sibujs 3.2.2 → 3.3.1

package/dist/plugins.js

@@ -18,7 +18,7 @@ import {
   preloadCritical,
   prerenderRoutes,
   satisfies
-} from "./chunk-RDRSWYNP.js";
+} from "./chunk-ZUVLC7TM.js";
 import {
   isUnsafeKey
 } from "./chunk-H3SRKIYX.js";
@@ -35,35 +35,35 @@ import {
 } from "./chunk-3JHCYHWN.js";
 import {
   span
-} from "./chunk-5N74TKLD.js";
+} from "./chunk-37BUKSLH.js";
 import {
   escapeScriptJson,
   isDangerousMetaRefresh,
   renderToString
-} from "./chunk-HXMS4SNP.js";
-import "./chunk-X67UYC74.js";
-import "./chunk-RLUJL2MV.js";
+} from "./chunk-R3QEDXFS.js";
+import "./chunk-LU2MQXQQ.js";
+import "./chunk-NHKQKKZU.js";
 import {
   dispose,
   registerDisposer
-} from "./chunk-2UPRY23K.js";
+} from "./chunk-5VGSK6D2.js";
 import {
   isUrlAttribute,
   sanitizeCSSValue,
   sanitizeUrl,
   stripControlChars
-} from "./chunk-HMJFCBRR.js";
+} from "./chunk-L3GAGWCC.js";
 import {
   effect
-} from "./chunk-FDY42FIU.js";
+} from "./chunk-MHBCEJQO.js";
 import "./chunk-GOJMFRBL.js";
 import {
   signal
-} from "./chunk-C427DVQF.js";
+} from "./chunk-WZG2SZOT.js";
 import {
   track
-} from "./chunk-Z2FWAE4B.js";
-import "./chunk-LMLD24FC.js";
+} from "./chunk-TEFZT5PJ.js";
+import "./chunk-COY6PUD2.js";
 
 // src/plugins/i18n.ts
 var [currentLocale, setLocaleInternal] = signal("en");
@@ -1800,7 +1800,7 @@ function hydrateRouter(routes, options) {
   if (container && serverState.path) {
     const resolved = resolveServerRoute(serverState.path, routes);
     if (resolved.component) {
-      import("./ssr-2QDQ27EV.js").then(({ hydrate }) => {
+      import("./ssr-6D67RAVB.js").then(({ hydrate }) => {
         if (resolved.component) {
           hydrate(resolved.component, container);
         }

package/dist/{ssr-2QDQ27EV.js → ssr-6D67RAVB.js}

@@ -17,10 +17,10 @@ import {
   ssrSuspense,
   suspenseSwapScript,
   trustHTML
-} from "./chunk-HXMS4SNP.js";
-import "./chunk-HMJFCBRR.js";
+} from "./chunk-R3QEDXFS.js";
+import "./chunk-L3GAGWCC.js";
 import "./chunk-GOJMFRBL.js";
-import "./chunk-LMLD24FC.js";
+import "./chunk-COY6PUD2.js";
 export {
   collectStream,
   deserializeState,

package/dist/ssr.cjs

@@ -66,7 +66,13 @@ module.exports = __toCommonJS(ssr_exports);
 
