rapier-markdown-kit 1.2.56 → 1.2.58

package/README.md

@@ -690,7 +690,7 @@ value the editor's release reads.
 ## Where the modules live
 
 Each module has one home in the Rapier source (`spec/`, `layout/`, `agent/`, `kit/`), where Rapier itself reads it; `dist/`
-is that closure copied byte for byte, and `style.css` is the same `spec/markdown-style.css` Rapier bundles.
+is an exact copy of that closure, and `style.css` is the same `spec/markdown-style.css` Rapier bundles.
 
 
 ## rapier-ledger
@@ -821,7 +821,7 @@ The writer escapes `<` and `>` in that JSON. This versioned EOF marker is reserv
 an unfinished marker is refused, not silently imported as prose. The reader strips
 only that exact suffix, validates it against the remaining exact text, and treats a
 leading BOM as file metadata. Other Markdown readers ignore the comment. Plain
-saves without a choice are unchanged byte for byte. For executable code, use a web
+saves without a choice are unchanged. For executable code, use a web
 page to carry metadata rather than appending a Markdown comment to program source.
 
 The comparison page's `#rapier-base` is independent: `text/markdown`, with

package/dist/spec/html-blocks.mjs

@@ -419,6 +419,7 @@ export function mountHtmlBlocks(doc, options = {}) {
         if (++count > 512) throw new Error('HTML node budget exceeded');
         const tag = el.localName.toLowerCase();
         if (!allowed.has(tag)) {el.remove(); continue;}
+        if (el.namespaceURI === 'http://www.w3.org/1999/xhtml' && el.parentNode?.namespaceURI === 'http://www.w3.org/2000/svg') {el.remove(); continue;}
         if (tag === 'style') el.textContent = css(el.textContent);
         if (el.hasAttribute('style')) el.setAttribute('style', css(el.getAttribute('style')));
         for (const attr of [...el.attributes]) {
@@ -451,10 +452,10 @@ export function mountHtmlBlocks(doc, options = {}) {
               if (/<!\s*(?:DOCTYPE|ENTITY)\b/i.test(svgText)) throw new Error('SVG declarations are unsupported');
               const parsed = new win.DOMParser().parseFromString(svgText, 'image/svg+xml');
               if (parsed.querySelector('parsererror') || parsed.documentElement.localName !== 'svg') throw new Error('Invalid SVG image');
-              const svg = doc.importNode(parsed.documentElement, true);
+              const inert = template.content.ownerDocument, svg = inert.importNode(parsed.documentElement, true);
               if (el.getAttribute('style')) svg.setAttribute('style', el.getAttribute('style'));
               for (const key of ['width','height','class','id']) if (el.hasAttribute(key)) svg.setAttribute(key, el.getAttribute(key));
-              const holder = doc.createElement('div'); holder.append(svg); walk(holder); el.replaceWith(svg); continue;
+              const holder = inert.createElement('div'); holder.append(svg); walk(holder); el.replaceWith(svg); continue;
             }
             el.setAttribute(name, info.first ? 'data:image/gif;base64,' + media.encode(info.first) : url);
             if (info.animated) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rapier-markdown-kit",
-  "version": "1.2.56",
+  "version": "1.2.58",
   "description": "Read, render and write Self-contained Markdown: one .md file that carries its pictures, drawings and layout, and that any Markdown app can read. HTML renderer, stylesheet, text layout, Will/1 agent permissions, and an edit history with authorship and offline merge. MIT, no dependencies.",
   "keywords": [
     "markdown",