stream-markdown-parser 0.0.85 → 0.0.87

package/dist/index.js

@@ -6308,7 +6308,7 @@ function replaceUnsafeChar(ch) {
 /**
 * Escape HTML characters to prevent XSS
 */
-function escapeHtml(str) {
+function escapeHtml$2(str) {
 	if (str.length === 0) return "";
 	if (str.length < 32) {
 		if (HTML_ESCAPE_TEST_RE.test(str)) return str.replace(HTML_ESCAPE_REPLACE_RE, replaceUnsafeChar);
@@ -6362,16 +6362,16 @@ function renderAttrName(name) {
 		case "style":
 		case "target":
 		case "title": return name;
-		default: return escapeHtml(name);
+		default: return escapeHtml$2(name);
 	}
 }
 function renderAttrsFromList(attrs) {
 	if (!attrs || attrs.length === 0) return "";
 	const firstAttr = attrs[0];
-	let result = ` ${renderAttrName(firstAttr[0])}="${escapeHtml(firstAttr[1])}"`;
+	let result = ` ${renderAttrName(firstAttr[0])}="${escapeHtml$2(firstAttr[1])}"`;
 	for (let i = 1; i < attrs.length; i++) {
 		const attr = attrs[i];
-		result += ` ${renderAttrName(attr[0])}="${escapeHtml(attr[1])}"`;
+		result += ` ${renderAttrName(attr[0])}="${escapeHtml$2(attr[1])}"`;
 	}
 	return result;
 }
@@ -6404,7 +6404,7 @@ function parseFenceInfo(info) {
 function renderFence(token, highlighted, info, langName, options) {
 	if (highlighted.indexOf("<pre") === 0) return `${highlighted}\n`;
 	if (info) {
-		if (!token.attrs || token.attrs.length === 0) return `<pre><code class="${escapeHtml(`${options.langPrefix ?? "language-"}${langName}`)}">${highlighted}</code></pre>\n`;
+		if (!token.attrs || token.attrs.length === 0) return `<pre><code class="${escapeHtml$2(`${options.langPrefix ?? "language-"}${langName}`)}">${highlighted}</code></pre>\n`;
 		const classIndex = token.attrIndex("class");
 		const tmpAttrs = token.attrs ? token.attrs.slice() : [];
 		const langClass = `${options.langPrefix ?? "language-"}${langName}`;
@@ -6418,11 +6418,11 @@ function renderFence(token, highlighted, info, langName, options) {
 	return `<pre><code${renderAttrsFromList(token.attrs)}>${highlighted}</code></pre>\n`;
 }
 function renderCodeInlineToken(token) {
-	if (!token.attrs || token.attrs.length === 0) return `<code>${escapeHtml(token.content)}</code>`;
-	return `<code${renderAttrsFromList(token.attrs)}>${escapeHtml(token.content)}</code>`;
+	if (!token.attrs || token.attrs.length === 0) return `<code>${escapeHtml$2(token.content)}</code>`;
+	return `<code${renderAttrsFromList(token.attrs)}>${escapeHtml$2(token.content)}</code>`;
 }
 function renderCodeBlockToken(token) {
-	const content = escapeHtml(token.content);
+	const content = escapeHtml$2(token.content);
 	if (!token.attrs) return `<pre><code>${content}</code></pre>\n`;
 	return `<pre${renderAttrsFromList(token.attrs)}><code>${content}</code></pre>\n`;
 }
@@ -6436,16 +6436,16 @@ function renderFastBlockOpenWithInline(token, prefix) {
 		default: return null;
 	}
 	if (attrs.length === 1 && attrs[0][0] === "style") {
-		if (token.type === "td_open") return `${prefix}<td style="${escapeHtml(attrs[0][1])}">`;
-		if (token.type === "th_open") return `${prefix}<th style="${escapeHtml(attrs[0][1])}">`;
+		if (token.type === "td_open") return `${prefix}<td style="${escapeHtml$2(attrs[0][1])}">`;
+		if (token.type === "th_open") return `${prefix}<th style="${escapeHtml$2(attrs[0][1])}">`;
 	}
 	return null;
 }
 function renderLinkOpenToken(token) {
 	const attrs = token.attrs;
 	if (!attrs || attrs.length === 0) return "<a>";
-	if (attrs.length === 1) return `<a ${renderAttrName(attrs[0][0])}="${escapeHtml(attrs[0][1])}">`;
-	if (attrs.length === 2) return `<a ${renderAttrName(attrs[0][0])}="${escapeHtml(attrs[0][1])}" ${renderAttrName(attrs[1][0])}="${escapeHtml(attrs[1][1])}">`;
+	if (attrs.length === 1) return `<a ${renderAttrName(attrs[0][0])}="${escapeHtml$2(attrs[0][1])}">`;