 // src/core/dev.ts
 function isDev() {
-  return typeof globalThis.__SIBU_DEV__ !== "undefined" ? !!globalThis.__SIBU_DEV__ : typeof __SIBU_DEV__ !== "undefined" ? __SIBU_DEV__ : typeof process !== "undefined" && process.env?.NODE_ENV !== "production";
+  return typeof globalThis.__SIBU_DEV__ !== "undefined" ? !!globalThis.__SIBU_DEV__ : (
+    // The bare `__SIBU_DEV__` is a bundler define that only exists in
+    // production builds; under the test runner it is always undefined, so
+    // this branch is unreachable here.
+    /* v8 ignore next 2 */
+    typeof __SIBU_DEV__ !== "undefined" ? __SIBU_DEV__ : typeof process !== "undefined" && process.env?.NODE_ENV !== "production"
+  );
 }
 var _isDev = isDev();
 function devAssert(condition, message) {
@@ -152,7 +158,9 @@ function sanitizeSrcset(value) {
   }
   return out.join(", ");
 }
+var CSS_DANGER_GATE = /[(:@\\]/;
 function sanitizeCSSValue(value) {
+  if (!CSS_DANGER_GATE.test(value)) return value;
   const decoded = value.replace(/\\([0-9a-fA-F]{1,6})\s?/g, (_m, hex) => {
     const code2 = Number.parseInt(hex, 16);
     if (!Number.isFinite(code2) || code2 < 0 || code2 > 1114111) return "";
@@ -182,8 +190,11 @@ var URL_ATTRIBUTES = /* @__PURE__ */ new Set([
   "ping",
   "data"
 ]);
-function isUrlAttribute(attr) {
-  return URL_ATTRIBUTES.has(attr.toLowerCase());
+function sanitizeAttributeString(attr, value) {
+  const lower = attr.toLowerCase();
+  if (lower === "srcset") return sanitizeSrcset(value);
+  if (URL_ATTRIBUTES.has(lower)) return sanitizeUrl(value);
+  return value;
 }
 
 // src/platform/ssr.ts
@@ -603,7 +614,7 @@ function hydrateProgressively(container, islands, options) {
   }
   container.setAttribute("data-sibu-hydrated", "progressive");
   return () => {
-    for (const cleanup2 of cleanups) cleanup2();
+    for (const cleanup3 of cleanups) cleanup3();
   };
 }
 function resetSSRState() {
@@ -696,7 +707,7 @@ function escapeAttr(str) {
   return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
 
