solid-panes 3.5.31-974f830a → 3.5.31-ddc4e21a

package/lib/humanReadablePane.js

@@ -1,5 +1,6 @@
 "use strict";
 
+function _typeof(obj) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (obj) { return typeof obj; } : function (obj) { return obj && "function" == typeof Symbol && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; }, _typeof(obj); }
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
@@ -7,6 +8,9 @@ exports["default"] = void 0;
 var _solidUi = require("solid-ui");
 var _rdflib = require("rdflib");
 var _marked = require("marked");
+var DOMPurify = _interopRequireWildcard(require("dompurify"));
+function _getRequireWildcardCache(nodeInterop) { if (typeof WeakMap !== "function") return null; var cacheBabelInterop = new WeakMap(); var cacheNodeInterop = new WeakMap(); return (_getRequireWildcardCache = function _getRequireWildcardCache(nodeInterop) { return nodeInterop ? cacheNodeInterop : cacheBabelInterop; })(nodeInterop); }
+function _interopRequireWildcard(obj, nodeInterop) { if (!nodeInterop && obj && obj.__esModule) { return obj; } if (obj === null || _typeof(obj) !== "object" && typeof obj !== "function") { return { "default": obj }; } var cache = _getRequireWildcardCache(nodeInterop); if (cache && cache.has(obj)) { return cache.get(obj); } var newObj = {}; var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor; for (var key in obj) { if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) { var desc = hasPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : null; if (desc && (desc.get || desc.set)) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } newObj["default"] = obj; if (cache) { cache.set(obj, newObj); } return newObj; }
 /*   Human-readable Pane
  **
  **  This outline pane contains the document contents for an HTML document
@@ -62,7 +66,7 @@ var humanReadablePane = {
     var cts = kb.fetcher.getHeader(subject.doc(), 'content-type');
     var ct = cts ? cts[0] : null;
     if (ct) {
-      console.log('humanReadablePane: c-t:' + ct);
+      // console.log('humanReadablePane: c-t:' + ct)
     } else {
       console.log('humanReadablePane: unknown content-type?');
     }
@@ -78,7 +82,8 @@ var humanReadablePane = {
         var markdownText = response.responseText;
         var lines = Math.min(30, markdownText.split(/\n/).length + 5);
         var res = _marked.marked.parse(markdownText);
-        frame.innerHTML = res;
+        var clean = DOMPurify.sanitize(res);
+        frame.innerHTML = clean;
         frame.setAttribute('class', 'doc');
         frame.setAttribute('style', "border: 1px solid; padding: 1em; height: ".concat(lines, "em; width: 800px; resize: both; overflow: auto;"));
       });

package/lib/humanReadablePane.js.map

@@ -1 +1 @@
-{"version":3,"file":"humanReadablePane.js","names":["_solidUi","require","_rdflib","_marked","humanReadablePane","icon","icons","originalIconBase","name","label","subject","context","kb","session","store","allowed","hasContentTypeIn","x","displayables","cts","fetcher","getHeader","j","length","k","indexOf","hasContentTypeIn2","t","findTypeURIs","Util","mediaTypeClass","uri","ns","link","render","myDocument","dom","div","createElement","doc","ct","console","log","setAttribute","element","frame","markdownHtml","webOperation","then","response","markdownText","responseText","lines","Math","min","split","res","marked","parse","innerHTML","concat","_fetch","blob","objectURL","URL","createObjectURL","tr","appendChild","_default","exports"],"sources":["../src/humanReadablePane.js"],"sourcesContent":["/*   Human-readable Pane\n **\n **  This outline pane contains the document contents for an HTML document\n **  This is for peeking at a page, because the user might not want to leave the data browser.