',\n );\n if (doc.querySelector('svg img')) {\n useDOMParser = true;\n }\n })();\n }\n\n /**\n * _createIterator\n *\n * @param document/fragment to create iterator for\n * @return iterator instance\n */\n const _createIterator = function(root) {\n return createNodeIterator.call(\n root.ownerDocument || root,\n root,\n NodeFilter.SHOW_ELEMENT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_TEXT,\n () => {\n return NodeFilter.FILTER_ACCEPT;\n },\n false,\n );\n };\n\n /**\n * _isClobbered\n *\n * @param element to check for clobbering attacks\n * @return true if clobbered, false if safe\n */\n const _isClobbered = function(elm) {\n if (elm instanceof Text || elm instanceof Comment) {\n return false;\n }\n if (\n typeof elm.nodeName !== 'string' ||\n typeof elm.textContent !== 'string' ||\n typeof elm.removeChild !== 'function' ||\n !(elm.attributes instanceof NamedNodeMap) ||\n typeof elm.removeAttribute !== 'function' ||\n typeof elm.setAttribute !== 'function'\n ) {\n return true;\n }\n return false;\n };\n\n /**\n * _isNode\n *\n * @param object to check whether it's a DOM node\n * @return true is object is a DOM node\n */\n const _isNode = function(obj) {\n return typeof Node === 'object'\n ? obj instanceof Node\n : obj &&\n typeof obj === 'object' &&\n typeof obj.nodeType === 'number' &&\n typeof obj.nodeName === 'string';\n };\n\n /**\n * _executeHook\n * Execute user configurable hooks\n *\n * @param {String} entryPoint Name of the hook's entry point\n * @param {Node} currentNode\n */\n const _executeHook = function(entryPoint, currentNode, data) {\n if (!hooks[entryPoint]) {\n return;\n }\n\n hooks[entryPoint].forEach(hook => {\n hook.call(DOMPurify, currentNode, data, CONFIG);\n });\n };\n\n /**\n * _sanitizeElements\n *\n * @protect nodeName\n * @protect textContent\n * @protect removeChild\n *\n * @param node to check for permission to exist\n * @return true if node was killed, false if left alive\n */\n const _sanitizeElements = function(currentNode) {\n let content;\n\n /* Execute a hook if present */\n _executeHook('beforeSanitizeElements', currentNode, null);\n\n /* Check if element is clobbered or can clobber */\n if (_isClobbered(currentNode)) {\n _forceRemove(currentNode);\n return true;\n }\n\n /* Now let's check the element's type and name */\n const tagName = currentNode.nodeName.toLowerCase();\n\n /* Execute a hook if present */\n _executeHook('uponSanitizeElement', currentNode, {\n tagName,\n allowedTags: ALLOWED_TAGS,\n });\n\n /* Remove element if anything forbids its presence */\n if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {\n /* Keep content except for black-listed elements */\n if (\n KEEP_CONTENT &&\n !FORBID_CONTENTS[tagName] &&\n typeof currentNode.insertAdjacentHTML === 'function'\n ) {\n try {\n currentNode.insertAdjacentHTML('AfterEnd', currentNode.innerHTML);\n } catch (err) {}\n }\n _forceRemove(currentNode);\n return true;\n }\n\n /* Convert markup to cover jQuery behavior */\n if (\n SAFE_FOR_JQUERY &&\n !currentNode.firstElementChild &&\n (!currentNode.content || !currentNode.content.firstElementChild) &&\n / tag that has an \"id\"\n // attribute at the time.\n if (\n lcName === 'name' &&\n currentNode.nodeName === 'IMG' &&\n attributes.id\n ) {\n idAttr = attributes.id;\n attributes = Array.prototype.slice.apply(attributes);\n _removeAttribute('id', currentNode);\n _removeAttribute(name, currentNode);\n if (attributes.indexOf(idAttr) > l) {\n currentNode.setAttribute('id', idAttr.value);\n }\n } else if (\n // This works around a bug in Safari, where input[type=file]\n // cannot be dynamically set after type has been removed\n currentNode.nodeName === 'INPUT' &&\n lcName === 'type' &&\n value === 'file' &&\n (ALLOWED_ATTR[lcName] || !FORBID_ATTR[lcName])\n ) {\n continue;\n } else {\n // This avoids a crash in Safari v9.0 with double-ids.\n // The trick is to first set the id to be empty and then to\n // remove the attribute\n if (name === 'id') {\n currentNode.setAttribute(name, '');\n }\n _removeAttribute(name, currentNode);\n }\n\n /* Did the hooks approve of the attribute? */\n if (!hookEvent.keepAttr) {\n continue;\n }\n\n /* Make sure attribute cannot clobber */\n if (\n SANITIZE_DOM &&\n (lcName === 'id' || lcName === 'name') &&\n (value in window || value in document || value in formElement)\n ) {\n continue;\n }\n\n /* Sanitize attribute content to be template-safe */\n if (SAFE_FOR_TEMPLATES) {\n value = value.replace(MUSTACHE_EXPR, ' ');\n value = value.replace(ERB_EXPR, ' ');\n }\n\n /* Allow valid data-* attributes: At least one character after \"-\"\n (https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-*-attributes)\n XML-compatible (https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible and http://www.w3.org/TR/xml/#d0e804)\n We don't need to check the value; it's always URI safe. */\n if (ALLOW_DATA_ATTR && DATA_ATTR.test(lcName)) {\n // This attribute is safe\n } else if (ALLOW_ARIA_ATTR && ARIA_ATTR.test(lcName)) {\n // This attribute is safe\n /* Otherwise, check the name is permitted */\n } else if (!ALLOWED_ATTR[lcName] || FORBID_ATTR[lcName]) {\n continue;\n\n /* Check value is safe. First, is attr inert? If so, is safe */\n } else if (URI_SAFE_ATTRIBUTES[lcName]) {\n // This attribute is safe\n /* Check no script, data or unknown possibly unsafe URI\n unless we know URI values are safe for that attribute */\n } else if (IS_ALLOWED_URI.test(value.replace(ATTR_WHITESPACE, ''))) {\n // This attribute is safe\n /* Keep image data URIs alive if src/xlink:href is allowed */\n } else if (\n (lcName === 'src' || lcName === 'xlink:href') &&\n value.indexOf('data:') === 0 &&\n DATA_URI_TAGS[currentNode.nodeName.toLowerCase()]\n ) {\n // This attribute is safe\n /* Allow unknown protocols: This provides support for links that\n are handled by protocol handlers which may be unknown ahead of\n time, e.g. fb:, spotify: */\n } else if (\n ALLOW_UNKNOWN_PROTOCOLS &&\n !IS_SCRIPT_OR_DATA.test(value.replace(ATTR_WHITESPACE, ''))\n ) {\n // This attribute is safe\n /* Check for binary attributes */\n // eslint-disable-next-line no-negated-condition\n } else if (!value) {\n // Binary attributes are safe at this point\n /* Anything else, presume unsafe, do not add it back */\n } else {\n continue;\n }\n\n /* Handle invalid data-* attribute set by try-catching it */\n try {\n currentNode.setAttribute(name, value);\n DOMPurify.removed.pop();\n } catch (err) {}\n }\n\n /* Execute a hook if present */\n _executeHook('afterSanitizeAttributes', currentNode, null);\n };\n\n /**\n * _sanitizeShadowDOM\n *\n * @param fragment to iterate over recursively\n * @return void\n */\n const _sanitizeShadowDOM = function(fragment) {\n let shadowNode;\n const shadowIterator = _createIterator(fragment);\n\n /* Execute a hook if present */\n _executeHook('beforeSanitizeShadowDOM', fragment, null);\n\n while ((shadowNode = shadowIterator.nextNode())) {\n /* Execute a hook if present */\n _executeHook('uponSanitizeShadowNode', shadowNode, null);\n\n /* Sanitize tags and elements */\n if (_sanitizeElements(shadowNode)) {\n continue;\n }\n\n /* Deep shadow DOM detected */\n if (shadowNode.content instanceof DocumentFragment) {\n _sanitizeShadowDOM(shadowNode.content);\n }\n\n /* Check attributes, sanitize if necessary */\n _sanitizeAttributes(shadowNode);\n }\n\n /* Execute a hook if present */\n _executeHook('afterSanitizeShadowDOM', fragment, null);\n };\n\n /**\n * Sanitize\n * Public method providing core sanitation functionality\n *\n * @param {String|Node} dirty string or DOM node\n * @param {Object} configuration object\n */\n // eslint-disable-next-line complexity\n DOMPurify.sanitize = function(dirty, cfg) {\n let body;\n let importedNode;\n let currentNode;\n let oldNode;\n let returnNode;\n /* Make sure we have a string to sanitize.\n DO NOT return early, as this will return the wrong type if\n the user has requested a DOM object rather than a string */\n if (!dirty) {\n dirty = '';\n }\n\n /* Stringify, in case dirty is an object */\n if (typeof dirty !