-// src/reactivity/track.ts
+// src/reactivity/track-core.ts
 var _isDev3 = isDev();
 var POOL_MAX = 4096;
 var nodePool = [];
@@ -780,6 +791,7 @@ function unlinkSub(node) {
   else sub2.depsTail = prev;
 }
 var currentSubscriber = null;
+var suspendSavedSub = null;
 var notifyDepth = 0;
 var pendingQueue = [];
 var pendingSet = /* @__PURE__ */ new Set();
@@ -791,6 +803,35 @@ function safeInvoke(sub2) {
     if (_isDev3) devWarn(`Subscriber threw during notification: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+var suspendDepth = 0;
+var trackingSuspended = false;
+function suspendTracking() {
+  if (suspendDepth === 0) {
+    suspendSavedSub = currentSubscriber;
+    currentSubscriber = null;
+    trackingSuspended = true;
+  }
+  suspendDepth++;
+}
+function resumeTracking() {
+  suspendDepth--;
+  if (suspendDepth === 0) {
+    currentSubscriber = suspendSavedSub;
+    suspendSavedSub = null;
+    trackingSuspended = false;
+  }
+}
+function isTrackingSuspended() {
+  return trackingSuspended;
+}
+function untracked(fn) {
+  suspendTracking();
+  try {
+    return fn();
+  } finally {
+    resumeTracking();
+  }
+}
 var subscriberEpochCounter = 0;
 function retrack(effectFn, subscriber) {
   const prev = currentSubscriber;
@@ -900,6 +941,16 @@ function cleanup(subscriber) {
 var maxSubscriberRepeats = 50;
 var maxDrainIterations = 1e6;
 var drainEpoch = 0;
+function setMaxSubscriberRepeats(n) {
+  const prev = maxSubscriberRepeats;
+  if (Number.isFinite(n) && n > 0) maxSubscriberRepeats = Math.floor(n);
+  return prev;
+}
+function setMaxDrainIterations(n) {
+  const prev = maxDrainIterations;
+  if (Number.isFinite(n) && n > 0) maxDrainIterations = Math.floor(n);
+  return prev;
+}
 function tickRepeat(sub2) {
   const s2 = sub2;
   if (s2._runEpoch !== drainEpoch) {
@@ -1048,6 +1099,85 @@ function notifySubscribers(signal2) {
     }
   }
 }
+function getSubscriberCount(signal2) {
+  return signal2.__sc ?? 0;
+}
+function getSubscriberDeps(subscriber) {
+  const sub2 = subscriber;
+  const out = [];
+  let node = sub2.depsHead ?? null;
+  while (node) {
+    if (node.sig) out.push(node.sig);
+    node = node.subNext;
+  }
+  return out;
+}
+function forEachSubscriber(signal2, visit) {
+  let node = signal2.subsHead ?? null;
+  while (node) {
+    const s2 = node.sub;
+    if (s2) visit(s2);
+    node = node.sigNext;
+  }
+}
+
+// src/reactivity/track.ts
+var _isDev4 = isDev();
+var _runtimeVersion = typeof __SIBU_VERSION__ !== "undefined" ? __SIBU_VERSION__ : "dev";
+var REGISTRY_KEY = /* @__PURE__ */ Symbol.for("sibujs.reactive.v1");
+function resolveReactiveApi() {
+  const g2 = globalThis;
+  const existing = g2[REGISTRY_KEY];
+  if (existing) {
+    if (_isDev4 && !existing.__dupWarned) {
+      existing.__dupWarned = true;
+      devWarn(
+        `Multiple instances of the reactive runtime detected on this page (active: ${existing.version}, duplicate: ${_runtimeVersion}). Reactivity still works \u2014 all copies share the first one \u2014 but de-duplicate sibujs in your bundler (e.g. Vite optimizeDeps.exclude: ['sibujs'] or resolve.dedupe: ['sibujs']).`
+      );
+    }
+    return existing;
+  }
+  const local = {
+    suspendTracking,
+    resumeTracking,
+    isTrackingSuspended,
+    untracked,
+    retrack,
+    track,
+    reactiveBinding,
+    recordDependency,
+    cleanup,
+    setMaxSubscriberRepeats,
+    setMaxDrainIterations,
+    drainNotificationQueue,
+    queueSignalNotification,
+    notifySubscribers,
+    getSubscriberCount,
+    getSubscriberDeps,
+    forEachSubscriber,
+    version: _runtimeVersion
+  };
+  g2[REGISTRY_KEY] = local;
+  return local;
+}
+var API = resolveReactiveApi();
+var suspendTracking2 = API.suspendTracking;
+var resumeTracking2 = API.resumeTracking;
+var isTrackingSuspended2 = API.isTrackingSuspended;
+var untracked2 = API.untracked;
+var retrack2 = API.retrack;
+var track2 = API.track;
+var reactiveBinding2 = API.reactiveBinding;
+var recordDependency2 = API.recordDependency;
+var cleanup2 = API.cleanup;
+var setMaxSubscriberRepeats2 = API.setMaxSubscriberRepeats;
+var setMaxDrainIterations2 = API.setMaxDrainIterations;
+var drainNotificationQueue2 = API.drainNotificationQueue;
+var queueSignalNotification2 = API.queueSignalNotification;
+var notifySubscribers2 = API.notifySubscribers;
+var getSubscriberCount2 = API.getSubscriberCount;
+var getSubscriberDeps2 = API.getSubscriberDeps;
+var forEachSubscriber2 = API.forEachSubscriber;
 
