ooxml-core 1.16.0 → 1.16.1

package/dist/teams/index.mjs

@@ -267,9 +267,23 @@ function checkXmlLimits(xml, label2, limits = {}) {
   const maxNodes = limits.maxNodes ?? DEFAULT_XML_LIMITS.maxNodes;
   let depth = 0;
   let nodes = 0;
-  for (const match2 of xml.matchAll(MARKUP_RE)) {
-    const [, closing, name2, selfClosing] = match2;
-    if (name2 === void 0) continue;
+  let at = xml.indexOf("<");
+  while (at !== -1) {
+    const skip = MARKUP_SKIPS.find(([open]) => xml.startsWith(open, at));
+    if (skip) {
+      const end = xml.indexOf(skip[1], at + skip[0].length);
+      if (end === -1) return;
+      at = xml.indexOf("<", end + skip[1].length);
+      continue;
+    }
+    TAG_RE.lastIndex = at;
+    const match2 = TAG_RE.exec(xml);
+    if (!match2) {
+      at = xml.indexOf("<", at + 1);
+      continue;
+    }
+    const [, closing, , selfClosing] = match2;
+    at = xml.indexOf("<", at + match2[0].length);
     if (closing) {
       depth--;
       continue;
@@ -310,7 +324,7 @@ function named(element2, local, ns, lenient = true) {
 function attr(element2, local, ns, prefix) {
   return element2?.getAttributeNS(ns, local) ?? element2?.getAttribute(`${prefix}:${local}`) ?? void 0;
 }
-var DEFAULT_XML_LIMITS, MARKUP_RE, buildXml, isElement, elements, children, first, relAttr;
+var DEFAULT_XML_LIMITS, TAG_RE, MARKUP_SKIPS, buildXml, isElement, elements, children, first, relAttr;
 var init_xml = __esm({
   "xml/xml.ts"() {
     init_namespaces();
@@ -318,7 +332,12 @@ var init_xml = __esm({
       maxDepth: 512,
       maxNodes: 5e6
     };
-    MARKUP_RE = /<!--[\s\S]*?-->|<!\[CDATA\[[\s\S]*?\]\]>|<\?[\s\S]*?\?>|<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/g;
+    TAG_RE = /<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/y;
+    MARKUP_SKIPS = [
+      ["<!--", "-->"],
+      ["<![CDATA[", "]]>"],
+      ["<?", "?>"]
+    ];
     buildXml = (node2) => new XMLSerializer().serializeToString(node2);
     isElement = (node2) => node2.nodeType === 1;
     elements = (parent) => Array.from(parent.childNodes).filter(isElement);
@@ -22975,7 +22994,9 @@ function pivotTableXml(source2, cacheId, cache3) {
 }
 function dateFilterXml(pivot, filter2) {
   const x15 = "http://schemas.microsoft.com/office/spreadsheetml/2010/11/main";
-  const id = Number(/<filter [^>]*\bid="(\d+)"/.exec(pivot.sourceXml ?? "")?.[1] ?? 1);
+  const id = Number(
+    /\bid="(\d+)"/.exec(/<filter\s[^>]*>/.exec(pivot.sourceXml ?? "")?.[0] ?? "")?.[1] ?? 1
+  );
   return `<filters count="1"><filter${attrs({ fld: pivot.fields.indexOf(filter2.field), type: "dateBetween", evalOrder: -1, id, name: filter2.field })}><autoFilter ref="A1"><filterColumn colId="0"><customFilters and="1"><customFilter operator="greaterThanOrEqual" val="${Math.floor(filter2.start)}"/><customFilter operator="lessThanOrEqual" val="${Math.floor(filter2.end)}"/></customFilters></filterColumn></autoFilter><extLst><ext uri="{0605FD5F-26C8-4aeb-8148-2DB25E43C511}" xmlns:x15="${x15}"><x15:pivotFilter useWholeDay="1"/></ext></extLst></filter></filters>`;
 }
 var X14;
@@ -25144,10 +25165,18 @@ function assignUserColor(seed, palette = CURSOR_PALETTE) {
   for (let i = 0; i < text2.length; i++) hash = hash * 31 + text2.charCodeAt(i) | 0;
   return palette[Math.abs(hash) % palette.length] ?? DEFAULT_COLOR;
 }
+function randomToken() {
+  const cryptoApi = globalThis.crypto;
+  if (cryptoApi?.getRandomValues) {
+    return cryptoApi.getRandomValues(new Uint32Array(2)).reduce((s, n) => s + n.toString(36), "").slice(0, 8);
+  }
+  return (fallbackCounter++).toString(36).padStart(8, "0");
+}
+var fallbackCounter = 0;
 function createClientId() {
   const cryptoApi = globalThis.crypto;
   if (cryptoApi?.randomUUID) return cryptoApi.randomUUID();
-  return `c${Date.now().toString(36)}${Math.random().toString(36).slice(2, 10)}`;
+  return `c${Date.now().toString(36)}${randomToken()}`;
 }
 function clientKey(clientId) {
   if (!isValidId(clientId)) throw new Error("Invalid collaboration client ID");
@@ -26387,7 +26416,7 @@ function meetingToIcs(meeting, options = {}) {
   return `${lines.flatMap(icsFold).join("\r\n")}\r
 `;
 }
-var icsFileName = (meeting) => `${meeting.title.replace(/[^\w.-]+/gu, "-").replace(/^-+|-+$/gu, "").slice(0, 60) || "meeting"}.ics`;
+var icsFileName = (meeting) => `${meeting.title.replace(/[^\w.-]+/gu, "-").replace(/^-|-$/gu, "").slice(0, 60) || "meeting"}.ics`;
 var MAX_EXCEPTIONS = 400;
 var MAX_SPAN = 24 * 36e5;
 var time = (v) => typeof v === "number" && Number.isFinite(v) && v > 0 && v < 864e13 ? Math.floor(v) : null;
@@ -27723,7 +27752,7 @@ var isEnvelope = (value) => {
 function createBroadcastTransport(options) {
   const roomId = validateRoomId(options.roomId);
   const Channel = options.BroadcastChannel ?? globalThis.BroadcastChannel;
-  const self = Math.random().toString(36).slice(2) + Date.now().toString(36);
+  const self = randomToken() + Date.now().toString(36);
   let channel = null;
   let handlers = null;
   const close = () => {

