q2-tecton-elements 1.66.1 → 1.67.0

package/dist/q2-tecton-elements/{sanitize-html-string-BPwFpYg-.js → sanitize-html-string-B35VmRc9.js}

@@ -1,4 +1,4 @@
-/*! @license DOMPurify 3.3.2 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.3.2/LICENSE */
+/*! @license DOMPurify 3.4.0 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.0/LICENSE */
 const {entries: e, setPrototypeOf: t, isFrozen: n, getPrototypeOf: o, getOwnPropertyDescriptor: i} = Object;
 
 let {freeze: r, seal: a, create: l} = Object;
@@ -40,9 +40,9 @@ const f = unapply(Array.prototype.forEach);
 
 const u = unapply(Array.prototype.lastIndexOf);
 
-const d = unapply(Array.prototype.pop);
+const p = unapply(Array.prototype.pop);
 
-const p = unapply(Array.prototype.push);
+const d = unapply(Array.prototype.push);
 
 const m = unapply(Array.prototype.splice);
 
@@ -52,9 +52,9 @@ const h = unapply(String.prototype.toString);
 
 const y = unapply(String.prototype.match);
 
-const T = unapply(String.prototype.replace);
+const b = unapply(String.prototype.replace);
 
-const b = unapply(String.prototype.indexOf);
+const T = unapply(String.prototype.indexOf);
 
 const S = unapply(String.prototype.trim);
 
@@ -192,9 +192,9 @@ const k = unconstruct(TypeError);
 
 const _ = r([ "a", "abbr", "acronym", "address", "area", "article", "aside", "audio", "b", "bdi", "bdo", "big", "blink", "blockquote", "body", "br", "button", "canvas", "caption", "center", "cite", "code", "col", "colgroup", "content", "data", "datalist", "dd", "decorator", "del", "details", "dfn", "dialog", "dir", "div", "dl", "dt", "element", "em", "fieldset", "figcaption", "figure", "font", "footer", "form", "h1", "h2", "h3", "h4", "h5", "h6", "head", "header", "hgroup", "hr", "html", "i", "img", "input", "ins", "kbd", "label", "legend", "li", "main", "map", "mark", "marquee", "menu", "menuitem", "meter", "nav", "nobr", "ol", "optgroup", "option", "output", "p", "picture", "pre", "progress", "q", "rp", "rt", "ruby", "s", "samp", "search", "section", "select", "shadow", "slot", "small", "source", "spacer", "span", "strike", "strong", "style", "sub", "summary", "sup", "table", "tbody", "td", "template", "textarea", "tfoot", "th", "thead", "time", "tr", "track", "tt", "u", "ul", "var", "video", "wbr" ]);
 
-const A = r([ "svg", "a", "altglyph", "altglyphdef", "altglyphitem", "animatecolor", "animatemotion", "animatetransform", "circle", "clippath", "defs", "desc", "ellipse", "enterkeyhint", "exportparts", "filter", "font", "g", "glyph", "glyphref", "hkern", "image", "inputmode", "line", "lineargradient", "marker", "mask", "metadata", "mpath", "part", "path", "pattern", "polygon", "polyline", "radialgradient", "rect", "stop", "style", "switch", "symbol", "text", "textpath", "title", "tref", "tspan", "view", "vkern" ]);
+const v = r([ "svg", "a", "altglyph", "altglyphdef", "altglyphitem", "animatecolor", "animatemotion", "animatetransform", "circle", "clippath", "defs", "desc", "ellipse", "enterkeyhint", "exportparts", "filter", "font", "g", "glyph", "glyphref", "hkern", "image", "inputmode", "line", "lineargradient", "marker", "mask", "metadata", "mpath", "part", "path", "pattern", "polygon", "polyline", "radialgradient", "rect", "stop", "style", "switch", "symbol", "text", "textpath", "title", "tref", "tspan", "view", "vkern" ]);
 
-const v = r([ "feBlend", "feColorMatrix", "feComponentTransfer", "feComposite", "feConvolveMatrix", "feDiffuseLighting", "feDisplacementMap", "feDistantLight", "feDropShadow", "feFlood", "feFuncA", "feFuncB", "feFuncG", "feFuncR", "feGaussianBlur", "feImage", "feMerge", "feMergeNode", "feMorphology", "feOffset", "fePointLight", "feSpecularLighting", "feSpotLight", "feTile", "feTurbulence" ]);
+const A = r([ "feBlend", "feColorMatrix", "feComponentTransfer", "feComposite", "feConvolveMatrix", "feDiffuseLighting", "feDisplacementMap", "feDistantLight", "feDropShadow", "feFlood", "feFuncA", "feFuncB", "feFuncG", "feFuncR", "feGaussianBlur", "feImage", "feMerge", "feMergeNode", "feMorphology", "feOffset", "fePointLight", "feSpecularLighting", "feSpotLight", "feTile", "feTurbulence" ]);
 
 // List of SVG elements that are disallowed by default.
 // We still need to know them so that we can do namespace
@@ -206,15 +206,15 @@ const R = r([ "math", "menclose", "merror", "mfenced", "mfrac", "mglyph", "mi",
 
 // Similarly to SVG, we want to know all MathML elements,
 // even those that we disallow by default.
-const D = r([ "maction", "maligngroup", "malignmark", "mlongdiv", "mscarries", "mscarry", "msgroup", "mstack", "msline", "msrow", "semantics", "annotation", "annotation-xml", "mprescripts", "none" ]);
+const O = r([ "maction", "maligngroup", "malignmark", "mlongdiv", "mscarries", "mscarry", "msgroup", "mstack", "msline", "msrow", "semantics", "annotation", "annotation-xml", "mprescripts", "none" ]);
 