 // src/core/signals/effect.ts
 var _g = globalThis;
@@ -1069,7 +1199,7 @@ function drainReruns(ctx) {
   do {
     ctx.rerunPending = false;
     if (ctx.userCleanups.length > 0) flushUserCleanups(ctx);
-    retrack(ctx.bodyFn, ctx.subscriber);
+    retrack2(ctx.bodyFn, ctx.subscriber);
   } while (ctx.rerunPending && ++reruns <= MAX_RERUNS);
   if (ctx.rerunPending) {
     ctx.rerunPending = false;
@@ -1098,7 +1228,7 @@ function disposeEffect(ctx) {
     }
   }
   try {
-    cleanup(ctx.subscriber);
+    cleanup2(ctx.subscriber);
   } catch (err) {
     if (typeof console !== "undefined") {
       console.warn("[SibuJS effect] dispose threw:", err);
@@ -1143,7 +1273,7 @@ function effect(effectFn, options) {
     try {
       ctx.rerunPending = false;
       if (ctx.userCleanups.length > 0) flushUserCleanups(ctx);
-      retrack(ctx.bodyFn, sub2);
+      retrack2(ctx.bodyFn, sub2);
       if (ctx.rerunPending) drainReruns(ctx);
     } finally {
       ctx.running = false;
@@ -1159,7 +1289,7 @@ function effect(effectFn, options) {
   ctx.subscriber = sub2;
   ctx.running = true;
   try {
-    retrack(ctx.bodyFn, ctx.subscriber);
+    retrack2(ctx.bodyFn, ctx.subscriber);
     if (ctx.rerunPending) drainReruns(ctx);
   } finally {
     ctx.running = false;
@@ -1207,7 +1337,7 @@ function Head(props) {
   const anchor = document.createComment("sibu-head");
   const managedElements = [];
   const effectCleanups = [];
-  const cleanup2 = () => {
+  const cleanup3 = () => {
     for (const el of managedElements) {
       if (el.parentNode) el.parentNode.removeChild(el);
     }
@@ -1216,7 +1346,7 @@ function Head(props) {
     effectCleanups.length = 0;
   };
   const apply = () => {
-    cleanup2();
+    cleanup3();
     if (props.title) {
       if (typeof props.title === "function") {
         const cleanupFn = effect(() => {
@@ -1337,7 +1467,7 @@ async function generateStaticSite(options) {
 // src/reactivity/batch.ts
 var batchDepth = 0;
 var pendingSignals = /* @__PURE__ */ new Set();
-function batch(fn) {
+function batchImpl(fn) {
   batchDepth++;
   try {
     return fn();
@@ -1348,25 +1478,45 @@ function batch(fn) {
     }
   }
 }
-function enqueueBatchedSignal(signal2) {
+function enqueueBatchedSignalImpl(signal2) {
   if (batchDepth === 0) return false;
   pendingSignals.add(signal2);
   return true;
 }
+function isBatchingImpl() {
+  return batchDepth > 0;
+}
 function flushBatch() {
   try {
     for (const signal2 of pendingSignals) {
-      queueSignalNotification(signal2);
+      queueSignalNotification2(signal2);
     }
   } finally {
     pendingSignals.clear();
   }
-  drainNotificationQueue();
+  drainNotificationQueue2();
+}
+var BATCH_REGISTRY_KEY = /* @__PURE__ */ Symbol.for("sibujs.reactive.batch.v1");
+function resolveBatchApi() {
+  const g2 = globalThis;
+  const existing = g2[BATCH_REGISTRY_KEY];
+  if (existing) return existing;
+  const local = {
+    batch: batchImpl,
+    enqueueBatchedSignal: enqueueBatchedSignalImpl,
+    isBatching: isBatchingImpl
+  };
+  g2[BATCH_REGISTRY_KEY] = local;
+  return local;
 }
+var API2 = resolveBatchApi();
+var batch = API2.batch;
+var enqueueBatchedSignal = API2.enqueueBatchedSignal;
+var isBatching = API2.isBatching;
 