+	if (attrs.length === 2) return `<a ${renderAttrName(attrs[0][0])}="${escapeHtml$2(attrs[0][1])}" ${renderAttrName(attrs[1][0])}="${escapeHtml$2(attrs[1][1])}">`;
 	return `<a${renderAttrsFromList(attrs)}>`;
 }
 function canUseLinkInlineFastPath(token) {
@@ -6502,7 +6502,7 @@ const defaultRules = {
 		const info = token.info ? unescapeAll(token.info).trim() : "";
 		const { langName, langAttrs } = parseFenceInfo(info);
 		const highlight = options.highlight;
-		const fallback = escapeHtml(token.content);
+		const fallback = escapeHtml$2(token.content);
 		if (!highlight) return renderFence(token, fallback, info, langName, options);
 		const highlighted = highlight(token.content, langName, langAttrs);
 		if (isPromiseLike(highlighted)) return highlighted.then((res) => renderFence(token, res || fallback, info, langName, options));
@@ -6524,10 +6524,10 @@ const defaultRules = {
 		return options.breaks ? options.xhtmlOut ? "<br />\n" : "<br>\n" : "\n";
 	},
 	text(tokens, idx) {
-		return escapeHtml(tokens[idx].content);
+		return escapeHtml$2(tokens[idx].content);
 	},
 	text_special(tokens, idx) {
-		return escapeHtml(tokens[idx].content);
+		return escapeHtml$2(tokens[idx].content);
 	},
 	html_block(tokens, idx) {
 		return tokens[idx].content;
@@ -6540,7 +6540,7 @@ function renderFenceSyncToken(token, options, _self) {
 	const info = token.info ? unescapeAll(token.info).trim() : "";
 	const { langName, langAttrs } = parseFenceInfo(info);
 	const highlight = options.highlight;
-	const fallback = escapeHtml(token.content);
+	const fallback = escapeHtml$2(token.content);
 	if (!highlight) return renderFence(token, fallback, info, langName, options);
 	const highlighted = highlight(token.content, langName, langAttrs);
 	if (isPromiseLike(highlighted)) throw new TypeError("Renderer rule \"fence\" returned a Promise. Use renderAsync() instead.");
@@ -6550,10 +6550,10 @@ function renderSingleInlineTokenSync(tokens, options, env, self, rules, inlineBr
 	const token = tokens[0];
 	switch (token.type) {
 		case "text":
-			if (rules.text === defaultRules.text) return token.content.length === 0 ? "" : escapeHtml(token.content);
+			if (rules.text === defaultRules.text) return token.content.length === 0 ? "" : escapeHtml$2(token.content);
 			break;
 		case "text_special":
-			if (rules.text_special === defaultRules.text_special) return token.content.length === 0 ? "" : escapeHtml(token.content);
+			if (rules.text_special === defaultRules.text_special) return token.content.length === 0 ? "" : escapeHtml$2(token.content);
 			break;
 		case "softbreak":
 			if (rules.softbreak === defaultRules.softbreak) return softbreak;
@@ -6653,13 +6653,13 @@ var Renderer = class {
 					switch (child.type) {
 						case "text":
 							if (textRule === defaultRules.text) {
-								result += escapeHtml(child.content);
+								result += escapeHtml$2(child.content);
 								continue;
 							}
 							break;
 						case "text_special":
 							if (textSpecialRule === defaultRules.text_special) {
-								result += escapeHtml(child.content);
+								result += escapeHtml$2(child.content);
 								continue;
 							}
 							break;
@@ -6780,15 +6780,15 @@ var Renderer = class {
 					else if (attrs.length === 1) {
 						const attr = attrs[0];
 						if (type === "ordered_list_open" && attr[0] === "start") {
-							result += `${prefix}<ol start="${escapeHtml(attr[1])}">\n`;
+							result += `${prefix}<ol start="${escapeHtml$2(attr[1])}">\n`;
 							continue;
 						}
 						if (type === "td_open" && attr[0] === "style") {
-							result += `${prefix}<td style="${escapeHtml(attr[1])}">`;
+							result += `${prefix}<td style="${escapeHtml$2(attr[1])}">`;