-const O = r([ "#text" ]);
+const D = r([ "#text" ]);
 
-const z = r([ "accept", "action", "align", "alt", "autocapitalize", "autocomplete", "autopictureinpicture", "autoplay", "background", "bgcolor", "border", "capture", "cellpadding", "cellspacing", "checked", "cite", "class", "clear", "color", "cols", "colspan", "controls", "controlslist", "coords", "crossorigin", "datetime", "decoding", "default", "dir", "disabled", "disablepictureinpicture", "disableremoteplayback", "download", "draggable", "enctype", "enterkeyhint", "exportparts", "face", "for", "headers", "height", "hidden", "high", "href", "hreflang", "id", "inert", "inputmode", "integrity", "ismap", "kind", "label", "lang", "list", "loading", "loop", "low", "max", "maxlength", "media", "method", "min", "minlength", "multiple", "muted", "name", "nonce", "noshade", "novalidate", "nowrap", "open", "optimum", "part", "pattern", "placeholder", "playsinline", "popover", "popovertarget", "popovertargetaction", "poster", "preload", "pubdate", "radiogroup", "readonly", "rel", "required", "rev", "reversed", "role", "rows", "rowspan", "spellcheck", "scope", "selected", "shape", "size", "sizes", "slot", "span", "srclang", "start", "src", "srcset", "step", "style", "summary", "tabindex", "title", "translate", "type", "usemap", "valign", "value", "width", "wrap", "xmlns", "slot" ]);
+const L = r([ "accept", "action", "align", "alt", "autocapitalize", "autocomplete", "autopictureinpicture", "autoplay", "background", "bgcolor", "border", "capture", "cellpadding", "cellspacing", "checked", "cite", "class", "clear", "color", "cols", "colspan", "controls", "controlslist", "coords", "crossorigin", "datetime", "decoding", "default", "dir", "disabled", "disablepictureinpicture", "disableremoteplayback", "download", "draggable", "enctype", "enterkeyhint", "exportparts", "face", "for", "headers", "height", "hidden", "high", "href", "hreflang", "id", "inert", "inputmode", "integrity", "ismap", "kind", "label", "lang", "list", "loading", "loop", "low", "max", "maxlength", "media", "method", "min", "minlength", "multiple", "muted", "name", "nonce", "noshade", "novalidate", "nowrap", "open", "optimum", "part", "pattern", "placeholder", "playsinline", "popover", "popovertarget", "popovertargetaction", "poster", "preload", "pubdate", "radiogroup", "readonly", "rel", "required", "rev", "reversed", "role", "rows", "rowspan", "spellcheck", "scope", "selected", "shape", "size", "sizes", "slot", "span", "srclang", "start", "src", "srcset", "step", "style", "summary", "tabindex", "title", "translate", "type", "usemap", "valign", "value", "width", "wrap", "xmlns", "slot" ]);
 