 // src/core/signals/signal.ts
 var _g2 = globalThis;
-var _isDev4 = isDev();
+var _isDev5 = isDev();
 function signal(initial, options) {
   const state = {
     value: initial,
@@ -1377,11 +1527,11 @@ function signal(initial, options) {
     __activeNode: null,
     __name: void 0
   };
-  const debugName = _isDev4 ? options?.name : void 0;
+  const debugName = _isDev5 ? options?.name : void 0;
   const equalsFn = options?.equals;
   if (debugName) state.__name = debugName;
   function get() {
-    recordDependency(state);
+    recordDependency2(state);
     return state.value;
   }
   get.__signal = state;
@@ -1394,15 +1544,15 @@ function signal(initial, options) {
       if (equalsFn(prev, newValue)) return;
       state.value = newValue;
       state.__v++;
-      if (_isDev4) {
+      if (_isDev5) {
         const hook = _g2.__SIBU_DEVTOOLS_GLOBAL_HOOK__;
         if (hook) hook.emit("signal:update", { signal: state, name: debugName, oldValue: prev, newValue });
       }
       if (!enqueueBatchedSignal(state)) {
-        notifySubscribers(state);
+        notifySubscribers2(state);
       }
     };
-  } else if (_isDev4) {
+  } else if (_isDev5) {
     set = (next) => {
       const prev = state.value;
       const newValue = typeof next === "function" ? next(prev) : next;
@@ -1412,7 +1562,7 @@ function signal(initial, options) {
       const hook = _g2.__SIBU_DEVTOOLS_GLOBAL_HOOK__;
       if (hook) hook.emit("signal:update", { signal: state, name: debugName, oldValue: prev, newValue });
       if (!enqueueBatchedSignal(state)) {
-        notifySubscribers(state);
+        notifySubscribers2(state);
       }
     };
   } else {
@@ -1423,11 +1573,11 @@ function signal(initial, options) {
       state.value = newValue;
       state.__v++;
       if (!enqueueBatchedSignal(state)) {
-        notifySubscribers(state);
+        notifySubscribers2(state);
       }
     };
   }
-  if (_isDev4) {
+  if (_isDev5) {
     const hook = _g2.__SIBU_DEVTOOLS_GLOBAL_HOOK__;
     if (hook) hook.emit("signal:create", { signal: state, name: debugName, getter: get, initial });
   }
@@ -1581,13 +1731,13 @@ function createMiddlewareChain() {
 }
 
 // src/reactivity/bindAttribute.ts
-var _isDev5 = isDev();
+var _isDev6 = isDev();
 function setProp(el, key, val) {
   el[key] = val;
 }
 function bindAttribute(el, attr, getter) {
   if (isEventHandlerAttr(attr)) {
-    if (_isDev5)
+    if (_isDev6)
       devWarn(
         `bindAttribute: refusing to bind event-handler attribute "${attr}". Use on:{ ${attr.slice(2)}: fn } instead.`
       );
@@ -1599,7 +1749,7 @@ function bindAttribute(el, attr, getter) {
     try {
       value = getter();
     } catch (err) {
-      if (_isDev5)
+      if (_isDev6)
         devWarn(`bindAttribute: getter for "${attr}" threw: ${err instanceof Error ? err.message : String(err)}`);
       return;
     }
@@ -1617,15 +1767,15 @@ function bindAttribute(el, attr, getter) {
     if ((attr === "value" || attr === "checked") && attr in el) {
       setProp(el, attr, attr === "checked" ? Boolean(value) : str);
     } else {
-      el.setAttribute(attr, isUrlAttribute(attr) ? sanitizeUrl(str) : str);
+      el.setAttribute(attr, sanitizeAttributeString(attr, str));
     }
   }
-  return reactiveBinding(commit);
+  return reactiveBinding2(commit);
 }
 