 							continue;
 						}
 						if (type === "th_open" && attr[0] === "style") {
-							result += `${prefix}<th style="${escapeHtml(attr[1])}">`;
+							result += `${prefix}<th style="${escapeHtml$2(attr[1])}">`;
 							continue;
 						}
 					}
@@ -6987,7 +6987,7 @@ var Renderer = class {
 			switch (token.type) {
 				case "text":
 					if (textRule === defaultRules.text) {
-						const escaped = token.content.length === 0 ? "" : escapeHtml(token.content);
+						const escaped = token.content.length === 0 ? "" : escapeHtml$2(token.content);
 						if (htmlInlineRule === defaultRules.html_inline && i + 1 < tokens.length && tokens[i + 1].type === "html_inline") {
 							result += escaped + tokens[++i].content;
 							while (i + 1 < tokens.length && tokens[i + 1].type === "html_inline") result += tokens[++i].content;
@@ -6999,7 +6999,7 @@ var Renderer = class {
 					break;
 				case "text_special":
 					if (textSpecialRule === defaultRules.text_special) {
-						if (token.content.length !== 0) result += escapeHtml(token.content);
+						if (token.content.length !== 0) result += escapeHtml$2(token.content);
 						continue;
 					}
 					break;
@@ -12848,6 +12848,13 @@ function parseLinkToken(tokens, startIndex, options) {
 		i++;
 	}
 	if (tokens[i]?.type === "link_close") loading = false;
+	const lastLinkToken = linkTokens[linkTokens.length - 1];
+	if (options?.__insideStrong && lastLinkToken?.type === "text" && String(lastLinkToken.content ?? "").endsWith("**") && !linkTokens.some((token) => token.type === "strong_open")) {
+		const originalContent = String(lastLinkToken.content ?? "");
+		const originalRaw = String(lastLinkToken.raw ?? originalContent);
+		lastLinkToken.content = originalContent.slice(0, -2);
+		lastLinkToken.raw = originalRaw.replace(/\*\*$/, "");
+	}
 	const children = parseInlineTokens(linkTokens, void 0, void 0, options);
 	const linkText = children.map((node) => {
 		const nodeAny = node;
@@ -12942,7 +12949,10 @@ function parseStrongToken(tokens, startIndex, raw, options) {
 		innerTokens.push(tokens[i]);
 		i++;
 	}
-	children.push(...parseInlineTokens(innerTokens, resolveInnerRaw(raw, strongText), void 0, options));
+	children.push(...parseInlineTokens(innerTokens, resolveInnerRaw(raw, strongText), void 0, {
+		...options,
+		__insideStrong: true
+	}));
 	return {
 		node: {
 			type: "strong",
@@ -13022,7 +13032,6 @@ function parseTextToken(token) {
 
 //#endregion
 //#region src/parser/inline-parsers/index.ts
-const STRONG_PAIR_RE = /\*\*([\s\S]*?)\*\*/;
 const STRIKETHROUGH_RE = /[^~]*~{2,}[^~]+/;
 const HAS_STRONG_RE = /\*\*/;
 const INLINE_REPARSE_MARKER_RE = /[[_*^~]/;
@@ -13041,6 +13050,9 @@ const ESCAPABLE_PUNCTUATION = new Set([
 	"-",
 	"!"
 ]);
+const WHITESPACE_RE = /\s/u;
+const ASCII_PUNCTUATION_RE = /[!"#$%&'()*+,\-./:;<=>?@[\\\]^_`{|}~]/;
+const UNICODE_PUNCTUATION_RE = /\p{P}/u;
 const AUTOLINK_PROTOCOL_RE = /^(?:https?:\/\/|mailto:|ftp:\/\/)/i;
 const AUTOLINK_GENERIC_RE = /:\/\//;
 function countUnescapedAsterisks(str) {
@@ -13077,6 +13089,72 @@ function findNextUnescapedAsterisk(rawContent, startContentIndex = 0) {
 	}
 	return -1;
 }
+function isWhitespaceChar(ch) {
+	return !!ch && WHITESPACE_RE.test(ch);
+}
+function isPunctuationChar(ch) {
+	return !!ch && (ASCII_PUNCTUATION_RE.test(ch) || UNICODE_PUNCTUATION_RE.test(ch));
+}
+function isEmphasisOpenDelimiter(content, index) {
+	const prev = index > 0 ? content[index - 1] : void 0;
+	const next = content[index + 1];
+	if (!next || isWhitespaceChar(next)) return false;
+	return !(isPunctuationChar(next) && !!prev && !isWhitespaceChar(prev) && !isPunctuationChar(prev));
+}
+function isEmphasisCloseDelimiter(content, index) {
+	const prev = index > 0 ? content[index - 1] : void 0;
