markdown-to-jsx 9.3.4 → 9.4.0

package/dist/vue.d.cts

@@ -1,4 +1,4 @@
-import { h, VNode, Component } from "vue";
+import { h, VNode, Component, InjectionKey } from "vue";
 import * as React from "react";
 /**
 * Analogous to `node.type`. Please note that the values here may change at any time,
@@ -176,6 +176,7 @@ type RequireAtLeastOne<
 		attrs?: Record<string, any>;
 		children?: ASTNode[] | undefined;
 		noInnerParse?: Boolean;
+		rawAttrs?: string;
 		tag: string;
 		text?: string | undefined;
 	}
@@ -227,6 +228,31 @@ type RequireAtLeastOne<
 		*/
 		enforceAtxHeadings: boolean;
 		/**
+		* **⚠️ SECURITY WARNING: STRONGLY DISCOURAGED FOR USER INPUTS**
+		*
+		* When enabled, attempts to eval expressions in JSX props that cannot be serialized
+		* as JSON (functions, variables, complex expressions). This uses `eval()` which can
+		* execute arbitrary code.
+		*
+		* **ONLY use this option when:**
+		* - The markdown source is completely trusted (e.g., your own documentation)
+		* - You control all JSX components and their props
+		* - The content is NOT user-generated or user-editable
+		*
+		* **DO NOT use this option when:**
+		* - Processing user-submitted markdown
+		* - Rendering untrusted content
+		* - Building public-facing applications with user content
+		*
+		* Example unsafe input: `<Component onClick={() => fetch('/admin/delete-all')} />`
+		*
+		* When disabled (default), unserializable expressions remain as strings that can be
+		* safely inspected or handled on a case-by-case basis via custom renderRule logic.
+		*
+		* @default false
+		*/
+		evalUnserializableExpressions?: boolean;
+		/**
 		* Forces the compiler to always output content with a block-level wrapper
 		* (`<p>` or any block-level syntax your markdown already contains.)
 		*/
@@ -339,6 +365,7 @@ declare global {
 declare function parser(source: string, options?: MarkdownToJSX.Options): MarkdownToJSX.ASTNode[];
 declare function sanitizer(input: string): string | null;
 declare function slugify(str: string): string;
+declare const MarkdownOptionsKey: InjectionKey<VueOptions>;
 type VueChild = VNode | string;
 /**
 * Convert HTML attributes to Vue props
@@ -361,13 +388,17 @@ type VueOptions = Omit<MarkdownToJSX.Options, "createElement" | "wrapperProps" |
 };
 declare function astToJSX(ast: MarkdownToJSX.ASTNode[], options?: VueOptions): VNode | VNode[] | null;
 declare function compiler(markdown?: string, options?: VueOptions): VNode | VNode[] | null;
+declare const MarkdownProvider: Component<{
+	options?: VueOptions;
+	children?: unknown;
+}>;
 /**
 * A Vue component for easy markdown rendering. Feed the markdown content as a direct child
-* and the rest is taken care of automatically.
+* and the rest is taken care of automatically. Supports computed memoization for optimal performance.
 */
 declare const Markdown: Component<{
 	children?: string | null;
 	options?: VueOptions;
 	[key: string]: unknown;
 }>;
-export { slugify, sanitizer, parser, htmlAttrsToVueProps, Markdown as default, compiler, astToJSX, VueOverrides, VueOverride, VueOptions, RuleType2 as RuleType, MarkdownToJSX, Markdown };
+export { slugify, sanitizer, parser, htmlAttrsToVueProps, Markdown as default, compiler, astToJSX, VueOverrides, VueOverride, VueOptions, RuleType2 as RuleType, MarkdownToJSX, MarkdownProvider, MarkdownOptionsKey, Markdown };

package/dist/vue.d.ts

@@ -1,4 +1,4 @@
-import { h, VNode, Component } from "vue";
+import { h, VNode, Component, InjectionKey } from "vue";
 import * as React from "react";
 /**
 * Analogous to `node.type`. Please note that the values here may change at any time,
@@ -176,6 +176,7 @@ type RequireAtLeastOne<
 		attrs?: Record<string, any>;
 		children?: ASTNode[] | undefined;
 		noInnerParse?: Boolean;
+		rawAttrs?: string;
 		tag: string;
 		text?: string | undefined;
 	}
@@ -227,6 +228,31 @@ type RequireAtLeastOne<
 		*/
 		enforceAtxHeadings: boolean;
 		/**
+		* **⚠️ SECURITY WARNING: STRONGLY DISCOURAGED FOR USER INPUTS**
+		*
+		* When enabled, attempts to eval expressions in JSX props that cannot be serialized
+		* as JSON (functions, variables, complex expressions). This uses `eval()` which can
+		* execute arbitrary code.
+		*
+		* **ONLY use this option when:**
+		* - The markdown source is completely trusted (e.g., your own documentation)
+		* - You control all JSX components and their props
+		* - The content is NOT user-generated or user-editable
+		*
+		* **DO NOT use this option when:**
+		* - Processing user-submitted markdown
+		* - Rendering untrusted content
+		* - Building public-facing applications with user content
+		*
+		* Example unsafe input: `<Component onClick={() => fetch('/admin/delete-all')} />`
+		*
+		* When disabled (default), unserializable expressions remain as strings that can be
+		* safely inspected or handled on a case-by-case basis via custom renderRule logic.
+		*
+		* @default false
+		*/
+		evalUnserializableExpressions?: boolean;
+		/**
 		* Forces the compiler to always output content with a block-level wrapper
 		* (`<p>` or any block-level syntax your markdown already contains.)
 		*/
@@ -339,6 +365,7 @@ declare global {
 declare function parser(source: string, options?: MarkdownToJSX.Options): MarkdownToJSX.ASTNode[];
 declare function sanitizer(input: string): string | null;
 declare function slugify(str: string): string;
+declare const MarkdownOptionsKey: InjectionKey<VueOptions>;
 type VueChild = VNode | string;
 /**
 * Convert HTML attributes to Vue props
@@ -361,13 +388,17 @@ type VueOptions = Omit<MarkdownToJSX.Options, "createElement" | "wrapperProps" |
 };
 declare function astToJSX(ast: MarkdownToJSX.ASTNode[], options?: VueOptions): VNode | VNode[] | null;
 declare function compiler(markdown?: string, options?: VueOptions): VNode | VNode[] | null;
+declare const MarkdownProvider: Component<{
+	options?: VueOptions;
+	children?: unknown;
+}>;
 /**
 * A Vue component for easy markdown rendering. Feed the markdown content as a direct child
-* and the rest is taken care of automatically.
+* and the rest is taken care of automatically. Supports computed memoization for optimal performance.
 */
 declare const Markdown: Component<{
 	children?: string | null;
 	options?: VueOptions;
 	[key: string]: unknown;
 }>;
-export { slugify, sanitizer, parser, htmlAttrsToVueProps, Markdown as default, compiler, astToJSX, VueOverrides, VueOverride, VueOptions, RuleType2 as RuleType, MarkdownToJSX, Markdown };
+export { slugify, sanitizer, parser, htmlAttrsToVueProps, Markdown as default, compiler, astToJSX, VueOverrides, VueOverride, VueOptions, RuleType2 as RuleType, MarkdownToJSX, MarkdownProvider, MarkdownOptionsKey, Markdown };