== 'string' && !_isNode(dirty)) {\n // eslint-disable-next-line no-negated-condition\n if (typeof dirty.toString !== 'function') {\n throw new TypeError('toString is not a function');\n } else {\n dirty = dirty.toString();\n }\n }\n\n /* Check we can run. Otherwise fall back or ignore */\n if (!DOMPurify.isSupported) {\n if (\n typeof window.toStaticHTML === 'object' ||\n typeof window.toStaticHTML === 'function'\n ) {\n if (typeof dirty === 'string') {\n return window.toStaticHTML(dirty);\n } else if (_isNode(dirty)) {\n return window.toStaticHTML(dirty.outerHTML);\n }\n }\n return dirty;\n }\n\n /* Assign config vars */\n if (!SET_CONFIG) {\n _parseConfig(cfg);\n }\n\n /* Clean up removed elements */\n DOMPurify.removed = [];\n\n if (dirty instanceof Node) {\n /* If dirty is a DOM element, append to an empty document to avoid\n elements being stripped by the parser */\n body = _initDocument('');\n importedNode = body.ownerDocument.importNode(dirty, true);\n if (importedNode.nodeType === 1 && importedNode.nodeName === 'BODY') {\n /* Node is already a body, use as is */\n body = importedNode;\n } else {\n body.appendChild(importedNode);\n }\n } else {\n /* Exit directly if we have nothing to do */\n if (!RETURN_DOM && !WHOLE_DOCUMENT && dirty.indexOf('<') === -1) {\n return dirty;\n }\n\n /* Initialize the document to work on */\n body = _initDocument(dirty);\n\n /* Check we have a DOM node from the data */\n if (!body) {\n return RETURN_DOM ? null : '';\n }\n }\n\n /* Remove first element node (ours) if FORCE_BODY is set */\n if (FORCE_BODY) {\n _forceRemove(body.firstChild);\n }\n\n /* Get node iterator */\n const nodeIterator = _createIterator(body);\n\n /* Now start iterating over the created document */\n while ((currentNode = nodeIterator.nextNode())) {\n /* Fix IE's strange behavior with manipulated textNodes #89 */\n if (currentNode.nodeType === 3 && currentNode === oldNode) {\n continue;\n }\n\n /* Sanitize tags and elements */\n if (_sanitizeElements(currentNode)) {\n continue;\n }\n\n /* Shadow DOM detected, sanitize it */\n if (currentNode.content instanceof DocumentFragment) {\n _sanitizeShadowDOM(currentNode.content);\n }\n\n /* Check attributes, sanitize if necessary */\n _sanitizeAttributes(currentNode);\n\n oldNode = currentNode;\n }\n\n /* Return sanitized string or DOM */\n if (RETURN_DOM) {\n if (RETURN_DOM_FRAGMENT) {\n returnNode = createDocumentFragment.call(body.ownerDocument);\n\n while (body.firstChild) {\n returnNode.appendChild(body.firstChild);\n }\n } else {\n returnNode = body;\n }\n\n if (RETURN_DOM_IMPORT) {\n /* AdoptNode() is not used because internal state is not reset\n (e.g. the past names map of a HTMLFormElement), this is safe\n in theory but we would rather not risk another attack vector.\n The state that is cloned by importNode() is explicitly defined\n by the specs. */\n returnNode = importNode.call(originalDocument, returnNode, true);\n }\n\n return returnNode;\n }\n\n return WHOLE_DOCUMENT ? body.outerHTML : body.innerHTML;\n };\n\n /**\n * Public method to set the configuration once\n * setConfig\n *\n * @param {Object} configuration object\n * @return void\n */\n DOMPurify.setConfig = function(cfg) {\n _parseConfig(cfg);\n SET_CONFIG = true;\n };\n\n /**\n * Public method to remove the configuration\n * clearConfig\n *\n * @return void\n */\n DOMPurify.clearConfig = function() {\n CONFIG = null;\n SET_CONFIG = false;\n };\n\n /**\n * AddHook\n * Public method to add DOMPurify hooks\n *\n * @param {String} entryPoint\n * @param {Function} hookFunction\n */\n DOMPurify.addHook = function(entryPoint, hookFunction) {\n if (typeof hookFunction !== 'function') {\n return;\n }\n hooks[entryPoint] = hooks[entryPoint] || [];\n hooks[entryPoint].push(hookFunction);\n };\n\n /**\n * RemoveHook\n * Public method to remove a DOMPurify hook at a given entryPoint\n * (pops it from the stack of hooks if more are present)\n *\n * @param {String} entryPoint\n * @return void\n */\n DOMPurify.removeHook = function(entryPoint) {\n if (hooks[entryPoint]) {\n hooks[entryPoint].pop();\n }\n };\n\n /**\n * RemoveHooks\n * Public method to remove all DOMPurify hooks at a given entryPoint\n *\n * @param {String} entryPoint\n * @return void\n */\n DOMPurify.removeHooks = function(entryPoint) {\n if (hooks[entryPoint]) {\n hooks[entryPoint] = [];\n }\n };\n\n /**\n * RemoveAllHooks\n * Public method to remove all DOMPurify hooks\n *\n * @return void\n */\n DOMPurify.removeAllHooks = function() {\n hooks = {};\n };\n\n return DOMPurify;\n}\n\nmodule.exports = createDOMPurify();\n\n\n\n// WEBPACK FOOTER //\n// ./src/purify.js"],"sourceRoot":""} \ No newline at end of file +{"version":3,"sources":["webpack:///webpack/universalModuleDefinition","webpack:///webpack/bootstrap 60999e3eaad819ee6742","webpack:///./src/attrs.js","webpack:///./src/tags.js","webpack:///./src/utils.js","webpack:///./src/purify.js"],"names":["html","svg","mathMl","xml","svgFilters","text","addToSet","clone","set","array","l","length","toLowerCase","object","newObject","property","Object","prototype","hasOwnProperty","call","TAGS","ATTRS","getGlobal","Function","createDOMPurify","window","DOMPurify","root","version","removed","document","nodeType","isSupported","originalDocument","useDOMParser","useXHR","DocumentFragment","HTMLTemplateElement","Node","NodeFilter","NamedNodeMap","MozNamedAttrMap","Text","Comment","DOMParser","XMLHttpRequest","encodeURI","template","createElement","content","ownerDocument","implementation","createNodeIterator","getElementsByTagName","createDocumentFragment","importNode","hooks","createHTMLDocument","documentMode","ALLOWED_TAGS","DEFAULT_ALLOWED_TAGS","ALLOWED_ATTR","DEFAULT_ALLOWED_ATTR","FORBID_TAGS","FORBID_ATTR","ALLOW_ARIA_ATTR","ALLOW_DATA_ATTR","ALLOW_UNKNOWN_PROTOCOLS","SAFE_FOR_JQUERY","SAFE_FOR_TEMPLATES","MUSTACHE_EXPR","ERB_EXPR","WHOLE_DOCUMENT","SET_CONFIG","FORCE_BODY","RETURN_DOM","RETURN_DOM_FRAGMENT","RETURN_DOM_IMPORT","SANITIZE_DOM","KEEP_CONTENT","FORBID_CONTENTS","DATA_URI_TAGS","URI_SAFE_ATTRIBUTES","CONFIG","formElement","_parseConfig","cfg","ADD_TAGS","ADD_ATTR","ADD_URI_SAFE_ATTR","freeze","_forceRemove","node","push","element","parentNode","removeChild","err","outerHTML","_removeAttribute","name","attribute","getAttributeNode","from","removeAttribute","_initDocument","dirty","doc","body","xhr","responseType","open","send","response","parseFromString","documentElement","firstElementChild","querySelector","_createIterator","SHOW_ELEMENT","SHOW_COMMENT","SHOW_TEXT","FILTER_ACCEPT","_isClobbered","elm","nodeName","textContent","attributes","setAttribute","_isNode","obj","_executeHook","entryPoint","currentNode","data","forEach","hook","_sanitizeElements","tagName","allowedTags","insertAdjacentHTML","innerHTML","test","cloneNode","replace","DATA_ATTR","ARIA_ATTR","IS_ALLOWED_URI","IS_SCRIPT_OR_DATA","ATTR_WHITESPACE","_sanitizeAttributes","attr","value","lcName","idAttr","hookEvent","attrName","attrValue","keepAttr","allowedAttributes","trim","id","Array","slice","apply","indexOf","pop","_sanitizeShadowDOM","fragment","shadowNode","shadowIterator","nextNode","sanitize","importedNode","oldNode","returnNode","toString","TypeError","toStaticHTML","appendChild","firstChild","nodeIterator","setConfig","clearConfig","addHook","hookFunction","removeHook","removeHooks","removeAllHooks","module","exports"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CAAC;AACD,O;ACVA;AACA;;AAEA;AACA;;AAEA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;;AAEA;AACA;;AAEA;AACA;AACA;;;AAGA;AACA;;AAEA;AACA;;AAEA;AACA,mDAA2C,cAAc;;AAEzD;AACA;AACA;AACA;AACA;AACA;AACA;AACA,aAAK;AACL;AACA;;AAEA;AACA;AACA;AACA,mCAA2B,0BAA0B,EAAE;AACvD,yCAAiC,eAAe;AAChD;AACA;AACA;;AAEA;AACA,8DAAsD,+DAA+D;;AAErH;AACA;;AAEA;AACA;;;;;;;;;;;;;AChEO,IAAMA,sBAAO,CAClB,QADkB,EAElB,QAFkB,EAGlB,OAHkB,EAIlB,KAJkB,EAKlB,cALkB,EAMlB,YANkB,EAOlB,SAPkB,EAQlB,QARkB,EASlB,aATkB,EAUlB,aAVkB,EAWlB,SAXkB,EAYlB,MAZkB,EAalB,OAbkB,EAclB,OAdkB,EAelB,OAfkB,EAgBlB,MAhBkB,EAiBlB,SAjBkB,EAkBlB,QAlBkB,EAmBlB,UAnBkB,EAoBlB,SApBkB,EAqBlB,KArBkB,EAsBlB,UAtBkB,EAuBlB,UAvBkB,EAwBlB,SAxBkB,EAyBlB,MAzBkB,EA0BlB,KA1BkB,EA2BlB,SA3BkB,EA4BlB,QA5BkB,EA6BlB,QA7BkB,EA8BlB,MA9BkB,EA+BlB,MA/BkB,EAgClB,UAhCkB,EAiClB,IAjCkB,EAkClB,OAlCkB,EAmClB,OAnCkB,EAoClB,MApCkB,EAqClB,MArCkB,EAsClB,MAtCkB,EAuClB,KAvCkB,EAwClB,KAxCkB,EAyClB,WAzCkB,EA0ClB,OA1CkB,EA2ClB,QA3CkB,EA4ClB,KA5CkB,EA6ClB,UA7CkB,EA8ClB,MA9CkB,EA+ClB,SA/CkB,EAgDlB,YAhDkB,EAiDlB,QAjDkB,EAkDlB,MAlDkB,EAmDlB,SAnDkB,EAoDlB,SApDkB,EAqDlB,aArDkB,EAsDlB,QAtDkB,EAuDlB,SAvDkB,EAwDlB,SAxDkB,EAyDlB,YAzDkB,EA0DlB,UA1DkB,EA2DlB,KA3DkB,EA4DlB,UA5DkB,EA6DlB,KA7DkB,EA8DlB,UA9DkB,EA+DlB,MA/DkB,EAgElB,MAhEkB,EAiElB,SAjEkB,EAkElB,YAlEkB,EAmElB,OAnEkB,EAoElB,UApEkB,EAqElB,OArEkB,EAsElB,MAtEkB,EAuElB,MAvEkB,EAwElB,SAxEkB,EAyElB,OAzEkB,EA0ElB,KA1EkB,EA2ElB,MA3EkB,EA4ElB,OA5EkB,EA6ElB,SA7EkB,EA8ElB,UA9EkB,EA+ElB,OA/EkB,EAgFlB,MAhFkB,EAiFlB,QAjFkB,EAkFlB,QAlFkB,EAmFlB,OAnFkB,EAoFlB,OApFkB,EAqFlB,OArFkB,CAAb;;AAwFA,IAAMC,oBAAM,CACjB,eADiB,EAEjB,YAFiB,EAGjB,YAHiB,EAIjB,oBAJiB,EAKjB,QALiB,EAMjB,eANiB,EAOjB,eAPiB,EAQjB,SARiB,EASjB,eATiB,EAUjB,gBAViB,EAWjB,OAXiB,EAYjB,MAZiB,EAajB,IAbiB,EAcjB,MAdiB,EAejB,WAfiB,EAgBjB,WAhBiB,EAiBjB,OAjBiB,EAkBjB,qBAlBiB,EAmBjB,6BAnBiB,EAoBjB,eApBiB,EAqBjB,iBArBiB,EAsBjB,IAtBiB,EAuBjB,IAvBiB,EAwBjB,GAxBiB,EAyBjB,IAzBiB,EA0BjB,IA1BiB,EA2BjB,iBA3BiB,EA4BjB,WA5BiB,EA6BjB,SA7BiB,EA8BjB,SA9BiB,EA+BjB,KA/BiB,EAgCjB,UAhCiB,EAiCjB,WAjCiB,EAkCjB,KAlCiB,EAmCjB,MAnCiB,EAoCjB,cApCiB,EAqCjB,WArCiB,EAsCjB,QAtCiB,EAuCjB,aAvCiB,EAwCjB,eAxCiB,EAyCjB,aAzCiB,EA0CjB,WA1CiB,EA2CjB,kBA3CiB,EA4CjB,cA5CiB,EA6CjB,YA7CiB,EA8CjB,cA9CiB,EA+CjB,aA/CiB,EAgDjB,IAhDiB,EAiDjB,IAjDiB,EAkDjB,IAlDiB,EAmDjB,IAnDiB,EAoDjB,YApDiB,EAqDjB,UArDiB,EAsDjB,eAtDiB,EAuDjB,mBAvDiB,EAwDjB,iBAxDiB,EAyDjB,IAzDiB,EA0DjB,KA1DiB,EA2DjB,GA3DiB,EA4DjB,IA5DiB,EA6DjB,IA7DiB,EA8DjB,IA9DiB,EA+DjB,IA/DiB,EAgEjB,SAhEiB,EAiEjB,WAjEiB,EAkEjB,YAlEiB,EAmEjB,UAnEiB,EAoEjB,cApEiB,EAqEjB,gBArEiB,EAsEjB,cAtEiB,EAuEjB,kBAvEiB,EAwEjB,gBAxEiB,EAyEjB,OAzEiB,EA0EjB,YA1EiB,EA2EjB,YA3EiB,EA4EjB,cA5EiB,EA6EjB,cA7EiB,EA8EjB,aA9EiB,EA+EjB,aA/EiB,EAgFjB,kBAhFiB,EAiFjB,WAjFiB,EAkFjB,KAlFiB,EAmFjB,MAnFiB,EAoFjB,MApFiB,EAqFjB,KArFiB,EAsFjB,YAtFiB,EAuFjB,QAvFiB,EAwFjB,UAxFiB,EAyFjB,SAzFiB,EA0FjB,OA1FiB,EA2FjB,QA3FiB,EA4FjB,aA5FiB,EA6FjB,QA7FiB,EA8FjB,UA9FiB,EA+FjB,aA/FiB,EAgGjB,MAhGiB,EAiGjB,YAjGiB,EAkGjB,qBAlGiB,EAmGjB,kBAnGiB,EAoGjB,cApGiB,EAqGjB,QArGiB,EAsGjB,eAtGiB,EAuGjB,GAvGiB,EAwGjB,IAxGiB,EAyGjB,IAzGiB,EA0GjB,QA1GiB,EA2GjB,MA3GiB,EA4GjB,MA5GiB,EA6GjB,aA7GiB,EA8GjB,WA9GiB,EA+GjB,SA/GiB,EAgHjB,QAhHiB,EAiHjB,QAjHiB,EAkHjB,OAlHiB,EAmHjB,MAnHiB,EAoHjB,iBApHiB,EAqHjB,kBArHiB,EAsHjB,kBAtHiB,EAuHjB,cAvHiB,EAwHjB,cAxHiB,EAyHjB,aAzHiB,EA0HjB,YA1HiB,EA2HjB,cA3HiB,EA4HjB,kBA5HiB,EA6HjB,mBA7HiB,EA8HjB,gBA9HiB,EA+HjB,iBA/HiB,EAgIjB,mBAhIiB,EAiIjB,gBAjIiB,EAkIjB,QAlIiB,EAmIjB,cAnIiB,EAoIjB,cApIiB,EAqIjB,SArIiB,EAsIjB,SAtIiB,EAuIjB,WAvIiB,EAwIjB,aAxIiB,EAyIjB,iBAzIiB,EA0IjB,gBA1IiB,EA2IjB,YA3IiB,EA4IjB,IA5IiB,EA6IjB,IA7IiB,EA8IjB,SA9IiB,EA+IjB,QA/IiB,EAgJjB,SAhJiB,EAiJjB,YAjJiB,EAkJjB,YAlJiB,EAmJjB,eAnJiB,EAoJjB,eApJiB,EAqJjB,cArJiB,EAsJjB,MAtJiB,EAuJjB,cAvJiB,EAwJjB,kBAxJiB,EAyJjB,kBAzJiB,EA0JjB,GA1JiB,EA2JjB,IA3JiB,EA4JjB,IA5JiB,EA6JjB,GA7JiB,EA8JjB,IA9JiB,EA+JjB,IA/JiB,EAgKjB,GAhKiB,EAiKjB,YAjKiB,CAAZ;;AAoKA,IAAMC,0BAAS,CACpB,QADoB,EAEpB,aAFoB,EAGpB,UAHoB,EAIpB,OAJoB,EAKpB,cALoB,EAMpB,aANoB,EAOpB,YAPoB,EAQpB,YARoB,EASpB,OAToB,EAUpB,SAVoB,EAWpB,cAXoB,EAYpB,OAZoB,EAapB,OAboB,EAcpB,SAdoB,EAepB,QAfoB,EAgBpB,eAhBoB,EAiBpB,QAjBoB,EAkBpB,QAlBoB,EAmBpB,gBAnBoB,EAoBpB,WApBoB,EAqBpB,UArBoB,EAsBpB,aAtBoB,EAuBpB,SAvBoB,EAwBpB,SAxBoB,EAyBpB,eAzBoB,EA0BpB,UA1BoB,EA2BpB,UA3BoB,EA4BpB,MA5BoB,EA6BpB,UA7BoB,EA8BpB,UA9BoB,EA+BpB,YA/BoB,EAgCpB,SAhCoB,EAiCpB,QAjCoB,EAkCpB,QAlCoB,EAmCpB,aAnCoB,EAoCpB,eApCoB,EAqCpB,sBArCoB,EAsCpB,WAtCoB,EAuCpB,WAvCoB,EAwCpB,YAxCoB,EAyCpB,UAzCoB,EA0CpB,gBA1CoB,EA2CpB,gBA3CoB,EA4CpB,WA5CoB,EA6CpB,SA7CoB,CAAf;;AAgDA,IAAMC,oBAAM,CACjB,YADiB,EAEjB,QAFiB,EAGjB,aAHiB,EAIjB,WAJiB,EAKjB,aALiB,CAAZ,C;;;;;;;;;;;;AC5SA,IAAMH,sBAAO,CAClB,GADkB,EAElB,MAFkB,EAGlB,SAHkB,EAIlB,SAJkB,EAKlB,MALkB,EAMlB,SANkB,EAOlB,OAPkB,EAQlB,OARkB,EASlB,GATkB,EAUlB,KAVkB,EAWlB,KAXkB,EAYlB,KAZkB,EAalB,OAbkB,EAclB,YAdkB,EAelB,MAfkB,EAgBlB,IAhBkB,EAiBlB,QAjBkB,EAkBlB,QAlBkB,EAmBlB,SAnBkB,EAoBlB,QApBkB,EAqBlB,MArBkB,EAsBlB,MAtBkB,EAuBlB,KAvBkB,EAwBlB,UAxBkB,EAyBlB,SAzBkB,EA0BlB,MA1BkB,EA2BlB,UA3BkB,EA4BlB,IA5BkB,EA6BlB,WA7BkB,EA8BlB,KA9BkB,EA+BlB,SA/BkB,EAgClB,KAhCkB,EAiClB,KAjCkB,EAkClB,KAlCkB,EAmClB,IAnCkB,EAoClB,IApCkB,EAqClB,SArCkB,EAsClB,IAtCkB,EAuClB,UAvCkB,EAwClB,YAxCkB,EAyClB,QAzCkB,EA0ClB,MA1CkB,EA2ClB,QA3CkB,EA4ClB,MA5CkB,EA6ClB,IA7CkB,EA8ClB,IA9CkB,EA+ClB,IA/CkB,EAgDlB,IAhDkB,EAiDlB,IAjDkB,EAkDlB,IAlDkB,EAmDlB,MAnDkB,EAoDlB,QApDkB,EAqDlB,QArDkB,EAsDlB,IAtDkB,EAuDlB,MAvDkB,EAwDlB,GAxDkB,EAyDlB,KAzDkB,EA0DlB,OA1DkB,EA2DlB,KA3DkB,EA4DlB,KA5DkB,EA6DlB,OA7DkB,EA8DlB,QA9DkB,EA+DlB,IA/DkB,EAgElB,MAhEkB,EAiElB,KAjEkB,EAkElB,MAlEkB,EAmElB,SAnEkB,EAoElB,MApEkB,EAqElB,UArEkB,EAsElB,OAtEkB,EAuElB,KAvEkB,EAwElB,MAxEkB,EAyElB,IAzEkB,EA0ElB,UA1EkB,EA2ElB,QA3EkB,EA4ElB,QA5EkB,EA6ElB,GA7EkB,EA8ElB,KA9EkB,EA+ElB,UA/EkB,EAgFlB,GAhFkB,EAiFlB,IAjFkB,EAkFlB,IAlFkB,EAmFlB,MAnFkB,EAoFlB,GApFkB,EAqFlB,MArFkB,EAsFlB,SAtFkB,EAuFlB,QAvFkB,EAwFlB,QAxFkB,EAyFlB,OAzFkB,EA0FlB,QA1FkB,EA2FlB,QA3FkB,EA4FlB,MA5FkB,EA6FlB,QA7FkB,EA8FlB,QA9FkB,EA+FlB,OA/FkB,EAgGlB,KAhGkB,EAiGlB,SAjGkB,EAkGlB,KAlGkB,EAmGlB,OAnGkB,EAoGlB,OApGkB,EAqGlB,IArGkB,EAsGlB,UAtGkB,EAuGlB,UAvGkB,EAwGlB,OAxGkB,EAyGlB,IAzGkB,EA0GlB,OA1GkB,EA2GlB,MA3GkB,EA4GlB,IA5GkB,EA6GlB,OA7GkB,EA8GlB,IA9GkB,EA+GlB,GA/GkB,EAgHlB,IAhHkB,EAiHlB,KAjHkB,EAkHlB,OAlHkB,EAmHlB,KAnHkB,CAAb;;AAsHP;AACO,IAAMC,oBAAM,CACjB,KADiB,EAEjB,UAFiB,EAGjB,aAHiB,EAIjB,cAJiB,EAKjB,cALiB,EAMjB,eANiB,EAOjB,kBAPiB,EAQjB,QARiB,EASjB,UATiB,EAUjB,MAViB,EAWjB,MAXiB,EAYjB,SAZiB,EAajB,QAbiB,EAcjB,MAdiB,EAejB,GAfiB,EAgBjB,OAhBiB,EAiBjB,UAjBiB,EAkBjB,OAlBiB,EAmBjB,OAnBiB,EAoBjB,MApBiB,EAqBjB,gBArBiB,EAsBjB,QAtBiB,EAuBjB,MAvBiB,EAwBjB,UAxBiB,EAyBjB,OAzBiB,EA0BjB,MA1BiB,EA2BjB,SA3BiB,EA4BjB,SA5BiB,EA6BjB,UA7BiB,EA8BjB,gBA9BiB,EA+BjB,MA/BiB,EAgCjB,MAhCiB,EAiCjB,QAjCiB,EAkCjB,QAlCiB,EAmCjB,MAnCiB,EAoCjB,UApCiB,EAqCjB,OArCiB,EAsCjB,MAtCiB,EAuCjB,OAvCiB,EAwCjB,MAxCiB,EAyCjB,OAzCiB,CAAZ;;AA4CA,IAAMG,kCAAa,CACxB,SADwB,EAExB,eAFwB,EAGxB,qBAHwB,EAIxB,aAJwB,EAKxB,kBALwB,EAMxB,mBANwB,EAOxB,mBAPwB,EAQxB,SARwB,EASxB,SATwB,EAUxB,SAVwB,EAWxB,SAXwB,EAYxB,SAZwB,EAaxB,gBAbwB,EAcxB,SAdwB,EAexB,aAfwB,EAgBxB,cAhBwB,EAiBxB,UAjBwB,EAkBxB,oBAlBwB,EAmBxB,QAnBwB,EAoBxB,cApBwB,CAAnB;;AAuBA,IAAMF,0BAAS,CACpB,MADoB,EAEpB,UAFoB,EAGpB,QAHoB,EAIpB,SAJoB,EAKpB,OALoB,EAMpB,QANoB,EAOpB,IAPoB,EAQpB,YARoB,EASpB,cAToB,EAUpB,IAVoB,EAWpB,IAXoB,EAYpB,OAZoB,EAapB,SAboB,EAcpB,UAdoB,EAepB,OAfoB,EAgBpB,MAhBoB,EAiBpB,IAjBoB,EAkBpB,SAlBoB,EAmBpB,OAnBoB,EAoBpB,SApBoB,EAqBpB,MArBoB,EAsBpB,MAtBoB,EAuBpB,SAvBoB,EAwBpB,QAxBoB,EAyBpB,KAzBoB,EA0BpB,OA1BoB,EA2BpB,KA3BoB,EA4BpB,QA5BoB,EA6BpB,YA7BoB,CAAf;;AAgCA,IAAMG,sBAAO,CAAC,OAAD,CAAb,C;;;;;;;;;;;;QCzNSC,Q,GAAAA,Q;QAYAC,K,GAAAA,K;AAbhB;AACO,SAASD,QAAT,CAAkBE,GAAlB,EAAuBC,KAAvB,EAA8B;AACnC,MAAIC,IAAID,MAAME,MAAd;AACA,SAAOD,GAAP,EAAY;AACV,QAAI,OAAOD,MAAMC,CAAN,CAAP,KAAoB,QAAxB,EAAkC;AAChCD,YAAMC,CAAN,IAAWD,MAAMC,CAAN,EAASE,WAAT,EAAX;AACD;AACDJ,QAAIC,MAAMC,CAAN,CAAJ,IAAgB,IAAhB;AACD;AACD,SAAOF,GAAP;AACD;;AAED;AACO,SAASD,KAAT,CAAeM,MAAf,EAAuB;AAC5B,MAAMC,YAAY,EAAlB;AACA,MAAIC,iBAAJ;AACA,OAAKA,QAAL,IAAiBF,MAAjB,EAAyB;AACvB,QAAIG,OAAOC,SAAP,CAAiBC,cAAjB,CAAgCC,IAAhC,CAAqCN,MAArC,EAA6CE,QAA7C,CAAJ,EAA4D;AAC1DD,gBAAUC,QAAV,IAAsBF,OAAOE,QAAP,CAAtB;AACD;AACF;AACD,SAAOD,SAAP;AACD,C;;;;;;;;;;;ACtBD;;IAAYM,I;;AACZ;;IAAYC,K;;AACZ;;;;;;AAEA,SAASC,SAAT,GAAqB;AACnB;AACA,SAAOC,SAAS,aAAT,GAAP;AACD;;AAED,SAASC,eAAT,GAA+C;AAAA,MAAtBC,MAAsB,uEAAbH,WAAa;;AAC7C,MAAMI,YAAY,SAAZA,SAAY;AAAA,WAAQF,gBAAgBG,IAAhB,CAAR;AAAA,GAAlB;;AAEA;;;;AAIAD,YAAUE,OAAV,GAAoB,OAApB;;AAEA;;;;AAIAF,YAAUG,OAAV,GAAoB,EAApB;;AAEA,MAAI,CAACJ,MAAD,IAAW,CAACA,OAAOK,QAAnB,IAA+BL,OAAOK,QAAP,CAAgBC,QAAhB,KAA6B,CAAhE,EAAmE;AACjE;AACA;AACAL,cAAUM,WAAV,GAAwB,KAAxB;;AAEA,WAAON,SAAP;AACD;;AAED,MAAMO,mBAAmBR,OAAOK,QAAhC;AACA,MAAII,eAAe,KAAnB,CAxB6C,CAwBnB;AAC1B,MAAIC,SAAS,KAAb;;AAEA,MAAIL,WAAWL,OAAOK,QAAtB;AA3B6C,MA6B3CM,gBA7B2C,GAuCzCX,MAvCyC,CA6B3CW,gBA7B2C;AAAA,MA8B3CC,mBA9B2C,GAuCzCZ,MAvCyC,CA8B3CY,mBA9B2C;AAAA,MA+B3CC,IA/B2C,GAuCzCb,MAvCyC,CA+B3Ca,IA/B2C;AAAA,MAgC3CC,UAhC2C,GAuCzCd,MAvCyC,CAgC3Cc,UAhC2C;AAAA,6BAuCzCd,MAvCyC,CAiC3Ce,YAjC2C;AAAA,MAiC3CA,YAjC2C,wCAiC5Bf,OAAOe,YAAP,IAAuBf,OAAOgB,eAjCF;AAAA,MAkC3CC,IAlC2C,GAuCzCjB,MAvCyC,CAkC3CiB,IAlC2C;AAAA,MAmC3CC,OAnC2C,GAuCzClB,MAvCyC,CAmC3CkB,OAnC2C;AAAA,MAoC3CC,SApC2C,GAuCzCnB,MAvCyC,CAoC3CmB,SApC2C;AAAA,8BAuCzCnB,MAvCyC,CAqC3CoB,cArC2C;AAAA,MAqC3CA,cArC2C,yCAqC1BpB,OAAOoB,cArCmB;AAAA,0BAuCzCpB,MAvCyC,CAsC3CqB,SAtC2C;AAAA,MAsC3CA,SAtC2C,qCAsC/BrB,OAAOqB,SAtCwB;;AAyC7C;AACA;AACA;AACA;AACA;AACA;;AACA,MAAI,OAAOT,mBAAP,KAA+B,UAAnC,EAA+C;AAC7C,QAAMU,WAAWjB,SAASkB,aAAT,CAAuB,UAAvB,CAAjB;AACA,QAAID,SAASE,OAAT,IAAoBF,SAASE,OAAT,CAAiBC,aAAzC,EAAwD;AACtDpB,iBAAWiB,SAASE,OAAT,CAAiBC,aAA5B;AACD;AACF;;AApD4C,kBA2DzCpB,QA3DyC;AAAA,MAuD3CqB,cAvD2C,aAuD3CA,cAvD2C;AAAA,MAwD3CC,kBAxD2C,aAwD3CA,kBAxD2C;AAAA,MAyD3CC,oBAzD2C,aAyD3CA,oBAzD2C;AAAA,MA0D3CC,sBA1D2C,aA0D3CA,sBA1D2C;;AA4D7C,MAAMC,aAAatB,iBAAiBsB,UAApC;;AAEA,MAAIC,QAAQ,EAAZ;;AAEA;;;AAGA9B,YAAUM,WAAV,GACEmB,kBACA,OAAOA,eAAeM,kBAAtB,KAA6C,WAD7C,IAEA3B,SAAS4B,YAAT,KAA0B,CAH5B;;AAKA;;;;;AAKA;AACA,MAAIC,eAAe,IAAnB;AACA,MAAMC,uBAAuB,qBAAS,EAAT,+BACxBxC,KAAKpB,IADmB,sBAExBoB,KAAKnB,GAFmB,sBAGxBmB,KAAKhB,UAHmB,sBAIxBgB,KAAKlB,MAJmB,sBAKxBkB,KAAKf,IALmB,GAA7B;;AAQA;AACA,MAAIwD,eAAe,IAAnB;AACA,MAAMC,uBAAuB,qBAAS,EAAT,+BACxBzC,MAAMrB,IADkB,sBAExBqB,MAAMpB,GAFkB,sBAGxBoB,MAAMnB,MAHkB,sBAIxBmB,MAAMlB,GAJkB,GAA7B;;AAOA;AACA,MAAI4D,cAAc,IAAlB;;AAEA;AACA,MAAIC,cAAc,IAAlB;;AAEA;AACA,MAAIC,kBAAkB,IAAtB;;AAEA;AACA,MAAIC,kBAAkB,IAAtB;;AAEA;AACA,MAAIC,0BAA0B,KAA9B;;AAEA;AACA,MAAIC,kBAAkB,KAAtB;;AAEA;;;AAGA,MAAIC,qBAAqB,KAAzB;;AAEA;AACA,MAAMC,gBAAgB,2BAAtB;AACA,MAAMC,WAAW,uBAAjB;;AAEA;AACA,MAAIC,iBAAiB,KAArB;;AAEA;AACA,MAAIC,aAAa,KAAjB;;AAEA;;AAEA,MAAIC,aAAa,KAAjB;;AAEA;;;AAGA,MAAIC,aAAa,KAAjB;;AAEA;AACA,MAAIC,sBAAsB,KAA1B;;AAEA;;;;AAIA,MAAIC,oBAAoB,KAAxB;;AAEA;AACA,MAAIC,eAAe,IAAnB;;AAEA;AACA,MAAIC,eAAe,IAAnB;;AAEA;AACA,MAAMC,kBAAkB,qBAAS,EAAT,EAAa,CACnC,OADmC,EAEnC,MAFmC,EAGnC,MAHmC,EAInC,QAJmC,EAKnC,OALmC,EAMnC,UANmC,EAOnC,KAPmC,EAQnC,OARmC,CAAb,CAAxB;;AAWA;AACA,MAAMC,gBAAgB,qBAAS,EAAT,EAAa,CACjC,OADiC,EAEjC,OAFiC,EAGjC,KAHiC,EAIjC,QAJiC,EAKjC,OALiC,CAAb,CAAtB;;AAQA;AACA,MAAMC,sBAAsB,qBAAS,EAAT,EAAa,CACvC,KADuC,EAEvC,OAFuC,EAGvC,KAHuC,EAIvC,IAJuC,EAKvC,OALuC,EAMvC,MANuC,EAOvC,SAPuC,EAQvC,aARuC,EASvC,SATuC,EAUvC,OAVuC,EAWvC,OAXuC,EAYvC,OAZuC,EAavC,OAbuC,CAAb,CAA5B;;AAgBA;AACA,MAAIC,SAAS,IAAb;;AAEA;AACA;;AAEA,MAAMC,cAActD,SAASkB,aAAT,CAAuB,MAAvB,CAApB;;AAEA;;;;;AAKA;AACA,MAAMqC,eAAe,SAAfA,YAAe,CAASC,GAAT,EAAc;AACjC;AACA,QAAI,QAAOA,GAAP,yCAAOA,GAAP,OAAe,QAAnB,EAA6B;AAC3BA,YAAM,EAAN;AACD;;AAED;AACA3B,mBAAe,kBAAkB2B,GAAlB,GACX,qBAAS,EAAT,EAAaA,IAAI3B,YAAjB,CADW,GAEXC,oBAFJ;AAGAC,mBAAe,kBAAkByB,GAAlB,GACX,qBAAS,EAAT,EAAaA,IAAIzB,YAAjB,CADW,GAEXC,oBAFJ;AAGAC,kBAAc,iBAAiBuB,GAAjB,GAAuB,qBAAS,EAAT,EAAaA,IAAIvB,WAAjB,CAAvB,GAAuD,EAArE;AACAC,kBAAc,iBAAiBsB,GAAjB,GAAuB,qBAAS,EAAT,EAAaA,IAAItB,WAAjB,CAAvB,GAAuD,EAArE;AACAC,sBAAkBqB,IAAIrB,eAAJ,KAAwB,KAA1C,CAfiC,CAegB;AACjDC,sBAAkBoB,IAAIpB,eAAJ,KAAwB,KAA1C,CAhBiC,CAgBgB;AACjDC,8BAA0BmB,IAAInB,uBAAJ,IAA+B,KAAzD,CAjBiC,CAiB+B;AAChEC,sBAAkBkB,IAAIlB,eAAJ,IAAuB,KAAzC,CAlBiC,CAkBe;AAChDC,yBAAqBiB,IAAIjB,kBAAJ,IAA0B,KAA/C,CAnBiC,CAmBqB;AACtDG,qBAAiBc,IAAId,cAAJ,IAAsB,KAAvC,CApBiC,CAoBa;AAC9CG,iBAAaW,IAAIX,UAAJ,IAAkB,KAA/B,CArBiC,CAqBK;AACtCC,0BAAsBU,IAAIV,mBAAJ,IAA2B,KAAjD,CAtBiC,CAsBuB;AACxDC,wBAAoBS,IAAIT,iBAAJ,IAAyB,KAA7C,CAvBiC,CAuBmB;AACpDH,iBAAaY,IAAIZ,UAAJ,IAAkB,KAA/B,CAxBiC,CAwBK;AACtCI,mBAAeQ,IAAIR,YAAJ,KAAqB,KAApC,CAzBiC,CAyBU;AAC3CC,mBAAeO,IAAIP,YAAJ,KAAqB,KAApC,CA1BiC,CA0BU;;AAE3C,QAAIV,kBAAJ,EAAwB;AACtBH,wBAAkB,KAAlB;AACD;;AAED,QAAIU,mBAAJ,EAAyB;AACvBD,mBAAa,IAAb;AACD;;AAED;AACA,QAAIW,IAAIC,QAAR,EAAkB;AAChB,UAAI5B,iBAAiBC,oBAArB,EAA2C;AACzCD,uBAAe,kBAAMA,YAAN,CAAf;AACD;AACD,2BAASA,YAAT,EAAuB2B,IAAIC,QAA3B;AACD;AACD,QAAID,IAAIE,QAAR,EAAkB;AAChB,UAAI3B,iBAAiBC,oBAArB,EAA2C;AACzCD,uBAAe,kBAAMA,YAAN,CAAf;AACD;AACD,2BAASA,YAAT,EAAuByB,IAAIE,QAA3B;AACD;AACD,QAAIF,IAAIG,iBAAR,EAA2B;AACzB,2BAASP,mBAAT,EAA8BI,IAAIG,iBAAlC;AACD;;AAED;AACA,QAAIV,YAAJ,EAAkB;AAChBpB,mBAAa,OAAb,IAAwB,IAAxB;AACD;;AAED;AACA;AACA,QAAI3C,UAAU,YAAYA,MAA1B,EAAkC;AAChCA,aAAO0E,MAAP,CAAcJ,GAAd;AACD;;AAEDH,aAASG,GAAT;AACD,GAjED;;AAmEA;;;;;AAKA,MAAMK,eAAe,SAAfA,YAAe,CAASC,IAAT,EAAe;AAClClE,cAAUG,OAAV,CAAkBgE,IAAlB,CAAuB,EAAEC,SAASF,IAAX,EAAvB;AACA,QAAI;AACFA,WAAKG,UAAL,CAAgBC,WAAhB,CAA4BJ,IAA5B;AACD,KAFD,CAEE,OAAOK,GAAP,EAAY;AACZL,WAAKM,SAAL,GAAiB,EAAjB;AACD;AACF,GAPD;;AASA;;;;;;AAMA,MAAMC,mBAAmB,SAAnBA,gBAAmB,CAASC,IAAT,EAAeR,IAAf,EAAqB;AAC5ClE,cAAUG,OAAV,CAAkBgE,IAAlB,CAAuB;AACrBQ,iBAAWT,KAAKU,gBAAL,CAAsBF,IAAtB,CADU;AAErBG,YAAMX;AAFe,KAAvB;AAIAA,SAAKY,eAAL,CAAqBJ,IAArB;AACD,GAND;;AAQA;;;;;;AAMA,MAAMK,gBAAgB,SAAhBA,aAAgB,CAASC,KAAT,EAAgB;AACpC;AACA,QAAIC,YAAJ;AACA,QAAIC,aAAJ;;AAEA,QAAIlC,UAAJ,EAAgB;AACdgC,cAAQ,sBAAsBA,KAA9B;AACD;;AAED;AACA,QAAIvE,MAAJ,EAAY;AACV,UAAI;AACFuE,gBAAQ5D,UAAU4D,KAAV,CAAR;AACD,OAFD,CAEE,OAAOT,GAAP,EAAY,CAAE;AAChB,UAAMY,MAAM,IAAIhE,cAAJ,EAAZ;AACAgE,UAAIC,YAAJ,GAAmB,UAAnB;AACAD,UAAIE,IAAJ,CAAS,KAAT,EAAgB,kCAAkCL,KAAlD,EAAyD,KAAzD;AACAG,UAAIG,IAAJ,CAAS,IAAT;AACAL,YAAME,IAAII,QAAV;AACD;;AAED;AACA,QAAI/E,YAAJ,EAAkB;AAChB,UAAI;AACFyE,cAAM,IAAI/D,SAAJ,GAAgBsE,eAAhB,CAAgCR,KAAhC,EAAuC,WAAvC,CAAN;AACD,OAFD,CAEE,OAAOT,GAAP,EAAY,CAAE;AACjB;;AAED;;AAEA,QAAI,CAACU,GAAD,IAAQ,CAACA,IAAIQ,eAAjB,EAAkC;AAChCR,YAAMxD,eAAeM,kBAAf,CAAkC,EAAlC,CAAN;AACAmD,aAAOD,IAAIC,IAAX;AACAA,WAAKb,UAAL,CAAgBC,WAAhB,CAA4BY,KAAKb,UAAL,CAAgBqB,iBAA5C;AACAR,WAAKV,SAAL,GAAiBQ,KAAjB;AACD;;AAED;AACA,WAAOrD,qBAAqBlC,IAArB,CAA0BwF,GAA1B,EAA+BnC,iBAAiB,MAAjB,GAA0B,MAAzD,EAAiE,CAAjE,CAAP;AACD,GAvCD;;AAyCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAI9C,UAAUM,WAAd,EAA2B;AACzB,KAAC,YAAW;AACV,UAAI2E,MAAMF,cACR,sDADQ,CAAV;AAGA,UAAI,CAACE,IAAIU,aAAJ,CAAkB,KAAlB,CAAL,EAA+B;AAC7BlF,iBAAS,IAAT;AACD;AACDwE,YAAMF,cACJ,kEADI,CAAN;AAGA,UAAIE,IAAIU,aAAJ,CAAkB,SAAlB,CAAJ,EAAkC;AAChCnF,uBAAe,IAAf;AACD;AACF,KAbD;AAcD;;AAED;;;;;;AAMA,MAAMoF,kBAAkB,SAAlBA,eAAkB,CAAS3F,IAAT,EAAe;AACrC,WAAOyB,mBAAmBjC,IAAnB,CACLQ,KAAKuB,aAAL,IAAsBvB,IADjB,EAELA,IAFK,EAGLY,WAAWgF,YAAX,GAA0BhF,WAAWiF,YAArC,GAAoDjF,WAAWkF,SAH1D,EAIL,YAAM;AACJ,aAAOlF,WAAWmF,aAAlB;AACD,KANI,EAOL,KAPK,CAAP;AASD,GAVD;;AAYA;;;;;;AAMA,MAAMC,eAAe,SAAfA,YAAe,CAASC,GAAT,EAAc;AACjC,QAAIA,eAAelF,IAAf,IAAuBkF,eAAejF,OAA1C,EAAmD;AACjD,aAAO,KAAP;AACD;AACD,QACE,OAAOiF,IAAIC,QAAX,KAAwB,QAAxB,IACA,OAAOD,IAAIE,WAAX,KAA2B,QAD3B,IAEA,OAAOF,IAAI5B,WAAX,KAA2B,UAF3B,IAGA,EAAE4B,IAAIG,UAAJ,YAA0BvF,YAA5B,CAHA,IAIA,OAAOoF,IAAIpB,eAAX,KAA+B,UAJ/B,IAKA,OAAOoB,IAAII,YAAX,KAA4B,UAN9B,EAOE;AACA,aAAO,IAAP;AACD;AACD,WAAO,KAAP;AACD,GAfD;;AAiBA;;;;;;AAMA,MAAMC,UAAU,SAAVA,OAAU,CAASC,GAAT,EAAc;AAC5B,WAAO,QAAO5F,IAAP,yCAAOA,IAAP,OAAgB,QAAhB,GACH4F,eAAe5F,IADZ,GAEH4F,OACE,QAAOA,GAAP,yCAAOA,GAAP,OAAe,QADjB,IAEE,OAAOA,IAAInG,QAAX,KAAwB,QAF1B,IAGE,OAAOmG,IAAIL,QAAX,KAAwB,QAL9B;AAMD,GAPD;;AASA;;;;;;;AAOA,MAAMM,eAAe,SAAfA,YAAe,CAASC,UAAT,EAAqBC,WAArB,EAAkCC,IAAlC,EAAwC;AAC3D,QAAI,CAAC9E,MAAM4E,UAAN,CAAL,EAAwB;AACtB;AACD;;AAED5E,UAAM4E,UAAN,EAAkBG,OAAlB,CAA0B,gBAAQ;AAChCC,WAAKrH,IAAL,CAAUO,SAAV,EAAqB2G,WAArB,EAAkCC,IAAlC,EAAwCnD,MAAxC;AACD,KAFD;AAGD,GARD;;AAUA;;;;;;;;;;AAUA,MAAMsD,oBAAoB,SAApBA,iBAAoB,CAASJ,WAAT,EAAsB;AAC9C,QAAIpF,gBAAJ;;AAEA;AACAkF,iBAAa,wBAAb,EAAuCE,WAAvC,EAAoD,IAApD;;AAEA;AACA,QAAIV,aAAaU,WAAb,CAAJ,EAA+B;AAC7B1C,mBAAa0C,WAAb;AACA,aAAO,IAAP;AACD;;AAED;AACA,QAAMK,UAAUL,YAAYR,QAAZ,CAAqBjH,WAArB,EAAhB;;AAEA;AACAuH,iBAAa,qBAAb,EAAoCE,WAApC,EAAiD;AAC/CK,sBAD+C;AAE/CC,mBAAahF;AAFkC,KAAjD;;AAKA;AACA,QAAI,CAACA,aAAa+E,OAAb,CAAD,IAA0B3E,YAAY2E,OAAZ,CAA9B,EAAoD;AAClD;AACA,UACE3D,gBACA,CAACC,gBAAgB0D,OAAhB,CADD,IAEA,OAAOL,YAAYO,kBAAnB,KAA0C,UAH5C,EAIE;AACA,YAAI;AACFP,sBAAYO,kBAAZ,CAA+B,UAA/B,EAA2CP,YAAYQ,SAAvD;AACD,SAFD,CAEE,OAAO5C,GAAP,EAAY,CAAE;AACjB;AACDN,mBAAa0C,WAAb;AACA,aAAO,IAAP;AACD;;AAED;AACA,QACEjE,mBACA,CAACiE,YAAYjB,iBADb,KAEC,CAACiB,YAAYpF,OAAb,IAAwB,CAACoF,YAAYpF,OAAZ,CAAoBmE,iBAF9C,KAGA,KAAK0B,IAAL,CAAUT,YAAYP,WAAtB,CAJF,EAKE;AACApG,gBAAUG,OAAV,CAAkBgE,IAAlB,CAAuB,EAAEC,SAASuC,YAAYU,SAAZ,EAAX,EAAvB;AACAV,kBAAYQ,SAAZ,GAAwBR,YAAYP,WAAZ,CAAwBkB,OAAxB,CAAgC,IAAhC,EAAsC,MAAtC,CAAxB;AACD;;AAED;AACA,QAAI3E,sBAAsBgE,YAAYtG,QAAZ,KAAyB,CAAnD,EAAsD;AACpD;AACAkB,gBAAUoF,YAAYP,WAAtB;AACA7E,gBAAUA,QAAQ+F,OAAR,CAAgB1E,aAAhB,EAA+B,GAA/B,CAAV;AACArB,gBAAUA,QAAQ+F,OAAR,CAAgBzE,QAAhB,EAA0B,GAA1B,CAAV;AACA,UAAI8D,YAAYP,WAAZ,KAA4B7E,OAAhC,EAAyC;AACvCvB,kBAAUG,OAAV,CAAkBgE,IAAlB,CAAuB,EAAEC,SAASuC,YAAYU,SAAZ,EAAX,EAAvB;AACAV,oBAAYP,WAAZ,GAA0B7E,OAA1B;AACD;AACF;;AAED;AACAkF,iBAAa,uBAAb,EAAsCE,WAAtC,EAAmD,IAAnD;;AAEA,WAAO,KAAP;AACD,GAhED;;AAkEA,MAAMY,YAAY,4BAAlB,CAnhB6C,CAmhBG;AAChD,MAAMC,YAAY,gBAAlB,CAphB6C,CAohBT;AACpC,MAAMC,iBAAiB,uEAAvB,CArhB6C,CAqhBmD;AAChG,MAAMC,oBAAoB,uBAA1B;AACA;AACA,MAAMC,kBAAkB,6DAAxB;;AAEA;;;;;;;;;;;AAWA;AACA,MAAMC,sBAAsB,SAAtBA,mBAAsB,CAASjB,WAAT,EAAsB;AAChD,QAAIkB,aAAJ;AACA,QAAInD,aAAJ;AACA,QAAIoD,cAAJ;AACA,QAAIC,eAAJ;AACA,QAAIC,eAAJ;AACA,QAAI3B,mBAAJ;AACA,QAAIrH,UAAJ;AACA;AACAyH,iBAAa,0BAAb,EAAyCE,WAAzC,EAAsD,IAAtD;;AAEAN,iBAAaM,YAAYN,UAAzB;;AAEA;AACA,QAAI,CAACA,UAAL,EAAiB;AACf;AACD;;AAED,QAAM4B,YAAY;AAChBC,gBAAU,EADM;AAEhBC,iBAAW,EAFK;AAGhBC,gBAAU,IAHM;AAIhBC,yBAAmBlG;AAJH,KAAlB;AAMAnD,QAAIqH,WAAWpH,MAAf;;AAEA;AACA,WAAOD,GAAP,EAAY;AACV6I,aAAOxB,WAAWrH,CAAX,CAAP;AACA0F,aAAOmD,KAAKnD,IAAZ;AACAoD,cAAQD,KAAKC,KAAL,CAAWQ,IAAX,EAAR;AACAP,eAASrD,KAAKxF,WAAL,EAAT;;AAEA;AACA+I,gBAAUC,QAAV,GAAqBH,MAArB;AACAE,gBAAUE,SAAV,GAAsBL,KAAtB;AACAG,gBAAUG,QAAV,GAAqB,IAArB;AACA3B,mBAAa,uBAAb,EAAsCE,WAAtC,EAAmDsB,SAAnD;AACAH,cAAQG,UAAUE,SAAlB;;AAEA;AACA;AACA;AACA;AACA,UACEJ,WAAW,MAAX,IACApB,YAAYR,QAAZ,KAAyB,KADzB,IAEAE,WAAWkC,EAHb,EAIE;AACAP,iBAAS3B,WAAWkC,EAApB;AACAlC,qBAAamC,MAAMjJ,SAAN,CAAgBkJ,KAAhB,CAAsBC,KAAtB,CAA4BrC,UAA5B,CAAb;AACA5B,yBAAiB,IAAjB,EAAuBkC,WAAvB;AACAlC,yBAAiBC,IAAjB,EAAuBiC,WAAvB;AACA,YAAIN,WAAWsC,OAAX,CAAmBX,MAAnB,IAA6BhJ,CAAjC,EAAoC;AAClC2H,sBAAYL,YAAZ,CAAyB,IAAzB,EAA+B0B,OAAOF,KAAtC;AACD;AACF,OAZD,MAYO;AACL;AACA;AACAnB,kBAAYR,QAAZ,KAAyB,OAAzB,IACA4B,WAAW,MADX,IAEAD,UAAU,MAFV,KAGC3F,aAAa4F,MAAb,KAAwB,CAACzF,YAAYyF,MAAZ,CAH1B,CAHK,EAOL;AACA;AACD,OATM,MASA;AACL;AACA;AACA;AACA,YAAIrD,SAAS,IAAb,EAAmB;AACjBiC,sBAAYL,YAAZ,CAAyB5B,IAAzB,EAA+B,EAA/B;AACD;AACDD,yBAAiBC,IAAjB,EAAuBiC,WAAvB;AACD;;AAED;AACA,UAAI,CAACsB,UAAUG,QAAf,EAAyB;AACvB;AACD;;AAED;AACA,UACEhF,iBACC2E,WAAW,IAAX,IAAmBA,WAAW,MAD/B,MAECD,SAAS/H,MAAT,IAAmB+H,SAAS1H,QAA5B,IAAwC0H,SAASpE,WAFlD,CADF,EAIE;AACA;AACD;;AAED;AACA,UAAIf,kBAAJ,EAAwB;AACtBmF,gBAAQA,MAAMR,OAAN,CAAc1E,aAAd,EAA6B,GAA7B,CAAR;AACAkF,gBAAQA,MAAMR,OAAN,CAAczE,QAAd,EAAwB,GAAxB,CAAR;AACD;;AAED;;;;AAIA,UAAIL,mBAAmB+E,UAAUH,IAAV,CAAeW,MAAf,CAAvB,EAA+C;AAC7C;AACD,OAFD,MAEO,IAAIxF,mBAAmBiF,UAAUJ,IAAV,CAAeW,MAAf,CAAvB,EAA+C;AACpD;AACA;AACD,OAHM,MAGA,IAAI,CAAC5F,aAAa4F,MAAb,CAAD,IAAyBzF,YAAYyF,MAAZ,CAA7B,EAAkD;AACvD;;AAEA;AACD,OAJM,MAIA,IAAIvE,oBAAoBuE,MAApB,CAAJ,EAAiC;AACtC;AACA;;AAED,OAJM,MAIA,IAAIN,eAAeL,IAAf,CAAoBU,MAAMR,OAAN,CAAcK,eAAd,EAA+B,EAA/B,CAApB,CAAJ,EAA6D;AAClE;AACA;AACD,OAHM,MAGA,IACL,CAACI,WAAW,KAAX,IAAoBA,WAAW,YAAhC,KACAD,MAAMa,OAAN,CAAc,OAAd,MAA2B,CAD3B,IAEApF,cAAcoD,YAAYR,QAAZ,CAAqBjH,WAArB,EAAd,CAHK,EAIL;AACA;AACA;;;AAGD,OATM,MASA,IACLuD,2BACA,CAACiF,kBAAkBN,IAAlB,CAAuBU,MAAMR,OAAN,CAAcK,eAAd,EAA+B,EAA/B,CAAvB,CAFI,EAGL;AACA;AACA;AACA;AACD,OAPM,MAOA,IAAI,CAACG,KAAL,EAAY;AACjB;AACA;AACD,OAHM,MAGA;AACL;AACD;;AAED;AACA,UAAI;AACFnB,oBAAYL,YAAZ,CAAyB5B,IAAzB,EAA+BoD,KAA/B;AACA9H,kBAAUG,OAAV,CAAkByI,GAAlB;AACD,OAHD,CAGE,OAAOrE,GAAP,EAAY,CAAE;AACjB;;AAED;AACAkC,iBAAa,yBAAb,EAAwCE,WAAxC,EAAqD,IAArD;AACD,GAnJD;;AAqJA;;;;;;AAMA,MAAMkC,qBAAqB,SAArBA,kBAAqB,CAASC,QAAT,EAAmB;AAC5C,QAAIC,mBAAJ;AACA,QAAMC,iBAAiBpD,gBAAgBkD,QAAhB,CAAvB;;AAEA;AACArC,iBAAa,yBAAb,EAAwCqC,QAAxC,EAAkD,IAAlD;;AAEA,WAAQC,aAAaC,eAAeC,QAAf,EAArB,EAAiD;AAC/C;AACAxC,mBAAa,wBAAb,EAAuCsC,UAAvC,EAAmD,IAAnD;;AAEA;AACA,UAAIhC,kBAAkBgC,UAAlB,CAAJ,EAAmC;AACjC;AACD;;AAED;AACA,UAAIA,WAAWxH,OAAX,YAA8Bb,gBAAlC,EAAoD;AAClDmI,2BAAmBE,WAAWxH,OAA9B;AACD;;AAED;AACAqG,0BAAoBmB,UAApB;AACD;;AAED;AACAtC,iBAAa,wBAAb,EAAuCqC,QAAvC,EAAiD,IAAjD;AACD,GA3BD;;AA6BA;;;;;;;AAOA;AACA9I,YAAUkJ,QAAV,GAAqB,UAASlE,KAAT,EAAgBpB,GAAhB,EAAqB;AACxC,QAAIsB,aAAJ;AACA,QAAIiE,qBAAJ;AACA,QAAIxC,oBAAJ;AACA,QAAIyC,gBAAJ;AACA,QAAIC,mBAAJ;AACA;;;AAGA,QAAI,CAACrE,KAAL,EAAY;AACVA,cAAQ,OAAR;AACD;;AAED;AACA,QAAI,OAAOA,KAAP,KAAiB,QAAjB,IAA6B,CAACuB,QAAQvB,KAAR,CAAlC,EAAkD;AAChD;AACA,UAAI,OAAOA,MAAMsE,QAAb,KAA0B,UAA9B,EAA0C;AACxC,cAAM,IAAIC,SAAJ,CAAc,4BAAd,CAAN;AACD,OAFD,MAEO;AACLvE,gBAAQA,MAAMsE,QAAN,EAAR;AACD;AACF;;AAED;AACA,QAAI,CAACtJ,UAAUM,WAAf,EAA4B;AAC1B,UACE,QAAOP,OAAOyJ,YAAd,MAA+B,QAA/B,IACA,OAAOzJ,OAAOyJ,YAAd,KAA+B,UAFjC,EAGE;AACA,YAAI,OAAOxE,KAAP,KAAiB,QAArB,EAA+B;AAC7B,iBAAOjF,OAAOyJ,YAAP,CAAoBxE,KAApB,CAAP;AACD,SAFD,MAEO,IAAIuB,QAAQvB,KAAR,CAAJ,EAAoB;AACzB,iBAAOjF,OAAOyJ,YAAP,CAAoBxE,MAAMR,SAA1B,CAAP;AACD;AACF;AACD,aAAOQ,KAAP;AACD;;AAED;AACA,QAAI,CAACjC,UAAL,EAAiB;AACfY,mBAAaC,GAAb;AACD;;AAED;AACA5D,cAAUG,OAAV,GAAoB,EAApB;;AAEA,QAAI6E,iBAAiBpE,IAArB,EAA2B;AACzB;;AAEAsE,aAAOH,cAAc,OAAd,CAAP;AACAoE,qBAAejE,KAAK1D,aAAL,CAAmBK,UAAnB,CAA8BmD,KAA9B,EAAqC,IAArC,CAAf;AACA,UAAImE,aAAa9I,QAAb,KAA0B,CAA1B,IAA+B8I,aAAahD,QAAb,KAA0B,MAA7D,EAAqE;AACnE;AACAjB,eAAOiE,YAAP;AACD,OAHD,MAGO;AACLjE,aAAKuE,WAAL,CAAiBN,YAAjB;AACD;AACF,KAXD,MAWO;AACL;AACA,UAAI,CAAClG,UAAD,IAAe,CAACH,cAAhB,IAAkCkC,MAAM2D,OAAN,CAAc,GAAd,MAAuB,CAAC,CAA9D,EAAiE;AAC/D,eAAO3D,KAAP;AACD;;AAED;AACAE,aAAOH,cAAcC,KAAd,CAAP;;AAEA;AACA,UAAI,CAACE,IAAL,EAAW;AACT,eAAOjC,aAAa,IAAb,GAAoB,EAA3B;AACD;AACF;;AAED;AACA,QAAID,UAAJ,EAAgB;AACdiB,mBAAaiB,KAAKwE,UAAlB;AACD;;AAED;AACA,QAAMC,eAAe/D,gBAAgBV,IAAhB,CAArB;;AAEA;AACA,WAAQyB,cAAcgD,aAAaV,QAAb,EAAtB,EAAgD;AAC9C;AACA,UAAItC,YAAYtG,QAAZ,KAAyB,CAAzB,IAA8BsG,gBAAgByC,OAAlD,EAA2D;AACzD;AACD;;AAED;AACA,UAAIrC,kBAAkBJ,WAAlB,CAAJ,EAAoC;AAClC;AACD;;AAED;AACA,UAAIA,YAAYpF,OAAZ,YAA+Bb,gBAAnC,EAAqD;AACnDmI,2BAAmBlC,YAAYpF,OAA/B;AACD;;AAED;AACAqG,0BAAoBjB,WAApB;;AAEAyC,gBAAUzC,WAAV;AACD;;AAED;AACA,QAAI1D,UAAJ,EAAgB;AACd,UAAIC,mBAAJ,EAAyB;AACvBmG,qBAAazH,uBAAuBnC,IAAvB,CAA4ByF,KAAK1D,aAAjC,CAAb;;AAEA,eAAO0D,KAAKwE,UAAZ,EAAwB;AACtBL,qBAAWI,WAAX,CAAuBvE,KAAKwE,UAA5B;AACD;AACF,OAND,MAMO;AACLL,qBAAanE,IAAb;AACD;;AAED,UAAI/B,iBAAJ,EAAuB;AACrB;;;;;AAKAkG,qBAAaxH,WAAWpC,IAAX,CAAgBc,gBAAhB,EAAkC8I,UAAlC,EAA8C,IAA9C,CAAb;AACD;;AAED,aAAOA,UAAP;AACD;;AAED,WAAOvG,iBAAiBoC,KAAKV,SAAtB,GAAkCU,KAAKiC,SAA9C;AACD,GAhID;;AAkIA;;;;;;;AAOAnH,YAAU4J,SAAV,GAAsB,UAAShG,GAAT,EAAc;AAClCD,iBAAaC,GAAb;AACAb,iBAAa,IAAb;AACD,GAHD;;AAKA;;;;;;AAMA/C,YAAU6J,WAAV,GAAwB,YAAW;AACjCpG,aAAS,IAAT;AACAV,iBAAa,KAAb;AACD,GAHD;;AAKA;;;;;;;AAOA/C,YAAU8J,OAAV,GAAoB,UAASpD,UAAT,EAAqBqD,YAArB,EAAmC;AACrD,QAAI,OAAOA,YAAP,KAAwB,UAA5B,EAAwC;AACtC;AACD;AACDjI,UAAM4E,UAAN,IAAoB5E,MAAM4E,UAAN,KAAqB,EAAzC;AACA5E,UAAM4E,UAAN,EAAkBvC,IAAlB,CAAuB4F,YAAvB;AACD,GAND;;AAQA;;;;;;;;AAQA/J,YAAUgK,UAAV,GAAuB,UAAStD,UAAT,EAAqB;AAC1C,QAAI5E,MAAM4E,UAAN,CAAJ,EAAuB;AACrB5E,YAAM4E,UAAN,EAAkBkC,GAAlB;AACD;AACF,GAJD;;AAMA;;;;;;;AAOA5I,YAAUiK,WAAV,GAAwB,UAASvD,UAAT,EAAqB;AAC3C,QAAI5E,MAAM4E,UAAN,CAAJ,EAAuB;AACrB5E,YAAM4E,UAAN,IAAoB,EAApB;AACD;AACF,GAJD;;AAMA;;;;;;AAMA1G,YAAUkK,cAAV,GAA2B,YAAW;AACpCpI,YAAQ,EAAR;AACD,GAFD;;AAIA,SAAO9B,SAAP;AACD;;AAEDmK,OAAOC,OAAP,GAAiBtK,iBAAjB,C","file":"purify.js","sourcesContent":["(function webpackUniversalModuleDefinition(root, factory) {\n\tif(typeof exports === 'object' && typeof module === 'object')\n\t\tmodule.exports = factory();\n\telse if(typeof define === 'function' && define.amd)\n\t\tdefine([], factory);\n\telse if(typeof exports === 'object')\n\t\texports[\"DOMPurify\"] = factory();\n\telse\n\t\troot[\"DOMPurify\"] = factory();\n})(this, function() {\nreturn \n\n\n// WEBPACK FOOTER //\n// webpack/universalModuleDefinition"," \t// The module cache\n \tvar installedModules = {};\n\n \t// The require function\n \tfunction __webpack_require__(moduleId) {\n\n \t\t// Check if module is in cache\n \t\tif(installedModules[moduleId])\n \t\t\treturn installedModules[moduleId].exports;\n\n \t\t// Create a new module (and put it into the cache)\n \t\tvar module = installedModules[moduleId] = {\n \t\t\ti: moduleId,\n \t\t\tl: false,\n \t\t\texports: {}\n \t\t};\n\n \t\t// Execute the module function\n \t\tmodules[moduleId].call(module.exports, module, module.exports, __webpack_require__);\n\n \t\t// Flag the module as loaded\n \t\tmodule.l = true;\n\n \t\t// Return the exports of the module\n \t\treturn module.exports;\n \t}\n\n\n \t// expose the modules object (__webpack_modules__)\n \t__webpack_require__.m = modules;\n\n \t// expose the module cache\n \t__webpack_require__.c = installedModules;\n\n \t// identity function for calling harmony imports with the correct context\n \t__webpack_require__.i = function(value) { return value; };\n\n \t// define getter function for harmony exports\n \t__webpack_require__.d = function(exports, name, getter) {\n \t\tif(!