+	const next = content[index + 1];
+	if (!prev || isWhitespaceChar(prev)) return false;
+	return !(isPunctuationChar(prev) && !!next && !isWhitespaceChar(next) && !isPunctuationChar(next));
+}
+function findNextUnescapedEmphasisClose(rawContent, content, startContentIndex = 0) {
+	let searchIndex = startContentIndex;
+	let sawInvalidClose = false;
+	while (searchIndex < content.length) {
+		const closeIndex = rawContent ? findNextUnescapedAsterisk(rawContent, searchIndex) : content.indexOf("*", searchIndex);
+		if (closeIndex === -1) break;
+		if (isEmphasisCloseDelimiter(content, closeIndex)) return {
+			index: closeIndex,
+			sawInvalidClose
+		};
+		sawInvalidClose = true;
+		searchIndex = closeIndex + 1;
+	}
+	return {
+		index: -1,
+		sawInvalidClose
+	};
+}
+function isStrongOpenDelimiter(content, index) {
+	const prev = index > 0 ? content[index - 1] : void 0;
+	const next = content[index + 2];
+	if (!next || isWhitespaceChar(next)) return false;
+	return !(isPunctuationChar(next) && !!prev && !isWhitespaceChar(prev) && !isPunctuationChar(prev));
+}
+function isStrongCloseDelimiter(content, index) {
+	const prev = index > 0 ? content[index - 1] : void 0;
+	const next = content[index + 2];
+	if (!prev || isWhitespaceChar(prev)) return false;
+	return !(isPunctuationChar(prev) && !!next && !isWhitespaceChar(next) && !isPunctuationChar(next));
+}
+function findNextStrongClose(content, startContentIndex = 0) {
+	let searchIndex = startContentIndex;
+	let sawInvalidClose = false;
+	while (searchIndex < content.length) {
+		const closeIndex = content.indexOf("**", searchIndex);
+		if (closeIndex === -1) break;
+		if (isStrongCloseDelimiter(content, closeIndex)) return {
+			index: closeIndex,
+			sawInvalidClose
+		};
+		sawInvalidClose = true;
+		searchIndex = closeIndex + 2;
+	}
+	return {
+		index: -1,
+		sawInvalidClose
+	};
+}
 function decodeVisibleTextFromRaw(rawText) {
 	let output = "";
 	let index = 0;
@@ -13148,6 +13226,42 @@ function getAsteriskRunInfo(content, start) {
 		intraword: isWordChar(prev) && isWordChar(next)
 	};
 }
+function findLiteralIntrawordAsteriskRunPairEnd(content) {
+	const runs = [];
+	for (let index = 0; index < content.length;) {
+		if (content[index] !== "*") {
+			index++;
+			continue;
+		}
+		const info = getAsteriskRunInfo(content, index);
+		const end = index + info.len;
+		if (info.len >= 2 && info.intraword) runs.push({
+			start: index,
+			end
+		});
+		index = end;
+	}
+	for (let index = 0; index < runs.length - 1; index++) {
+		const current = runs[index];
+		const next = runs[index + 1];
+		if (!isWordOnly(content.slice(current.end, next.start))) return next.end;
+	}
+	return -1;
+}
+function isTripleAsteriskInnerText(text$1) {
+	return !!text$1 && text$1.trim() === text$1 && /^[\p{L}\p{N}\s]+$/u.test(text$1);
+}
+function findTripleAsteriskClose(content, start) {
+	let searchIndex = start;
+	while (searchIndex < content.length) {
+		const index = content.indexOf("***", searchIndex);
+		if (index === -1) return -1;
+		const info = getAsteriskRunInfo(content, index);
+		if (info.len >= 3) return index;
+		searchIndex = index + info.len;
+	}
+	return -1;
+}
 function isLikelyUrl(href) {
 	if (!href) return false;
 	return AUTOLINK_PROTOCOL_RE.test(href) || AUTOLINK_GENERIC_RE.test(href);
@@ -13170,6 +13284,21 @@ function parseInlineTokens(tokens, raw, pPreToken, options) {
 	function handleEmphasisAndStrikethrough(content, token) {
 		const rawSource = tokens.length === 1 ? raw : String(token.content ?? "");
 		const markerCandidates = [];
+		const literalIntrawordRunPairEnd = findLiteralIntrawordAsteriskRunPairEnd(content);
+		if (literalIntrawordRunPairEnd !== -1) {
