
 	options?: NativeOptions;
 }>;
-export { slugify, sanitizer, parser, Markdown as default, compiler, astToNative, RuleType2 as RuleType, NativeStyleKey, NativeOptions, MarkdownToJSX, Markdown };
+export { slugify, sanitizer, parser, Markdown as default, compiler, astToNative, RuleType2 as RuleType, NativeStyleKey, NativeOptions, MarkdownToJSX, MarkdownProvider, MarkdownContext, Markdown };

package/dist/native.d.ts

@@ -177,6 +177,7 @@ type RequireAtLeastOne<
 		attrs?: Record<string, any>;
 		children?: ASTNode[] | undefined;
 		noInnerParse?: Boolean;
+		rawAttrs?: string;
 		tag: string;
 		text?: string | undefined;
 	}
@@ -228,6 +229,31 @@ type RequireAtLeastOne<
 		*/
 		enforceAtxHeadings: boolean;
 		/**
+		* **⚠️ SECURITY WARNING: STRONGLY DISCOURAGED FOR USER INPUTS**
+		*
+		* When enabled, attempts to eval expressions in JSX props that cannot be serialized
+		* as JSON (functions, variables, complex expressions). This uses `eval()` which can
+		* execute arbitrary code.
+		*
+		* **ONLY use this option when:**
+		* - The markdown source is completely trusted (e.g., your own documentation)
+		* - You control all JSX components and their props
+		* - The content is NOT user-generated or user-editable
+		*
+		* **DO NOT use this option when:**
+		* - Processing user-submitted markdown
+		* - Rendering untrusted content
+		* - Building public-facing applications with user content
+		*
+		* Example unsafe input: `<Component onClick={() => fetch('/admin/delete-all')} />`
+		*
+		* When disabled (default), unserializable expressions remain as strings that can be
+		* safely inspected or handled on a case-by-case basis via custom renderRule logic.
+		*
+		* @default false
+		*/
+		evalUnserializableExpressions?: boolean;
+		/**
 		* Forces the compiler to always output content with a block-level wrapper
 		* (`<p>` or any block-level syntax your markdown already contains.)
 		*/
@@ -336,6 +362,7 @@ declare global {
 declare function parser(source: string, options?: MarkdownToJSX.Options): MarkdownToJSX.ASTNode[];
 declare function sanitizer(input: string): string | null;
 declare function slugify(str: string): string;
+declare const MarkdownContext: React2.Context<NativeOptions | undefined>;
 type NativeStyleKey = "text" | "paragraph" | "heading1" | "heading2" | "heading3" | "heading4" | "heading5" | "heading6" | "link" | "image" | "codeBlock" | "codeInline" | "blockquote" | "listOrdered" | "listUnordered" | "listItem" | "listItemBullet" | "listItemNumber" | "thematicBreak" | "table" | "tableHeader" | "tableHeaderCell" | "tableRow" | "tableCell" | "em" | "strong" | "del" | "gfmTask" | "div" | "section" | "article" | "aside" | "header" | "footer" | "main" | "nav" | "figure" | "figcaption" | "ul" | "ol" | "li" | "th" | "td";
 type NativeOptions = Omit<MarkdownToJSX.Options, "wrapperProps"> & {
 	onLinkPress?: (url: string, title?: string) => void;
@@ -345,8 +372,12 @@ type NativeOptions = Omit<MarkdownToJSX.Options, "wrapperProps"> & {
 };
 declare function astToNative(ast: MarkdownToJSX.ASTNode[], options?: NativeOptions): React2.ReactNode;
 declare function compiler(markdown?: string, options?: NativeOptions): React2.ReactNode;
+declare const MarkdownProvider: React2.FC<{
+	options?: NativeOptions;
+	children: React2.ReactNode;
+}>;
 declare const Markdown: React2.FC<Omit<ViewProps, "children"> & {
 	children?: string | null;
 	options?: NativeOptions;
 }>;
-export { slugify, sanitizer, parser, Markdown as default, compiler, astToNative, RuleType2 as RuleType, NativeStyleKey, NativeOptions, MarkdownToJSX, Markdown };
+export { slugify, sanitizer, parser, Markdown as default, compiler, astToNative, RuleType2 as RuleType, NativeStyleKey, NativeOptions, MarkdownToJSX, MarkdownProvider, MarkdownContext, Markdown };