__webpack_require__.o(exports, name)) {\n \t\t\tObject.defineProperty(exports, name, {\n \t\t\t\tconfigurable: false,\n \t\t\t\tenumerable: true,\n \t\t\t\tget: getter\n \t\t\t});\n \t\t}\n \t};\n\n \t// getDefaultExport function for compatibility with non-harmony modules\n \t__webpack_require__.n = function(module) {\n \t\tvar getter = module && module.__esModule ?\n \t\t\tfunction getDefault() { return module['default']; } :\n \t\t\tfunction getModuleExports() { return module; };\n \t\t__webpack_require__.d(getter, 'a', getter);\n \t\treturn getter;\n \t};\n\n \t// Object.prototype.hasOwnProperty.call\n \t__webpack_require__.o = function(object, property) { return Object.prototype.hasOwnProperty.call(object, property); };\n\n \t// __webpack_public_path__\n \t__webpack_require__.p = \"\";\n\n \t// Load entry module and return exports\n \treturn __webpack_require__(__webpack_require__.s = 3);\n\n\n\n// WEBPACK FOOTER //\n// webpack/bootstrap 60999e3eaad819ee6742","export const html = [\n 'accept',\n 'action',\n 'align',\n 'alt',\n 'autocomplete',\n 'background',\n 'bgcolor',\n 'border',\n 'cellpadding',\n 'cellspacing',\n 'checked',\n 'cite',\n 'class',\n 'clear',\n 'color',\n 'cols',\n 'colspan',\n 'coords',\n 'datetime',\n 'default',\n 'dir',\n 'disabled',\n 'download',\n 'enctype',\n 'face',\n 'for',\n 'headers',\n 'height',\n 'hidden',\n 'high',\n 'href',\n 'hreflang',\n 'id',\n 'ismap',\n 'label',\n 'lang',\n 'list',\n 'loop',\n 'low',\n 'max',\n 'maxlength',\n 'media',\n 'method',\n 'min',\n 'multiple',\n 'name',\n 'noshade',\n 'novalidate',\n 'nowrap',\n 'open',\n 'optimum',\n 'pattern',\n 'placeholder',\n 'poster',\n 'preload',\n 'pubdate',\n 'radiogroup',\n 'readonly',\n 'rel',\n 'required',\n 'rev',\n 'reversed',\n 'role',\n 'rows',\n 'rowspan',\n 'spellcheck',\n 'scope',\n 'selected',\n 'shape',\n 'size',\n 'span',\n 'srclang',\n 'start',\n 'src',\n 'step',\n 'style',\n 'summary',\n 'tabindex',\n 'title',\n 'type',\n 'usemap',\n 'valign',\n 'value',\n 'width',\n 'xmlns',\n];\n\nexport const svg = [\n 'accent-height',\n 'accumulate',\n 'additivive',\n 'alignment-baseline',\n 'ascent',\n 'attributename',\n 'attributetype',\n 'azimuth',\n 'basefrequency',\n 'baseline-shift',\n 'begin',\n 'bias',\n 'by',\n 'clip',\n 'clip-path',\n 'clip-rule',\n 'color',\n 'color-interpolation',\n 'color-interpolation-filters',\n 'color-profile',\n 'color-rendering',\n 'cx',\n 'cy',\n 'd',\n 'dx',\n 'dy',\n 'diffuseconstant',\n 'direction',\n 'display',\n 'divisor',\n 'dur',\n 'edgemode',\n 'elevation',\n 'end',\n 'fill',\n 'fill-opacity',\n 'fill-rule',\n 'filter',\n 'flood-color',\n 'flood-opacity',\n 'font-family',\n 'font-size',\n 'font-size-adjust',\n 'font-stretch',\n 'font-style',\n 'font-variant',\n 'font-weight',\n 'fx',\n 'fy',\n 'g1',\n 'g2',\n 'glyph-name',\n 'glyphref',\n 'gradientunits',\n 'gradienttransform',\n 'image-rendering',\n 'in',\n 'in2',\n 'k',\n 'k1',\n 'k2',\n 'k3',\n 'k4',\n 'kerning',\n 'keypoints',\n 'keysplines',\n 'keytimes',\n 'lengthadjust',\n 'letter-spacing',\n 'kernelmatrix',\n 'kernelunitlength',\n 'lighting-color',\n 'local',\n 'marker-end',\n 'marker-mid',\n 'marker-start',\n 'markerheight',\n 'markerunits',\n 'markerwidth',\n 'maskcontentunits',\n 'maskunits',\n 'max',\n 'mask',\n 'mode',\n 'min',\n 'numoctaves',\n 'offset',\n 'operator',\n 'opacity',\n 'order',\n 'orient',\n 'orientation',\n 'origin',\n 'overflow',\n 'paint-order',\n 'path',\n 'pathlength',\n 'patterncontentunits',\n 'patterntransform',\n 'patternunits',\n 'points',\n 'preservealpha',\n 'r',\n 'rx',\n 'ry',\n 'radius',\n 'refx',\n 'refy',\n 'repeatcount',\n 'repeatdur',\n 'restart',\n 'result',\n 'rotate',\n 'scale',\n 'seed',\n 'shape-rendering',\n 'specularconstant',\n 'specularexponent',\n 'spreadmethod',\n 'stddeviation',\n 'stitchtiles',\n 'stop-color',\n 'stop-opacity',\n 'stroke-dasharray',\n 'stroke-dashoffset',\n 'stroke-linecap',\n 'stroke-linejoin',\n 'stroke-miterlimit',\n 'stroke-opacity',\n 'stroke',\n 'stroke-width',\n 'surfacescale',\n 'targetx',\n 'targety',\n 'transform',\n 'text-anchor',\n 'text-decoration',\n 'text-rendering',\n 'textlength',\n 'u1',\n 'u2',\n 'unicode',\n 'values',\n 'viewbox',\n 'visibility',\n 'vert-adv-y',\n 'vert-origin-x',\n 'vert-origin-y',\n 'word-spacing',\n 'wrap',\n 'writing-mode',\n 'xchannelselector',\n 'ychannelselector',\n 'x',\n 'x1',\n 'x2',\n 'y',\n 'y1',\n 'y2',\n 'z',\n 'zoomandpan',\n];\n\nexport const mathMl = [\n 'accent',\n 'accentunder',\n 'bevelled',\n 'close',\n 'columnsalign',\n 'columnlines',\n 'columnspan',\n 'denomalign',\n 'depth',\n 'display',\n 'displaystyle',\n 'fence',\n 'frame',\n 'largeop',\n 'length',\n 'linethickness',\n 'lspace',\n 'lquote',\n 'mathbackground',\n 'mathcolor',\n 'mathsize',\n 'mathvariant',\n 'maxsize',\n 'minsize',\n 'movablelimits',\n 'notation',\n 'numalign',\n 'open',\n 'rowalign',\n 'rowlines',\n 'rowspacing',\n 'rowspan',\n 'rspace',\n 'rquote',\n 'scriptlevel',\n 'scriptminsize',\n 'scriptsizemultiplier',\n 'selection',\n 'separator',\n 'separators',\n 'stretchy',\n 'subscriptshift',\n 'supscriptshift',\n 'symmetric',\n 'voffset',\n];\n\nexport const xml = [\n 'xlink:href',\n 'xml:id',\n 'xlink:title',\n 'xml:space',\n 'xmlns:xlink',\n];\n\n\n\n// WEBPACK FOOTER //\n// ./src/attrs.js","export const html = [\n 'a',\n 'abbr',\n 'acronym',\n 'address',\n 'area',\n 'article',\n 'aside',\n 'audio',\n 'b',\n 'bdi',\n 'bdo',\n 'big',\n 'blink',\n 'blockquote',\n 'body',\n 'br',\n 'button',\n 'canvas',\n 'caption',\n 'center',\n 'cite',\n 'code',\n 'col',\n 'colgroup',\n 'content',\n 'data',\n 'datalist',\n 'dd',\n 'decorator',\n 'del',\n 'details',\n 'dfn',\n 'dir',\n 'div',\n 'dl',\n 'dt',\n 'element',\n 'em',\n 'fieldset',\n 'figcaption',\n 'figure',\n 'font',\n 'footer',\n 'form',\n 'h1',\n 'h2',\n 'h3',\n 'h4',\n 'h5',\n 'h6',\n 'head',\n 'header',\n 'hgroup',\n 'hr',\n 'html',\n 'i',\n 'img',\n 'input',\n 'ins',\n 'kbd',\n 'label',\n 'legend',\n 'li',\n 'main',\n 'map',\n 'mark',\n 'marquee',\n 'menu',\n 'menuitem',\n 'meter',\n 'nav',\n 'nobr',\n 'ol',\n 'optgroup',\n 'option',\n 'output',\n 'p',\n 'pre',\n 'progress',\n 'q',\n 'rp',\n 'rt',\n 'ruby',\n 's',\n 'samp',\n 'section',\n 'select',\n 'shadow',\n 'small',\n 'source',\n 'spacer',\n 'span',\n 'strike',\n 'strong',\n 'style',\n 'sub',\n 'summary',\n 'sup',\n 'table',\n 'tbody',\n 'td',\n 'template',\n 'textarea',\n 'tfoot',\n 'th',\n 'thead',\n 'time',\n 'tr',\n 'track',\n 'tt',\n 'u',\n 'ul',\n 'var',\n 'video',\n 'wbr',\n];\n\n// SVG\nexport const svg = [\n 'svg',\n 'altglyph',\n 'altglyphdef',\n 'altglyphitem',\n 'animatecolor',\n 'animatemotion',\n 'animatetransform',\n 'circle',\n 'clippath',\n 'defs',\n 'desc',\n 'ellipse',\n 'filter',\n 'font',\n 'g',\n 'glyph',\n 'glyphref',\n 'hkern',\n 'image',\n 'line',\n 'lineargradient',\n 'marker',\n 'mask',\n 'metadata',\n 'mpath',\n 'path',\n 'pattern',\n 'polygon',\n 'polyline',\n 'radialgradient',\n 'rect',\n 'stop',\n 'switch',\n 'symbol',\n 'text',\n 'textpath',\n 'title',\n 'tref',\n 'tspan',\n 'view',\n 'vkern',\n];\n\nexport const svgFilters = [\n 'feBlend',\n 'feColorMatrix',\n 'feComponentTransfer',\n 'feComposite',\n 'feConvolveMatrix',\n 'feDiffuseLighting',\n 