package/dist/visio/index.cjs

@@ -80,15 +80,34 @@ var DEFAULT_XML_LIMITS = {
   maxDepth: 512,
   maxNodes: 5e6
 };
-var MARKUP_RE = /<!--[\s\S]*?-->|<!\[CDATA\[[\s\S]*?\]\]>|<\?[\s\S]*?\?>|<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/g;
+var TAG_RE = /<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/y;
+var MARKUP_SKIPS = [
+  ["<!--", "-->"],
+  ["<![CDATA[", "]]>"],
+  ["<?", "?>"]
+];
 function checkXmlLimits(xml, label, limits = {}) {
   const maxDepth = limits.maxDepth ?? DEFAULT_XML_LIMITS.maxDepth;
   const maxNodes = limits.maxNodes ?? DEFAULT_XML_LIMITS.maxNodes;
   let depth = 0;
   let nodes = 0;
-  for (const match of xml.matchAll(MARKUP_RE)) {
-    const [, closing, name3, selfClosing] = match;
-    if (name3 === void 0) continue;
+  let at2 = xml.indexOf("<");
+  while (at2 !== -1) {
+    const skip = MARKUP_SKIPS.find(([open]) => xml.startsWith(open, at2));
+    if (skip) {
+      const end = xml.indexOf(skip[1], at2 + skip[0].length);
+      if (end === -1) return;
+      at2 = xml.indexOf("<", end + skip[1].length);
+      continue;
+    }
+    TAG_RE.lastIndex = at2;
+    const match = TAG_RE.exec(xml);
+    if (!match) {
+      at2 = xml.indexOf("<", at2 + 1);
+      continue;
+    }
+    const [, closing, , selfClosing] = match;
+    at2 = xml.indexOf("<", at2 + match[0].length);
     if (closing) {
       depth--;
       continue;

package/dist/visio/index.mjs

@@ -74,15 +74,34 @@ var DEFAULT_XML_LIMITS = {
   maxDepth: 512,
   maxNodes: 5e6
 };
-var MARKUP_RE = /<!--[\s\S]*?-->|<!\[CDATA\[[\s\S]*?\]\]>|<\?[\s\S]*?\?>|<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/g;
+var TAG_RE = /<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/y;
+var MARKUP_SKIPS = [
+  ["<!--", "-->"],
+  ["<![CDATA[", "]]>"],
+  ["<?", "?>"]
+];
 function checkXmlLimits(xml, label, limits = {}) {
   const maxDepth = limits.maxDepth ?? DEFAULT_XML_LIMITS.maxDepth;
   const maxNodes = limits.maxNodes ?? DEFAULT_XML_LIMITS.maxNodes;
   let depth = 0;
   let nodes = 0;
-  for (const match of xml.matchAll(MARKUP_RE)) {
-    const [, closing, name3, selfClosing] = match;
-    if (name3 === void 0) continue;
+  let at2 = xml.indexOf("<");
+  while (at2 !== -1) {
+    const skip = MARKUP_SKIPS.find(([open]) => xml.startsWith(open, at2));
+    if (skip) {
+      const end = xml.indexOf(skip[1], at2 + skip[0].length);
+      if (end === -1) return;
+      at2 = xml.indexOf("<", end + skip[1].length);
+      continue;
+    }
+    TAG_RE.lastIndex = at2;
+    const match = TAG_RE.exec(xml);
+    if (!match) {
+      at2 = xml.indexOf("<", at2 + 1);
+      continue;
+    }
+    const [, closing, , selfClosing] = match;
+    at2 = xml.indexOf("<", at2 + match[0].length);
     if (closing) {
       depth--;
       continue;