-const L = r([ "accent-height", "accumulate", "additive", "alignment-baseline", "amplitude", "ascent", "attributename", "attributetype", "azimuth", "basefrequency", "baseline-shift", "begin", "bias", "by", "class", "clip", "clippathunits", "clip-path", "clip-rule", "color", "color-interpolation", "color-interpolation-filters", "color-profile", "color-rendering", "cx", "cy", "d", "dx", "dy", "diffuseconstant", "direction", "display", "divisor", "dur", "edgemode", "elevation", "end", "exponent", "fill", "fill-opacity", "fill-rule", "filter", "filterunits", "flood-color", "flood-opacity", "font-family", "font-size", "font-size-adjust", "font-stretch", "font-style", "font-variant", "font-weight", "fx", "fy", "g1", "g2", "glyph-name", "glyphref", "gradientunits", "gradienttransform", "height", "href", "id", "image-rendering", "in", "in2", "intercept", "k", "k1", "k2", "k3", "k4", "kerning", "keypoints", "keysplines", "keytimes", "lang", "lengthadjust", "letter-spacing", "kernelmatrix", "kernelunitlength", "lighting-color", "local", "marker-end", "marker-mid", "marker-start", "markerheight", "markerunits", "markerwidth", "maskcontentunits", "maskunits", "max", "mask", "mask-type", "media", "method", "mode", "min", "name", "numoctaves", "offset", "operator", "opacity", "order", "orient", "orientation", "origin", "overflow", "paint-order", "path", "pathlength", "patterncontentunits", "patterntransform", "patternunits", "points", "preservealpha", "preserveaspectratio", "primitiveunits", "r", "rx", "ry", "radius", "refx", "refy", "repeatcount", "repeatdur", "restart", "result", "rotate", "scale", "seed", "shape-rendering", "slope", "specularconstant", "specularexponent", "spreadmethod", "startoffset", "stddeviation", "stitchtiles", "stop-color", "stop-opacity", "stroke-dasharray", "stroke-dashoffset", "stroke-linecap", "stroke-linejoin", "stroke-miterlimit", "stroke-opacity", "stroke", "stroke-width", "style", "surfacescale", "systemlanguage", "tabindex", "tablevalues", "targetx", "targety", "transform", "transform-origin", "text-anchor", "text-decoration", "text-rendering", "textlength", "type", "u1", "u2", "unicode", "values", "viewbox", "visibility", "version", "vert-adv-y", "vert-origin-x", "vert-origin-y", "width", "word-spacing", "wrap", "writing-mode", "xchannelselector", "ychannelselector", "x", "x1", "x2", "xmlns", "y", "y1", "y2", "z", "zoomandpan" ]);
+const z = r([ "accent-height", "accumulate", "additive", "alignment-baseline", "amplitude", "ascent", "attributename", "attributetype", "azimuth", "basefrequency", "baseline-shift", "begin", "bias", "by", "class", "clip", "clippathunits", "clip-path", "clip-rule", "color", "color-interpolation", "color-interpolation-filters", "color-profile", "color-rendering", "cx", "cy", "d", "dx", "dy", "diffuseconstant", "direction", "display", "divisor", "dur", "edgemode", "elevation", "end", "exponent", "fill", "fill-opacity", "fill-rule", "filter", "filterunits", "flood-color", "flood-opacity", "font-family", "font-size", "font-size-adjust", "font-stretch", "font-style", "font-variant", "font-weight", "fx", "fy", "g1", "g2", "glyph-name", "glyphref", "gradientunits", "gradienttransform", "height", "href", "id", "image-rendering", "in", "in2", "intercept", "k", "k1", "k2", "k3", "k4", "kerning", "keypoints", "keysplines", "keytimes", "lang", "lengthadjust", "letter-spacing", "kernelmatrix", "kernelunitlength", "lighting-color", "local", "marker-end", "marker-mid", "marker-start", "markerheight", "markerunits", "markerwidth", "maskcontentunits", "maskunits", "max", "mask", "mask-type", "media", "method", "mode", "min", "name", "numoctaves", "offset", "operator", "opacity", "order", "orient", "orientation", "origin", "overflow", "paint-order", "path", "pathlength", "patterncontentunits", "patterntransform", "patternunits", "points", "preservealpha", "preserveaspectratio", "primitiveunits", "r", "rx", "ry", "radius", "refx", "refy", "repeatcount", "repeatdur", "restart", "result", "rotate", "scale", "seed", "shape-rendering", "slope", "specularconstant", "specularexponent", "spreadmethod", "startoffset", "stddeviation", "stitchtiles", "stop-color", "stop-opacity", "stroke-dasharray", "stroke-dashoffset", "stroke-linecap", "stroke-linejoin", "stroke-miterlimit", "stroke-opacity", "stroke", "stroke-width", "style", "surfacescale", "systemlanguage", "tabindex", "tablevalues", "targetx", "targety", "transform", "transform-origin", "text-anchor", "text-decoration", "text-rendering", "textlength", "type", "u1", "u2", "unicode", "values", "viewbox", "visibility", "version", "vert-adv-y", "vert-origin-x", "vert-origin-y", "width", "word-spacing", "wrap", "writing-mode", "xchannelselector", "ychannelselector", "x", "x1", "x2", "xmlns", "y", "y1", "y2", "z", "zoomandpan" ]);
 
-const M = r([ "accent", "accentunder", "align", "bevelled", "close", "columnsalign", "columnlines", "columnspan", "denomalign", "depth", "dir", "display", "displaystyle", "encoding", "fence", "frame", "height", "href", "id", "largeop", "length", "linethickness", "lspace", "lquote", "mathbackground", "mathcolor", "mathsize", "mathvariant", "maxsize", "minsize", "movablelimits", "notation", "numalign", "open", "rowalign", "rowlines", "rowspacing", "rowspan", "rspace", "rquote", "scriptlevel", "scriptminsize", "scriptsizemultiplier", "selection", "separator", "separators", "stretchy", "subscriptshift", "supscriptshift", "symmetric", "voffset", "width", "xmlns" ]);
+const M = r([ "accent", "accentunder", "align", "bevelled", "close", "columnalign", "columnlines", "columnspacing", "columnspan", "denomalign", "depth", "dir", "display", "displaystyle", "encoding", "fence", "frame", "height", "href", "id", "largeop", "length", "linethickness", "lquote", "lspace", "mathbackground", "mathcolor", "mathsize", "mathvariant", "maxsize", "minsize", "movablelimits", "notation", "numalign", "open", "rowalign", "rowlines", "rowspacing", "rowspan", "rspace", "rquote", "scriptlevel", "scriptminsize", "scriptsizemultiplier", "selection", "separator", "separators", "stretchy", "subscriptshift", "supscriptshift", "symmetric", "voffset", "width", "xmlns" ]);
 
 const I = r([ "xlink:href", "xml:id", "xlink:title", "xml:space", "xmlns:xlink" ]);
 