'feDisplacementMap',\n 'feFlood',\n 'feFuncA',\n 'feFuncB',\n 'feFuncG',\n 'feFuncR',\n 'feGaussianBlur',\n 'feMerge',\n 'feMergeNode',\n 'feMorphology',\n 'feOffset',\n 'feSpecularLighting',\n 'feTile',\n 'feTurbulence',\n];\n\nexport const mathMl = [\n 'math',\n 'menclose',\n 'merror',\n 'mfenced',\n 'mfrac',\n 'mglyph',\n 'mi',\n 'mlabeledtr',\n 'mmuliscripts',\n 'mn',\n 'mo',\n 'mover',\n 'mpadded',\n 'mphantom',\n 'mroot',\n 'mrow',\n 'ms',\n 'mpspace',\n 'msqrt',\n 'mystyle',\n 'msub',\n 'msup',\n 'msubsup',\n 'mtable',\n 'mtd',\n 'mtext',\n 'mtr',\n 'munder',\n 'munderover',\n];\n\nexport const text = ['#text'];\n\n\n\n// WEBPACK FOOTER //\n// ./src/tags.js","/* Add properties to a lookup table */\nexport function addToSet(set, array) {\n let l = array.length;\n while (l--) {\n if (typeof array[l] === 'string') {\n array[l] = array[l].toLowerCase();\n }\n set[array[l]] = true;\n }\n return set;\n}\n\n/* Shallow clone an object */\nexport function clone(object) {\n const newObject = {};\n let property;\n for (property in object) {\n if (Object.prototype.hasOwnProperty.call(object, property)) {\n newObject[property] = object[property];\n }\n }\n return newObject;\n}\n\n\n\n// WEBPACK FOOTER //\n// ./src/utils.js","import * as TAGS from './tags';\nimport * as ATTRS from './attrs';\nimport { addToSet, clone } from './utils';\n\nfunction getGlobal() {\n // eslint-disable-next-line no-new-func\n return Function('return this')();\n}\n\nfunction createDOMPurify(window = getGlobal()) {\n const DOMPurify = root => createDOMPurify(root);\n\n /**\n * Version label, exposed for easier checks\n * if DOMPurify is up to date or not\n */\n DOMPurify.version = '0.9.0';\n\n /**\n * Array of elements that DOMPurify removed during sanitation.\n * Empty if nothing was removed.\n */\n DOMPurify.removed = [];\n\n if (!window || !window.document || window.document.nodeType !== 9) {\n // Not running in a browser, provide a factory function\n // so that you can pass your own Window\n DOMPurify.isSupported = false;\n\n return DOMPurify;\n }\n\n const originalDocument = window.document;\n let useDOMParser = false; // See comment below\n let useXHR = false;\n\n let document = window.document;\n const {\n DocumentFragment,\n HTMLTemplateElement,\n Node,\n NodeFilter,\n NamedNodeMap = window.NamedNodeMap || window.MozNamedAttrMap,\n Text,\n Comment,\n DOMParser,\n XMLHttpRequest = window.XMLHttpRequest,\n encodeURI = window.encodeURI,\n } = window;\n\n // As per issue #47, the web-components registry is inherited by a\n // new document created via createHTMLDocument. As per the spec\n // (http://w3c.github.io/webcomponents/spec/custom/#creating-and-passing-registries)\n // a new empty registry is used when creating a template contents owner\n // document, so we use that as our parent document to ensure nothing\n // is inherited.\n if (typeof HTMLTemplateElement === 'function') {\n const template = document.createElement('template');\n if (template.content && template.content.ownerDocument) {\n document = template.content.ownerDocument;\n }\n }\n\n const {\n implementation,\n createNodeIterator,\n getElementsByTagName,\n createDocumentFragment,\n } = document;\n const importNode = originalDocument.importNode;\n\n let hooks = {};\n\n /**\n * Expose whether this browser supports running the full DOMPurify.\n */\n DOMPurify.isSupported =\n implementation &&\n typeof implementation.createHTMLDocument !== 'undefined' &&\n document.documentMode !== 9;\n\n /**\n * We consider the elements and attributes below to be safe. Ideally\n * don't add any new ones but feel free to remove unwanted ones.\n */\n\n /* allowed element names */\n let ALLOWED_TAGS = null;\n const DEFAULT_ALLOWED_TAGS = addToSet({}, [\n ...TAGS.html,\n ...TAGS.svg,\n ...TAGS.svgFilters,\n ...TAGS.mathMl,\n ...TAGS.text,\n ]);\n\n /* Allowed attribute names */\n let ALLOWED_ATTR = null;\n const DEFAULT_ALLOWED_ATTR = addToSet({}, [\n ...ATTRS.html,\n ...ATTRS.svg,\n ...ATTRS.mathMl,\n ...ATTRS.xml,\n ]);\n\n /* Explicitly forbidden tags (overrides ALLOWED_TAGS/ADD_TAGS) */\n let FORBID_TAGS = null;\n\n /* Explicitly forbidden attributes (overrides ALLOWED_ATTR/ADD_ATTR) */\n let FORBID_ATTR = null;\n\n /* Decide if ARIA attributes are okay */\n let ALLOW_ARIA_ATTR = true;\n\n /* Decide if custom data attributes are okay */\n let ALLOW_DATA_ATTR = true;\n\n /* Decide if unknown protocols are okay */\n let ALLOW_UNKNOWN_PROTOCOLS = false;\n\n /* Output should be safe for jQuery's $() factory? */\n let SAFE_FOR_JQUERY = false;\n\n /* Output should be safe for common template engines.\n * This means, DOMPurify removes data attributes, mustaches and ERB\n */\n let SAFE_FOR_TEMPLATES = false;\n\n /* Specify template detection regex for SAFE_FOR_TEMPLATES mode */\n const MUSTACHE_EXPR = /\\{\\{[\\s\\S]*|[\\s\\S]*\\}\\}/gm;\n const ERB_EXPR = /<%[\\s\\S]*|[\\s\\S]*%>/gm;\n\n /* Decide if document with ... should be returned */\n let WHOLE_DOCUMENT = false;\n\n /* Track whether config is already set on this instance of DOMPurify. */\n let SET_CONFIG = false;\n\n /* Decide if all elements (e.g. style, script) must be children of\n * document.body. By default, browsers might move them to document.head */\n let FORCE_BODY = false;\n\n /* Decide if a DOM `HTMLBodyElement` should be returned, instead of a html string.\n * If `WHOLE_DOCUMENT` is enabled a `HTMLHtmlElement` will be returned instead\n */\n let RETURN_DOM = false;\n\n /* Decide if a DOM `DocumentFragment` should be returned, instead of a html string */\n let RETURN_DOM_FRAGMENT = false;\n\n /* If `RETURN_DOM` or `RETURN_DOM_FRAGMENT` is enabled, decide if the returned DOM\n * `Node` is imported into the current `Document`. If this flag is not enabled the\n * `Node` will belong (its ownerDocument) to a fresh `HTMLDocument`, created by\n * DOMPurify. */\n let RETURN_DOM_IMPORT = false;\n\n /* Output should be free from DOM clobbering attacks? */\n let SANITIZE_DOM = true;\n\n /* Keep element content when removing element? */\n let KEEP_CONTENT = true;\n\n /* Tags to ignore content of when KEEP_CONTENT is true */\n const FORBID_CONTENTS = addToSet({}, [\n 'audio',\n 'head',\n 'math',\n 'script',\n 'style',\n 'template',\n 'svg',\n 'video',\n ]);\n\n /* Tags that are safe for data: URIs */\n const DATA_URI_TAGS = addToSet({}, [\n 'audio',\n 'video',\n 'img',\n 'source',\n 'image',\n ]);\n\n /* Attributes safe for values like \"javascript:\" */\n const URI_SAFE_ATTRIBUTES = addToSet({}, [\n 'alt',\n 'class',\n 'for',\n 'id',\n 'label',\n 'name',\n 'pattern',\n 'placeholder',\n 'summary',\n 'title',\n 'value',\n 'style',\n 'xmlns',\n ]);\n\n /* Keep a reference to config to pass to hooks */\n let CONFIG = null;\n\n /* Ideally, do not touch anything below this line */\n /* ______________________________________________ */\n\n const formElement = document.createElement('form');\n\n /**\n * _parseConfig\n *\n * @param optional config literal\n */\n // eslint-disable-next-line complexity\n const _parseConfig = function(cfg) {\n /* Shield configuration object from tampering */\n if (typeof cfg !== 'object') {\n cfg = {};\n }\n\n /* Set configuration parameters */\n ALLOWED_TAGS = 'ALLOWED_TAGS' in cfg\n ? addToSet({}, cfg.ALLOWED_TAGS)\n : DEFAULT_ALLOWED_TAGS;\n ALLOWED_ATTR = 'ALLOWED_ATTR' in cfg\n ? addToSet({}, cfg.ALLOWED_ATTR)\n : DEFAULT_ALLOWED_ATTR;\n FORBID_TAGS = 'FORBID_TAGS' in cfg ? addToSet({}, cfg.FORBID_TAGS) : {};\n FORBID_ATTR = 'FORBID_ATTR' in cfg ? addToSet({}, cfg.FORBID_ATTR) : {};\n ALLOW_ARIA_ATTR = cfg.ALLOW_ARIA_ATTR !== false; // Default true\n ALLOW_DATA_ATTR = cfg.ALLOW_DATA_ATTR !== false; // Default true\n ALLOW_UNKNOWN_PROTOCOLS = cfg.ALLOW_UNKNOWN_PROTOCOLS || false; // Default false\n SAFE_FOR_JQUERY = cfg.SAFE_FOR_JQUERY || false; // Default false\n SAFE_FOR_TEMPLATES = cfg.SAFE_FOR_TEMPLATES || false; // Default false\n WHOLE_DOCUMENT = cfg.WHOLE_DOCUMENT || false; // Default false\n RETURN_DOM = cfg.RETURN_DOM || false; // Default false\n RETURN_DOM_FRAGMENT = cfg.RETURN_DOM_FRAGMENT || false; // Default false\n RETURN_DOM_IMPORT = cfg.RETURN_DOM_IMPORT || false; // Default false\n FORCE_BODY = cfg.FORCE_BODY || false; // Default false\n SANITIZE_DOM = cfg.SANITIZE_DOM !