+			pushText(content.slice(0, literalIntrawordRunPairEnd), content.slice(0, literalIntrawordRunPairEnd));
+			const afterContent = content.slice(literalIntrawordRunPairEnd);
+			if (afterContent) {
+				handleToken({
+					type: "text",
+					content: afterContent,
+					raw: afterContent
+				});
+				i--;
+			}
+			i++;
+			return true;
+		}
 		if (STRIKETHROUGH_RE.test(content)) {
 			const idx = content.indexOf("~~");
 			if (idx !== -1) markerCandidates.push({
@@ -13287,13 +13416,92 @@ function parseInlineTokens(tokens, raw, pPreToken, options) {
 				}
 			}
 			const runInfo = getAsteriskRunInfo(content, openIdx);
-			const exec = STRONG_PAIR_RE.exec(content);
+			if (runInfo.len >= 3) {
+				const closeIndex = findTripleAsteriskClose(content, openIdx + runInfo.len);
+				if (closeIndex !== -1) {
+					const inner$1 = content.slice(openIdx + runInfo.len, closeIndex);
+					if (isTripleAsteriskInnerText(inner$1)) {
+						const { node: node$1 } = parseStrongToken([
+							{
+								type: "strong_open",
+								tag: "strong",
+								content: "",
+								markup: "**",
+								info: "",
+								meta: null
+							},
+							{
+								type: "em_open",
+								tag: "em",
+								content: "",
+								markup: "*",
+								info: "",
+								meta: null
+							},
+							{
+								type: "text",
+								tag: "",
+								content: inner$1,
+								markup: "",
+								info: "",
+								meta: null
+							},
+							{
+								type: "em_close",
+								tag: "em",
+								content: "",
+								markup: "*",
+								info: "",
+								meta: null
+							},
+							{
+								type: "strong_close",
+								tag: "strong",
+								content: "",
+								markup: "**",
+								info: "",
+								meta: null
+							}
+						], 0, raw, options);
+						resetCurrentTextNode();
+						pushNode(node$1);
+						const afterContent = content.slice(closeIndex + 3);
+						if (afterContent) {
+							handleToken({
+								type: "text",
+								content: afterContent,
+								raw: afterContent
+							});
+							i--;
+						}
+						i++;
+						return true;
+					}
+				}
+			}
+			if (!isStrongOpenDelimiter(content, openIdx)) {
+				const literalRun = content.slice(openIdx, openIdx + runInfo.len);
+				pushText(literalRun, literalRun);
+				const afterContent = content.slice(openIdx + runInfo.len);
+				if (afterContent) {
+					handleToken({
+						type: "text",
+						content: afterContent,
+						raw: afterContent
+					});
+					i--;
+				}
+				i++;
+				return true;
+			}
+			const close = findNextStrongClose(content, openIdx + 2);
 			let inner = "";
 			let after = "";
-			if (exec && typeof exec.index === "number") {
-				inner = exec[1];
-				after = content.slice(exec.index + exec[0].length);
-				const closeRunInfo = getAsteriskRunInfo(content, exec.index + exec[0].length - 2);
+			if (close.index !== -1) {
+				inner = content.slice(openIdx + 2, close.index);
+				after = content.slice(close.index + 2);
+				const closeIdx = close.index;
+				const closeRunInfo = getAsteriskRunInfo(content, closeIdx);
 				if (runInfo.intraword && closeRunInfo.intraword && !isWordOnly(inner)) {
 					pushText(content.slice(beforeText.length), content.slice(beforeText.length));
 					i++;
@@ -13305,7 +13513,7 @@ function parseInlineTokens(tokens, raw, pPreToken, options) {
 					return true;
 				}
 			} else {
-				if (requireClosingStrong) {
+				if (requireClosingStrong || close.sawInvalidClose) {
 					pushText(content.slice(beforeText.length), content.slice(beforeText.length));
 					i++;
 					return true;
@@ -13367,15 +13575,30 @@ function parseInlineTokens(tokens, raw, pPreToken, options) {
 			if (idx === -1) idx = 0;
 			const _text = content.slice(0, idx);
 			if (_text) pushText(_text, _text);