@@ -327,7 +327,7 @@ const V = function _createHooksMap() {
 function createDOMPurify() {
   let t = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : X();
   const DOMPurify = e => createDOMPurify(e);
-  DOMPurify.version = "3.3.2";
+  DOMPurify.version = "3.4.0";
   DOMPurify.removed = [];
   if (!t || !t.document || t.document.nodeType !== Y.document || !t.Element) {
     // Not running in a browser, provide a factory function
@@ -365,16 +365,16 @@ function createDOMPurify() {
   /**
    * Expose whether this browser supports running the full DOMPurify.
    */  DOMPurify.isSupported = typeof e === "function" && typeof Z === "function" && ne && ne.createHTMLDocument !== undefined;
-  const {MUSTACHE_EXPR: se, ERB_EXPR: ce, TMPLIT_EXPR: fe, DATA_ATTR: ue, ARIA_ATTR: de, IS_SCRIPT_OR_DATA: pe, ATTR_WHITESPACE: me, CUSTOM_ELEMENT: ge} = q;
+  const {MUSTACHE_EXPR: se, ERB_EXPR: ce, TMPLIT_EXPR: fe, DATA_ATTR: ue, ARIA_ATTR: pe, IS_SCRIPT_OR_DATA: de, ATTR_WHITESPACE: me, CUSTOM_ELEMENT: ge} = q;
   let {IS_ALLOWED_URI: he} = q;
   /**
    * We consider the elements and attributes below to be safe. Ideally
    * don't add any new ones but feel free to remove unwanted ones.
    */
   /* allowed element names */  let ye = null;
-  const Te = addToSet({}, [ ..._, ...A, ...v, ...R, ...O ]);
-  /* Allowed attribute names */  let be = null;
-  const Se = addToSet({}, [ ...z, ...L, ...M, ...I ]);
+  const be = addToSet({}, [ ..._, ...v, ...A, ...R, ...D ]);
+  /* Allowed attribute names */  let Te = null;
+  const Se = addToSet({}, [ ...L, ...z, ...M, ...I ]);
   /*
    * Configure how DOMPurify should handle custom elements and their attributes as well as customized built-in elements.
    * @property {RegExp|Function|null} tagNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any custom elements)
@@ -416,19 +416,19 @@ function createDOMPurify() {
       value: null
     }
   }));
-  /* Decide if ARIA attributes are okay */  let Ae = true;
-  /* Decide if custom data attributes are okay */  let ve = true;
+  /* Decide if ARIA attributes are okay */  let ve = true;
+  /* Decide if custom data attributes are okay */  let Ae = true;
   /* Decide if unknown protocols are okay */  let Ee = false;
   /* Decide if self-closing tags in attributes are allowed.
    * Usually removed due to a mXSS issue in jQuery 3.0 */  let Re = true;
   /* Output should be safe for common template engines.
    * This means, DOMPurify removes data attributes, mustaches and ERB
-   */  let De = false;
+   */  let Oe = false;
   /* Output should be safe even for XML used within HTML and alike.
    * This means, DOMPurify removes comments when containing risky content.
-   */  let Oe = true;
-  /* Decide if document with <html>... should be returned */  let ze = false;
-  /* Track whether config is already set on this instance of DOMPurify. */  let Le = false;
+   */  let De = true;
+  /* Decide if document with <html>... should be returned */  let Le = false;
+  /* Track whether config is already set on this instance of DOMPurify. */  let ze = false;
   /* Decide if all elements (e.g. style, script) must be children of
    * document.body. By default, browsers might move them to document.head */  let Me = false;
   /* Decide if a DOM `HTMLBodyElement` should be returned, instead of a html
@@ -496,7 +496,7 @@ function createDOMPurify() {
    * @param cfg optional config literal
    */
   // eslint-disable-next-line complexity
-    const dt = function _parseConfig() {
+    const pt = function _parseConfig() {
     let e = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
     if (ct && ct === e) {
       return;
@@ -510,8 +510,8 @@ function createDOMPurify() {
     at.indexOf(e.PARSER_MEDIA_TYPE) === -1 ? lt : e.PARSER_MEDIA_TYPE;
     // HTML tags and attributes are not case-sensitive, converting to lowercase. Keeping XHTML as is.
         st = rt === "application/xhtml+xml" ? h : g;
-    /* Set configuration parameters */    ye = w(e, "ALLOWED_TAGS") ? addToSet({}, e.ALLOWED_TAGS, st) : Te;
-    be = w(e, "ALLOWED_ATTR") ? addToSet({}, e.ALLOWED_ATTR, st) : Se;
+    /* Set configuration parameters */    ye = w(e, "ALLOWED_TAGS") ? addToSet({}, e.ALLOWED_TAGS, st) : be;
+    Te = w(e, "ALLOWED_ATTR") ? addToSet({}, e.ALLOWED_ATTR, st) : Se;
     et = w(e, "ALLOWED_NAMESPACES") ? addToSet({}, e.ALLOWED_NAMESPACES, h) : tt;
     Xe = w(e, "ADD_URI_SAFE_ATTR") ? addToSet(clone($e), e.ADD_URI_SAFE_ATTR, st) : $e;
     qe = w(e, "ADD_DATA_URI_TAGS") ? addToSet(clone(Ye), e.ADD_DATA_URI_TAGS, st) : Ye;
@@ -519,19 +519,19 @@ function createDOMPurify() {
     xe = w(e, "FORBID_TAGS") ? addToSet({}, e.FORBID_TAGS, st) : clone({});
     ke = w(e, "FORBID_ATTR") ? addToSet({}, e.FORBID_ATTR, st) : clone({});
     Be = w(e, "USE_PROFILES") ? e.USE_PROFILES : false;
-    Ae = e.ALLOW_ARIA_ATTR !== false;