package/dist/visio/ui/index.cjs

@@ -1366,15 +1366,34 @@ var DEFAULT_XML_LIMITS = {
   maxDepth: 512,
   maxNodes: 5e6
 };
-var MARKUP_RE = /<!--[\s\S]*?-->|<!\[CDATA\[[\s\S]*?\]\]>|<\?[\s\S]*?\?>|<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/g;
+var TAG_RE = /<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/y;
+var MARKUP_SKIPS = [
+  ["<!--", "-->"],
+  ["<![CDATA[", "]]>"],
+  ["<?", "?>"]
+];
 function checkXmlLimits(xml, label2, limits = {}) {
   const maxDepth = limits.maxDepth ?? DEFAULT_XML_LIMITS.maxDepth;
   const maxNodes = limits.maxNodes ?? DEFAULT_XML_LIMITS.maxNodes;
   let depth = 0;
   let nodes = 0;
-  for (const match of xml.matchAll(MARKUP_RE)) {
-    const [, closing, name3, selfClosing] = match;
-    if (name3 === void 0) continue;
+  let at2 = xml.indexOf("<");
+  while (at2 !== -1) {
+    const skip = MARKUP_SKIPS.find(([open]) => xml.startsWith(open, at2));
+    if (skip) {
+      const end = xml.indexOf(skip[1], at2 + skip[0].length);
+      if (end === -1) return;
+      at2 = xml.indexOf("<", end + skip[1].length);
+      continue;
+    }
+    TAG_RE.lastIndex = at2;
+    const match = TAG_RE.exec(xml);
+    if (!match) {
+      at2 = xml.indexOf("<", at2 + 1);
+      continue;
+    }
+    const [, closing, , selfClosing] = match;
+    at2 = xml.indexOf("<", at2 + match[0].length);
     if (closing) {
       depth--;
       continue;

package/dist/visio/ui/index.mjs

@@ -1360,15 +1360,34 @@ var DEFAULT_XML_LIMITS = {
   maxDepth: 512,
   maxNodes: 5e6
 };
-var MARKUP_RE = /<!--[\s\S]*?-->|<!\[CDATA\[[\s\S]*?\]\]>|<\?[\s\S]*?\?>|<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/g;
+var TAG_RE = /<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/y;
+var MARKUP_SKIPS = [
+  ["<!--", "-->"],
+  ["<![CDATA[", "]]>"],
+  ["<?", "?>"]
+];
 function checkXmlLimits(xml, label2, limits = {}) {
   const maxDepth = limits.maxDepth ?? DEFAULT_XML_LIMITS.maxDepth;
   const maxNodes = limits.maxNodes ?? DEFAULT_XML_LIMITS.maxNodes;
   let depth = 0;
   let nodes = 0;
-  for (const match of xml.matchAll(MARKUP_RE)) {
-    const [, closing, name3, selfClosing] = match;
-    if (name3 === void 0) continue;
+  let at2 = xml.indexOf("<");
+  while (at2 !== -1) {
+    const skip = MARKUP_SKIPS.find(([open]) => xml.startsWith(open, at2));
+    if (skip) {
+      const end = xml.indexOf(skip[1], at2 + skip[0].length);
+      if (end === -1) return;
+      at2 = xml.indexOf("<", end + skip[1].length);
+      continue;
+    }
+    TAG_RE.lastIndex = at2;
+    const match = TAG_RE.exec(xml);
+    if (!match) {
+      at2 = xml.indexOf("<", at2 + 1);
+      continue;
+    }
+    const [, closing, , selfClosing] = match;
+    at2 = xml.indexOf("<", at2 + match[0].length);
     if (closing) {
       depth--;
       continue;

package/dist/xlsx/edit/slicers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slicers.d.ts","sourceRoot":"","sources":["../../../xlsx/edit/slicers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAMX,QAAQ,EAER,MAAM,UAAU,CAAC;AAKlB,OAAO,EAAE,KAAK,WAAW,EAAW,MAAM,WAAW,CAAC;AAmBtD;;;GAGG;AACH,wBAAgB,kBAAkB,CACjC,GAAG,EAAE,WAAW,EAChB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAC5B,IAAI,CAuCN;AAED,iEAAiE;AACjE,eAAO,MAAM,gBAAgB,aAAc,QAAQ,aAAa,MAAM,KAAG,MAAM,EAGrD,CAAC;AAE3B,MAAM,WAAW,WAAW;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC;IACvC,UAAU,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,qGAAqG;AACrG,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAqCrF;AAaD,MAAM,MAAM,eAAe,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAUnD,4FAA4F;AAC5F,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,MAAM,CAmGtF;AAED,+FAA+F;AAC/F,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAUjE"}
+{"version":3,"file":"slicers.d.ts","sourceRoot":"","sources":["../../../xlsx/edit/slicers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAMX,QAAQ,EAER,MAAM,UAAU,CAAC;AAKlB,OAAO,EAAE,KAAK,WAAW,EAAW,MAAM,WAAW,CAAC;AAmBtD;;;GAGG;AACH,wBAAgB,kBAAkB,CACjC,GAAG,EAAE,WAAW,EAChB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAC5B,IAAI,CAuCN;AAED,iEAAiE;AACjE,eAAO,MAAM,gBAAgB,aAAc,QAAQ,aAAa,MAAM,KAAG,MAAM,EAGrD,CAAC;AAE3B,MAAM,WAAW,WAAW;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC;IACvC,UAAU,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,qGAAqG;AACrG,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAqCrF;AAaD,MAAM,MAAM,eAAe,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAUnD,4FAA4F;AAC5F,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,MAAM,CAsGtF;AAED,+FAA+F;AAC/F,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAUjE"}

