super-agent-sdk 1.0.19 → 1.0.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +41 -26
- package/dist/index.cjs +3 -3
- package/dist/index.d.ts +7 -6
- package/dist/index.mjs +166 -161
- package/dist/{mammoth.browser-ClkRBm1A.cjs → mammoth.browser-BWTaSUmQ.cjs} +63 -63
- package/dist/{mammoth.browser-BmR8YfeV.js → mammoth.browser-DFPCY35d.js} +3725 -3708
- package/dist/{nosUploader-CgVOa1Lz.cjs → nosUploader-DLX7JsnR.cjs} +5 -5
- package/dist/{nosUploader-CnYDALPr.js → nosUploader-DjJ7u2B1.js} +137 -137
- package/dist/purify.es-BnmCBz16.cjs +3 -0
- package/dist/{purify.es-C-6FFqDW.js → purify.es-CImoWRjX.js} +214 -205
- package/dist/widget.cjs +47 -21
- package/dist/widget.d.ts +49 -10
- package/dist/widget.mjs +3457 -3329
- package/package.json +1 -1
- package/dist/purify.es-Dsdnkgrg.cjs +0 -3
|
@@ -1,23 +1,23 @@
|
|
|
1
|
-
/*! @license DOMPurify 3.4.
|
|
2
|
-
function
|
|
1
|
+
/*! @license DOMPurify 3.4.15 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.15/LICENSE */
|
|
2
|
+
function Ye(r, i) {
|
|
3
3
|
(i == null || i > r.length) && (i = r.length);
|
|
4
4
|
for (var s = 0, c = Array(i); s < i; s++) c[s] = r[s];
|
|
5
5
|
return c;
|
|
6
6
|
}
|
|
7
|
-
function
|
|
7
|
+
function Hn(r) {
|
|
8
8
|
if (Array.isArray(r)) return r;
|
|
9
9
|
}
|
|
10
|
-
function
|
|
10
|
+
function Wn(r, i) {
|
|
11
11
|
var s = r == null ? null : typeof Symbol < "u" && r[Symbol.iterator] || r["@@iterator"];
|
|
12
12
|
if (s != null) {
|
|
13
|
-
var c, f, d, y, st = [],
|
|
13
|
+
var c, f, d, y, st = [], I = !0, lt = !1;
|
|
14
14
|
try {
|
|
15
|
-
if (d = (s = s.call(r)).next, i !== 0) for (; !(
|
|
15
|
+
if (d = (s = s.call(r)).next, i !== 0) for (; !(I = (c = d.call(s)).done) && (st.push(c.value), st.length !== i); I = !0) ;
|
|
16
16
|
} catch (xt) {
|
|
17
17
|
lt = !0, f = xt;
|
|
18
18
|
} finally {
|
|
19
19
|
try {
|
|
20
|
-
if (!
|
|
20
|
+
if (!I && s.return != null && (y = s.return(), Object(y) !== y)) return;
|
|
21
21
|
} finally {
|
|
22
22
|
if (lt) throw f;
|
|
23
23
|
}
|
|
@@ -25,22 +25,22 @@ function zn(r, i) {
|
|
|
25
25
|
return st;
|
|
26
26
|
}
|
|
27
27
|
}
|
|
28
|
-
function
|
|
28
|
+
function Gn() {
|
|
29
29
|
throw new TypeError(`Invalid attempt to destructure non-iterable instance.
|
|
30
30
|
In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`);
|
|
31
31
|
}
|
|
32
|
-
function
|
|
33
|
-
return
|
|
32
|
+
function Bn(r, i) {
|
|
33
|
+
return Hn(r) || Wn(r, i) || Yn(r, i) || Gn();
|
|
34
34
|
}
|
|
35
|
-
function
|
|
35
|
+
function Yn(r, i) {
|
|
36
36
|
if (r) {
|
|
37
|
-
if (typeof r == "string") return
|
|
37
|
+
if (typeof r == "string") return Ye(r, i);
|
|
38
38
|
var s = {}.toString.call(r).slice(8, -1);
|
|
39
|
-
return s === "Object" && r.constructor && (s = r.constructor.name), s === "Map" || s === "Set" ? Array.from(r) : s === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(s) ?
|
|
39
|
+
return s === "Object" && r.constructor && (s = r.constructor.name), s === "Map" || s === "Set" ? Array.from(r) : s === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(s) ? Ye(r, i) : void 0;
|
|
40
40
|
}
|
|
41
41
|
}
|
|
42
|
-
const
|
|
43
|
-
let S = Object.freeze, b = Object.seal, it = Object.create,
|
|
42
|
+
const an = Object.entries, je = Object.setPrototypeOf, jn = Object.isFrozen, $n = Object.getPrototypeOf, Xn = Object.getOwnPropertyDescriptor;
|
|
43
|
+
let S = Object.freeze, b = Object.seal, it = Object.create, sn = typeof Reflect < "u" && Reflect, se = sn.apply, le = sn.construct;
|
|
44
44
|
S || (S = function(i) {
|
|
45
45
|
return i;
|
|
46
46
|
});
|
|
@@ -57,7 +57,7 @@ le || (le = function(i) {
|
|
|
57
57
|
c[f - 1] = arguments[f];
|
|
58
58
|
return new i(...c);
|
|
59
59
|
});
|
|
60
|
-
const V = A(Array.prototype.forEach),
|
|
60
|
+
const V = A(Array.prototype.forEach), Vn = A(Array.prototype.lastIndexOf), $e = A(Array.prototype.pop), dt = A(Array.prototype.push), qn = A(Array.prototype.splice), at = Array.isArray, _t = A(String.prototype.toLowerCase), ee = A(String.prototype.toString), Xe = A(String.prototype.match), Tt = A(String.prototype.replace), Ve = A(String.prototype.indexOf), Kn = A(String.prototype.trim), Zn = A(Number.prototype.toString), Jn = A(Boolean.prototype.toString), qe = typeof BigInt > "u" ? null : A(BigInt.prototype.toString), Ke = typeof Symbol > "u" ? null : A(Symbol.prototype.toString), N = A(Object.prototype.hasOwnProperty), ht = A(Object.prototype.toString), O = A(RegExp.prototype.test), X = Qn(TypeError);
|
|
61
61
|
function A(r) {
|
|
62
62
|
return function(i) {
|
|
63
63
|
i instanceof RegExp && (i.lastIndex = 0);
|
|
@@ -66,7 +66,7 @@ function A(r) {
|
|
|
66
66
|
return se(r, i, c);
|
|
67
67
|
};
|
|
68
68
|
}
|
|
69
|
-
function
|
|
69
|
+
function Qn(r) {
|
|
70
70
|
return function() {
|
|
71
71
|
for (var i = arguments.length, s = new Array(i), c = 0; c < i; c++)
|
|
72
72
|
s[c] = arguments[c];
|
|
@@ -75,45 +75,45 @@ function Zn(r) {
|
|
|
75
75
|
}
|
|
76
76
|
function p(r, i) {
|
|
77
77
|
let s = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : _t;
|
|
78
|
-
if (
|
|
78
|
+
if (je && je(r, null), !at(i))
|
|
79
79
|
return r;
|
|
80
80
|
let c = i.length;
|
|
81
81
|
for (; c--; ) {
|
|
82
82
|
let f = i[c];
|
|
83
83
|
if (typeof f == "string") {
|
|
84
84
|
const d = s(f);
|
|
85
|
-
d !== f && (
|
|
85
|
+
d !== f && (jn(i) || (i[c] = d), f = d);
|
|
86
86
|
}
|
|
87
87
|
r[f] = !0;
|
|
88
88
|
}
|
|
89
89
|
return r;
|
|
90
90
|
}
|
|
91
|
-
function
|
|
91
|
+
function to(r) {
|
|
92
92
|
for (let i = 0; i < r.length; i++)
|
|
93
|
-
|
|
93
|
+
N(r, i) || (r[i] = null);
|
|
94
94
|
return r;
|
|
95
95
|
}
|
|
96
96
|
function C(r) {
|
|
97
97
|
const i = it(null);
|
|
98
|
-
for (const c of
|
|
99
|
-
var s =
|
|
98
|
+
for (const c of an(r)) {
|
|
99
|
+
var s = Bn(c, 2);
|
|
100
100
|
const f = s[0], d = s[1];
|
|
101
|
-
|
|
101
|
+
N(r, f) && (at(d) ? i[f] = to(d) : d && typeof d == "object" && d.constructor === Object ? i[f] = C(d) : i[f] = d);
|
|
102
102
|
}
|
|
103
103
|
return i;
|
|
104
104
|
}
|
|
105
|
-
function
|
|
105
|
+
function eo(r) {
|
|
106
106
|
switch (typeof r) {
|
|
107
107
|
case "string":
|
|
108
108
|
return r;
|
|
109
109
|
case "number":
|
|
110
|
-
return
|
|
110
|
+
return Zn(r);
|
|
111
111
|
case "boolean":
|
|
112
|
-
return
|
|
112
|
+
return Jn(r);
|
|
113
113
|
case "bigint":
|
|
114
|
-
return
|
|
114
|
+
return qe ? qe(r) : "0";
|
|
115
115
|
case "symbol":
|
|
116
|
-
return
|
|
116
|
+
return Ke ? Ke(r) : "Symbol()";
|
|
117
117
|
case "undefined":
|
|
118
118
|
return ht(r);
|
|
119
119
|
case "function":
|
|
@@ -133,34 +133,34 @@ function Qn(r) {
|
|
|
133
133
|
}
|
|
134
134