+    ve = e.ALLOW_ARIA_ATTR !== false;
  // Default true
-        ve = e.ALLOW_DATA_ATTR !== false;
+        Ae = e.ALLOW_DATA_ATTR !== false;
  // Default true
         Ee = e.ALLOW_UNKNOWN_PROTOCOLS || false;
  // Default false
         Re = e.ALLOW_SELF_CLOSE_IN_ATTR !== false;
  // Default true
-        De = e.SAFE_FOR_TEMPLATES || false;
+        Oe = e.SAFE_FOR_TEMPLATES || false;
  // Default false
-        Oe = e.SAFE_FOR_XML !== false;
+        De = e.SAFE_FOR_XML !== false;
  // Default true
-        ze = e.WHOLE_DOCUMENT || false;
+        Le = e.WHOLE_DOCUMENT || false;
  // Default false
         Ie = e.RETURN_DOM || false;
  // Default false
@@ -553,7 +553,7 @@ function createDOMPurify() {
     Qe = e.NAMESPACE || Je;
     nt = e.MATHML_TEXT_INTEGRATION_POINTS || nt;
     ot = e.HTML_INTEGRATION_POINTS || ot;
-    we = e.CUSTOM_ELEMENT_HANDLING || {};
+    we = e.CUSTOM_ELEMENT_HANDLING || l(null);
     if (e.CUSTOM_ELEMENT_HANDLING && ut(e.CUSTOM_ELEMENT_HANDLING.tagNameCheck)) {
       we.tagNameCheck = e.CUSTOM_ELEMENT_HANDLING.tagNameCheck;
     }
@@ -563,46 +563,43 @@ function createDOMPurify() {
     if (e.CUSTOM_ELEMENT_HANDLING && typeof e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements === "boolean") {
       we.allowCustomizedBuiltInElements = e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements;
     }
-    if (De) {
-      ve = false;
+    if (Oe) {
+      Ae = false;
     }
     if (Ne) {
       Ie = true;
     }
     /* Parse profile info */    if (Be) {
-      ye = addToSet({}, O);
-      be = l(null);
+      ye = addToSet({}, D);
+      Te = l(null);
       if (Be.html === true) {
         addToSet(ye, _);
-        addToSet(be, z);
+        addToSet(Te, L);
       }
       if (Be.svg === true) {
-        addToSet(ye, A);
-        addToSet(be, L);
-        addToSet(be, I);
+        addToSet(ye, v);
+        addToSet(Te, z);
+        addToSet(Te, I);
       }
       if (Be.svgFilters === true) {
-        addToSet(ye, v);
-        addToSet(be, L);
-        addToSet(be, I);
+        addToSet(ye, A);
+        addToSet(Te, z);
+        addToSet(Te, I);
       }
       if (Be.mathMl === true) {
         addToSet(ye, R);
-        addToSet(be, M);
-        addToSet(be, I);
+        addToSet(Te, M);
+        addToSet(Te, I);
       }
     }
-    /* Prevent function-based ADD_ATTR / ADD_TAGS from leaking across calls */    if (!w(e, "ADD_TAGS")) {
-      _e.tagCheck = null;
-    }
-    if (!w(e, "ADD_ATTR")) {
-      _e.attributeCheck = null;
-    }
+    /* Always reset function-based ADD_TAGS / ADD_ATTR checks to prevent
+     * leaking across calls when switching from function to array config */    _e.tagCheck = null;
+    _e.attributeCheck = null;
     /* Merge configuration parameters */    if (e.ADD_TAGS) {
       if (typeof e.ADD_TAGS === "function") {
         _e.tagCheck = e.ADD_TAGS;
       } else {
-        if (ye === Te) {
+        if (ye === be) {
           ye = clone(ye);
         }
         addToSet(ye, e.ADD_TAGS, st);
@@ -612,10 +609,10 @@ function createDOMPurify() {
       if (typeof e.ADD_ATTR === "function") {
         _e.attributeCheck = e.ADD_ATTR;
       } else {
-        if (be === Se) {
-          be = clone(be);
+        if (Te === Se) {
+          Te = clone(Te);
         }
-        addToSet(be, e.ADD_ATTR, st);
+        addToSet(Te, e.ADD_ATTR, st);
       }
     }
     if (e.ADD_URI_SAFE_ATTR) {
@@ -636,7 +633,7 @@ function createDOMPurify() {
     /* Add #text in case KEEP_CONTENT is set to true */    if (Ue) {
       ye["#text"] = true;
     }
-    /* Add html, head and body to ALLOWED_TAGS in case WHOLE_DOCUMENT is true */    if (ze) {
+    /* Add html, head and body to ALLOWED_TAGS in case WHOLE_DOCUMENT is true */    if (Le) {
       addToSet(ye, [ "html", "head", "body" ]);
     }
     /* Add tbody to ALLOWED_TAGS in case tables are permitted, see #286, #365 */    if (ye.table) {
@@ -673,8 +670,8 @@ function createDOMPurify() {
   };
   /* Keep track of all possible SVG and MathML tags
    * so that we can perform the namespace checks
-   * correctly. */  const pt = addToSet({}, [ ...A, ...v, ...E ]);
-  const mt = addToSet({}, [ ...R, ...D ]);
+   * correctly. */  const dt = addToSet({}, [ ...v, ...A, ...E ]);
+  const mt = addToSet({}, [ ...R, ...O ]);
   /**
    * @param element a DOM element whose namespace is being checked
    * @returns Return false if the element has a
@@ -710,7 +707,7 @@ function createDOMPurify() {
       }
       // We only allow elements that are defined in SVG
       // spec. All others are disallowed in SVG namespace.
-            return Boolean(pt[n]);
+            return Boolean(dt[n]);
     }
     if (e.namespaceURI === Ve) {
       // The only way to switch from HTML namespace to MathML
@@ -740,7 +737,7 @@ function createDOMPurify() {
       }
       // We disallow tags that are specific for MathML