package/dist/xlsx/edit/timelines.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"timelines.d.ts","sourceRoot":"","sources":["../../../xlsx/edit/timelines.ts"],"names":[],"mappings":"AAMA,OAAO,EAAkC,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEpG,OAAO,EAAE,KAAK,WAAW,EAAW,MAAM,WAAW,CAAC;AAWtD;;;GAGG;AACH,wBAAgB,oBAAoB,CACnC,GAAG,EAAE,WAAW,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,iBAAiB,GAAG,IAAI,GACjC,IAAI,CAiCN;AAED,MAAM,WAAW,aAAa;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAmCzF;AAED,wFAAwF;AACxF,wBAAgB,cAAc,CAC7B,GAAG,EAAE,WAAW,EAChB,CAAC,EAAE,MAAM,EACT,GAAG,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC,MAAM,CAyGR;AAED,2FAA2F;AAC3F,wBAAgB,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAgBnE"}
+{"version":3,"file":"timelines.d.ts","sourceRoot":"","sources":["../../../xlsx/edit/timelines.ts"],"names":[],"mappings":"AAMA,OAAO,EAAkC,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEpG,OAAO,EAAE,KAAK,WAAW,EAAW,MAAM,WAAW,CAAC;AAWtD;;;GAGG;AACH,wBAAgB,oBAAoB,CACnC,GAAG,EAAE,WAAW,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,iBAAiB,GAAG,IAAI,GACjC,IAAI,CAiCN;AAED,MAAM,WAAW,aAAa;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAmCzF;AAED,wFAAwF;AACxF,wBAAgB,cAAc,CAC7B,GAAG,EAAE,WAAW,EAChB,CAAC,EAAE,MAAM,EACT,GAAG,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC,MAAM,CA4GR;AAED,2FAA2F;AAC3F,wBAAgB,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAgBnE"}

package/dist/xlsx/index.cjs

@@ -11736,15 +11736,34 @@ var DEFAULT_XML_LIMITS = {
   maxDepth: 512,
   maxNodes: 5e6
 };
-var MARKUP_RE = /<!--[\s\S]*?-->|<!\[CDATA\[[\s\S]*?\]\]>|<\?[\s\S]*?\?>|<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/g;
+var TAG_RE = /<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/y;
+var MARKUP_SKIPS = [
+  ["<!--", "-->"],
+  ["<![CDATA[", "]]>"],
+  ["<?", "?>"]
+];
 function checkXmlLimits(xml, label2, limits = {}) {
   const maxDepth = limits.maxDepth ?? DEFAULT_XML_LIMITS.maxDepth;
   const maxNodes = limits.maxNodes ?? DEFAULT_XML_LIMITS.maxNodes;
   let depth = 0;
   let nodes = 0;
-  for (const match2 of xml.matchAll(MARKUP_RE)) {
-    const [, closing, name, selfClosing] = match2;
-    if (name === void 0) continue;
+  let at = xml.indexOf("<");
+  while (at !== -1) {
+    const skip = MARKUP_SKIPS.find(([open]) => xml.startsWith(open, at));
+    if (skip) {
+      const end = xml.indexOf(skip[1], at + skip[0].length);
+      if (end === -1) return;
+      at = xml.indexOf("<", end + skip[1].length);
+      continue;
+    }
+    TAG_RE.lastIndex = at;
+    const match2 = TAG_RE.exec(xml);
+    if (!match2) {
+      at = xml.indexOf("<", at + 1);
+      continue;
+    }
+    const [, closing, , selfClosing] = match2;
+    at = xml.indexOf("<", at + match2[0].length);
     if (closing) {
       depth--;
       continue;
@@ -29519,7 +29538,9 @@ function pivotTableXml(source2, cacheId, cache3) {
 }
 function dateFilterXml(pivot, filter2) {
   const x15 = "http://schemas.microsoft.com/office/spreadsheetml/2010/11/main";
-  const id = Number(/<filter [^>]*\bid="(\d+)"/.exec(pivot.sourceXml ?? "")?.[1] ?? 1);
+  const id = Number(
+    /\bid="(\d+)"/.exec(/<filter\s[^>]*>/.exec(pivot.sourceXml ?? "")?.[0] ?? "")?.[1] ?? 1
+  );
   return `<filters count="1"><filter${attrs({ fld: pivot.fields.indexOf(filter2.field), type: "dateBetween", evalOrder: -1, id, name: filter2.field })}><autoFilter ref="A1"><filterColumn colId="0"><customFilters and="1"><customFilter operator="greaterThanOrEqual" val="${Math.floor(filter2.start)}"/><customFilter operator="lessThanOrEqual" val="${Math.floor(filter2.end)}"/></customFilters></filterColumn></autoFilter><extLst><ext uri="{0605FD5F-26C8-4aeb-8148-2DB25E43C511}" xmlns:x15="${x15}"><x15:pivotFilter useWholeDay="1"/></ext></extLst></filter></filters>`;
 }
 