|
function P(r, i) {
|
|
135
135
|
for (; r !== null; ) {
|
|
136
|
-
const c =
|
|
136
|
+
const c = Xn(r, i);
|
|
137
137
|
if (c) {
|
|
138
138
|
if (c.get)
|
|
139
139
|
return A(c.get);
|
|
140
140
|
if (typeof c.value == "function")
|
|
141
141
|
return A(c.value);
|
|
142
142
|
}
|
|
143
|
-
r =
|
|
143
|
+
r = $n(r);
|
|
144
144
|
}
|
|
145
145
|
function s() {
|
|
146
146
|
return null;
|
|
147
147
|
}
|
|
148
148
|
return s;
|
|
149
149
|
}
|
|
150
|
-
function
|
|
150
|
+
function no(r) {
|
|
151
151
|
try {
|
|
152
152
|
return O(r, ""), !0;
|
|
153
153
|
} catch {
|
|
154
154
|
return !1;
|
|
155
155
|
}
|
|
156
156
|
}
|
|
157
|
-
const
|
|
157
|
+
const Ze = S(["a", "abbr", "acronym", "address", "area", "article", "aside", "audio", "b", "bdi", "bdo", "big", "blink", "blockquote", "body", "br", "button", "canvas", "caption", "center", "cite", "code", "col", "colgroup", "content", "data", "datalist", "dd", "decorator", "del", "details", "dfn", "dialog", "dir", "div", "dl", "dt", "element", "em", "fieldset", "figcaption", "figure", "font", "footer", "form", "h1", "h2", "h3", "h4", "h5", "h6", "head", "header", "hgroup", "hr", "html", "i", "img", "input", "ins", "kbd", "label", "legend", "li", "main", "map", "mark", "marquee", "menu", "menuitem", "meter", "nav", "nobr", "ol", "optgroup", "option", "output", "p", "picture", "pre", "progress", "q", "rp", "rt", "ruby", "s", "samp", "search", "section", "select", "shadow", "slot", "small", "source", "spacer", "span", "strike", "strong", "style", "sub", "summary", "sup", "table", "tbody", "td", "template", "textarea", "tfoot", "th", "thead", "time", "tr", "track", "tt", "u", "ul", "var", "video", "wbr"]), ne = S(["svg", "a", "altglyph", "altglyphdef", "altglyphitem", "animatecolor", "animatemotion", "animatetransform", "circle", "clippath", "defs", "desc", "ellipse", "enterkeyhint", "exportparts", "filter", "font", "g", "glyph", "glyphref", "hkern", "image", "inputmode", "line", "lineargradient", "marker", "mask", "metadata", "mpath", "part", "path", "pattern", "polygon", "polyline", "radialgradient", "rect", "stop", "style", "switch", "symbol", "text", "textpath", "title", "tref", "tspan", "view", "vkern"]), oe = S(["feBlend", "feColorMatrix", "feComponentTransfer", "feComposite", "feConvolveMatrix", "feDiffuseLighting", "feDisplacementMap", "feDistantLight", "feDropShadow", "feFlood", "feFuncA", "feFuncB", "feFuncG", "feFuncR", "feGaussianBlur", "feImage", "feMerge", "feMergeNode", "feMorphology", "feOffset", "fePointLight", "feSpecularLighting", "feSpotLight", "feTile", "feTurbulence"]), oo = S(["animate", "color-profile", "cursor", "discard", "font-face", "font-face-format", "font-face-name", "font-face-src", "font-face-uri", "foreignobject", "hatch", "hatchpath", "mesh", "meshgradient", "meshpatch", "meshrow", "missing-glyph", "script", "set", "solidcolor", "unknown", "use"]), re = S(["math", "menclose", "merror", "mfenced", "mfrac", "mglyph", "mi", "mlabeledtr", "mmultiscripts", "mn", "mo", "mover", "mpadded", "mphantom", "mroot", "mrow", "ms", "mspace", "msqrt", "mstyle", "msub", "msup", "msubsup", "mtable", "mtd", "mtext", "mtr", "munder", "munderover", "mprescripts"]), ro = S(["maction", "maligngroup", "malignmark", "mlongdiv", "mscarries", "mscarry", "msgroup", "mstack", "msline", "msrow", "semantics", "annotation", "annotation-xml", "mprescripts", "none"]), Je = S(["#text"]), Qe = S(["accept", "action", "align", "alt", "autocapitalize", "autocomplete", "autopictureinpicture", "autoplay", "background", "bgcolor", "border", "capture", "cellpadding", "cellspacing", "checked", "cite", "class", "clear", "color", "cols", "colspan", "command", "commandfor", "controls", "controlslist", "coords", "crossorigin", "datetime", "decoding", "default", "dir", "disabled", "disablepictureinpicture", "disableremoteplayback", "download", "draggable", "enctype", "enterkeyhint", "exportparts", "face", "for", "headers", "height", "hidden", "high", "href", "hreflang", "id", "inert", "inputmode", "integrity", "ismap", "kind", "label", "lang", "list", "loading", "loop", "low", "max", "maxlength", "media", "method", "min", "minlength", "multiple", "muted", "name", "nonce", "noshade", "novalidate", "nowrap", "open", "optimum", "part", "pattern", "placeholder", "playsinline", "popover", "popovertarget", "popovertargetaction", "poster", "preload", "pubdate", "radiogroup", "readonly", "rel", "required", "rev", "reversed", "role", "rows", "rowspan", "spellcheck", "scope", "selected", "shape", "size", "sizes", "slot", "span", "srclang", "start", "src", "srcset", "step", "style", "summary", "tabindex", "title", "translate", "type", "usemap", "valign", "value", "width", "wrap", "xmlns"]), ie = S(["accent-height", "accumulate", "additive", "alignment-baseline", "amplitude", "ascent", "attributename", "attributetype", "azimuth", "basefrequency", "baseline-shift", "begin", "bias", "by", "class", "clip", "clippathunits", "clip-path", "clip-rule", "color", "color-interpolation", "color-interpolation-filters", "color-profile", "color-rendering", "cx", "cy", "d", "dx", "dy", "diffuseconstant", "direction", "display", "divisor", "dominant-baseline", "dur", "edgemode", "elevation", "end", "exponent", "fill", "fill-opacity", "fill-rule", "filter", "filterunits", "flood-color", "flood-opacity", "font-family", "font-size", "font-size-adjust", "font-stretch", "font-style", "font-variant", "font-weight", "fx", "fy", "g1", "g2", "glyph-name", "glyphref", "gradientunits", "gradienttransform", "height", "href", "id", "image-rendering", "in", "in2", "intercept", "k", "k1", "k2", "k3", "k4", "kerning", "keypoints", "keysplines", "keytimes", "lang", "lengthadjust", "letter-spacing", "kernelmatrix", "kernelunitlength", "lighting-color", "local", "marker-end", "marker-mid", "marker-start", "markerheight", "markerunits", "markerwidth", "maskcontentunits", "maskunits", "max", "mask", "mask-type", "media", "method", "mode", "min", "name", "numoctaves", "offset", "operator", "opacity", "order", "orient", "orientation", "origin", "overflow", "paint-order", "path", "pathlength", "patterncontentunits", "patterntransform", "patternunits", "pointer-events", "points", "preservealpha", "preserveaspectratio", "primitiveunits", "r", "rx", "ry", "radius", "refx", "refy", "repeatcount", "repeatdur", "restart", "result", "rotate", "scale", "seed", "shape-rendering", "slope", "specularconstant", "specularexponent", "spreadmethod", "startoffset", "stddeviation", "stitchtiles", "stop-color", "stop-opacity", "stroke-dasharray", "stroke-dashoffset", "stroke-linecap", "stroke-linejoin", "stroke-miterlimit", "stroke-opacity", "stroke", "stroke-width", "style", "surfacescale", "systemlanguage", "tabindex", "tablevalues", "targetx", "targety", "transform", "transform-origin", "text-anchor", "text-decoration", "text-orientation", "text-rendering", "textlength", "type", "u1", "u2", "unicode", "values", "vector-effect", "viewbox", "visibility", "version", "vert-adv-y", "vert-origin-x", "vert-origin-y", "width", "word-spacing", "wrap", "writing-mode", "xchannelselector", "ychannelselector", "x", "x1", "x2", "xmlns", "y", "y1", "y2", "z", "zoomandpan"]), tn = S(["accent", "accentunder", "align", "bevelled", "close", "columnalign", "columnlines", "columnspacing", "columnspan", "denomalign", "depth", "dir", "display", "displaystyle", "encoding", "fence", "frame", "height", "href", "id", "largeop", "length", "linethickness", "lquote", "lspace", "mathbackground", "mathcolor", "mathsize", "mathvariant", "maxsize", "minsize", "movablelimits", "notation", "numalign", "open", "rowalign", "rowlines", "rowspacing", "rowspan", "rspace", "rquote", "scriptlevel", "scriptminsize", "scriptsizemultiplier", "selection", "separator", "separators", "stretchy", "subscriptshift", "supscriptshift", "symmetric", "voffset", "width", "xmlns"]), Pt = S(["xlink:href", "xml:id", "xlink:title", "xml:space", "xmlns:xlink"]), io = b(/{{[\w\W]*|^[\w\W]*}}/g), ao = b(/<%[\w\W]*|^[\w\W]*%>/g), so = b(/\${[\w\W]*/g), lo = b(/^data-[\-\w.\u00B7-\uFFFF]+$/), co = b(/^aria-[\-\w]+$/), en = b(
|
|
158
158
|
/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp|matrix):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i
|
|
159
159
|
// eslint-disable-line no-useless-escape
|
|
160
|
-
),
|
|
160
|
+
), uo = b(/^(?:\w+script|data):/i), fo = b(
|
|
161
161
|
/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g
|
|
162
162
|
// eslint-disable-line no-control-regex
|
|
163
|
-
),
|
|
163
|
+
), po = b(/^html$/i), mo = b(/^[a-z][.\w]*(-[.\w]+)+$/i), nn = b(/<[/\w!]/g), on = b(/<[/\w]/g), To = b(/<\/no(script|embed|frames)/i), ho = b(/\/>/i), M = {
|
|
164
164
|
element: 1,
|
|
165
165
|
attribute: 2,
|
|
166
166
|
text: 3,
|
|
@@ -176,14 +176,14 @@ const qe = S(["a", "abbr", "acronym", "address", "area", "article", "aside", "au
|
|
|
176
176
|
documentFragment: 11,
|
|
177
177
|
notation: 12
|
|
178
178
|
// Deprecated
|
|
179
|
-
},
|
|
179
|
+
}, ln = ["style", "script", "xmp", "iframe", "noembed", "noframes", "plaintext", "noscript"], _o = S(p({}, ln)), go = function() {
|
|
180
180
|
const r = {};
|
|
181
|
-
return V(
|
|
181
|
+
return V(ln, (i) => {
|
|
182
182
|
r[i] = b(new RegExp("</" + i + "(?=[\\t\\n\\f\\r />])", "i"));
|
|
183
183
|
}), S(r);
|
|
184
|
-
}(),
|
|
184
|
+
}(), Eo = function() {
|
|
185
185
|
return typeof window > "u" ? null : window;
|
|
186
|
-
},
|
|
186
|
+
}, Ao = function(i, s) {
|
|
187
187
|
if (typeof i != "object" || typeof i.createPolicy != "function")
|
|
188
188
|
return null;
|
|
189
189
|
let c = null;
|
|
@@ -202,7 +202,7 @@ const qe = S(["a", "abbr", "acronym", "address", "area", "article", "aside", "au
|
|
|
202
202
|
} catch {
|
|
203
203
|
return console.warn("TrustedTypes policy " + d + " could not be created."), null;
|
|
204
204
|
}
|
|
205
|
-
},
|
|
205
|
+
}, rn = function() {
|
|
206
206
|
return {
|
|
207
207
|
afterSanitizeAttributes: [],
|
|
208
208
|
afterSanitizeElements: [],
|
|
@@ -214,24 +214,24 @@ const qe = S(["a", "abbr", "acronym", "address", "area", "article", "aside", "au
|
|
|
214
214
|
uponSanitizeElement: [],
|
|
215
215
|
uponSanitizeShadowNode: []
|
|
216
216
|
};
|
|
217
|
-
},
|
|
218
|
-
return
|
|
217
|
+
}, W = function(i, s, c, f) {
|
|
218
|
+
return N(i, s) && at(i[s]) ? p(f.base ? C(f.base) : {}, i[s], f.transform) : c;
|
|
219
219
|
}, ae = function(i, s, c) {
|
|
220
|
-
const f =
|
|
220
|
+
const f = N(i, s) ? i[s] : void 0;
|
|
221
221
|
return f && typeof f == "object" ? C(f) : c();
|
|
222
222
|
};
|
|
223
|
-
function
|
|
224
|
-
let r = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] :
|
|
225
|
-
const i = (o) =>
|
|
226
|
-
if (i.version = "3.4.
|
|
223
|
+
function cn() {
|
|
224
|
+
let r = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : Eo();
|
|
225
|
+
const i = (o) => cn(o);
|
|
226
|
+
if (i.version = "3.4.15", i.removed = [], !r || !r.document || r.document.nodeType !== M.document || !r.Element)
|
|
227
227
|
return i.isSupported = !1, i;
|
|
228
228
|
let s = r.document;
|
|
229
229
|
const c = s, f = c.currentScript;
|
|
230
230
|
r.DocumentFragment;
|
|
231
|
-
const d = r.HTMLTemplateElement, y = r.Node, st = r.Element,
|
|
231
|
+
const d = r.HTMLTemplateElement, y = r.Node, st = r.Element, I = r.NodeFilter, lt = r.NamedNodeMap;
|
|
232
232
|
lt === void 0 && (r.NamedNodeMap || r.MozNamedAttrMap), r.HTMLFormElement;
|
|
233
|
-
const xt = r.DOMParser, gt = r.trustedTypes,
|
|
234
|
-
return
|
|
233
|
+
const xt = r.DOMParser, gt = r.trustedTypes, U = st.prototype, un = P(U, "cloneNode"), vt = P(U, "remove"), ce = P(U, "removeAttributeNode"), fn = P(U, "nextSibling"), q = P(U, "childNodes"), K = P(U, "parentNode"), ue = P(U, "shadowRoot"), kt = P(U, "attributes"), G = y && y.prototype ? P(y.prototype, "nodeType") : null, Z = y && y.prototype ? P(y.prototype, "nodeName") : null, Et = y && y.prototype ? P(y.prototype, "ownerDocument") : null, ct = function(t) {
|
|
234
|
+
return G ? G(t) : t.nodeType;
|
|
235
235
|
}, Ut = function(t) {
|
|
236
236
|
return Z ? Z(t) : t.nodeName;
|
|
237
237
|
};
|
|
@@ -239,34 +239,34 @@ function sn() {
|
|
|
239
239
|
const o = s.createElement("template");
|
|
240
240
|
o.content && o.content.ownerDocument && (s = o.content.ownerDocument);
|
|
241
241
|
}
|
|
242
|
-
let L, B = "", Ft,
|
|
243
|
-
const
|
|
242
|
+
let L, B = "", Ft, fe = !1, ut = 0;
|
|
243
|
+
const pe = function() {
|
|
244
244
|
if (ut > 0)
|
|
245
245
|
throw X('A configured TRUSTED_TYPES_POLICY callback (createHTML or createScriptURL) must not call DOMPurify.sanitize, as that causes infinite recursion. Do not pass a policy whose callbacks wrap DOMPurify as TRUSTED_TYPES_POLICY; see the "DOMPurify and Trusted Types" section of the README.');
|
|
246
246
|
}, J = function(t) {
|
|
247
|
-
|
|
247
|
+
pe(), ut++;
|
|
248
248
|
try {
|
|
249
249
|
return L.createHTML(t);
|
|
250
250
|
} finally {
|
|
251
251
|
ut--;
|
|
252
252
|
}
|
|
253
|
-
},
|
|
254
|
-
|
|
253
|
+
}, pn = function(t) {
|
|
254
|
+
pe(), ut++;
|
|
255
255
|
try {
|
|
256
256
|
return L.createScriptURL(t);
|
|
257
257
|
} finally {
|
|
258
258
|
ut--;
|
|
259
259
|
}
|
|
260
|
-
},
|
|
261
|
-
return
|
|
262
|
-
}, At = s, zt = At.implementation,
|
|
263
|
-
let T =
|
|
264
|
-
i.isSupported = typeof
|
|
265
|
-
const
|
|
266
|
-
let
|
|
267
|
-
const Ht = p({}, [...
