mashlib 2.1.3-e1941a63 → 2.1.3-e43a61b8

package/dist/mashlib.js

@@ -18207,7 +18207,7 @@ if (true) {
 (module) {
 
 "use strict";
-/*! @license DOMPurify 3.3.1 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.3.1/LICENSE */
+/*! @license DOMPurify 3.3.3 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.3.3/LICENSE */
 
 
 
@@ -18516,7 +18516,7 @@ const _createHooksMap = function _createHooksMap() {
 function createDOMPurify() {
   let window = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : getGlobal();
   const DOMPurify = root => createDOMPurify(root);
-  DOMPurify.version = '3.3.1';
+  DOMPurify.version = '3.3.3';
   DOMPurify.removed = [];
   if (!window || !window.document || window.document.nodeType !== NODE_TYPE.document || !window.Element) {
     // Not running in a browser, provide a factory function
@@ -18811,7 +18811,7 @@ function createDOMPurify() {
     /* Parse profile info */
     if (USE_PROFILES) {
       ALLOWED_TAGS = addToSet({}, text);
-      ALLOWED_ATTR = [];
+      ALLOWED_ATTR = create(null);
       if (USE_PROFILES.html === true) {
         addToSet(ALLOWED_TAGS, html$1);
         addToSet(ALLOWED_ATTR, html);
@@ -18832,6 +18832,13 @@ function createDOMPurify() {
         addToSet(ALLOWED_ATTR, xml);
       }
     }
+    /* Prevent function-based ADD_ATTR / ADD_TAGS from leaking across calls */
+    if (!objectHasOwnProperty(cfg, 'ADD_TAGS')) {
+      EXTRA_ELEMENT_HANDLING.tagCheck = null;
+    }
+    if (!objectHasOwnProperty(cfg, 'ADD_ATTR')) {
+      EXTRA_ELEMENT_HANDLING.attributeCheck = null;
+    }
     /* Merge configuration parameters */
     if (cfg.ADD_TAGS) {
       if (typeof cfg.ADD_TAGS === 'function') {
@@ -19229,6 +19236,10 @@ function createDOMPurify() {
    */
   // eslint-disable-next-line complexity
   const _isValidAttribute = function _isValidAttribute(lcTag, lcName, value) {
+    /* FORBID_ATTR must always win, even if ADD_ATTR predicate would allow it */
+    if (FORBID_ATTR[lcName]) {
+      return false;
+    }
     /* Make sure attribute cannot clobber */
     if (SANITIZE_DOM && (lcName === 'id' || lcName === 'name') && (value in document || value in formElement)) {
       return false;
@@ -19321,7 +19332,7 @@ function createDOMPurify() {
         value = SANITIZE_NAMED_PROPS_PREFIX + value;
       }
       /* Work around a security issue with comments inside attributes */
-      if (SAFE_FOR_XML && regExpTest(/((--!?|])>)|<\/(style|title|textarea)/i, value)) {
+      if (SAFE_FOR_XML && regExpTest(/((--!?|])>)|<\/(style|script|title|xmp|textarea|noscript|iframe|noembed|noframes)/i, value)) {
         _removeAttribute(name, currentNode);
         continue;
       }
@@ -114365,32 +114376,32 @@ var dist = __webpack_require__(7523);
 var solid_logic_esm = __webpack_require__(9332);
 ;// ./src/versionInfo.ts
 /* harmony default export */ const versionInfo = ({
-  buildTime: '2026-02-23T18:38:59Z',
-  commit: 'e1941a6329a0d2666cfebf1fca9a73fdd04fd20e',
+  buildTime: '2026-03-16T05:24:35Z',
+  commit: 'e43a61b88f8e7053829c9665ac0c6d2fd5103352',
   npmInfo: {
     'mashlib': '2.1.3',
     'npm': '10.8.2',
-    'node': '20.20.0',
-    'acorn': '8.15.0',
+    'node': '20.20.1',
+    'acorn': '8.16.0',
     'ada': '2.9.2',
     'ares': '1.34.6',
     'brotli': '1.1.0',
-    'cjs_module_lexer': '2.1.0',
-    'cldr': '47.0',
-    'icu': '77.1',
-    'llhttp': '9.3.0',
+    'cjs_module_lexer': '2.2.0',
+    'cldr': '48.0',
+    'icu': '78.2',
+    'llhttp': '9.3.1',
     'modules': '115',
     'napi': '9',
     'nghttp2': '1.61.0',
-    'openssl': '3.0.17',
+    'openssl': '3.0.19',
     'simdutf': '6.4.2',
-    'tz': '2025b',
+    'tz': '2025c',
     'undici': '6.23.0',
-    'unicode': '16.0',
+    'unicode': '17.0',
     'uv': '1.46.0',
     'uvwasi': '0.0.23',
-    'v8': '11.3.244.8-node.33',
-    'zlib': '1.3.1-470d3a2'
+    'v8': '11.3.244.8-node.34',
+    'zlib': '1.3.1-e00f703'
   }
 });
 ;// ./src/styles/mash.css