@@ -34378,7 +34399,7 @@ function addScenario(ctx, s, draft) {
 }
 function editScenario(ctx, s, index3, draft) {
   const sheet = sheetAt(ctx.workbook, s);
-  const existing = scenariosOf(sheet)[index3];
+  const existing = Number.isInteger(index3) ? scenariosOf(sheet)[index3] : void 0;
   if (!existing) throw new ScenarioError("missing");
   if (existing.locked && sheet.protection) throw new ScenarioError("locked");
   const name = checkName(sheet, draft.name, index3);
@@ -34389,7 +34410,7 @@ function editScenario(ctx, s, index3, draft) {
 }
 function deleteScenario(ctx, s, index3) {
   const sheet = sheetAt(ctx.workbook, s);
-  const existing = scenariosOf(sheet)[index3];
+  const existing = Number.isInteger(index3) ? scenariosOf(sheet)[index3] : void 0;
   if (!existing) throw new ScenarioError("missing");
   if (existing.locked && sheet.protection) throw new ScenarioError("locked");
   ctx.run("Delete scenario", "view", PARTS(s), () => {
@@ -35188,7 +35209,10 @@ function insertTimeline(ctx, s, ref) {
   const id = Math.max(
     1,
     ...sheet.drawings.flatMap(
-      (d) => "sourceXml" in d && d.sourceXml ? [...d.sourceXml.matchAll(/cNvPr[^>]*\sid="(\d+)"/g)].map((m) => Number(m[1])) : []
+      (d) => "sourceXml" in d && d.sourceXml ? [...d.sourceXml.matchAll(/<[\w:]*cNvPr\b[^>]*>/g)].flatMap((m) => {
+        const id2 = /\sid="(\d+)"/.exec(m[0])?.[1];
+        return id2 ? [Number(id2)] : [];
+      }) : []
     )
   ) + 1;
   ctx.run(
@@ -35726,7 +35750,10 @@ function insertSlicer(ctx, s, ref) {
   const id = Math.max(
     1,
     ...sheet.drawings.flatMap(
-      (d) => "sourceXml" in d && d.sourceXml ? [...d.sourceXml.matchAll(/cNvPr[^>]*\sid="(\d+)"/g)].map((m) => Number(m[1])) : []
+      (d) => "sourceXml" in d && d.sourceXml ? [...d.sourceXml.matchAll(/<[\w:]*cNvPr\b[^>]*>/g)].flatMap((m) => {
+        const id2 = /\sid="(\d+)"/.exec(m[0])?.[1];
+        return id2 ? [Number(id2)] : [];
+      }) : []
     )
   ) + 1;
   ctx.run(

package/dist/xlsx/index.mjs

@@ -11730,15 +11730,34 @@ var DEFAULT_XML_LIMITS = {
   maxDepth: 512,
   maxNodes: 5e6
 };
-var MARKUP_RE = /<!--[\s\S]*?-->|<!\[CDATA\[[\s\S]*?\]\]>|<\?[\s\S]*?\?>|<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/g;
+var TAG_RE = /<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/y;
+var MARKUP_SKIPS = [
+  ["<!--", "-->"],
+  ["<![CDATA[", "]]>"],
+  ["<?", "?>"]
+];
 function checkXmlLimits(xml, label2, limits = {}) {
   const maxDepth = limits.maxDepth ?? DEFAULT_XML_LIMITS.maxDepth;
   const maxNodes = limits.maxNodes ?? DEFAULT_XML_LIMITS.maxNodes;
   let depth = 0;
   let nodes = 0;
-  for (const match2 of xml.matchAll(MARKUP_RE)) {
-    const [, closing, name, selfClosing] = match2;
-    if (name === void 0) continue;
+  let at = xml.indexOf("<");
+  while (at !== -1) {
+    const skip = MARKUP_SKIPS.find(([open]) => xml.startsWith(open, at));
+    if (skip) {
+      const end = xml.indexOf(skip[1], at + skip[0].length);
+      if (end === -1) return;
+      at = xml.indexOf("<", end + skip[1].length);
+      continue;
+    }
+    TAG_RE.lastIndex = at;
+    const match2 = TAG_RE.exec(xml);
+    if (!match2) {
+      at = xml.indexOf("<", at + 1);
+      continue;
+    }
+    const [, closing, , selfClosing] = match2;
+    at = xml.indexOf("<", at + match2[0].length);
     if (closing) {
       depth--;
       continue;
@@ -29513,7 +29532,9 @@ function pivotTableXml(source2, cacheId, cache3) {
 }
 function dateFilterXml(pivot, filter2) {
   const x15 = "http://schemas.microsoft.com/office/spreadsheetml/2010/11/main";
-  const id = Number(/<filter [^>]*\bid="(\d+)"/.exec(pivot.sourceXml ?? "")?.[1] ?? 1);
+  const id = Number(
+    /\bid="(\d+)"/.exec(/<filter\s[^>]*>/.exec(pivot.sourceXml ?? "")?.[0] ?? "")?.[1] ?? 1
+  );
   return `<filters count="1"><filter${attrs({ fld: pivot.fields.indexOf(filter2.field), type: "dateBetween", evalOrder: -1, id, name: filter2.field })}><autoFilter ref="A1"><filterColumn colId="0"><customFilters and="1"><customFilter operator="greaterThanOrEqual" val="${Math.floor(filter2.start)}"/><customFilter operator="lessThanOrEqual" val="${Math.floor(filter2.end)}"/></customFilters></filterColumn></autoFilter><extLst><ext uri="{0605FD5F-26C8-4aeb-8148-2DB25E43C511}" xmlns:x15="${x15}"><x15:pivotFilter useWholeDay="1"/></ext></extLst></filter></filters>`;
 }
 