       // or SVG and should never appear in HTML namespace
-            return !mt[n] && (it[n] || !pt[n]);
+            return !mt[n] && (it[n] || !dt[n]);
     }
     // For XHTML and XML documents that support custom namespaces
         if (rt === "application/xhtml+xml" && et[e.namespaceURI]) {
@@ -757,7 +754,7 @@ function createDOMPurify() {
    *
    * @param node a DOM node
    */  const ht = function _forceRemove(e) {
-    p(DOMPurify.removed, {
+    d(DOMPurify.removed, {
       element: e
     });
     try {
@@ -774,12 +771,12 @@ function createDOMPurify() {
    * @param element a DOM node
    */  const yt = function _removeAttribute(e, t) {
     try {
-      p(DOMPurify.removed, {
+      d(DOMPurify.removed, {
         attribute: t.getAttributeNode(e),
         from: t
       });
     } catch (e) {
-      p(DOMPurify.removed, {
+      d(DOMPurify.removed, {
         attribute: null,
         from: t
       });
@@ -803,7 +800,7 @@ function createDOMPurify() {
    *
    * @param dirty - a string of dirty markup
    * @return a DOM, filled with the dirty markup
-   */  const Tt = function _initDocument(e) {
+   */  const bt = function _initDocument(e) {
     /* Create a HTML document */
     let t = null;
     let o = null;
@@ -840,16 +837,16 @@ function createDOMPurify() {
       r.insertBefore(n.createTextNode(o), r.childNodes[0] || null);
     }
     /* Work on whole document or just its body */    if (Qe === Je) {
-      return re.call(t, ze ? "html" : "body")[0];
+      return re.call(t, Le ? "html" : "body")[0];
     }
-    return ze ? t.documentElement : r;
+    return Le ? t.documentElement : r;
   };
   /**
    * Creates a NodeIterator object that you can use to traverse filtered lists of nodes or elements in a document.
    *
    * @param root The root element or node to start traversing on.
    * @return The created NodeIterator
-   */  const bt = function _createNodeIterator(e) {
+   */  const Tt = function _createNodeIterator(e) {
     return oe.call(e.ownerDocument || e, e, 
     // eslint-disable-next-line no-bitwise
     F.SHOW_ELEMENT | F.SHOW_COMMENT | F.SHOW_TEXT | F.SHOW_PROCESSING_INSTRUCTION | F.SHOW_CDATA_SECTION, null);
@@ -895,7 +892,11 @@ function createDOMPurify() {
       tagName: n,
       allowedTags: ye
     });
-    /* Detect mXSS attempts abusing namespace confusion */    if (Oe && e.hasChildNodes() && !wt(e.firstElementChild) && x(/<[/\w!]/g, e.innerHTML) && x(/<[/\w!]/g, e.textContent)) {
+    /* Detect mXSS attempts abusing namespace confusion */    if (De && e.hasChildNodes() && !wt(e.firstElementChild) && x(/<[/\w!]/g, e.innerHTML) && x(/<[/\w!]/g, e.textContent)) {
+      ht(e);
+      return true;
+    }
+    /* Remove risky CSS construction leading to mXSS */    if (De && e.namespaceURI === Je && n === "style" && wt(e.firstElementChild)) {
       ht(e);
       return true;
     }
@@ -903,11 +904,11 @@ function createDOMPurify() {
       ht(e);
       return true;
     }
-    /* Remove any kind of possibly harmful comments */    if (Oe && e.nodeType === Y.comment && x(/<[/\w]/g, e.data)) {
+    /* Remove any kind of possibly harmful comments */    if (De && e.nodeType === Y.comment && x(/<[/\w]/g, e.data)) {
       ht(e);
       return true;
     }
-    /* Remove element if anything forbids its presence */    if (!(_e.tagCheck instanceof Function && _e.tagCheck(n)) && (!ye[n] || xe[n])) {
+    /* Remove element if anything forbids its presence */    if (xe[n] || !(_e.tagCheck instanceof Function && _e.tagCheck(n)) && !ye[n]) {
       /* Check if we have a custom element to handle */
       if (!xe[n] && _t(n)) {
         if (we.tagNameCheck instanceof RegExp && x(we.tagNameCheck, n)) {
@@ -940,14 +941,14 @@ function createDOMPurify() {
       ht(e);
       return true;
     }
-    /* Sanitize element content to be template-safe */    if (De && e.nodeType === Y.text) {
+    /* Sanitize element content to be template-safe */    if (Oe && e.nodeType === Y.text) {
       /* Get the element's text content */
       t = e.textContent;
       f([ se, ce, fe ], (e => {
-        t = T(t, e, " ");
+        t = b(t, e, " ");
       }));
       if (e.textContent !== t) {
-        p(DOMPurify.removed, {
+        d(DOMPurify.removed, {
           element: e.cloneNode()
         });
         e.textContent = t;
@@ -976,7 +977,7 @@ function createDOMPurify() {
     /* Allow valid data-* attributes: At least one character after "-"
         (https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-*-attributes)
         XML-compatible (https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible and http://www.w3.org/TR/xml/#d0e804)
-        We don't need to check the value; it's always URI safe. */    if (ve && !ke[t] && x(ue, t)) ; else if (Ae && x(de, t)) ; else if (_e.attributeCheck instanceof Function && _e.attributeCheck(t, e)) ; else if (!be[t] || ke[t]) {
