ol 10.5.1-dev.1743585027518 → 10.5.1-dev.1743841721224

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/control/Attribution.d.ts +10 -2
  2. package/control/Attribution.d.ts.map +1 -1
  3. package/control/Attribution.js +5 -1
  4. package/dist/ol.js +1 -1
  5. package/dist/ol.js.map +1 -1
  6. package/interaction/Snap.js +1 -1
  7. package/package.json +1 -1
  8. package/util.js +1 -1
package/control/Attribution.d.ts CHANGED
@@ -55,7 +55,11 @@ export type Options = {
55
55
  render?: ((arg0: import("../MapEvent.js").default) => void) | undefined;
56
56
  /**
57
57
  * Optional attribution(s) that will always be
58
- * displayed regardless of the layers rendered
58
+ * displayed regardless of the layers rendered.
59
+ * **Caution:** Attributions are rendered dynamically using `innerHTML`, which can lead to potential
60
+ * [**XSS (Cross-Site Scripting)**](https://en.wikipedia.org/wiki/Cross-site_scripting) vulnerabilities.
61
+ * Use this feature only for trusted content
62
+ * or ensure that the content is properly sanitized before inserting it.
59
63
  */
60
64
  attributions?: string | Array<string> | undefined;
61
65
  };
@@ -85,7 +89,11 @@ export type Options = {
85
89
  * the control should be re-rendered. This is called in a `requestAnimationFrame`
86
90
  * callback.
87
91
  * @property {string|Array<string>|undefined} [attributions] Optional attribution(s) that will always be
88
- * displayed regardless of the layers rendered
92
+ * displayed regardless of the layers rendered.
93
+ * **Caution:** Attributions are rendered dynamically using `innerHTML`, which can lead to potential
94
+ * [**XSS (Cross-Site Scripting)**](https://en.wikipedia.org/wiki/Cross-site_scripting) vulnerabilities.
95
+ * Use this feature only for trusted content
96
+ * or ensure that the content is properly sanitized before inserting it.
89
97
  */
90
98
  /**
91
99
  * @classdesc
package/control/Attribution.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"Attribution.d.ts","sourceRoot":"","sources":["Attribution.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAgCuB,OAAO,gBAAgB,EAAE,OAAO,KAAE,IAAI;;;;;mBAG/C,MAAM,GAAC,KAAK,CAAC,MAAM,CAAC,GAAC,SAAS;;AAzB5C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;;;;;GAQG;AACH;IACE;;OAEG;IACH,sBAFW,OAAO,EA8IjB;IAnIC;;;OAGG;IACH,mBAA8C;IAE9C;;;OAGG;IACH,mBAC4D;IAE5D;;;OAGG;IACH,uBAAqC;IAErC;;;OAGG;IACH,6BAA6D;IAE7D;;;OAGG;IACH,qBACgE;IAMhE;;;OAGG;IACH,sBAAyC;IAsBvC;;;OAGG;IACH,uBAAoD;IAUpD;;;OAGG;IACH,eAA4C;IAU9C;;;OAGG;IACH,sBAAqD;IAyBrD;;;;OAIG;IACH,8BAA+B;IAE/B;;;OAGG;IACH,yBAA4B;IAG9B;;;;;OAKG;IACH,mCAkBC;IAED;;;OAGG;IACH,uBAmCC;IAED;;;OAGG;IACH,qBAIC;IAED;;OAEG;IACH,sBASC;IAED;;;;OAIG;IACH,kBAHY,OAAO,CAKlB;IAED;;;;OAIG;IACH,4BAHW,OAAO,QAYjB;IAED;;;;;;OAMG;IACH,wBAHW,OAAO,QASjB;IAED;;;;;OAKG;IACH,gBAHY,OAAO,CAKlB;CAUF;oBA/UmB,cAAc"}
1
+ {"version":3,"file":"Attribution.d.ts","sourceRoot":"","sources":["Attribution.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAgCuB,OAAO,gBAAgB,EAAE,OAAO,KAAE,IAAI;;;;;;;;;mBAG/C,MAAM,GAAC,KAAK,CAAC,MAAM,CAAC,GAAC,SAAS;;AAzB5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH;;;;;;;;GAQG;AACH;IACE;;OAEG;IACH,sBAFW,OAAO,EA8IjB;IAnIC;;;OAGG;IACH,mBAA8C;IAE9C;;;OAGG;IACH,mBAC4D;IAE5D;;;OAGG;IACH,uBAAqC;IAErC;;;OAGG;IACH,6BAA6D;IAE7D;;;OAGG;IACH,qBACgE;IAMhE;;;OAGG;IACH,sBAAyC;IAsBvC;;;OAGG;IACH,uBAAoD;IAUpD;;;OAGG;IACH,eAA4C;IAU9C;;;OAGG;IACH,sBAAqD;IAyBrD;;;;OAIG;IACH,8BAA+B;IAE/B;;;OAGG;IACH,yBAA4B;IAG9B;;;;;OAKG;IACH,mCAkBC;IAED;;;OAGG;IACH,uBAmCC;IAED;;;OAGG;IACH,qBAIC;IAED;;OAEG;IACH,sBASC;IAED;;;;OAIG;IACH,kBAHY,OAAO,CAKlB;IAED;;;;OAIG;IACH,4BAHW,OAAO,QAYjB;IAED;;;;;;OAMG;IACH,wBAHW,OAAO,QASjB;IAED;;;;;OAKG;IACH,gBAHY,OAAO,CAKlB;CAUF;oBAnVmB,cAAc"}
package/control/Attribution.js CHANGED
@@ -34,7 +34,11 @@ import Control from './Control.js';
34
34
  * the control should be re-rendered. This is called in a `requestAnimationFrame`
35
35
  * callback.
36
36
  * @property {string|Array<string>|undefined} [attributions] Optional attribution(s) that will always be
37
- * displayed regardless of the layers rendered
37
+ * displayed regardless of the layers rendered.
38
+ * **Caution:** Attributions are rendered dynamically using `innerHTML`, which can lead to potential
39
+ * [**XSS (Cross-Site Scripting)**](https://en.wikipedia.org/wiki/Cross-site_scripting) vulnerabilities.
40
+ * Use this feature only for trusted content
41
+ * or ensure that the content is properly sanitized before inserting it.
38
42
  */
39
43
 
40
44
  /**