@@ -34372,7 +34393,7 @@ function addScenario(ctx, s, draft) {
 }
 function editScenario(ctx, s, index3, draft) {
   const sheet = sheetAt(ctx.workbook, s);
-  const existing = scenariosOf(sheet)[index3];
+  const existing = Number.isInteger(index3) ? scenariosOf(sheet)[index3] : void 0;
   if (!existing) throw new ScenarioError("missing");
   if (existing.locked && sheet.protection) throw new ScenarioError("locked");
   const name = checkName(sheet, draft.name, index3);
@@ -34383,7 +34404,7 @@ function editScenario(ctx, s, index3, draft) {
 }
 function deleteScenario(ctx, s, index3) {
   const sheet = sheetAt(ctx.workbook, s);
-  const existing = scenariosOf(sheet)[index3];
+  const existing = Number.isInteger(index3) ? scenariosOf(sheet)[index3] : void 0;
   if (!existing) throw new ScenarioError("missing");
   if (existing.locked && sheet.protection) throw new ScenarioError("locked");
   ctx.run("Delete scenario", "view", PARTS(s), () => {
@@ -35182,7 +35203,10 @@ function insertTimeline(ctx, s, ref) {
   const id = Math.max(
     1,
     ...sheet.drawings.flatMap(
-      (d) => "sourceXml" in d && d.sourceXml ? [...d.sourceXml.matchAll(/cNvPr[^>]*\sid="(\d+)"/g)].map((m) => Number(m[1])) : []
+      (d) => "sourceXml" in d && d.sourceXml ? [...d.sourceXml.matchAll(/<[\w:]*cNvPr\b[^>]*>/g)].flatMap((m) => {
+        const id2 = /\sid="(\d+)"/.exec(m[0])?.[1];
+        return id2 ? [Number(id2)] : [];
+      }) : []
     )
   ) + 1;
   ctx.run(
@@ -35720,7 +35744,10 @@ function insertSlicer(ctx, s, ref) {
   const id = Math.max(
     1,
     ...sheet.drawings.flatMap(
-      (d) => "sourceXml" in d && d.sourceXml ? [...d.sourceXml.matchAll(/cNvPr[^>]*\sid="(\d+)"/g)].map((m) => Number(m[1])) : []
+      (d) => "sourceXml" in d && d.sourceXml ? [...d.sourceXml.matchAll(/<[\w:]*cNvPr\b[^>]*>/g)].flatMap((m) => {
+        const id2 = /\sid="(\d+)"/.exec(m[0])?.[1];
+        return id2 ? [Number(id2)] : [];
+      }) : []
     )
   ) + 1;
   ctx.run(