+			if (!isEmphasisOpenDelimiter(content, idx)) {
+				pushText(content[idx], content[idx]);
+				const afterContent = content.slice(idx + 1);
+				if (afterContent) {
+					handleToken({
+						type: "text",
+						content: afterContent,
+						raw: afterContent
+					});
+					i--;
+				}
+				i++;
+				return true;
+			}
 			const runInfo = getAsteriskRunInfo(content, idx);
-			const closeIndex = rawSource ? findNextUnescapedAsterisk(rawSource, idx + 1) : content.indexOf("*", idx + 1);
+			const close = findNextUnescapedEmphasisClose(rawSource, content, idx + 1);
+			const closeIndex = close.index;
 			const nextInlineToken = tokens[i + 1];
 			if (options?.final && nextInlineToken?.type === "em_open" && closeIndex !== -1 && content.slice(idx + 1, closeIndex).trim() !== content.slice(idx + 1, closeIndex)) {
 				pushText(content.slice(idx), content.slice(idx));
 				i++;
 				return true;
 			}
-			if (closeIndex === -1 && (options?.final || runInfo.intraword || !isWordChar(content[idx + 1]))) {
+			if (closeIndex === -1 && (close.sawInvalidClose || options?.final || runInfo.intraword || !isWordChar(content[idx + 1]))) {
 				pushText(content.slice(idx), content.slice(idx));
 				i++;
 				return true;
@@ -13392,7 +13615,7 @@ function parseInlineTokens(tokens, raw, pPreToken, options) {
 				{
 					type: "text",
 					tag: "",
-					content: content.slice(idx, closeIndex > -1 ? closeIndex + 1 : void 0).replace(/\*/g, ""),
+					content: closeIndex > -1 ? content.slice(idx + 1, closeIndex) : content.slice(idx + 1),
 					markup: "",
 					info: "",
 					meta: null
@@ -15300,7 +15523,7 @@ function normalizeIndentedSourceForLookup(value) {
 }
 function canFindNodeRawAfterSourceIndex(source, startIndex, nodeRaw) {
 	if (!nodeRaw) return false;
-	if (source.indexOf(nodeRaw, startIndex) !== -1) return true;
+	if (source.includes(nodeRaw, startIndex)) return true;
 	return normalizeIndentedSourceForLookup(source.slice(Math.max(0, startIndex))).includes(normalizeIndentedSourceForLookup(nodeRaw));
 }
 function extendHtmlBlockCloseToLineEnding(source, startIndex) {
@@ -15352,7 +15575,7 @@ const STRUCTURED_HTML_WRAPPER_BLOCK_TYPES = new Set([
 	"table",
 	"thematic_break"
 ]);
-const STRUCTURED_HTML_WRAPPER_MARKER_RE = /(?:^|\n)(?:\s{0,3}(?:#{1,6}\s+\S|[-+*]\s+\S|\d+[.)]\s+\S|>\s*\S|(?:`{3,}|~{3,})|(?:\*{3,}|-{3,}|_{3,})(?:\s|$)|\|.*\|))/m;
+const STRUCTURED_HTML_WRAPPER_MARKER_RE = /(?:^|\n)\s{0,3}(?:#{1,6}\s+\S|[-+*]\s+\S|\d+[.)]\s+\S|>\s*\S|`{3,}|~{3,}|(?:\*{3,}|-{3,}|_{3,})(?:\s|$)|\|.*\|)/m;
 function hasStructuredHtmlWrapperMarkers(fragment) {
 	return /\n\s*\n/.test(fragment) || STRUCTURED_HTML_WRAPPER_MARKER_RE.test(fragment);
 }
@@ -16501,6 +16724,38 @@ const CUSTOM_TAG_REGEX = /<([a-z][a-z0-9-]*)\b[^>]*>/gi;
 function hasOwn(obj, key) {
 	return Object.prototype.hasOwnProperty.call(obj, key);
 }
+function getString(value) {
+	return typeof value === "string" ? value : value == null ? "" : String(value);
+}
+function isSafeAttrName(value) {
+	return /^[^\s"'<>`=]+$/.test(value) && !/^on/i.test(value);
+}
+function escapeHtml(value) {
+	return getString(value).replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function escapeAttr(value) {
+	return escapeHtml(value).replace(/`/g, "&#96;");
+}
+function normalizeTagName(tagName) {
+	return String(tagName ?? "").trim().toLowerCase();
+}
+function serializeAttrs(attrs) {
+	const pairs = Object.entries(attrs);
+	if (pairs.length === 0) return "";
+	return pairs.map(([name, value]) => value === "" ? ` ${name}` : ` ${name}="${escapeAttr(value)}"`).join("");
+}
+function sanitizeHtmlContentAttrs(attrs) {
+	const clean = {};
+	for (const [key, value] of Object.entries(attrs)) {
+		const safeName = key.trim();