\n */\nimport { icons, ns } from 'solid-ui'\nimport { Util } from 'rdflib'\nimport { marked } from 'marked'\n\nconst humanReadablePane = {\n  icon: icons.originalIconBase + 'tango/22-text-x-generic.png',\n\n  name: 'humanReadable',\n\n  label: function (subject, context) {\n    const kb = context.session.store\n\n    //   See also the source pane, which has lower precedence.\n\n    const allowed = [\n      'text/plain',\n      'text/html',\n      'text/markdown',\n      'application/xhtml+xml',\n      'image/png',\n      'image/jpeg',\n      'application/pdf',\n      'video/mp4'\n    ]\n\n    const hasContentTypeIn = function (kb, x, displayables) {\n      const cts = kb.fetcher.getHeader(x, 'content-type')\n      if (cts) {\n        for (let j = 0; j < cts.length; j++) {\n          for (let k = 0; k < displayables.length; k++) {\n            if (cts[j].indexOf(displayables[k]) >= 0) {\n              return true\n            }\n          }\n        }\n      }\n      return false\n    }\n\n    // This data could come from a fetch OR from ldp container\n    const hasContentTypeIn2 = function (kb, x, displayables) {\n      const t = kb.findTypeURIs(subject)\n      for (let k = 0; k < displayables.length; k++) {\n        if (Util.mediaTypeClass(displayables[k]).uri in t) {\n          return true\n        }\n      }\n      return false\n    }\n\n    if (!subject.uri) return null // no bnodes\n\n    const t = kb.findTypeURIs(subject)\n    if (t[ns.link('WebPage').uri]) return 'view'\n\n    if (\n      hasContentTypeIn(kb, subject, allowed) ||\n      hasContentTypeIn2(kb, subject, allowed)\n    ) {\n      return 'View'\n    }\n\n    return null\n  },\n\n  render: function (subject, context) {\n    const myDocument = context.dom\n    const div = myDocument.createElement('div')\n    const kb = context.session.store\n\n    const cts = kb.fetcher.getHeader(subject.doc(), 'content-type')\n    const ct = cts ? cts[0] : null\n    if (ct) {\n      console.log('humanReadablePane: c-t:' + ct)\n    } else {\n      console.log('humanReadablePane: unknown content-type?')\n    }\n\n    //  @@ When we can, use CSP to turn off scripts within the iframe\n    div.setAttribute('class', 'docView')\n    const element = ct === 'text/markdown' ? 'DIV' : 'IFRAME'\n    const frame = myDocument.createElement(element)\n\n    // render markdown to html\n    const markdownHtml = function () {\n      kb.fetcher.webOperation('GET', subject.uri).then(response => {\n        const markdownText = response.responseText\n        const lines = Math.min(30, markdownText.split(/\\n/).length + 5)\n        const res = marked.parse(markdownText)\n        frame.innerHTML = res\n        frame.setAttribute('class', 'doc')\n        frame.setAttribute('style', `border: 1px solid; padding: 1em; height: ${lines}em; width: 800px; resize: both; overflow: auto;`)\n      })\n    }\n\n    if (ct === 'text/markdown') {\n      markdownHtml()\n    } else if (ct !