package/dist/xlsx/load/index.cjs

@@ -3254,15 +3254,34 @@ var DEFAULT_XML_LIMITS = {
   maxDepth: 512,
   maxNodes: 5e6
 };
-var MARKUP_RE = /<!--[\s\S]*?-->|<!\[CDATA\[[\s\S]*?\]\]>|<\?[\s\S]*?\?>|<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/g;
+var TAG_RE = /<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/y;
+var MARKUP_SKIPS = [
+  ["<!--", "-->"],
+  ["<![CDATA[", "]]>"],
+  ["<?", "?>"]
+];
 function checkXmlLimits(xml, label2, limits = {}) {
   const maxDepth = limits.maxDepth ?? DEFAULT_XML_LIMITS.maxDepth;
   const maxNodes = limits.maxNodes ?? DEFAULT_XML_LIMITS.maxNodes;
   let depth = 0;
   let nodes = 0;
-  for (const match2 of xml.matchAll(MARKUP_RE)) {
-    const [, closing, name, selfClosing] = match2;
-    if (name === void 0) continue;
+  let at = xml.indexOf("<");
+  while (at !== -1) {
+    const skip = MARKUP_SKIPS.find(([open]) => xml.startsWith(open, at));
+    if (skip) {
+      const end = xml.indexOf(skip[1], at + skip[0].length);
+      if (end === -1) return;
+      at = xml.indexOf("<", end + skip[1].length);
+      continue;
+    }
+    TAG_RE.lastIndex = at;
+    const match2 = TAG_RE.exec(xml);
+    if (!match2) {
+      at = xml.indexOf("<", at + 1);
+      continue;
+    }
+    const [, closing, , selfClosing] = match2;
+    at = xml.indexOf("<", at + match2[0].length);
     if (closing) {
       depth--;
       continue;
@@ -27524,7 +27543,9 @@ function pivotTableXml(source2, cacheId, cache2) {
 }
 function dateFilterXml(pivot, filter2) {
   const x15 = "http://schemas.microsoft.com/office/spreadsheetml/2010/11/main";
-  const id = Number(/<filter [^>]*\bid="(\d+)"/.exec(pivot.sourceXml ?? "")?.[1] ?? 1);
+  const id = Number(
+    /\bid="(\d+)"/.exec(/<filter\s[^>]*>/.exec(pivot.sourceXml ?? "")?.[0] ?? "")?.[1] ?? 1
+  );
   return `<filters count="1"><filter${attrs({ fld: pivot.fields.indexOf(filter2.field), type: "dateBetween", evalOrder: -1, id, name: filter2.field })}><autoFilter ref="A1"><filterColumn colId="0"><customFilters and="1"><customFilter operator="greaterThanOrEqual" val="${Math.floor(filter2.start)}"/><customFilter operator="lessThanOrEqual" val="${Math.floor(filter2.end)}"/></customFilters></filterColumn></autoFilter><extLst><ext uri="{0605FD5F-26C8-4aeb-8148-2DB25E43C511}" xmlns:x15="${x15}"><x15:pivotFilter useWholeDay="1"/></ext></extLst></filter></filters>`;
 }
 

package/dist/xlsx/load/index.mjs

@@ -3248,15 +3248,34 @@ var DEFAULT_XML_LIMITS = {
   maxDepth: 512,
   maxNodes: 5e6
 };
-var MARKUP_RE = /<!--[\s\S]*?-->|<!\[CDATA\[[\s\S]*?\]\]>|<\?[\s\S]*?\?>|<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/g;
+var TAG_RE = /<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/y;
+var MARKUP_SKIPS = [
+  ["<!--", "-->"],
+  ["<![CDATA[", "]]>"],
+  ["<?", "?>"]
+];
 function checkXmlLimits(xml, label2, limits = {}) {
   const maxDepth = limits.maxDepth ?? DEFAULT_XML_LIMITS.maxDepth;
   const maxNodes = limits.maxNodes ?? DEFAULT_XML_LIMITS.maxNodes;
   let depth = 0;
   let nodes = 0;
-  for (const match2 of xml.matchAll(MARKUP_RE)) {
-    const [, closing, name, selfClosing] = match2;
-    if (name === void 0) continue;
+  let at = xml.indexOf("<");
+  while (at !== -1) {
+    const skip = MARKUP_SKIPS.find(([open]) => xml.startsWith(open, at));
+    if (skip) {
+      const end = xml.indexOf(skip[1], at + skip[0].length);
+      if (end === -1) return;
+      at = xml.indexOf("<", end + skip[1].length);
+      continue;
+    }
+    TAG_RE.lastIndex = at;
+    const match2 = TAG_RE.exec(xml);
+    if (!match2) {
+      at = xml.indexOf("<", at + 1);
+      continue;
+    }
+    const [, closing, , selfClosing] = match2;
+    at = xml.indexOf("<", at + match2[0].length);
     if (closing) {
       depth--;
       continue;
@@ -27518,7 +27537,9 @@ function pivotTableXml(source2, cacheId, cache2) {
 }
 function dateFilterXml(pivot, filter2) {
   const x15 = "http://schemas.microsoft.com/office/spreadsheetml/2010/11/main";
-  const id = Number(/<filter [^>]*\bid="(\d+)"/.exec(pivot.sourceXml ?? "")?.[1] ?? 1);
+  const id = Number(
+    /\bid="(\d+)"/.exec(/<filter\s[^>]*>/.exec(pivot.sourceXml ?? "")?.[0] ?? "")?.[1] ?? 1
+  );
   return `<filters count="1"><filter${attrs({ fld: pivot.fields.indexOf(filter2.field), type: "dateBetween", evalOrder: -1, id, name: filter2.field })}><autoFilter ref="A1"><filterColumn colId="0"><customFilters and="1"><customFilter operator="greaterThanOrEqual" val="${Math.floor(filter2.start)}"/><customFilter operator="lessThanOrEqual" val="${Math.floor(filter2.end)}"/></customFilters></filterColumn></autoFilter><extLst><ext uri="{0605FD5F-26C8-4aeb-8148-2DB25E43C511}" xmlns:x15="${x15}"><x15:pivotFilter useWholeDay="1"/></ext></extLst></filter></filters>`;
 }
 