|
|
260
|
+
}, mn = function() {
|
|
261
|
+
return fe || (Ft = Ao(gt, f), fe = !0), Ft;
|
|
262
|
+
}, At = s, zt = At.implementation, me = At.createNodeIterator, dn = At.createDocumentFragment, Tn = At.getElementsByTagName, hn = c.importNode;
|
|
263
|
+
let T = rn();
|
|
264
|
+
i.isSupported = typeof an == "function" && typeof K == "function" && zt && zt.createHTMLDocument !== void 0;
|
|
265
|
+
const _n = io, gn = ao, En = so, An = lo, yn = co, Sn = uo, de = fo, bn = mo;
|
|
266
|
+
let Te = en, h = null;
|
|
267
|
+
const Ht = p({}, [...Ze, ...ne, ...oe, ...re, ...Je]);
|
|
268
268
|
let _ = null;
|
|
269
|
-
const
|
|
269
|
+
const Wt = p({}, [...Qe, ...ie, ...tn, ...Pt]);
|
|
270
270
|
let x = Object.seal(it(null, {
|
|
271
271
|
tagNameCheck: {
|
|
272
272
|
writable: !0,
|
|
@@ -286,8 +286,8 @@ function sn() {
|
|
|
286
286
|
enumerable: !0,
|
|
287
287
|
value: !1
|
|
288
288
|
}
|
|
289
|
-
})), ft = null,
|
|
290
|
-
const
|
|
289
|
+
})), ft = null, he = null;
|
|
290
|
+
const F = Object.seal(it(null, {
|
|
291
291
|
tagCheck: {
|
|
292
292
|
writable: !0,
|
|
293
293
|
configurable: !1,
|
|
@@ -301,10 +301,10 @@ function sn() {
|
|
|
301
301
|
value: null
|
|
302
302
|
}
|
|
303
303
|
}));
|
|
304
|
-
let
|
|
305
|
-
const
|
|
304
|
+
let _e = !0, Gt = !0, ge = !1, Ee = !0, z = !1, Y = !0, j = !1, Bt = !1, yt = null, St = null, Yt = !1, Q = !1, bt = !1, Ot = !1, Ae = !0, ye = !1;
|
|
305
|
+
const Se = "user-content-";
|
|
306
306
|
let jt = !0, $t = !1, tt = {}, et = null;
|
|
307
|
-
const
|
|
307
|
+
const be = p({}, [
|
|
308
308
|
"annotation-xml",
|
|
309
309
|
"audio",
|
|
310
310
|
"colgroup",
|
|
@@ -341,57 +341,57 @@ function sn() {
|
|
|
341
341
|
"video",
|
|
342
342
|
"xmp"
|
|
343
343
|
]);
|
|
344
|
-
let
|
|
345
|
-
const
|
|
346
|
-
let
|
|
347
|
-
const
|
|
344
|
+
let Oe = null;
|
|
345
|
+
const Re = p({}, ["audio", "video", "img", "source", "image", "track"]);
|
|
346
|
+
let Le = null;
|
|
347
|
+
const De = p({}, ["alt", "class", "for", "id", "label", "name", "pattern", "placeholder", "role", "summary", "title", "value", "style", "xmlns"]), Rt = "http://www.w3.org/1998/Math/MathML", Lt = "http://www.w3.org/2000/svg", v = "http://www.w3.org/1999/xhtml";
|
|
348
348
|
let nt = v, Xt = !1, Vt = null;
|
|
349
|
-
const
|
|
350
|
-
let qt = p({},
|
|
351
|
-
const
|
|
352
|
-
let Kt = p({},
|
|
353
|
-
const
|
|
349
|
+
const On = p({}, [Rt, Lt, v], ee), we = S(["mi", "mo", "mn", "ms", "mtext"]);
|
|
350
|
+
let qt = p({}, we);
|
|
351
|
+
const Ne = S(["annotation-xml"]);
|
|
352
|
+
let Kt = p({}, Ne);
|
|
353
|
+
const Rn = p({}, ["title", "style", "font", "a", "script"]);
|
|
354
354
|
let pt = null;
|
|
355
|
-
const
|
|
355
|
+
const Ln = ["application/xhtml+xml", "text/html"], Dn = "text/html";
|
|
356
356
|
let E = null, ot = null;
|
|
357
|
-
const
|
|
357
|
+
const wn = s.createElement("form"), Ie = function(t) {
|
|
358
358
|
return t instanceof RegExp || t instanceof Function;
|
|
359
359
|
}, Zt = function() {
|
|
360
360
|
let t = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
|
|
361
361
|
if (ot && ot === t)
|
|
362
362
|
return;
|
|
363
363
|
(!t || typeof t != "object") && (t = {}), t = C(t), pt = // eslint-disable-next-line unicorn/prefer-includes
|
|
364
|
-
|
|
364
|
+
Ln.indexOf(t.PARSER_MEDIA_TYPE) === -1 ? Dn : t.PARSER_MEDIA_TYPE, E = pt === "application/xhtml+xml" ? ee : _t, h = W(t, "ALLOWED_TAGS", Ht, {
|
|
365
365
|
transform: E
|
|
366
|
-
}), _ =
|
|
366
|
+
}), _ = W(t, "ALLOWED_ATTR", Wt, {
|
|
367
367
|
transform: E
|
|
368
|
-
}), Vt =
|
|
368
|
+
}), Vt = W(t, "ALLOWED_NAMESPACES", On, {
|
|
369
369
|
transform: ee
|
|
370
|
-
}),
|
|
370
|
+
}), Le = W(t, "ADD_URI_SAFE_ATTR", De, {
|
|
371
371
|
transform: E,
|
|
372
|
-
base:
|
|
373
|
-
}),
|
|
372
|
+
base: De
|
|
373
|
+
}), Oe = W(t, "ADD_DATA_URI_TAGS", Re, {
|
|
374
374
|
transform: E,
|
|
375
|
-
base:
|
|
376
|
-
}), et =
|
|
375
|
+
base: Re
|
|
376
|
+
}), et = W(t, "FORBID_CONTENTS", be, {
|
|
377
377
|
transform: E
|
|
378
|
-
}), ft =
|
|
378
|
+
}), ft = W(t, "FORBID_TAGS", C({}), {
|
|
379
379
|
transform: E
|
|
380
|
-
}),
|
|
380
|
+
}), he = W(t, "FORBID_ATTR", C({}), {
|
|
381
381
|
transform: E
|
|
382
|
-
}), tt =
|
|
382
|
+
}), tt = N(t, "USE_PROFILES") ? t.USE_PROFILES && typeof t.USE_PROFILES == "object" ? C(t.USE_PROFILES) : t.USE_PROFILES : !1, _e = t.ALLOW_ARIA_ATTR !== !1, Gt = t.ALLOW_DATA_ATTR !== !1, ge = t.ALLOW_UNKNOWN_PROTOCOLS || !1, Ee = t.ALLOW_SELF_CLOSE_IN_ATTR !== !1, z = t.SAFE_FOR_TEMPLATES || !1, Y = t.SAFE_FOR_XML !== !1, j = t.WHOLE_DOCUMENT || !1, Q = t.RETURN_DOM || !1, bt = t.RETURN_DOM_FRAGMENT || !1, Ot = t.RETURN_TRUSTED_TYPE || !1, Yt = t.FORCE_BODY || !1, Ae = t.SANITIZE_DOM !== !1, ye = t.SANITIZE_NAMED_PROPS || !1, jt = t.KEEP_CONTENT !== !1, $t = t.IN_PLACE || !1, Te = no(t.ALLOWED_URI_REGEXP) ? t.ALLOWED_URI_REGEXP : en, nt = typeof t.NAMESPACE == "string" ? t.NAMESPACE : v, qt = ae(
|
|
383
383
|
t,
|
|
384
384
|
"MATHML_TEXT_INTEGRATION_POINTS",
|
|
385
|
-
() => p({},
|
|
385
|
+
() => p({}, we)
|
|
386
386
|
// Default built-in map
|
|
387
387
|
), Kt = ae(
|
|
388
388
|
t,
|
|
389
389
|
"HTML_INTEGRATION_POINTS",
|
|
390
|
-
() => p({},
|
|
390
|
+
() => p({}, Ne)
|
|
391
391
|
// Default built-in map
|
|
392
392
|
);
|
|
393
393
|
const e = ae(t, "CUSTOM_ELEMENT_HANDLING", () => it(null));
|
|
394
|
-
if (x = it(null),
|
|
394
|
+
if (x = it(null), N(e, "tagNameCheck") && Ie(e.tagNameCheck) && (x.tagNameCheck = e.tagNameCheck), N(e, "attributeNameCheck") && Ie(e.attributeNameCheck) && (x.attributeNameCheck = e.attributeNameCheck), N(e, "allowCustomizedBuiltInElements") && typeof e.allowCustomizedBuiltInElements == "boolean" && (x.allowCustomizedBuiltInElements = e.allowCustomizedBuiltInElements), b(x), z && (Gt = !1), bt && (Q = !0), tt && (h = p({}, Je), _ = it(null), tt.html === !0 && (p(h, Ze), p(_, Qe)), tt.svg === !0 && (p(h, ne), p(_, ie), p(_, Pt)), tt.svgFilters === !0 && (p(h, oe), p(_, ie), p(_, Pt)), tt.mathMl === !0 && (p(h, re), p(_, tn), p(_, Pt))), F.tagCheck = null, F.attributeCheck = null, N(t, "ADD_TAGS") && (typeof t.ADD_TAGS == "function" ? F.tagCheck = t.ADD_TAGS : at(t.ADD_TAGS) && (h === Ht && (h = C(h)), p(h, t.ADD_TAGS, E))), N(t, "ADD_ATTR") && (typeof t.ADD_ATTR == "function" ? F.attributeCheck = t.ADD_ATTR : at(t.ADD_ATTR) && (_ === Wt && (_ = C(_)), p(_, t.ADD_ATTR, E))), N(t, "ADD_FORBID_CONTENTS") && at(t.ADD_FORBID_CONTENTS) && (et === be && (et = C(et)), p(et, t.ADD_FORBID_CONTENTS, E)), jt && (h["#text"] = !0), j && p(h, ["html", "head", "body"]), h.table && (p(h, ["tbody"]), delete ft.tbody), t.TRUSTED_TYPES_POLICY) {
|
|
395
395
|
if (typeof t.TRUSTED_TYPES_POLICY.createHTML != "function")
|
|
396
396
|
throw X('TRUSTED_TYPES_POLICY configuration option must provide a "createHTML" hook.');
|
|
397
397
|
if (typeof t.TRUSTED_TYPES_POLICY.createScriptURL != "function")
|
|
@@ -403,23 +403,23 @@ function sn() {
|
|
|
403
403
|
} catch (a) {
|
|
404
404
|
throw L = n, a;
|
|
405
405
|
}
|
|
406
|
-
} else t.TRUSTED_TYPES_POLICY === null ? (L = void 0, B = "") : (L === void 0 && (L =
|
|
406
|
+
} else t.TRUSTED_TYPES_POLICY === null ? (L = void 0, B = "") : (L === void 0 && (L = mn()), L && typeof B == "string" && (B = J("")));
|
|
407
407
|
S && S(t), ot = t;
|
|
408
|
-
},
|
|
409
|
-
return e.namespaceURI === v ? t === "svg" : e.namespaceURI === Rt ? t === "svg" && (n === "annotation-xml" || qt[n]) : !!