== 'text/html') {\n      // get with authenticated fetch\n      kb.fetcher._fetch(subject.uri)\n        .then(function(response) {\n          return response.blob()\n        })\n        .then(function(blob) {\n          const objectURL = URL.createObjectURL(blob)\n          frame.setAttribute('src', objectURL) // w640 h480 //\n          frame.setAttribute('class', 'doc')\n          frame.setAttribute('style', `border: 1px solid; padding: 1em; height:120em; width:80em; resize: both; overflow: auto;`)\n        })\n    } else {\n      frame.setAttribute('src', subject.uri) // allow-same-origin\n      frame.setAttribute('class', 'doc')\n      frame.setAttribute('style', 'resize = both; height:120em; width:80em;')\n    }\n    // @@ Note below - if we set ANY sandbox, then Chrome and Safari won't display it if it is PDF.\n    // https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe\n    // You can't have any sandbox and allow plugins.\n    // We could sandbox only HTML files I suppose.\n    // HTML5 bug: https://lists.w3.org/Archives/Public/public-html/2011Jun/0330.html\n\n    // iframe.setAttribute('sandbox', 'allow-same-origin allow-forms'); // allow-scripts ?? no documents should be static\n\n    //        iframe.setAttribute('height', '480')\n    //        iframe.setAttribute('width', '640')\n    const tr = myDocument.createElement('TR')\n    tr.appendChild(frame)\n    div.appendChild(tr)\n    return div\n  }\n}\n\nexport default humanReadablePane\n// ends\n"],"mappings":";;;;;;AAKA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AAPA;AACA;AACA;AACA;AACA;;AAKA,IAAMG,iBAAiB,GAAG;EACxBC,IAAI,EAAEC,cAAK,CAACC,gBAAgB,GAAG,6BAA6B;EAE5DC,IAAI,EAAE,eAAe;EAErBC,KAAK,EAAE,SAAAA,MAAUC,OAAO,EAAEC,OAAO,EAAE;IACjC,IAAMC,EAAE,GAAGD,OAAO,CAACE,OAAO,CAACC,KAAK;;IAEhC;;IAEA,IAAMC,OAAO,GAAG,CACd,YAAY,EACZ,WAAW,EACX,eAAe,EACf,uBAAuB,EACvB,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,WAAW,CACZ;IAED,IAAMC,gBAAgB,GAAG,SAAnBA,gBAAgBA,CAAaJ,EAAE,EAAEK,CAAC,EAAEC,YAAY,EAAE;MACtD,IAAMC,GAAG,GAAGP,EAAE,CAACQ,OAAO,CAACC,SAAS,CAACJ,CAAC,EAAE,cAAc,CAAC;MACnD,IAAIE,GAAG,EAAE;QACP,KAAK,IAAIG,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGH,GAAG,CAACI,MAAM,EAAED,CAAC,EAAE,EAAE;UACnC,KAAK,IAAIE,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGN,YAAY,CAACK,MAAM,EAAEC,CAAC,EAAE,EAAE;YAC5C,IAAIL,GAAG,CAACG,CAAC,CAAC,CAACG,OAAO,CAACP,YAAY,CAACM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;cACxC,OAAO,IAAI;YACb;UACF;QACF;MACF;MACA,OAAO,KAAK;IACd,CAAC;;IAED;IACA,IAAME,iBAAiB,GAAG,SAApBA,iBAAiBA,CAAad,EAAE,EAAEK,CAAC,EAAEC,YAAY,EAAE;MACvD,IAAMS,CAAC,GAAGf,EAAE,CAACgB,YAAY,CAAClB,OAAO,CAAC;MAClC,KAAK,IAAIc,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGN,YAAY,CAACK,MAAM,EAAEC,CAAC,EAAE,EAAE;QAC5C,IAAIK,YAAI,CAACC,cAAc,CAACZ,YAAY,CAACM,CAAC,CAAC,CAAC,CAACO,GAAG,IAAIJ,CAAC,EAAE;UACjD,OAAO,IAAI;QACb;MACF;MACA,OAAO,KAAK;IACd,CAAC;IAED,IAAI,CAACjB,OAAO,CAACqB,GAAG,EAAE,OAAO,IAAI,EAAC;;IAE9B,IAAMJ,CAAC,GAAGf,EAAE,CAACgB,YAAY,CAAClB,OAAO,CAAC;IAClC,IAAIiB,CAAC,CAACK,WAAE,CAACC,IAAI,CAAC,SAAS,CAAC,CAACF,GAAG,CAAC,EAAE,OAAO,MAAM;IAE5C,IACEf,gBAAgB,CAACJ,EAAE,EAAEF,OAAO,EAAEK,OAAO,CAAC,IACtCW,iBAAiB,CAACd,EAAE,EAAEF,OAAO,EAAEK,OAAO,CAAC,EACvC;MACA,OAAO,MAAM;IACf;IAEA,OAAO,IAAI;EACb,CAAC;EAEDmB,MAAM,EAAE,SAAAA,OAAUxB,OAAO,EAAEC,OAAO,EAAE;IAClC,IAAMwB,UAAU,GAAGxB,OAAO,CAACyB,GAAG;IAC9B,IAAMC,GAAG,GAAGF,UAAU,CAACG,aAAa,CAAC,KAAK,CAAC;IAC3C,IAAM1B,EAAE,GAAGD,OAAO,CAACE,OAAO,CAACC,KAAK;IAEhC,IAAMK,GAAG,GAAGP,EAAE,CAACQ,OAAO,CAACC,SAAS,CAACX,OAAO,CAAC6B,GAAG,EAAE,EAAE,cAAc,CAAC;IAC/D,IAAMC,EAAE,GAAGrB,GAAG,GAAGA,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI;IAC9B,IAAIqB,EAAE,EAAE;MACNC,OAAO,CAACC,GAAG,CAAC,yBAAyB,GAAGF,EAAE,CAAC;IAC7C,CAAC,MAAM;MACLC,OAAO,CAACC,GAAG,CAAC,0CAA0C,CAAC;IACzD;;IAEA;IACAL,GAAG,CAACM,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC;IACpC,IAAMC,OAAO,GAAGJ,EAAE,KAAK,eAAe,GAAG,KAAK,GAAG,QAAQ;IACzD,IAAMK,KAAK,GAAGV,UAAU,CAACG,aAAa,CAACM,OAAO,CAAC;;IAE/C;IACA,IAAME,YAAY,GAAG,SAAfA,YAAYA,CAAA,EAAe;MAC/BlC,EAAE,CAACQ,OAAO,CAAC2B,YAAY,CAAC,KAAK,EAAErC,OAAO,CAACqB,GAAG,CAAC,CAACiB,IAAI,CAAC,UAAAC,QAAQ,EAAI;QAC3D,IAAMC,YAAY,GAAGD,QAAQ,CAACE,YAAY;QAC1C,IAAMC,KAAK,GAAGC,IAAI,CAACC,GAAG,CAAC,EAAE,EAAEJ,YAAY,CAACK,KAAK,CAAC,IAAI,CAAC,CAAChC,MAAM,GAAG,CAAC,CAAC;QAC/D,IAAMiC,GAAG,GAAGC,cAAM,CAACC,KAAK,CAACR,YAAY,CAAC;QACtCL,KAAK,CAACc,SAAS,GAAGH,GAAG;QACrBX,KAAK,CAACF,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;QAClCE,KAAK,CAACF,YAAY,CAAC,OAAO,8CAAAiB,MAAA,CAA8CR,KAAK,qDAAkD;MACjI,CAAC,CAAC;IACJ,CAAC;IAED,IAAIZ,EAAE,KAAK,eAAe,EAAE;MAC1BM,YAAY,EAAE;IAChB,CAAC,MAAM,IAAIN,EAAE,KAAK,WAAW,EAAE;MAC7B;MACA5B,EAAE,CAACQ,OAAO,CAACyC,MAAM,CAACnD,OAAO,CAACqB,GAAG,CAAC,CAC3BiB,IAAI,CAAC,UAASC,QAAQ,EAAE;QACvB,OAAOA,QAAQ,CAACa,IAAI,EAAE;MACxB,CAAC,CAAC,CACDd,IAAI,CAAC,UAASc,IAAI,EAAE;QACnB,IAAMC,SAAS,GAAGC,GAAG,CAACC,eAAe,CAACH,IAAI,CAAC;QAC3CjB,KAAK,CAACF,YAAY,CAAC,KAAK,EAAEoB,SAAS,CAAC,EAAC;QACrClB,KAAK,CAACF,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;QAClCE,KAAK,CAACF,YAAY,CAAC,OAAO,6FAA6F;MACzH,CAAC,CAAC;IACN,CAAC,MAAM;MACLE,KAAK,CAACF,YAAY,CAAC,KAAK,EAAEjC,OAAO,CAACqB,GAAG,CAAC,EAAC;MACvCc,KAAK,CAACF,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;MAClCE,KAAK,CAACF,YAAY,CAAC,OAAO,EAAE,0CAA0C,CAAC;IACzE;IACA;IACA;IACA;IACA;IACA;;IAEA;;IAEA;IACA;IACA,IAAMuB,EAAE,GAAG/B,UAAU,CAACG,aAAa,CAAC,IAAI,CAAC;IACzC4B,EAAE,CAACC,WAAW,CAACtB,KAAK,CAAC;IACrBR,GAAG,CAAC8B,WAAW,CAACD,EAAE,CAAC;IACnB,OAAO7B,GAAG;EACZ;AACF,CAAC;AAAA,IAAA+B,QAAA,GAEchE,iBAAiB,EAChC;AAAAiE,OAAA,cAAAD,QAAA"}
+{"version":3,"file":"humanReadablePane.js","names":["_solidUi","require","_rdflib","_marked","DOMPurify","_interopRequireWildcard","_getRequireWildcardCache","nodeInterop","WeakMap","cacheBabelInterop","cacheNodeInterop","obj","__esModule","_typeof","cache","has","get","newObj","hasPropertyDescriptor","Object","defineProperty","getOwnPropertyDescriptor","key","prototype","hasOwnProperty","call","desc","set","humanReadablePane","icon","icons","originalIconBase","name","label","subject","context","kb","session","store","allowed","hasContentTypeIn","x","displayables","cts","fetcher","getHeader","j","length","k","indexOf","hasContentTypeIn2","t","findTypeURIs","Util","mediaTypeClass","uri","ns","link","render","myDocument","dom","div","createElement","doc","ct","console","log","setAttribute","element","frame","markdownHtml","webOperation","then","response","markdownText","responseText","lines","Math","min","split","res","marked","parse","clean","sanitize","innerHTML","concat","_fetch","blob","objectURL","URL","createObjectURL","tr","appendChild","_default","exports"],"sources":["../src/humanReadablePane.js"],"sourcesContent":["/*   Human-readable Pane\n **\n **  This outline pane contains the document contents for an HTML document\n **  This is for peeking at a page, because the user might not want to leave the data browser.\n */\nimport { icons, ns } from 'solid-ui'\nimport { Util } from 'rdflib'\nimport { marked } from 'marked'\nimport * as DOMPurify from 'dompurify'\n\nconst humanReadablePane = {\n  icon: icons.originalIconBase + 'tango/22-text-x-generic.png',\n\n  name: 'humanReadable',\n\n  label: function (subject, context) {\n    const kb = context.session.store\n\n    //   See also the source pane, which has lower precedence.