package/dist/xlsx/ui/index.cjs

@@ -11608,15 +11608,34 @@ var DEFAULT_XML_LIMITS = {
   maxDepth: 512,
   maxNodes: 5e6
 };
-var MARKUP_RE = /<!--[\s\S]*?-->|<!\[CDATA\[[\s\S]*?\]\]>|<\?[\s\S]*?\?>|<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/g;
+var TAG_RE = /<(\/?)([^\s\/>]+)(?:\s+[^\s=\/>]+\s*=\s*(?:"[^"]*"|'[^']*'))*\s*(\/?)>/y;
+var MARKUP_SKIPS = [
+  ["<!--", "-->"],
+  ["<![CDATA[", "]]>"],
+  ["<?", "?>"]
+];
 function checkXmlLimits(xml, label2, limits = {}) {
   const maxDepth = limits.maxDepth ?? DEFAULT_XML_LIMITS.maxDepth;
   const maxNodes = limits.maxNodes ?? DEFAULT_XML_LIMITS.maxNodes;
   let depth = 0;
   let nodes = 0;
-  for (const match2 of xml.matchAll(MARKUP_RE)) {
-    const [, closing, name, selfClosing] = match2;
-    if (name === void 0) continue;
+  let at = xml.indexOf("<");
+  while (at !== -1) {
+    const skip = MARKUP_SKIPS.find(([open]) => xml.startsWith(open, at));
+    if (skip) {
+      const end = xml.indexOf(skip[1], at + skip[0].length);
+      if (end === -1) return;
+      at = xml.indexOf("<", end + skip[1].length);
+      continue;
+    }
+    TAG_RE.lastIndex = at;
+    const match2 = TAG_RE.exec(xml);
+    if (!match2) {
+      at = xml.indexOf("<", at + 1);
+      continue;
+    }
+    const [, closing, , selfClosing] = match2;
+    at = xml.indexOf("<", at + match2[0].length);
     if (closing) {
       depth--;
       continue;
@@ -21081,7 +21100,7 @@ function addScenario(ctx, s, draft) {
 }
 function editScenario(ctx, s, index2, draft) {
   const sheet = sheetAt(ctx.workbook, s);
-  const existing = scenariosOf(sheet)[index2];
+  const existing = Number.isInteger(index2) ? scenariosOf(sheet)[index2] : void 0;
   if (!existing) throw new ScenarioError("missing");
   if (existing.locked && sheet.protection) throw new ScenarioError("locked");
   const name = checkName(sheet, draft.name, index2);
@@ -21092,7 +21111,7 @@ function editScenario(ctx, s, index2, draft) {
 }
 function deleteScenario(ctx, s, index2) {
   const sheet = sheetAt(ctx.workbook, s);
-  const existing = scenariosOf(sheet)[index2];
+  const existing = Number.isInteger(index2) ? scenariosOf(sheet)[index2] : void 0;
   if (!existing) throw new ScenarioError("missing");
   if (existing.locked && sheet.protection) throw new ScenarioError("locked");
   ctx.run("Delete scenario", "view", PARTS(s), () => {
@@ -21870,7 +21889,10 @@ function insertTimeline(ctx, s, ref) {
   const id = Math.max(
     1,
     ...sheet.drawings.flatMap(
-      (d) => "sourceXml" in d && d.sourceXml ? [...d.sourceXml.matchAll(/cNvPr[^>]*\sid="(\d+)"/g)].map((m) => Number(m[1])) : []
+      (d) => "sourceXml" in d && d.sourceXml ? [...d.sourceXml.matchAll(/<[\w:]*cNvPr\b[^>]*>/g)].flatMap((m) => {
+        const id2 = /\sid="(\d+)"/.exec(m[0])?.[1];
+        return id2 ? [Number(id2)] : [];
+      }) : []
     )
   ) + 1;
   ctx.run(
@@ -22408,7 +22430,10 @@ function insertSlicer(ctx, s, ref) {
   const id = Math.max(
     1,
     ...sheet.drawings.flatMap(
-      (d) => "sourceXml" in d && d.sourceXml ? [...d.sourceXml.matchAll(/cNvPr[^>]*\sid="(\d+)"/g)].map((m) => Number(m[1])) : []
+      (d) => "sourceXml" in d && d.sourceXml ? [...d.sourceXml.matchAll(/<[\w:]*cNvPr\b[^>]*>/g)].flatMap((m) => {
+        const id2 = /\sid="(\d+)"/.exec(m[0])?.[1];
+        return id2 ? [Number(id2)] : [];
+      }) : []
     )
   ) + 1;
   ctx.run(