 // src/core/rendering/dispose.ts
 var elementDisposers = /* @__PURE__ */ new WeakMap();
-var _isDev6 = isDev();
+var _isDev7 = isDev();
 var activeBindingCount = 0;
 function registerDisposer(node, teardown) {
   let disposers = elementDisposers.get(node);
@@ -1634,7 +1784,7 @@ function registerDisposer(node, teardown) {
     elementDisposers.set(node, disposers);
   }
   disposers.push(teardown);
-  if (_isDev6) activeBindingCount++;
+  if (_isDev7) activeBindingCount++;
 }
 function dispose(node) {
   const stack = [node];
@@ -1653,12 +1803,12 @@ function dispose(node) {
     if (disposers) {
       const snapshot = disposers.slice();
       elementDisposers.delete(current);
-      if (_isDev6) activeBindingCount -= snapshot.length;
+      if (_isDev7) activeBindingCount -= snapshot.length;
       for (const d of snapshot) {
         try {
           d();
         } catch (err) {
-          if (_isDev6 && typeof console !== "undefined") {
+          if (_isDev7 && typeof console !== "undefined") {
             console.warn("[SibuJS] Disposer threw during cleanup:", err);
           }
         }
@@ -1669,12 +1819,12 @@ function dispose(node) {
         if (!added || added.length === 0) break;
         const moreSnapshot = added.slice();
         elementDisposers.delete(current);
-        if (_isDev6) activeBindingCount -= moreSnapshot.length;
+        if (_isDev7) activeBindingCount -= moreSnapshot.length;
         for (const d of moreSnapshot) {
           try {
             d();
           } catch (err) {
-            if (_isDev6 && typeof console !== "undefined") {
+            if (_isDev7 && typeof console !== "undefined") {
               console.warn("[SibuJS] Disposer threw during cleanup:", err);
             }
           }
@@ -1685,7 +1835,7 @@ function dispose(node) {
 }
 
 // src/reactivity/bindChildNode.ts
-var _isDev7 = isDev();
+var _isDev8 = isDev();
 function bindChildNode(placeholder, getter) {
   let lastNodes = [];
   function commit() {
@@ -1693,7 +1843,7 @@ function bindChildNode(placeholder, getter) {
     try {
       result = getter();
     } catch (err) {
-      if (_isDev7) devWarn(`bindChildNode: getter threw: ${err instanceof Error ? err.message : String(err)}`);
+      if (_isDev8) devWarn(`bindChildNode: getter threw: ${err instanceof Error ? err.message : String(err)}`);
       return;
     }
     if (result == null || typeof result === "boolean") {
@@ -1719,7 +1869,7 @@ function bindChildNode(placeholder, getter) {
         if (item == null || typeof item === "boolean") continue;
         const node = item instanceof Node ? item : document.createTextNode(String(item));
         if (seen.has(node)) {
-          if (_isDev7)
+          if (_isDev8)
             devWarn("bindChildNode: duplicate node reference in array \u2014 only the first occurrence is rendered.");
           continue;
         }
@@ -1754,18 +1904,15 @@ function bindChildNode(placeholder, getter) {
     }
     lastNodes = newNodes;
   }
-  return reactiveBinding(commit);
+  return reactiveBinding2(commit);
 }
 