|
|
410
|
-
}, wn = function(t, e, n) {
|
|
411
|
-
return e.namespaceURI === v ? t === "math" : e.namespaceURI === Lt ? t === "math" && Kt[n] : !!Me[t];
|
|
408
|
+
}, Me = p({}, [...ne, ...oe, ...oo]), Ce = p({}, [...re, ...ro]), Nn = function(t, e, n) {
|
|
409
|
+
return e.namespaceURI === v ? t === "svg" : e.namespaceURI === Rt ? t === "svg" && (n === "annotation-xml" || qt[n]) : !!Me[t];
|
|
412
410
|
}, In = function(t, e, n) {
|
|
413
|
-
return e.namespaceURI ===
|
|
414
|
-
},
|
|
411
|
+
return e.namespaceURI === v ? t === "math" : e.namespaceURI === Lt ? t === "math" && Kt[n] : !!Ce[t];
|
|
412
|
+
}, Mn = function(t, e, n) {
|
|
413
|
+
return e.namespaceURI === Lt && !Kt[n] || e.namespaceURI === Rt && !qt[n] ? !1 : !Ce[t] && (Rn[t] || !Me[t]);
|
|
414
|
+
}, Cn = function(t) {
|
|
415
415
|
let e = K(t);
|
|
416
416
|
(!e || !e.tagName) && (e = {
|
|
417
417
|
namespaceURI: nt,
|
|
418
418
|
tagName: "template"
|
|
419
419
|
});
|
|
420
420
|
const n = _t(t.tagName), a = _t(e.tagName);
|
|
421
|
-
return Vt[t.namespaceURI] ? t.namespaceURI === Lt ?
|
|
422
|
-
},
|
|
421
|
+
return Vt[t.namespaceURI] ? t.namespaceURI === Lt ? Nn(n, e, a) : t.namespaceURI === Rt ? In(n, e, a) : t.namespaceURI === v ? Mn(n, e, a) : !!(pt === "application/xhtml+xml" && Vt[t.namespaceURI]) : !1;
|
|
422
|
+
}, H = function(t) {
|
|
423
423
|
dt(i.removed, {
|
|
424
424
|
element: t
|
|
425
425
|
});
|
|
@@ -429,9 +429,9 @@ function sn() {
|
|
|
429
429
|
if (vt(t), !K(t))
|
|
430
430
|
throw X("a node selected for removal could not be detached from its tree and cannot be safely returned; refusing to sanitize in place");
|
|
431
431
|
}
|
|
432
|
-
},
|
|
432
|
+
}, Pe = function(t, e, n) {
|
|
433
433
|
try {
|
|
434
|
-
t
|
|
434
|
+
ce(t, e);
|
|
435
435
|
} catch {
|
|
436
436
|
try {
|
|
437
437
|
t.removeAttribute(n);
|
|
@@ -456,7 +456,7 @@ function sn() {
|
|
|
456
456
|
if (n)
|
|
457
457
|
for (let a = n.length - 1; a >= 0; --a) {
|
|
458
458
|
const l = n[a], u = l && l.name;
|
|
459
|
-
typeof u == "string" &&
|
|
459
|
+
typeof u == "string" && Pe(t, l, u);
|
|
460
460
|
}
|
|
461
461
|
}, $ = function(t, e, n) {
|
|
462
462
|
if (!n)
|
|
@@ -470,7 +470,7 @@ function sn() {
|
|
|
470
470
|
from: e
|
|
471
471
|
});
|
|
472
472
|
try {
|
|
473
|
-
n ? e
|
|
473
|
+
n ? ce(e, n) : e.removeAttribute(t);
|
|
474
474
|
} catch {
|
|
475
475
|
try {
|
|
476
476
|
e.removeAttribute(t);
|
|
@@ -480,7 +480,7 @@ function sn() {
|
|
|
480
480
|
if (t === "is")
|
|
481
481
|
if (Q || bt)
|
|
482
482
|
try {
|
|
483
|
-
|
|
483
|
+
H(e);
|
|
484
484
|
} catch {
|
|
485
485
|
}
|
|
486
486
|
else
|
|
@@ -488,32 +488,32 @@ function sn() {
|
|
|
488
488
|
e.setAttribute(t, "");
|
|
489
489
|
} catch {
|
|
490
490
|
}
|
|
491
|
-
},
|
|
491
|
+
}, Pn = function(t) {
|
|
492
492
|
const e = kt(t);
|
|
493
493
|
if (e)
|
|
494
494
|
for (let n = e.length - 1; n >= 0; --n) {
|
|
495
495
|
const a = e[n], l = a && a.name;
|
|
496
|
-
typeof l != "string" || _[E(l)] ||
|
|
496
|
+
typeof l != "string" || _[E(l)] || Pe(t, a, l);
|
|
497
497
|
}
|
|
498
498
|
}, wt = function(t) {
|
|
499
499
|
const e = [t];
|
|
500
500
|
for (; e.length > 0; ) {
|
|
501
501
|
const n = e.pop();
|
|
502
|
-
ct(n) === M.element &&
|
|
502
|
+
ct(n) === M.element && Pn(n);
|
|
503
503
|
const l = q(n);
|
|
504
504
|
if (l)
|
|
505
505
|
for (let u = l.length - 1; u >= 0; --u)
|
|
506
506
|
e.push(l[u]);
|
|
507
507
|
}
|
|
508
|
-
},
|
|
508
|
+
}, xe = function(t, e) {
|
|
509
509
|
return Y ? t === "patchsrc" ? !0 : t === "for" && e !== "label" && e !== "output" : !1;
|
|
510
|
-
},
|
|
510
|
+
}, xn = function(t) {
|
|
511
511
|
if (!Y)
|
|
512
512
|
return;
|
|
513
513
|
const e = [t];
|
|
514
514
|
for (; e.length > 0; ) {
|
|
515
515
|
const n = e.pop(), a = ct(n);
|
|
516
|
-
if (a === M.processingInstruction || a === M.comment && O(
|
|
516
|
+
if (a === M.processingInstruction || a === M.comment && O(on, n.data)) {
|
|
517
517
|
try {
|
|
518
518
|
vt(n);
|
|
519
519
|
} catch {
|
|
@@ -523,7 +523,7 @@ function sn() {
|
|
|
523
523
|
if (a === M.element) {
|
|
524
524
|
const u = n, m = E(Ut(n));
|
|
525
525
|
try {
|
|
526
|
-
u.hasAttribute && u.hasAttribute("patchsrc") && u.removeAttribute("patchsrc"), u.hasAttribute && u.hasAttribute("for") &&
|
|
526
|
+
u.hasAttribute && u.hasAttribute("patchsrc") && u.removeAttribute("patchsrc"), u.hasAttribute && u.hasAttribute("for") && xe("for", m) && u.removeAttribute("for");
|
|
527
527
|
} catch {
|
|
528
528
|
}
|
|
529
529
|
}
|
|
@@ -532,12 +532,12 @@ function sn() {
|
|
|
532
532
|
for (let u = l.length - 1; u >= 0; --u)
|
|
533
533
|
e.push(l[u]);
|
|
534
534
|
}
|
|
535
|
-
},
|
|
535
|
+
}, ve = function(t) {
|
|
536
536
|
let e = null, n = null;
|
|
537
537
|
if (Yt)
|
|
538
538
|
t = "<remove></remove>" + t;
|
|
539
539
|
else {
|
|
540
|
-
const u =
|
|
540
|
+
const u = Xe(t, /^[\r\n\t ]+/);
|
|
541
541
|
n = u && u[0];
|
|
542
542
|
}
|
|
543
543
|
pt === "application/xhtml+xml" && nt === v && (t = '<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>' + t + "</body></html>");
|
|
@@ -555,50 +555,59 @@ function sn() {
|
|
|
555
555
|
}
|
|
556
556
|
}
|
|
557
557
|
const l = e.body || e.documentElement;
|
|
558
|
-
return t && n && l.insertBefore(s.createTextNode(n), l.childNodes[0] || null), nt === v ?