+        We don't need to check the value; it's always URI safe. */    if (Ae && !ke[t] && x(ue, t)) ; else if (ve && x(pe, t)) ; else if (_e.attributeCheck instanceof Function && _e.attributeCheck(t, e)) ; else if (!Te[t] || ke[t]) {
       if (
       // First condition does a very basic check if a) it's basically a valid custom element tagname AND
       // b) if the tagName passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck
@@ -987,7 +988,7 @@ function createDOMPurify() {
       t === "is" && we.allowCustomizedBuiltInElements && (we.tagNameCheck instanceof RegExp && x(we.tagNameCheck, o) || we.tagNameCheck instanceof Function && we.tagNameCheck(o))) ; else {
         return false;
       }
-      /* Check value is safe. First, is attr inert? If so, is safe */    } else if (Xe[t]) ; else if (x(he, T(o, me, ""))) ; else if ((t === "src" || t === "xlink:href" || t === "href") && e !== "script" && b(o, "data:") === 0 && qe[e]) ; else if (Ee && !x(pe, T(o, me, ""))) ; else if (o) {
+      /* Check value is safe. First, is attr inert? If so, is safe */    } else if (Xe[t]) ; else if (x(he, b(o, me, ""))) ; else if ((t === "src" || t === "xlink:href" || t === "href") && e !== "script" && T(o, "data:") === 0 && qe[e]) ; else if (Ee && !x(de, b(o, me, ""))) ; else if (o) {
       return false;
     } else ;
     return true;
@@ -1011,7 +1012,7 @@ function createDOMPurify() {
    * @protect setAttribute
    *
    * @param currentNode to sanitize
-   */  const At = function _sanitizeAttributes(e) {
+   */  const vt = function _sanitizeAttributes(e) {
     /* Execute a hook if present */
     _executeHooks(le.beforeSanitizeAttributes, e, null);
     const {attributes: t} = e;
@@ -1022,7 +1023,7 @@ function createDOMPurify() {
       attrName: "",
       attrValue: "",
       keepAttr: true,
-      allowedAttributes: be,
+      allowedAttributes: Te,
       forceKeepAttr: undefined
     };
     let o = t.length;
@@ -1047,7 +1048,7 @@ function createDOMPurify() {
         // Prefix the value and later re-create the attribute with the sanitized value
                 u = He + u;
       }
-      /* Work around a security issue with comments inside attributes */      if (Oe && x(/((--!?|])>)|<\/(style|script|title|xmp|textarea|noscript|iframe|noembed|noframes)/i, u)) {
+      /* Work around a security issue with comments inside attributes */      if (De && x(/((--!?|])>)|<\/(style|script|title|xmp|textarea|noscript|iframe|noembed|noframes)/i, u)) {
         yt(r, e);
         continue;
       }
@@ -1066,19 +1067,19 @@ function createDOMPurify() {
         yt(r, e);
         continue;
       }
-      /* Sanitize attribute content to be template-safe */      if (De) {
+      /* Sanitize attribute content to be template-safe */      if (Oe) {
         f([ se, ce, fe ], (e => {
-          u = T(u, e, " ");
+          u = b(u, e, " ");
         }));
       }
-      /* Is `value` valid for this attribute? */      const p = st(e.nodeName);
-      if (!kt(p, s, u)) {
+      /* Is `value` valid for this attribute? */      const d = st(e.nodeName);
+      if (!kt(d, s, u)) {
         yt(r, e);
         continue;
       }
       /* Handle attributes that require Trusted Types */      if (ee && typeof j === "object" && typeof j.getAttributeType === "function") {
         if (a) ; else {
-          switch (j.getAttributeType(p, s)) {
+          switch (j.getAttributeType(d, s)) {
            case "TrustedHTML":
             {
               u = ee.createHTML(u);
@@ -1104,7 +1105,7 @@ function createDOMPurify() {
           if (St(e)) {
             ht(e);
           } else {
-            d(DOMPurify.removed);
+            p(DOMPurify.removed);
           }
         } catch (t) {
           yt(r, e);
@@ -1117,17 +1118,17 @@ function createDOMPurify() {
    * _sanitizeShadowDOM
    *
    * @param fragment to iterate over recursively
-   */  const vt = function _sanitizeShadowDOM(e) {
+   */  const At = function _sanitizeShadowDOM(e) {
     let t = null;
-    const n = bt(e);
+    const n = Tt(e);
     /* Execute a hook if present */    _executeHooks(le.beforeSanitizeShadowDOM, e, null);
     while (t = n.nextNode()) {
       /* Execute a hook if present */
       _executeHooks(le.uponSanitizeShadowNode, t, null);
       /* Sanitize tags and elements */      xt(t);
-      /* Check attributes next */      At(t);
+      /* Check attributes next */      vt(t);
       /* Deep shadow DOM detected */      if (t.content instanceof a) {
-        _sanitizeShadowDOM(t.content);
+        At(t.content);
       }
     }
     /* Execute a hook if present */    _executeHooks(le.afterSanitizeShadowDOM, e, null);
@@ -1158,8 +1159,8 @@ function createDOMPurify() {
     /* Return dirty HTML if DOMPurify cannot run */    if (!DOMPurify.isSupported) {
       return e;
     }
-    /* Assign config vars */    if (!Le) {
