uikit 3.25.29-dev.f3e1c53 → 3.25.29

package/package.json

@@ -2,7 +2,7 @@
     "name": "uikit",
     "title": "UIkit",
     "description": "UIkit is a lightweight and modular front-end framework for developing fast and powerful web interfaces.",
-    "version": "3.25.29-dev.f3e1c53",
+    "version": "3.25.29",
     "main": "dist/js/uikit.js",
     "style": "dist/css/uikit.css",
     "sideEffects": [

package/src/js/components/lightbox-panel.js

@@ -344,7 +344,7 @@ export default {
                     try {
                         const { height, width } = await (
                             await fetch(
-                                `https://vimeo.com/api/oembed.json?maxwidth=1920&url=${encodeURI(
+                                `https://vimeo.com/api/oembed.json?maxwidth=1920&url=${encodeURIComponent(
                                     src,
                                 )}`,
                                 { credentials: 'omit' },
@@ -463,9 +463,9 @@ function toThumbnavItem(item, videoAutoplay) {
 }
 
 function isImage(src) {
-    return src?.match(/\.(avif|jpe?g|jfif|a?png|gif|svg|webp)($|\?)/i);
+    return src?.match(/\.(avif|jpe?g|jfif|a?png|gif|svg|webp)($|[?#])/i);
 }
 
 function isVideo(src) {
-    return src?.match(/\.(mp4|webm|ogv)($|\?)/i);
+    return src?.match(/\.(mp4|webm|ogv)($|[?#])/i);
 }

package/src/js/core/svg.js

@@ -51,7 +51,11 @@ export default {
     methods: {
         async getSvg() {
             if (isTag(this.$el, 'img') && !this.$el.complete && this.$el.loading === 'lazy') {
-                await new Promise((resolve) => once(this.$el, 'load', resolve));
+                await new Promise((resolve, reject) =>
+                    once(this.$el, 'load error', (event) =>
+                        event.type === 'load' ? resolve() : reject(event),
+                    ),
+                );
             }
 
             return parseSVG(await loadSVG(this.src), this.icon) || Promise.reject('SVG not found.');

package/src/js/util/filter.js

@@ -83,7 +83,12 @@ export function isSameSiteAnchor(el) {
 export function getTargetedElement(el) {
     if (isSameSiteAnchor(el)) {
         const { hash, ownerDocument } = toNode(el);
-        const id = decodeURIComponent(hash).slice(1);
+        let id = hash.slice(1);
+        try {
+            id = decodeURIComponent(id);
+        } catch {
+            // Fall back to the literal fragment for malformed encoding.
+        }
         return id
             ? ownerDocument.getElementById(id) || ownerDocument.getElementsByName(id)[0]
             : ownerDocument.documentElement;

package/src/js/util/svg.js

@@ -1,10 +1,11 @@
 import { $$ } from './dom';
-import { isVisible } from './filter.js';
 
 export function getMaxPathLength(el) {
-    return isVisible(el)
-        ? Math.ceil(
-              Math.max(0, ...$$('[stroke]', el).map((stroke) => stroke.getTotalLength?.() || 0)),
-          )
-        : 0;
+    try {
+        return Math.ceil(
+            Math.max(0, ...$$('[stroke]', el).map((stroke) => stroke.getTotalLength?.() || 0)),
+        );
+    } catch {
+        return 0;
+    }
 }