|
|
559
|
-
},
|
|
558
|
+
return t && n && l.insertBefore(s.createTextNode(n), l.childNodes[0] || null), nt === v ? Tn.call(e, j ? "html" : "body")[0] : j ? e.documentElement : l;
|
|
559
|
+
}, ke = function(t) {
|
|
560
560
|
const e = Et ? Et(t) : t.ownerDocument;
|
|
561
|
-
return
|
|
561
|
+
return me.call(
|
|
562
562
|
e || t,
|
|
563
563
|
t,
|
|
564
564
|
// eslint-disable-next-line no-bitwise
|
|
565
|
-
|
|
565
|
+
I.SHOW_ELEMENT | I.SHOW_COMMENT | I.SHOW_TEXT | I.SHOW_PROCESSING_INSTRUCTION | I.SHOW_CDATA_SECTION,
|
|
566
566
|
null
|
|
567
567
|
);
|
|
568
|
-
},
|
|
569
|
-
return t = Tt(t,
|
|
568
|
+
}, Nt = function(t) {
|
|
569
|
+
return t = Tt(t, _n, " "), t = Tt(t, gn, " "), t = Tt(t, En, " "), t;
|
|
570
570
|
}, Jt = function(t) {
|
|
571
571
|
var e;
|
|
572
572
|
t.normalize();
|
|
573
|
-
const n = Et ? Et(t) : t.ownerDocument, a =
|
|
573
|
+
const n = Et ? Et(t) : t.ownerDocument, a = me.call(
|
|
574
574
|
n || t,
|
|
575
575
|
t,
|
|
576
576
|
// eslint-disable-next-line no-bitwise
|
|
577
|
-
|
|
577
|
+
I.SHOW_TEXT | I.SHOW_COMMENT | I.SHOW_CDATA_SECTION | I.SHOW_PROCESSING_INSTRUCTION,
|
|
578
578
|
null
|
|
579
579
|
);
|
|
580
580
|
let l = a.nextNode();
|
|
581
581
|
for (; l; )
|
|
582
|
-
l.data =
|
|
582
|
+
l.data = Nt(l.data), l = a.nextNode();
|
|
583
583
|
const u = (e = t.querySelectorAll) === null || e === void 0 ? void 0 : e.call(t, "template");
|
|
584
584
|
u && V(u, (m) => {
|
|
585
585
|
rt(m.content) && Jt(m.content);
|
|
586
586
|
});
|
|
587
|
-
},
|
|
587
|
+
}, It = function(t) {
|
|
588
588
|
const e = Z ? Z(t) : null;
|
|
589
589
|
return typeof e != "string" || E(e) !== "form" ? !1 : typeof t.nodeName != "string" || typeof t.textContent != "string" || typeof t.removeChild != "function" || // Realm-safe NamedNodeMap detection: equality against the cached
|
|
590
590
|
// prototype getter. Clobbered .attributes (e.g. <input name="attributes">)
|
|
591
591
|
// makes the direct read diverge from the cached read; a clean form
|
|
592
592
|
// (same-realm OR foreign-realm) has both reads pointing at the same
|
|
593
593
|
// canonical NamedNodeMap.
|
|
594
|
-
t.attributes !== kt(t) || typeof t.removeAttribute != "function" ||
|
|
594
|
+
t.attributes !== kt(t) || typeof t.removeAttribute != "function" || // A form descendant named "removeAttributeNode" or "getAttributeNode"
|
|
595
|
+
// shadows these Attr-node methods via [LegacyOverrideBuiltIns].
|
|
596
|
+
// _removeAttribute() / _stripAttributeNode() reach for
|
|
597
|
+
// element.removeAttributeNode(attr) first; when it is shadowed the call
|
|
598
|
+
// throws and the name-based fallback element.removeAttribute(name)
|
|
599
|
+
// ASCII-lowercases its lookup key in an HTML document, silently missing
|
|
600
|
+
// a case-preserved event-handler attribute (e.g. an ONANIMATIONSTART
|
|
601
|
+
// that reached the sanitizer through an XML/XHTML parse). Flag the form
|
|
602
|
+
// so it is removed wholesale, exactly as for the other shadowed methods.
|
|
603
|
+
typeof t.removeAttributeNode != "function" || typeof t.getAttributeNode != "function" || typeof t.setAttribute != "function" || typeof t.namespaceURI != "string" || typeof t.insertBefore != "function" || typeof t.hasChildNodes != "function" || // NodeType clobbering probe. Cached Node.prototype.nodeType getter
|
|
595
604
|
// returns the integer 1 for any Element regardless of realm; direct
|
|
596
605
|
// read on a clobbered form (e.g. <input name="nodeType">) returns
|
|
597
606
|
// the named child element. Cheap addition — nodeType is read from
|
|
598
607
|
// an internal slot, no serialization cost — and removes a residual
|
|
599
608
|
// clobbering surface used by several mXSS / PI / comment branches
|
|
600
609
|
// in _sanitizeElements that compare currentNode.nodeType directly.
|
|
601
|
-
t.nodeType !==
|
|
610
|
+
t.nodeType !== G(t) || // HTMLFormElement has [LegacyOverrideBuiltIns]: a descendant named
|
|
602
611
|
// "childNodes" shadows the prototype getter. Direct reads of
|
|
603
612
|
// form.childNodes from a clobbered form return the named child
|
|
604
613
|
// instead of the real NodeList, so any walk that reads it directly
|
|
@@ -611,18 +620,18 @@ function sn() {
|
|
|
611
620
|
// (e.g. HTMLSelectElement.length is a defined unsigned-long).
|
|
612
621
|
t.childNodes !== q(t);
|
|
613
622
|
}, rt = function(t) {
|
|
614
|
-
if (!
|
|
623
|
+
if (!G || typeof t != "object" || t === null)
|
|
615
624
|
return !1;
|
|
616
625
|
try {
|
|
617
|
-
return
|
|
626
|
+
return G(t) === M.documentFragment;
|
|
618
627
|
} catch {
|
|
619
628
|
return !1;
|
|
620
629
|
}
|
|
621
630
|
}, mt = function(t) {
|
|
622
|
-
if (!
|
|
631
|
+
if (!G || typeof t != "object" || t === null)
|
|
623
632
|
return !1;
|
|
624
633
|
try {
|
|
625
|
-
return typeof
|
|
634
|
+
return typeof G(t) == "number";
|
|
626
635
|
} catch {
|
|
627
636
|
return !1;
|
|
628
637
|
}
|
|
@@ -632,8 +641,8 @@ function sn() {
|
|
|
632
641
|
n.call(i, t, e, ot);
|
|
633
642
|
});
|
|
634
643
|
}
|
|
635
|
-
const
|
|
636
|
-
return !!(Y && t.hasChildNodes() && !mt(t.firstElementChild) && O(
|
|
644
|
+
const vn = function(t, e) {
|
|
645
|
+
return !!(Y && t.hasChildNodes() && !mt(t.firstElementChild) && O(nn, t.textContent) && O(nn, t.innerHTML) || Y && t.namespaceURI === v && _o[e] && (mt(t.firstElementChild) || typeof t.textContent == "string" && O(go[e], t.textContent)) || t.nodeType === M.processingInstruction || Y && t.nodeType === M.comment && O(on, t.data));
|
|
637
646
|
}, Mt = function(t, e) {
|
|
638
647
|
if (t instanceof RegExp)
|
|
639
648
|
return O(t, e);
|
|
@@ -643,86 +652,86 @@ function sn() {
|
|
|
643
652
|
return !!t(e, ...a);
|
|
644
653
|
}
|
|
645
654
|
return !1;
|
|
646
|
-
},
|
|
647
|
-
if (!ft[e] &&
|
|
655
|
+
}, kn = function(t, e, n) {
|
|
656
|
+
if (!ft[e] && We(e) && Mt(x.tagNameCheck, e))
|
|
648
657
|
return !1;
|
|
649
658
|
if (jt && !et[e]) {
|
|
650
659
|
const a = K(t), l = q(t);
|
|
651
660
|
if (l && a) {
|
|
652
661
|
const u = l.length;
|
|
653
662
|
for (let m = u - 1; m >= 0; --m) {
|
|
654
|
-
const g = t === n ?
