qpp-style 9.29.0 → 9.30.1-mo-beta.0

package/components/SanitizedContent/index.jsx

@@ -192,7 +192,19 @@ const SanitizedContent = ({
     map[tag] = allowedAttributes['*'];
     return map;
   }, {});
-  const sanitizedHTML = xss(html, { whiteList });
+
+  const xssOptions = {
+    whiteList,
+    onIgnoreTagAttr: (tag, name, value, isWhiteAttr) => {
+      const isDataOrAriaAttr = name.includes('data-') || name.includes('aria-');
+      if (isDataOrAriaAttr) {
+        return `${name}="${xss.escapeAttrValue(value)}"`;
+      }
+    },
+  };
+
+  const sanitizedHTML = xss(html, xssOptions);
+
   return (
     <div
       {...(customClassName && { className: customClassName })}

package/components/SideNav/UI/SideNavUI.jsx

@@ -97,6 +97,7 @@ const SideNavUI = ({
 
     const itemsMarkup = (contentItems || []).map((item, index) => {
       const key = `${JSON.stringify(item)}-${index}-${containerRecursionId}`;
+
       return (
         {
           divider: (

package/components/SideNav/helpers.js

@@ -173,8 +173,13 @@ const isImpersonating = (docCookie) => {
  */
 const isMultiRoleUser = (docCookie) => {
   const activeRoles = new Set();
-  const { qpp_cms_internal_authorized } = cookie.parse(docCookie);
+  const { qpp_cms_internal_authorized, qpp_has_authorizations } =
+    cookie.parse(docCookie);
+
   let internalAuthz = [];
+  if (qpp_has_authorizations) {
+    return activeRoles.add('qpp user');
+  }
   if (qpp_cms_internal_authorized) {
     internalAuthz = JSON.parse(qpp_cms_internal_authorized);
   }