-      dt(t);
+    /* Assign config vars */    if (!ze) {
+      pt(t);
     }
     /* Clean up removed elements */    DOMPurify.removed = [];
     /* Check if dirty is correctly typed for IN_PLACE */    if (typeof e === "string") {
@@ -1176,7 +1177,7 @@ function createDOMPurify() {
     } else if (e instanceof c) {
       /* If dirty is a DOM element, append to an empty document to avoid
          elements being stripped by the parser */
-      n = Tt("\x3c!----\x3e");
+      n = bt("\x3c!----\x3e");
       i = n.ownerDocument.importNode(e, true);
       if (i.nodeType === Y.element && i.nodeName === "BODY") {
         /* Node is already a body, use as is */
@@ -1189,12 +1190,12 @@ function createDOMPurify() {
       }
     } else {
       /* Exit directly if we have nothing to do */
-      if (!Ie && !De && !ze && 
+      if (!Ie && !Oe && !Le && 
       // eslint-disable-next-line unicorn/prefer-includes
       e.indexOf("<") === -1) {
         return ee && Fe ? ee.createHTML(e) : e;
       }
-      /* Initialize the document to work on */      n = Tt(e);
+      /* Initialize the document to work on */      n = bt(e);
       /* Check we have a DOM node from the data */      if (!n) {
         return Ie ? null : Fe ? te : "";
       }
@@ -1202,19 +1203,27 @@ function createDOMPurify() {
     /* Remove first element node (ours) if FORCE_BODY is set */    if (n && Me) {
       ht(n.firstChild);
     }
-    /* Get node iterator */    const s = bt(je ? e : n);
+    /* Get node iterator */    const s = Tt(je ? e : n);
     /* Now start iterating over the created document */    while (r = s.nextNode()) {
       /* Sanitize tags and elements */
       xt(r);
-      /* Check attributes next */      At(r);
+      /* Check attributes next */      vt(r);
       /* Shadow DOM detected, sanitize it */      if (r.content instanceof a) {
-        vt(r.content);
+        At(r.content);
       }
     }
     /* If we sanitized `dirty` in-place, return it. */    if (je) {
       return e;
     }
     /* Return sanitized string or DOM */    if (Ie) {
+      if (Oe) {
+        n.normalize();
+        let e = n.innerHTML;
+        f([ se, ce, fe ], (t => {
+          e = b(e, t, " ");
+        }));
+        n.innerHTML = e;
+      }
       if (Ne) {
         l = ie.call(n.ownerDocument);
         while (n.firstChild) {
@@ -1224,7 +1233,7 @@ function createDOMPurify() {
       } else {
         l = n;
       }
-      if (be.shadowroot || be.shadowrootmode) {
+      if (Te.shadowroot || Te.shadowrootmode) {
         /*
           AdoptNode() is not used because internal state is not reset
           (e.g. the past names map of a HTMLFormElement), this is safe
@@ -1236,30 +1245,30 @@ function createDOMPurify() {
       }
       return l;
     }
-    let u = ze ? n.outerHTML : n.innerHTML;
-    /* Serialize doctype if allowed */    if (ze && ye["!doctype"] && n.ownerDocument && n.ownerDocument.doctype && n.ownerDocument.doctype.name && x(G, n.ownerDocument.doctype.name)) {
+    let u = Le ? n.outerHTML : n.innerHTML;
+    /* Serialize doctype if allowed */    if (Le && ye["!doctype"] && n.ownerDocument && n.ownerDocument.doctype && n.ownerDocument.doctype.name && x(G, n.ownerDocument.doctype.name)) {
       u = "<!DOCTYPE " + n.ownerDocument.doctype.name + ">\n" + u;
     }
-    /* Sanitize final string template-safe */    if (De) {
+    /* Sanitize final string template-safe */    if (Oe) {
       f([ se, ce, fe ], (e => {
-        u = T(u, e, " ");
+        u = b(u, e, " ");
       }));
     }
     return ee && Fe ? ee.createHTML(u) : u;
   };
   DOMPurify.setConfig = function() {
     let e = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
-    dt(e);
-    Le = true;
+    pt(e);
+    ze = true;
   };
   DOMPurify.clearConfig = function() {
     ct = null;
-    Le = false;
+    ze = false;
   };
   DOMPurify.isValidAttribute = function(e, t, n) {
     /* Initialize shared config vars if necessary. */
     if (!ct) {
-      dt({});
+      pt({});
     }
     const o = st(e);
     const i = st(t);
@@ -1269,14 +1278,14 @@ function createDOMPurify() {
     if (typeof t !== "function") {
       return;
     }
-    p(le[e], t);
+    d(le[e], t);
   };
   DOMPurify.removeHook = function(e, t) {
     if (t !== undefined) {
       const n = u(le[e], t);
       return n === -1 ? undefined : m(le[e], n, 1)[0];
     }
-    return d(le[e]);
+    return p(le[e]);
   };
   DOMPurify.removeHooks = function(e) {
     le[e] = [];
@@ -1306,5 +1315,5 @@ function sanitizeActionSheetSlotHtml(e) {
 }
 
 export { sanitizeActionSheetSlotHtml as a, sanitizeHTMLString as s };
-//# sourceMappingURL=sanitize-html-string-BPwFpYg-.js.map
-//# sourceMappingURL=sanitize-html-string-BPwFpYg-.js.map
+//# sourceMappingURL=sanitize-html-string-B35VmRc9.js.map
+//# sourceMappingURL=sanitize-html-string-B35VmRc9.js.map