|
|
655
|
-
a.insertBefore(g,
|
|
663
|
+
const g = t === n ? un(l[m], !0) : l[m];
|
|
664
|
+
a.insertBefore(g, fn(t));
|
|
656
665
|
}
|
|
657
666
|
}
|
|
658
667
|
}
|
|
659
|
-
return
|
|
660
|
-
},
|
|
668
|
+
return H(t), !0;
|
|
669
|
+
}, Ue = function(t, e, n, a) {
|
|
661
670
|
return t.length === 0 ? e : e === n || e === a ? C(e) : e;
|
|
662
|
-
}, Ue = function(t, e) {
|
|
663
|
-
return t === e || K(t) !== null ? !1 : ($t && wt(t), !0);
|
|
664
671
|
}, Fe = function(t, e) {
|
|
665
|
-
|
|
672
|
+
return t === e || K(t) !== null ? !1 : ($t && wt(t), !0);
|
|
673
|
+
}, ze = function(t, e) {
|
|
674
|
+
if (k(T.beforeSanitizeElements, t, null), Fe(t, e))
|
|
666
675
|
return !0;
|
|
667
|
-
if (
|
|
668
|
-
return
|
|
676
|
+
if (It(t))
|
|
677
|
+
return H(t), !0;
|
|
669
678
|
const n = E(Ut(t));
|
|
670
|
-
if (h =
|
|
679
|
+
if (h = Ue(T.uponSanitizeElement, h, Ht, yt), k(T.uponSanitizeElement, t, {
|
|
671
680
|
tagName: n,
|
|
672
681
|
allowedTags: h
|
|
673
|
-
}),
|
|
682
|
+
}), Fe(t, e))
|
|
674
683
|
return !0;
|
|
675
|
-
if (
|
|
676
|
-
return
|
|
677
|
-
if (ft[n] || !(
|
|
678
|
-
const l =
|
|
684
|
+
if (vn(t, n))
|
|
685
|
+
return H(t), !0;
|
|
686
|
+
if (ft[n] || !(F.tagCheck instanceof Function && F.tagCheck(n)) && !h[n]) {
|
|
687
|
+
const l = kn(t, n, e);
|
|
679
688
|
return l === !1 && k(T.afterSanitizeElements, t, null), l;
|
|
680
689
|
}
|
|
681
|
-
if (ct(t) === M.element && !
|
|
682
|
-
return
|
|
683
|
-
if (
|
|
684
|
-
const l =
|
|
690
|
+
if (ct(t) === M.element && !Cn(t) || (n === "noscript" || n === "noembed" || n === "noframes") && O(To, t.innerHTML))
|
|
691
|
+
return H(t), !0;
|
|
692
|
+
if (z && t.nodeType === M.text) {
|
|
693
|
+
const l = Nt(t.textContent);
|
|
685
694
|
t.textContent !== l && (dt(i.removed, {
|
|
686
695
|
element: t.cloneNode()
|
|
687
696
|
}), t.textContent = l);
|
|
688
697
|
}
|
|
689
698
|
return k(T.afterSanitizeElements, t, null), !1;
|
|
690
|
-
},
|
|
691
|
-
if (
|
|
699
|
+
}, He = function(t, e, n) {
|
|
700
|
+
if (he[e] || xe(e, t) || Ae && (e === "id" || e === "name") && (n in s || n in wn))
|
|
692
701
|
return !1;
|
|
693
|
-
const a = _[e] ||
|
|
694
|
-
return
|
|
702
|
+
const a = _[e] || F.attributeCheck instanceof Function && F.attributeCheck(e, t);
|
|
703
|
+
return Gt && O(An, e) || _e && O(yn, e) ? !0 : a ? Le[e] || O(Te, Tt(n, de, "")) || (e === "src" || e === "xlink:href" || e === "href") && t !== "script" && Ve(n, "data:") === 0 && Oe[t] || ge && !O(Sn, Tt(n, de, "")) ? !0 : !n : (
|
|
695
704
|
// Condition a) covers a basically valid custom element tag name whose
|
|
696
705
|
// tag passes the configured tagNameCheck and whose attribute name
|
|
697
706
|
// passes the configured attributeNameCheck ...
|
|
698
|
-
|
|
707
|
+
We(t) && Mt(x.tagNameCheck, t) && Mt(x.attributeNameCheck, e, t) || // Condition b) covers an `is` attribute whose value passes the
|
|
699
708
|
// configured tagNameCheck while customized built-in elements are
|
|
700
709
|
// allowed.
|
|
701
710
|
e === "is" && x.allowCustomizedBuiltInElements && Mt(x.tagNameCheck, n)
|
|
702
711
|
);
|
|
703
|
-
},
|
|
704
|
-
return !
|
|
705
|
-
},
|
|
712
|
+
}, Un = p({}, ["annotation-xml", "color-profile", "font-face", "font-face-format", "font-face-name", "font-face-src", "font-face-uri", "missing-glyph"]), We = function(t) {
|
|
713
|
+
return !Un[_t(t)] && O(bn, t);
|
|
714
|
+
}, Fn = function(t, e, n, a) {
|
|
706
715
|
if (L && typeof gt == "object" && typeof gt.getAttributeType == "function" && !n)
|
|
707
716
|
switch (gt.getAttributeType(t, e)) {
|
|
708
717
|
case "TrustedHTML":
|
|
709
718
|
return J(a);
|
|
710
719
|
case "TrustedScriptURL":
|
|
711
|
-
return
|
|
720
|
+
return pn(a);
|
|
712
721
|
}
|
|
713
722
|
return a;
|
|
714
|
-
},
|
|
723
|
+
}, zn = function(t, e, n, a) {
|
|
715
724
|
try {
|
|
716
|
-
n ? t.setAttributeNS(n, e, a) : t.setAttribute(e, a),
|
|
725
|
+
return n ? t.setAttributeNS(n, e, a) : t.setAttribute(e, a), It(t) ? (H(t), !1) : !0;
|
|
717
726
|
} catch {
|
|
718
|
-
$(e, t);
|
|
727
|
+
return $(e, t), !1;
|
|
719
728
|
}
|
|
720
729
|
}, Ge = function(t) {
|
|
721
730
|
k(T.beforeSanitizeAttributes, t, null);
|
|
722
731
|
const e = t.attributes;
|
|
723
|
-
if (!e ||
|
|
732
|
+
if (!e || It(t))
|
|
724
733
|
return;
|
|
725
|
-
_ =
|
|
734
|
+
_ = Ue(T.uponSanitizeAttribute, _, Wt, St);
|
|
726
735
|
const n = {
|
|
727
736
|
attrName: "",
|
|
728
737
|
attrValue: "",
|
|
@@ -734,12 +743,12 @@ function sn() {
|
|
|
734
743
|
const l = E(t.nodeName);
|
|
735
744
|
for (; a--; ) {
|
|
736
745
|
const u = e[a], m = u.name, g = u.namespaceURI, D = u.value, w = E(m), te = D;
|
|
737
|
-
let R = m === "value" ? te :
|
|
738
|
-
if (n.attrName = w, n.attrValue = R, n.keepAttr = !0, n.forceKeepAttr = void 0, k(T.uponSanitizeAttribute, t, n), R = n.attrValue,
|
|
746
|
+
let R = m === "value" ? te : Kn(te), Be = !1;
|
|
747
|
+
if (n.attrName = w, n.attrValue = R, n.keepAttr = !0, n.forceKeepAttr = void 0, k(T.uponSanitizeAttribute, t, n), R = n.attrValue, ye && (w === "id" || w === "name") && Ve(R, Se) !== 0 && ($(m, t, u), R = Se + R, Be = !0), Y && O(/((--!?|])>)|<\/(style|script|title|xmp|textarea|noscript|iframe|noembed|noframes)/i, R)) {
|
|
739
748
|
$(m, t, u);
|
|
740
749
|
continue;
|
|
741
750
|
}
|
|
742
|
-
if (w === "attributename" &&
|
|
751
|
+
if (w === "attributename" && Xe(R, "href")) {
|
|
743
752
|
$(m, t, u);
|
|
744
753
|
continue;
|
|
745
754
|
}
|
|
@@ -748,24 +757,24 @@ function sn() {
|
|
|
748
757
|
$(m, t, u);
|
|
749
758
|
continue;
|
|
750
759
|
}
|
|
751
|
-
if (!