 // src/core/rendering/tagFactory.ts
 var SVG_NS = "http://www.w3.org/2000/svg";
-var _isDev8 = isDev();
+var _isDev9 = isDev();
 var BLOCKED_TAGS = /* @__PURE__ */ new Set(["script", "iframe", "object", "embed", "frame", "frameset"]);
-function validateTagName(tag) {
-  const lower = tag.toLowerCase();
-  if (BLOCKED_TAGS.has(lower)) {
-    throw new Error(`tagFactory: refusing to create <${tag}> \u2014 tag is blocked for security reasons.`);
-  }
+function isBlockedTag(tag) {
+  return BLOCKED_TAGS.has(tag.toLowerCase());
 }
 var CLOBBER_RISKY_IDS = /* @__PURE__ */ new Set([
   "config",
@@ -1805,7 +1952,7 @@ function toKebab(prop) {
 }
 function applyStyle(el, style2) {
   if (typeof style2 === "function") {
-    const teardown = track(() => {
+    const teardown = track2(() => {
       el.setAttribute("style", style2());
     });
     registerDisposer(el, teardown);
@@ -1821,7 +1968,7 @@ function applyStyle(el, style2) {
     const name = toKebab(prop);
     if (typeof val === "function") {
       const getter = val;
-      const teardown = track(() => {
+      const teardown = track2(() => {
         htmlEl.style.setProperty(name, sanitizeCSSValue(String(getter())));
       });
       registerDisposer(el, teardown);
@@ -1836,7 +1983,7 @@ function applyClass(el, cls) {
     return;
   }
   if (typeof cls === "function") {
-    const teardown = track(() => {
+    const teardown = track2(() => {
       el.setAttribute("class", cls());
     });
     registerDisposer(el, teardown);
@@ -1863,7 +2010,7 @@ function applyClass(el, cls) {
       }
       el.setAttribute("class", r);
     };
-    const teardown = track(update);
+    const teardown = track2(update);
     registerDisposer(el, teardown);
   } else {
     el.setAttribute("class", result);
@@ -1920,8 +2067,11 @@ function appendChildren(el, nodes) {
   }
 }
 var tagFactory = (tag, ns) => {
+  const blocked = isBlockedTag(tag);
   return (first, second) => {
-    validateTagName(tag);
+    if (blocked) {
+      throw new Error(`tagFactory: refusing to create <${tag}> \u2014 tag is blocked for security reasons.`);
+    }
     const el = ns ? document.createElementNS(ns, tag) : document.createElement(tag);
     if (first === void 0) return el;
     if (typeof first === "string") {
@@ -1930,7 +2080,7 @@ var tagFactory = (tag, ns) => {
         appendChildren(el, second);
         return el;
       }
-      if (_isDev8 && looksLikeClassList(first)) {
+      if (_isDev9 && looksLikeClassList(first)) {
         devWarn(
           `tagFactory: lone string "${first}" looks like a class list but is being rendered as TEXT. For a class, use ${tag}({ class: "${first}" }) \u2014 or ${tag}("${first}", children) to set the class AND add children.`
         );
@@ -1951,7 +2101,7 @@ var tagFactory = (tag, ns) => {
     if (pClass != null) applyClass(el, pClass);
     const pId = props.id;
     if (pId != null) {
-      if (_isDev8 && typeof pId === "string" && CLOBBER_RISKY_IDS.has(pId.toLowerCase())) {
+      if (_isDev9 && typeof pId === "string" && CLOBBER_RISKY_IDS.has(pId.toLowerCase())) {
         devWarn(
           `tagFactory: element id="${pId}" matches a common global and may cause DOM clobbering. Avoid setting ids from untrusted input.`
         );
@@ -1966,7 +2116,7 @@ var tagFactory = (tag, ns) => {
         const handler = pOn[ev];
         if (typeof handler === "function") {
           el.addEventListener(ev, handler);
-        } else if (_isDev8) {
+        } else if (_isDev9) {
           devWarn(
             `tagFactory: on.${ev} handler is not a function (got ${typeof handler}). Event listener was not attached.`
           );
@@ -1991,7 +2141,6 @@ var tagFactory = (tag, ns) => {
         default: {
           const value = props[key];
           if (value == null) continue;
-          const lkey = key.toLowerCase();
           if (isEventHandlerAttr(key)) continue;
           if (typeof value === "function") {
             registerDisposer(el, bindAttribute(el, key, value));
@@ -2004,14 +2153,7 @@ var tagFactory = (tag, ns) => {
               el.removeAttribute(key);
             }
           } else {
-            const str = String(value);
-            if (lkey === "srcset") {
-              el.setAttribute(key, sanitizeSrcset(str));
-            } else if (isUrlAttribute(lkey)) {
-              el.setAttribute(key, sanitizeUrl(str));
-            } else {
-              el.setAttribute(key, str);
-            }
+            el.setAttribute(key, sanitizeAttributeString(key, String(value)));
           }
         }
       }
@@ -2087,7 +2229,7 @@ var area = tagFactory("area");
 var audio = tagFactory("audio");
 var img = tagFactory("img");
 var map = tagFactory("map");
-var track2 = tagFactory("track");
+var track3 = tagFactory("track");
 var video = tagFactory("video");
 var embed = tagFactory("embed");
 var iframe = tagFactory("iframe");