\n\n    const allowed = [\n      'text/plain',\n      'text/html',\n      'text/markdown',\n      'application/xhtml+xml',\n      'image/png',\n      'image/jpeg',\n      'application/pdf',\n      'video/mp4'\n    ]\n\n    const hasContentTypeIn = function (kb, x, displayables) {\n      const cts = kb.fetcher.getHeader(x, 'content-type')\n      if (cts) {\n        for (let j = 0; j < cts.length; j++) {\n          for (let k = 0; k < displayables.length; k++) {\n            if (cts[j].indexOf(displayables[k]) >= 0) {\n              return true\n            }\n          }\n        }\n      }\n      return false\n    }\n\n    // This data could come from a fetch OR from ldp container\n    const hasContentTypeIn2 = function (kb, x, displayables) {\n      const t = kb.findTypeURIs(subject)\n      for (let k = 0; k < displayables.length; k++) {\n        if (Util.mediaTypeClass(displayables[k]).uri in t) {\n          return true\n        }\n      }\n      return false\n    }\n\n    if (!subject.uri) return null // no bnodes\n\n    const t = kb.findTypeURIs(subject)\n    if (t[ns.link('WebPage').uri]) return 'view'\n\n    if (\n      hasContentTypeIn(kb, subject, allowed) ||\n      hasContentTypeIn2(kb, subject, allowed)\n    ) {\n      return 'View'\n    }\n\n    return null\n  },\n\n  render: function (subject, context) {\n    const myDocument = context.dom\n    const div = myDocument.createElement('div')\n    const kb = context.session.store\n\n    const cts = kb.fetcher.getHeader(subject.doc(), 'content-type')\n    const ct = cts ? cts[0] : null\n    if (ct) {\n      // console.log('humanReadablePane: c-t:' + ct)\n    } else {\n      console.log('humanReadablePane: unknown content-type?')\n    }\n\n    //  @@ When we can, use CSP to turn off scripts within the iframe\n    div.setAttribute('class', 'docView')\n    const element = ct === 'text/markdown' ? 'DIV' : 'IFRAME'\n    const frame = myDocument.createElement(element)\n\n    // render markdown to html\n    const markdownHtml = function () {\n      kb.fetcher.webOperation('GET', subject.uri).then(response => {\n        const markdownText = response.responseText\n        const lines = Math.min(30, markdownText.split(/\\n/).length + 5)\n        const res = marked.parse(markdownText)\n        const clean = DOMPurify.sanitize(res)\n        frame.innerHTML = clean\n        frame.setAttribute('class', 'doc')\n        frame.setAttribute('style', `border: 1px solid; padding: 1em; height: ${lines}em; width: 800px; resize: both; overflow: auto;`)\n      })\n    }\n\n    if (ct === 'text/markdown') {\n      markdownHtml()\n    } else if (ct !== 'text/html') {\n      // get with authenticated fetch\n      kb.fetcher._fetch(subject.uri)\n        .then(function(response) {\n          return response.blob()\n        })\n        .then(function(blob) {\n          const objectURL = URL.createObjectURL(blob)\n          frame.setAttribute('src', objectURL) // w640 h480 //\n          frame.setAttribute('class', 'doc')\n          frame.setAttribute('style', `border: 1px solid; padding: 1em; height:120em; width:80em; resize: both; overflow: auto;`)\n        })\n    } else {\n      frame.setAttribute('src', subject.uri) // allow-same-origin\n      frame.setAttribute('class', 'doc')\n      frame.setAttribute('style', 'resize = both; height:120em; width:80em;')\n    }\n    // @@ Note below - if we set ANY sandbox, then Chrome and Safari won't display it if it is PDF.\n    // https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe\n    // You can't have any sandbox and allow plugins.\n    // We could sandbox only HTML files I suppose.