|
|
760
|
+
if (!Ee && O(ho, R)) {
|
|
752
761
|
$(m, t, u);
|
|
753
762
|
continue;
|
|
754
763
|
}
|
|
755
|
-
if (
|
|
764
|
+
if (z && (R = Nt(R)), !He(l, w, R)) {
|
|
756
765
|
$(m, t, u);
|
|
757
766
|
continue;
|
|
758
767
|
}
|
|
759
|
-
R =
|
|
768
|
+
R = Fn(l, w, g, R), R !== te && zn(t, m, g, R) && Be && $e(i.removed);
|
|
760
769
|
}
|
|
761
770
|
}
|
|
762
771
|
k(T.afterSanitizeAttributes, t, null);
|
|
763
772
|
}, Ct = function(t) {
|
|
764
773
|
let e = null;
|
|
765
|
-
const n =
|
|
774
|
+
const n = ke(t);
|
|
766
775
|
for (k(T.beforeSanitizeShadowDOM, t, null); e = n.nextNode(); )
|
|
767
|
-
if (k(T.uponSanitizeShadowNode, e, null),
|
|
768
|
-
const a =
|
|
776
|
+
if (k(T.uponSanitizeShadowNode, e, null), ze(e, t), Ge(e), rt(e.content) && Ct(e.content), ct(e) === M.element) {
|
|
777
|
+
const a = ue(e);
|
|
769
778
|
rt(a) && (Qt(a), Ct(a));
|
|
770
779
|
}
|
|
771
780
|
k(T.afterSanitizeShadowDOM, t, null);
|
|
@@ -798,7 +807,7 @@ function sn() {
|
|
|
798
807
|
}
|
|
799
808
|
}
|
|
800
809
|
if (u) {
|
|
801
|
-
const g =
|
|
810
|
+
const g = ue(a);
|
|
802
811
|
rt(g) && e.push({
|
|
803
812
|
node: null,
|
|
804
813
|
shadow: g
|
|
@@ -811,21 +820,21 @@ function sn() {
|
|
|
811
820
|
};
|
|
812
821
|
return i.sanitize = function(o) {
|
|
813
822
|
let t = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {}, e = null, n = null, a = null, l = null;
|
|
814
|
-
if (Xt = !o, Xt && (o = "<!-->"), typeof o != "string" && !mt(o) && (o =
|
|
823
|
+
if (Xt = !o, Xt && (o = "<!-->"), typeof o != "string" && !mt(o) && (o = eo(o), typeof o != "string"))
|
|
815
824
|
throw X("dirty is not a string, aborting");
|
|
816
825
|
if (!i.isSupported)
|
|
817
826
|
return o;
|
|
818
827
|
Bt ? (h = yt, _ = St) : Zt(t), (T.uponSanitizeElement.length > 0 || T.uponSanitizeAttribute.length > 0) && (h = C(h)), T.uponSanitizeAttribute.length > 0 && (_ = C(_)), i.removed = [];
|
|
819
828
|
const u = $t && typeof o != "string" && mt(o);
|
|
820
829
|
if (u) {
|
|
821
|
-
|
|
830
|
+
xn(o);
|
|
822
831
|
const D = Ut(o);
|
|
823
832
|
if (typeof D == "string") {
|
|
824
833
|
const w = E(D);
|
|
825
834
|
if (!h[w] || ft[w])
|
|
826
835
|
throw Dt(o), X("root node is forbidden and cannot be sanitized in-place");
|
|
827
836
|
}
|
|
828
|
-
if (
|
|
837
|
+
if (It(o))
|
|
829
838
|
throw Dt(o), X("root node is clobbered and cannot be sanitized in-place");
|
|
830
839
|
try {
|
|
831
840
|
Qt(o);
|
|
@@ -833,20 +842,20 @@ function sn() {
|
|
|
833
842
|
throw Dt(o), w;
|
|
834
843
|
}
|
|
835
844
|
} else if (mt(o))
|
|
836
|
-
e =
|
|
845
|
+
e = ve("<!---->"), n = e.ownerDocument.importNode(o, !0), n.nodeType === M.element && n.nodeName === "BODY" || n.nodeName === "HTML" ? e = n : e.appendChild(n), Qt(e);
|
|
837
846
|
else {
|
|
838
|
-
if (!Q && !
|
|
847
|
+
if (!Q && !z && !j && // eslint-disable-next-line unicorn/prefer-includes
|
|
839
848
|
o.indexOf("<") === -1)
|
|
840
849
|
return L && Ot ? J(o) : o;
|
|
841
|
-
if (e =
|
|
850
|
+
if (e = ve(o), !e)
|
|
842
851
|
return Q ? null : Ot ? B : "";
|
|
843
852
|
}
|
|
844
|
-
e && Yt &&
|
|
853
|
+
e && Yt && H(e.firstChild);
|
|
845
854
|
const m = u ? o : e;
|
|
846
855
|
try {
|
|
847
|
-
const D =
|
|
856
|
+
const D = ke(m);
|
|
848
857
|
for (; a = D.nextNode(); )
|
|
849
|
-
|
|
858
|
+
ze(a, m), Ge(a), rt(a.content) && Ct(a.content);
|
|
850
859
|
} catch (D) {
|
|
851
860
|
throw u && (Dt(o), V(i.removed, (w) => {
|
|
852
861
|
w.element && wt(w.element);
|
|
@@ -855,18 +864,18 @@ function sn() {
|
|
|
855
864
|
if (u)
|
|
856
865
|
return V(i.removed, (D) => {
|
|
857
866
|
D.element && wt(D.element);
|
|
858
|
-
}),
|
|
867
|
+
}), z && Jt(o), o;
|
|
859
868
|
if (Q) {
|
|
860
|
-
if (
|
|
861
|
-
for (l =
|
|
869
|
+
if (z && Jt(e), bt)
|
|
870
|
+
for (l = dn.call(e.ownerDocument); e.firstChild; )
|
|
862
871
|
l.appendChild(e.firstChild);
|
|
863
872
|
else
|
|
864
873
|
l = e;
|
|
865
|
-
return (_.shadowroot || _.shadowrootmode) && (l =
|
|
874
|
+
return (_.shadowroot || _.shadowrootmode) && (l = hn.call(c, l, !0)), l;
|
|
866
875
|
}
|
|
867
876
|
let g = j ? e.outerHTML : e.innerHTML;
|
|
868
|
-
return j && h["!doctype"] && e.ownerDocument && e.ownerDocument.doctype && e.ownerDocument.doctype.name && O(
|
|
869
|
-
` + g),
|
|
877
|
+
return j && h["!doctype"] && e.ownerDocument && e.ownerDocument.doctype && e.ownerDocument.doctype.name && O(po, e.ownerDocument.doctype.name) && (g = "<!DOCTYPE " + e.ownerDocument.doctype.name + `>
|
|
878
|
+
` + g), z && (g = Nt(g)), L && Ot ? J(g) : g;
|
|
870
879
|
}, i.setConfig = function() {
|
|
871
880
|
let o = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
|
|
872
881
|
Zt(o), Bt = !0, yt = h, St = _;
|
|
@@ -875,24 +884,24 @@ function sn() {
|
|
|
875
884
|
}, i.isValidAttribute = function(o, t, e) {
|
|
876
885
|
ot || Zt({});
|
|
877
886
|
const n = E(o), a = E(t);
|
|
878
|
-
return
|
|
887
|
+
return He(n, a, e);
|
|
879
888
|
}, i.addHook = function(o, t) {
|
|
880
|
-
typeof t == "function" &&
|
|
889
|
+
typeof t == "function" && N(T, o) && dt(T[o], t);
|
|
881
890
|
}, i.removeHook = function(o, t) {
|
|
882
|
-
if (
|
|
891
|
+
if (N(T, o)) {
|
|
883
892
|
if (t !== void 0) {
|
|
884
|
-
const e =
|
|
885
|
-
return e === -1 ? void 0 :
|
|
893
|
+
const e = Vn(T[o], t);
|
|
894
|
+
return e === -1 ? void 0 : qn(T[o], e, 1)[0];
|
|
886
895
|
}
|
|
887
|
-
return
|
|
896
|
+
return $e(T[o]);
|
|
888
897
|
}
|
|
889
898
|
}, i.removeHooks = function(o) {
|
|
890
|
-
|
|
899
|
+
N(T, o) && (T[o] = []);
|
|
891
900
|
}, i.removeAllHooks = function() {
|
|
892
|
-
T =
|
|
901
|
+
T = rn();
|
|
893
902
|
}, i;
|
|
894
903
|
}
|
|
895
|
-
var
|
|
904
|
+
var So = cn();
|
|
896
905
|
export {
|
|
897
|
-
|
|
906
|
+
So as default
|
|
898
907
|
};
|