+		const lowerKey = safeName.toLowerCase();
+		if (!safeName || !isSafeAttrName(safeName)) continue;
+		if (DANGEROUS_HTML_ATTRS.has(lowerKey)) continue;
+		if (URL_HTML_ATTRS.has(lowerKey) && value && isUnsafeHtmlUrl(value)) continue;
+		clean[safeName] = value;
+	}
+	return clean;
+}
 function isCustomHtmlComponentTag(tagName, customComponents) {
 	const lowerTag = tagName.toLowerCase();
 	if (EXTENDED_STANDARD_HTML_TAGS.has(lowerTag)) return false;
@@ -16654,6 +16909,95 @@ function tokenizeHtml(html) {
 	}
 	return tokens;
 }
+function tokenizeHtmlPreservingText(html) {
+	const tokens = [];
+	let pos = 0;
+	while (pos < html.length) {
+		if (html.startsWith("<!--", pos)) {
+			const commentEnd = html.indexOf("-->", pos);
+			if (commentEnd !== -1) {
+				pos = commentEnd + 3;
+				continue;
+			}
+			break;
+		}
+		const tagStart = html.indexOf("<", pos);
+		if (tagStart === -1) {
+			if (pos < html.length) tokens.push({
+				type: "text",
+				content: html.slice(pos)
+			});
+			break;
+		}
+		if (tagStart > pos) tokens.push({
+			type: "text",
+			content: html.slice(pos, tagStart)
+		});
+		if (html.startsWith("![CDATA[", tagStart + 1)) {
+			const cdataEnd = html.indexOf("]]>", tagStart);
+			if (cdataEnd !== -1) {
+				tokens.push({
+					type: "text",
+					content: html.slice(tagStart, cdataEnd + 3)
+				});
+				pos = cdataEnd + 3;
+				continue;
+			}
+			break;
+		}
+		if (html.startsWith("!", tagStart + 1)) {
+			const specialEnd = html.indexOf(">", tagStart);
+			if (specialEnd !== -1) {
+				pos = specialEnd + 1;
+				continue;
+			}
+			break;
+		}
+		const tagEnd = html.indexOf(">", tagStart);
+		if (tagEnd === -1) break;
+		const tagContent = html.slice(tagStart + 1, tagEnd).trim();
+		if (!tagContent) {
+			pos = tagEnd + 1;
+			continue;
+		}
+		const isClosingTag$1 = tagContent.startsWith("/");
+		const isSelfClosing$1 = tagContent.endsWith("/");
+		if (isClosingTag$1) {
+			const tagName$1 = tagContent.slice(1).trim();
+			tokens.push({
+				type: "tag_close",
+				tagName: tagName$1
+			});
+			pos = tagEnd + 1;
+			continue;
+		}
+		const spaceIndex = tagContent.indexOf(" ");
+		let tagName = "";
+		let attrsStr = "";
+		if (spaceIndex === -1) tagName = isSelfClosing$1 ? tagContent.slice(0, -1).trim() : tagContent.trim();
+		else {
+			tagName = tagContent.slice(0, spaceIndex).trim();
+			attrsStr = tagContent.slice(spaceIndex + 1);
+		}
+		const attrs = {};
+		if (attrsStr) {
+			const attrRegex = /([^\s=]+)(?:=(?:"([^"]*)"|'([^']*)'|(\S*)))?/g;
+			let attrMatch;
+			while ((attrMatch = attrRegex.exec(attrsStr)) !== null) {
+				const name = attrMatch[1];
+				const value = attrMatch[2] ?? attrMatch[3] ?? attrMatch[4] ?? "";
+				if (name && !name.endsWith("/")) attrs[name] = value;
+			}
+		}
+		tokens.push({
+			type: isSelfClosing$1 || VOID_HTML_TAGS.has(tagName.toLowerCase()) ? "self_closing" : "tag_open",
+			tagName,
+			attrs
+		});
+		pos = tagEnd + 1;
+	}
+	return tokens;
+}
 function hasCustomHtmlComponents(content, customComponents) {
 	if (!content || !content.includes("<")) return false;
 	if (!customComponents || Object.keys(customComponents).length === 0) return false;
@@ -16662,6 +17006,49 @@ function hasCustomHtmlComponents(content, customComponents) {
 	while ((match = CUSTOM_TAG_REGEX.exec(content)) !== null) if (isCustomHtmlComponentTag(match[1], customComponents)) return true;
 	return false;
 }
+function sanitizeHtmlContent(content) {
+	if (!content) return "";
+	const tokens = tokenizeHtmlPreservingText(content);
+	const stack = [];
+	const output = [];
+	let blockedDepth = 0;
+	for (const token of tokens) {
+		if (token.type === "text") {
+			if (blockedDepth === 0) output.push(escapeHtml(token.content ?? ""));