\n    // HTML5 bug: https://lists.w3.org/Archives/Public/public-html/2011Jun/0330.html\n\n    // iframe.setAttribute('sandbox', 'allow-same-origin allow-forms'); // allow-scripts ?? no documents should be static\n\n    //        iframe.setAttribute('height', '480')\n    //        iframe.setAttribute('width', '640')\n    const tr = myDocument.createElement('TR')\n    tr.appendChild(frame)\n    div.appendChild(tr)\n    return div\n  }\n}\n\nexport default humanReadablePane\n// ends\n"],"mappings":";;;;;;;AAKA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AACA,IAAAG,SAAA,GAAAC,uBAAA,CAAAJ,OAAA;AAAsC,SAAAK,yBAAAC,WAAA,eAAAC,OAAA,kCAAAC,iBAAA,OAAAD,OAAA,QAAAE,gBAAA,OAAAF,OAAA,YAAAF,wBAAA,YAAAA,yBAAAC,WAAA,WAAAA,WAAA,GAAAG,gBAAA,GAAAD,iBAAA,KAAAF,WAAA;AAAA,SAAAF,wBAAAM,GAAA,EAAAJ,WAAA,SAAAA,WAAA,IAAAI,GAAA,IAAAA,GAAA,CAAAC,UAAA,WAAAD,GAAA,QAAAA,GAAA,aAAAE,OAAA,CAAAF,GAAA,yBAAAA,GAAA,uCAAAA,GAAA,UAAAG,KAAA,GAAAR,wBAAA,CAAAC,WAAA,OAAAO,KAAA,IAAAA,KAAA,CAAAC,GAAA,CAAAJ,GAAA,YAAAG,KAAA,CAAAE,GAAA,CAAAL,GAAA,SAAAM,MAAA,WAAAC,qBAAA,GAAAC,MAAA,CAAAC,cAAA,IAAAD,MAAA,CAAAE,wBAAA,WAAAC,GAAA,IAAAX,GAAA,QAAAW,GAAA,kBAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAd,GAAA,EAAAW,GAAA,SAAAI,IAAA,GAAAR,qBAAA,GAAAC,MAAA,CAAAE,wBAAA,CAAAV,GAAA,EAAAW,GAAA,cAAAI,IAAA,KAAAA,IAAA,CAAAV,GAAA,IAAAU,IAAA,CAAAC,GAAA,KAAAR,MAAA,CAAAC,cAAA,CAAAH,MAAA,EAAAK,GAAA,EAAAI,IAAA,YAAAT,MAAA,CAAAK,GAAA,IAAAX,GAAA,CAAAW,GAAA,SAAAL,MAAA,cAAAN,GAAA,MAAAG,KAAA,IAAAA,KAAA,CAAAa,GAAA,CAAAhB,GAAA,EAAAM,MAAA,YAAAA,MAAA;AARtC;AACA;AACA;AACA;AACA;;AAMA,IAAMW,iBAAiB,GAAG;EACxBC,IAAI,EAAEC,cAAK,CAACC,gBAAgB,GAAG,6BAA6B;EAE5DC,IAAI,EAAE,eAAe;EAErBC,KAAK,EAAE,SAAAA,MAAUC,OAAO,EAAEC,OAAO,EAAE;IACjC,IAAMC,EAAE,GAAGD,OAAO,CAACE,OAAO,CAACC,KAAK;;IAEhC;;IAEA,IAAMC,OAAO,GAAG,CACd,YAAY,EACZ,WAAW,EACX,eAAe,EACf,uBAAuB,EACvB,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,WAAW,CACZ;IAED,IAAMC,gBAAgB,GAAG,SAAnBA,gBAAgBA,CAAaJ,EAAE,EAAEK,CAAC,EAAEC,YAAY,EAAE;MACtD,IAAMC,GAAG,GAAGP,EAAE,CAACQ,OAAO,CAACC,SAAS,CAACJ,CAAC,EAAE,cAAc,CAAC;MACnD,IAAIE,GAAG,EAAE;QACP,KAAK,IAAIG,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGH,GAAG,CAACI,MAAM,EAAED,CAAC,EAAE,EAAE;UACnC,KAAK,IAAIE,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGN,YAAY,CAACK,MAAM,EAAEC,CAAC,EAAE,EAAE;YAC5C,IAAIL,GAAG,CAACG,CAAC,CAAC,CAACG,OAAO,CAACP,YAAY,CAACM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;cACxC,OAAO,IAAI;YACb;UACF;QACF;MACF;MACA,OAAO,KAAK;IACd,CAAC;;IAED;IACA,IAAME,iBAAiB,GAAG,SAApBA,iBAAiBA,CAAad,EAAE,EAAEK,CAAC,EAAEC,YAAY,EAAE;MACvD,IAAMS,CAAC,GAAGf,EAAE,CAACgB,YAAY,CAAClB,OAAO,CAAC;MAClC,KAAK,IAAIc,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGN,YAAY,CAACK,MAAM,EAAEC,CAAC,EAAE,EAAE;QAC5C,IAAIK,YAAI,CAACC,cAAc,CAACZ,YAAY,CAACM,CAAC,CAAC,CAAC,CAACO,GAAG,IAAIJ,CAAC,EAAE;UACjD,OAAO,IAAI;QACb;MACF;MACA,OAAO,KAAK;IACd,CAAC;IAED,IAAI,CAACjB,OAAO,CAACqB,GAAG,EAAE,OAAO,IAAI,EAAC;;IAE9B,IAAMJ,CAAC,GAAGf,EAAE,CAACgB,YAAY,CAAClB,OAAO,CAAC;IAClC,IAAIiB,CAAC,CAACK,WAAE,CAACC,IAAI,CAAC,SAAS,CAAC,CAACF,GAAG,CAAC,EAAE,OAAO,MAAM;IAE5C,IACEf,gBAAgB,CAACJ,EAAE,EAAEF,OAAO,EAAEK,OAAO,CAAC,IACtCW,iBAAiB,CAACd,EAAE,EAAEF,OAAO,EAAEK,OAAO,CAAC,EACvC;MACA,OAAO,MAAM;IACf;IAEA,OAAO,IAAI;EACb,CAAC;EAEDmB,MAAM,EAAE,SAAAA,OAAUxB,OAAO,EAAEC,OAAO,EAAE;IAClC,IAAMwB,UAAU,GAAGxB,OAAO,CAACyB,GAAG;IAC9B,IAAMC,GAAG,GAAGF,UAAU,CAACG,aAAa,CAAC,KAAK,CAAC;IAC3C,IAAM1B,EAAE,GAAGD,OAAO,CAACE,OAAO,CAACC,KAAK;IAEhC,IAAMK,GAAG,GAAGP,EAAE,CAACQ,OAAO,CAACC,SAAS,CAACX,OAAO,CAAC6B,GAAG,EAAE,EAAE,cAAc,CAAC;IAC/D,IAAMC,EAAE,GAAGrB,GAAG,GAAGA,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI;IAC9B,IAAIqB,EAAE,EAAE;MACN;IAAA,CACD,MAAM;MACLC,OAAO,CAACC,GAAG,CAAC,0CAA0C,CAAC;IACzD;;IAEA;IACAL,GAAG,CAACM,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC;IACpC,IAAMC,OAAO,GAAGJ,EAAE,KAAK,eAAe,GAAG,KAAK,GAAG,QAAQ;IACzD,IAAMK,KAAK,GAAGV,UAAU,CAACG,aAAa,CAACM,OAAO,CAAC;;IAE/C;IACA,IAAME,YAAY,GAAG,SAAfA,YAAYA,CAAA,EAAe;MAC/BlC,EAAE,CAACQ,OAAO,CAAC2B,YAAY,CAAC,KAAK,EAAErC,OAAO,CAACqB,GAAG,CAAC,CAACiB,IAAI,CAAC,UAAAC,QAAQ,EAAI;QAC3D,IAAMC,YAAY,GAAGD,QAAQ,CAACE,YAAY;QAC1C,IAAMC,KAAK,GAAGC,IAAI,CAACC,GAAG,CAAC,EAAE,EAAEJ,YAAY,CAACK,KAAK,CAAC,IAAI,CAAC,CAAChC,MAAM,GAAG,CAAC,CAAC;QAC/D,IAAMiC,GAAG,GAAGC,cAAM,CAACC,KAAK,CAACR,YAAY,CAAC;QACtC,IAAMS,KAAK,GAAG/E,SAAS,CAACgF,QAAQ,CAACJ,GAAG,CAAC;QACrCX,KAAK,CAACgB,SAAS,GAAGF,KAAK;QACvBd,KAAK,CAACF,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;QAClCE,KAAK,CAACF,YAAY,CAAC,OAAO,8CAAAmB,MAAA,CAA8CV,KAAK,qDAAkD;MACjI,CAAC,CAAC;IACJ,CAAC;IAED,IAAIZ,EAAE,KAAK,eAAe,EAAE;MAC1BM,YAAY,EAAE;IAChB,CAAC,MAAM,IAAIN,EAAE,KAAK,WAAW,EAAE;MAC7B;MACA5B,EAAE,CAACQ,OAAO,CAAC2C,MAAM,CAACrD,OAAO,CAACqB,GAAG,CAAC,CAC3BiB,IAAI,CAAC,UAASC,QAAQ,EAAE;QACvB,OAAOA,QAAQ,CAACe,IAAI,EAAE;MACxB,CAAC,CAAC,CACDhB,IAAI,CAAC,UAASgB,IAAI,EAAE;QACnB,IAAMC,SAAS,GAAGC,GAAG,CAACC,eAAe,CAACH,IAAI,CAAC;QAC3CnB,KAAK,CAACF,YAAY,CAAC,KAAK,EAAEsB,SAAS,CAAC,EAAC;QACrCpB,KAAK,CAACF,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;QAClCE,KAAK,CAACF,YAAY,CAAC,OAAO,6FAA6F;MACzH,CAAC,CAAC;IACN,CAAC,MAAM;MACLE,KAAK,CAACF,YAAY,CAAC,KAAK,EAAEjC,OAAO,CAACqB,GAAG,CAAC,EAAC;MACvCc,KAAK,CAACF,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;MAClCE,KAAK,CAACF,YAAY,CAAC,OAAO,EAAE,0CAA0C,CAAC;IACzE;IACA;IACA;IACA;IACA;IACA;;IAEA;;IAEA;IACA;IACA,IAAMyB,EAAE,GAAGjC,UAAU,CAACG,aAAa,CAAC,IAAI,CAAC;IACzC8B,EAAE,CAACC,WAAW,CAACxB,KAAK,CAAC;IACrBR,GAAG,CAACgC,WAAW,CAACD,EAAE,CAAC;IACnB,OAAO/B,GAAG;EACZ;AACF,CAAC;AAAA,IAAAiC,QAAA,GAEclE,iBAAiB,EAChC;AAAAmE,OAAA,cAAAD,QAAA"}

package/lib/versionInfo.js

@@ -5,8 +5,8 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports["default"] = void 0;
 var _default = {
-  buildTime: "2023-03-02T16:45:14Z",
-  commit: "974f830a48375c4455a862a174e1eb8b51888783",
+  buildTime: "2023-03-08T18:45:01Z",
+  commit: "ddc4e21a261c20270f21dc77901c7e173414ac01",
   npmInfo: {
     'solid-panes': '3.5.31',
     npm: '8.19.4',

package/lib/versionInfo.js.map

@@ -1 +1 @@
-{"version":3,"file":"versionInfo.js","names":["buildTime","commit","npmInfo","npm","node","v8","uv","zlib","brotli","ares","modules","nghttp2","napi","llhttp","openssl","cldr","icu","tz","unicode","ngtcp2","nghttp3","exports","_default"],"sources":["../src/versionInfo.ts"],"sourcesContent":["export default {\nbuildTime: \"2023-03-02T16:45:14Z\",\ncommit: \"974f830a48375c4455a862a174e1eb8b51888783\",\nnpmInfo:\n{\n  'solid-panes': '3.5.31',\n  npm: '8.19.4',\n  node: '16.19.1',\n  v8: '9.4.146.26-node.24',\n  uv: '1.43.0',\n  zlib: '1.2.11',\n  brotli: '1.0.9',\n  ares: '1.18.1',\n  modules: '93',\n  nghttp2: '1.47.0',\n  napi: '8',\n  llhttp: '6.0.10',\n  openssl: '1.1.1t+quic',\n  cldr: '41.0',\n  icu: '71.1',\n  tz: '2022f',\n  unicode: '14.0',\n  ngtcp2: '0.8.1',\n  nghttp3: '0.7.0'\n}\n};\n"],"mappings":";;;;;;eAAe;EACfA,SAAS,EAAE,sBAAsB;EACjCC,MAAM,EAAE,0CAA0C;EAClDC,OAAO,EACP;IACE,aAAa,EAAE,QAAQ;IACvBC,GAAG,EAAE,QAAQ;IACbC,IAAI,EAAE,SAAS;IACfC,EAAE,EAAE,oBAAoB;IACxBC,EAAE,EAAE,QAAQ;IACZC,IAAI,EAAE,QAAQ;IACdC,MAAM,EAAE,OAAO;IACfC,IAAI,EAAE,QAAQ;IACdC,OAAO,EAAE,IAAI;IACbC,OAAO,EAAE,QAAQ;IACjBC,IAAI,EAAE,GAAG;IACTC,MAAM,EAAE,QAAQ;IAChBC,OAAO,EAAE,aAAa;IACtBC,IAAI,EAAE,MAAM;IACZC,GAAG,EAAE,MAAM;IACXC,EAAE,EAAE,OAAO;IACXC,OAAO,EAAE,MAAM;IACfC,MAAM,EAAE,OAAO;IACfC,OAAO,EAAE;EACX;AACA,CAAC;AAAAC,OAAA,cAAAC,QAAA"}