+			continue;
+		}
+		const tagName = normalizeTagName(token.tagName);
+		if (!tagName) continue;
+		if (BLOCKED_HTML_TAGS.has(tagName)) {
+			if (token.type === "tag_open") blockedDepth += 1;
+			else if (token.type === "tag_close" && blockedDepth > 0) blockedDepth -= 1;
+			continue;
+		}
+		if (blockedDepth > 0) continue;
+		if (token.type === "self_closing") {
+			output.push(`<${tagName}${serializeAttrs(sanitizeHtmlContentAttrs(token.attrs ?? {}))}>`);
+			continue;
+		}
+		if (token.type === "tag_open") {
+			output.push(`<${tagName}${serializeAttrs(sanitizeHtmlContentAttrs(token.attrs ?? {}))}>`);
+			if (!VOID_HTML_TAGS.has(tagName)) stack.push(tagName);
+			continue;
+		}
+		const matchedIndex = stack.lastIndexOf(tagName);
+		if (matchedIndex === -1) continue;
+		while (stack.length > matchedIndex + 1) {
+			const danglingTag = stack.pop();
+			if (danglingTag) output.push(`</${danglingTag}>`);
+		}
+		const closingTag = stack.pop();
+		if (closingTag) output.push(`</${closingTag}>`);
+	}
+	while (stack.length > 0) {
+		const danglingTag = stack.pop();
+		if (danglingTag) output.push(`</${danglingTag}>`);
+	}
+	return output.join("");
+}
 
 //#endregion
 //#region src/index.ts
@@ -16804,5 +17191,5 @@ function getMarkdown(msgId = `editor-${Date.now()}`, options = {}) {
 }
 
 //#endregion
-export { BLOCKED_HTML_TAGS, BLOCKED_HTML_TAG_NAMES, BLOCK_HTML_TAG_NAMES, DANGEROUS_HTML_ATTRS, DANGEROUS_HTML_ATTR_NAMES, ESCAPED_TEX_BRACE_COMMANDS, EXTENDED_STANDARD_HTML_TAGS, EXTENDED_STANDARD_HTML_TAG_NAMES, INLINE_HTML_TAG_NAMES, KATEX_COMMANDS, NON_STRUCTURING_HTML_TAGS, NON_STRUCTURING_HTML_TAG_NAMES, STANDARD_BLOCK_HTML_TAGS, STANDARD_HTML_TAGS, SVG_HTML_TAG_NAMES, TEX_BRACE_COMMANDS, URL_HTML_ATTRS, URL_HTML_ATTR_NAMES, VOID_HTML_TAGS, VOID_HTML_TAG_NAMES, applyContainers, applyMath, clearRegisteredMarkdownPlugins, convertHtmlAttrsToProps, convertHtmlPropValue, findMatchingClose, getHtmlTagFromContent, getMarkdown, hasCompleteHtmlTagContent, hasCustomHtmlComponents, isCustomHtmlComponentTag, isHtmlLikeTagName, isMathLike, isUnsafeHtmlUrl, mergeCustomHtmlTags, normalizeCustomHtmlTagName, normalizeCustomHtmlTags, normalizeStandaloneBackslashT, parseFenceToken, parseInlineTokens, parseMarkdownToStructure, processTokens, registerMarkdownPlugin, resolveCustomHtmlTags, sanitizeHtmlAttrs, sanitizeHtmlTokenAttrs, setDefaultMathOptions, shouldRenderUnknownHtmlTagAsText, stripCustomHtmlWrapper, stripHtmlControlAndWhitespace, tokenAttrsToRecord, tokenizeHtml };
+export { BLOCKED_HTML_TAGS, BLOCKED_HTML_TAG_NAMES, BLOCK_HTML_TAG_NAMES, DANGEROUS_HTML_ATTRS, DANGEROUS_HTML_ATTR_NAMES, ESCAPED_TEX_BRACE_COMMANDS, EXTENDED_STANDARD_HTML_TAGS, EXTENDED_STANDARD_HTML_TAG_NAMES, INLINE_HTML_TAG_NAMES, KATEX_COMMANDS, NON_STRUCTURING_HTML_TAGS, NON_STRUCTURING_HTML_TAG_NAMES, STANDARD_BLOCK_HTML_TAGS, STANDARD_HTML_TAGS, SVG_HTML_TAG_NAMES, TEX_BRACE_COMMANDS, URL_HTML_ATTRS, URL_HTML_ATTR_NAMES, VOID_HTML_TAGS, VOID_HTML_TAG_NAMES, applyContainers, applyMath, clearRegisteredMarkdownPlugins, convertHtmlAttrsToProps, convertHtmlPropValue, findMatchingClose, getHtmlTagFromContent, getMarkdown, hasCompleteHtmlTagContent, hasCustomHtmlComponents, isCustomHtmlComponentTag, isHtmlLikeTagName, isMathLike, isUnsafeHtmlUrl, mergeCustomHtmlTags, normalizeCustomHtmlTagName, normalizeCustomHtmlTags, normalizeStandaloneBackslashT, parseFenceToken, parseInlineTokens, parseMarkdownToStructure, processTokens, registerMarkdownPlugin, resolveCustomHtmlTags, sanitizeHtmlAttrs, sanitizeHtmlContent, sanitizeHtmlTokenAttrs, setDefaultMathOptions, shouldRenderUnknownHtmlTagAsText, stripCustomHtmlWrapper, stripHtmlControlAndWhitespace, tokenAttrsToRecord, tokenizeHtml };
 //# sourceMappingURL=index.js.map