+{"version":3,"file":"versionInfo.js","names":["buildTime","commit","npmInfo","npm","node","v8","uv","zlib","brotli","ares","modules","nghttp2","napi","llhttp","openssl","cldr","icu","tz","unicode","ngtcp2","nghttp3","exports","_default"],"sources":["../src/versionInfo.ts"],"sourcesContent":["export default {\nbuildTime: \"2023-03-08T18:45:01Z\",\ncommit: \"ddc4e21a261c20270f21dc77901c7e173414ac01\",\nnpmInfo:\n{\n  'solid-panes': '3.5.31',\n  npm: '8.19.4',\n  node: '16.19.1',\n  v8: '9.4.146.26-node.24',\n  uv: '1.43.0',\n  zlib: '1.2.11',\n  brotli: '1.0.9',\n  ares: '1.18.1',\n  modules: '93',\n  nghttp2: '1.47.0',\n  napi: '8',\n  llhttp: '6.0.10',\n  openssl: '1.1.1t+quic',\n  cldr: '41.0',\n  icu: '71.1',\n  tz: '2022f',\n  unicode: '14.0',\n  ngtcp2: '0.8.1',\n  nghttp3: '0.7.0'\n}\n};\n"],"mappings":";;;;;;eAAe;EACfA,SAAS,EAAE,sBAAsB;EACjCC,MAAM,EAAE,0CAA0C;EAClDC,OAAO,EACP;IACE,aAAa,EAAE,QAAQ;IACvBC,GAAG,EAAE,QAAQ;IACbC,IAAI,EAAE,SAAS;IACfC,EAAE,EAAE,oBAAoB;IACxBC,EAAE,EAAE,QAAQ;IACZC,IAAI,EAAE,QAAQ;IACdC,MAAM,EAAE,OAAO;IACfC,IAAI,EAAE,QAAQ;IACdC,OAAO,EAAE,IAAI;IACbC,OAAO,EAAE,QAAQ;IACjBC,IAAI,EAAE,GAAG;IACTC,MAAM,EAAE,QAAQ;IAChBC,OAAO,EAAE,aAAa;IACtBC,IAAI,EAAE,MAAM;IACZC,GAAG,EAAE,MAAM;IACXC,EAAE,EAAE,OAAO;IACXC,OAAO,EAAE,MAAM;IACfC,MAAM,EAAE,OAAO;IACfC,OAAO,EAAE;EACX;AACA,CAAC;AAAAC,OAAA,cAAAC,QAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "solid-panes",
-  "version": "3.5.31-974f830a",
+  "version": "3.5.31-ddc4e21a",
   "description": "Solid-compatible Panes: applets and views for the mashlib and databrowser",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -49,6 +49,7 @@
     "activitystreams-pane": "0.6.10",
     "chat-pane": "2.4.22",
     "contacts-pane": "^2.6.9",
+    "dompurify": "^3.0.1",
     "folder-pane": "^2.4.24",
     "issue-pane": "2.4.16",
     "marked": "^4.2.12",

package/src/humanReadablePane.js

@@ -6,6 +6,7 @@
 import { icons, ns } from 'solid-ui'
 import { Util } from 'rdflib'
 import { marked } from 'marked'
+import * as DOMPurify from 'dompurify'
 
 const humanReadablePane = {
   icon: icons.originalIconBase + 'tango/22-text-x-generic.png',
@@ -76,7 +77,7 @@ const humanReadablePane = {
     const cts = kb.fetcher.getHeader(subject.doc(), 'content-type')
     const ct = cts ? cts[0] : null
     if (ct) {
-      console.log('humanReadablePane: c-t:' + ct)
+      // console.log('humanReadablePane: c-t:' + ct)
     } else {
       console.log('humanReadablePane: unknown content-type?')
     }
@@ -92,7 +93,8 @@ const humanReadablePane = {
         const markdownText = response.responseText
         const lines = Math.min(30, markdownText.split(/\n/).length + 5)
         const res = marked.parse(markdownText)
-        frame.innerHTML = res
+        const clean = DOMPurify.sanitize(res)
+        frame.innerHTML = clean
         frame.setAttribute('class', 'doc')
         frame.setAttribute('style', `border: 1px solid; padding: 1em; height: ${lines}em; width: 800px; resize: both; overflow: auto;`)
       })

package/src/versionInfo.ts

@@ -1,6 +1,6 @@
 export default {
-buildTime: "2023-03-02T16:45:14Z",
-commit: "974f830a48375c4455a862a174e1eb8b51888783",
+buildTime: "2023-03-08T18:45:01Z",
+commit: "ddc4e21a261c20270f21dc77901c7e173414ac01",
 npmInfo:
 {
   'solid-panes': '3.5.31',