== false; // Default true\n KEEP_CONTENT = cfg.KEEP_CONTENT !== false; // Default true\n\n if (SAFE_FOR_TEMPLATES) {\n ALLOW_DATA_ATTR = false;\n }\n\n if (RETURN_DOM_FRAGMENT) {\n RETURN_DOM = true;\n }\n\n /* Merge configuration parameters */\n if (cfg.ADD_TAGS) {\n if (ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {\n ALLOWED_TAGS = clone(ALLOWED_TAGS);\n }\n addToSet(ALLOWED_TAGS, cfg.ADD_TAGS);\n }\n if (cfg.ADD_ATTR) {\n if (ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {\n ALLOWED_ATTR = clone(ALLOWED_ATTR);\n }\n addToSet(ALLOWED_ATTR, cfg.ADD_ATTR);\n }\n if (cfg.ADD_URI_SAFE_ATTR) {\n addToSet(URI_SAFE_ATTRIBUTES, cfg.ADD_URI_SAFE_ATTR);\n }\n\n /* Add #text in case KEEP_CONTENT is set to true */\n if (KEEP_CONTENT) {\n ALLOWED_TAGS['#text'] = true;\n }\n\n // Prevent further manipulation of configuration.\n // Not available in IE8, Safari 5, etc.\n if (Object && 'freeze' in Object) {\n Object.freeze(cfg);\n }\n\n CONFIG = cfg;\n };\n\n /**\n * _forceRemove\n *\n * @param a DOM node\n */\n const _forceRemove = function(node) {\n DOMPurify.removed.push({ element: node });\n try {\n node.parentNode.removeChild(node);\n } catch (err) {\n node.outerHTML = '';\n }\n };\n\n /**\n * _removeAttribute\n *\n * @param an Attribute name\n * @param a DOM node\n */\n const _removeAttribute = function(name, node) {\n DOMPurify.removed.push({\n attribute: node.getAttributeNode(name),\n from: node,\n });\n node.removeAttribute(name);\n };\n\n /**\n * _initDocument\n *\n * @param a string of dirty markup\n * @return a DOM, filled with the dirty markup\n */\n const _initDocument = function(dirty) {\n /* Create a HTML document */\n let doc;\n let body;\n\n if (FORCE_BODY) {\n dirty = '' + dirty;\n }\n\n /* Use XHR if necessary because Safari 10.1 and newer are buggy */\n if (useXHR) {\n try {\n dirty = encodeURI(dirty);\n } catch (err) {}\n const xhr = new XMLHttpRequest();\n xhr.responseType = 'document';\n xhr.open('GET', 'data:text/html;charset=utf-8,' + dirty, false);\n xhr.send(null);\n doc = xhr.response;\n }\n\n /* Use DOMParser to workaround Firefox bug (see comment below) */\n if (useDOMParser) {\n try {\n doc = new DOMParser().parseFromString(dirty, 'text/html');\n } catch (err) {}\n }\n\n /* Otherwise use createHTMLDocument, because DOMParser is unsafe in\n Safari (see comment below) */\n if (!doc || !doc.documentElement) {\n doc = implementation.createHTMLDocument('');\n body = doc.body;\n body.parentNode.removeChild(body.parentNode.firstElementChild);\n body.outerHTML = dirty;\n }\n\n /* Work on whole document or just its body */\n return getElementsByTagName.call(doc, WHOLE_DOCUMENT ? 'html' : 'body')[0];\n };\n\n // Safari 10.1+ (unfixed as of time of writing) has a catastrophic bug in\n // its implementation of DOMParser such that the following executes the\n // JavaScript:\n //\n // new DOMParser()\n // .parseFromString('', 'text/html');\n //\n // Later, it was also noticed that even more assumed benign and inert ways\n // of creating a document are now insecure thanks to Safari. So we work\n // around that with a feature test and use XHR to create the document in\n // case we really have to. That one seems safe for now.\n //\n // However, Firefox uses a different parser for innerHTML rather than\n // DOMParser (see https://bugzilla.mozilla.org/show_bug.cgi?id=1205631)\n // which means that you *must* use DOMParser, otherwise the output may\n // not be safe if used in a document.write context later.\n //\n // So we feature detect the Firefox bug and use the DOMParser if necessary.\n if (DOMPurify.isSupported) {\n (function() {\n let doc = _initDocument(\n ''\n );\n if (!doc.querySelector('svg')) {\n useXHR = true;\n }\n doc = _initDocument(\n ''\n );\n if (doc.querySelector('svg img')) {\n useDOMParser = true;\n }\n })();\n }\n\n /**\n * _createIterator\n *\n * @param document/fragment to create iterator for\n * @return iterator instance\n */\n const _createIterator = function(root) {\n return createNodeIterator.call(\n root.ownerDocument || root,\n root,\n NodeFilter.SHOW_ELEMENT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_TEXT,\n () => {\n return NodeFilter.FILTER_ACCEPT;\n },\n false\n );\n };\n\n /**\n * _isClobbered\n *\n * @param element to check for clobbering attacks\n * @return true if clobbered, false if safe\n */\n const _isClobbered = function(elm) {\n if (elm instanceof Text || elm instanceof Comment) {\n return false;\n }\n if (\n typeof elm.nodeName !== 'string' ||\n typeof elm.textContent !== 'string' ||\n typeof elm.removeChild !== 'function' ||\n !(elm.attributes instanceof NamedNodeMap) ||\n typeof elm.removeAttribute !== 'function' ||\n typeof elm.setAttribute !== 'function'\n ) {\n return true;\n }\n return false;\n };\n\n /**\n * _isNode\n *\n * @param object to check whether it's a DOM node\n * @return true is object is a DOM node\n */\n const _isNode = function(obj) {\n return typeof Node === 'object'\n ? obj instanceof Node\n : obj &&\n typeof obj === 'object' &&\n typeof obj.nodeType === 'number' &&\n typeof obj.nodeName === 'string';\n };\n\n /**\n * _executeHook\n * Execute user configurable hooks\n *\n * @param {String} entryPoint Name of the hook's entry point\n * @param {Node} currentNode\n */\n const _executeHook = function(entryPoint, currentNode, data) {\n if (!hooks[entryPoint]) {\n return;\n }\n\n hooks[entryPoint].forEach(hook => {\n hook.call(DOMPurify, currentNode, data, CONFIG);\n });\n };\n\n /**\n * _sanitizeElements\n *\n * @protect nodeName\n * @protect textContent\n * @protect removeChild\n *\n * @param node to check for permission to exist\n * @return true if node was killed, false if left alive\n */\n const _sanitizeElements = function(currentNode) {\n let content;\n\n /* Execute a hook if present */\n _executeHook('beforeSanitizeElements', currentNode, null);\n\n /* Check if element is clobbered or can clobber */\n if (_isClobbered(currentNode)) {\n _forceRemove(currentNode);\n return true;\n }\n\n /* Now let's check the element's type and name */\n const tagName = currentNode.nodeName.toLowerCase();\n\n /* Execute a hook if present */\n _executeHook('uponSanitizeElement', currentNode, {\n tagName,\n allowedTags: ALLOWED_TAGS,\n });\n\n /* Remove element if anything forbids its presence */\n if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {\n /* Keep content except for black-listed elements */\n if (\n KEEP_CONTENT &&\n !FORBID_CONTENTS[tagName] &&\n typeof currentNode.insertAdjacentHTML === 'function'\n ) {\n try {\n currentNode.insertAdjacentHTML('AfterEnd', currentNode.innerHTML);\n } catch (err) {}\n }\n _forceRemove(currentNode);\n return true;\n }\n\n /* Convert markup to cover jQuery behavior */\n if (\n SAFE_FOR_JQUERY &&\n !currentNode.firstElementChild &&\n (!currentNode.content || !currentNode.content.firstElementChild) &&\n / tag that has an \"id\"\n // attribute at the time.\n if (\n lcName === 'name' &&\n currentNode.nodeName === 'IMG' &&\n attributes.id\n ) {\n idAttr = attributes.id;\n attributes = Array.prototype.slice.apply(attributes);\n _removeAttribute('id', currentNode);\n _removeAttribute(name, currentNode);\n if (attributes.indexOf(idAttr) > l) {\n currentNode.setAttribute('id', idAttr.value);\n }\n } else if (\n // This works around a bug in Safari, where input[type=file]\n // cannot be dynamically set after type has been removed\n currentNode.nodeName === 'INPUT' &&\n lcName === 'type' &&\n value === 'file' &&\n (ALLOWED_ATTR[lcName] || !FORBID_ATTR[lcName])\n ) {\n continue;\n } else {\n // This avoids a crash in Safari v9.0 with double-ids.\n // The trick is to first set the id to be empty and then to\n // remove the attribute\n if (name === 'id') {\n currentNode.setAttribute(name, '');\n }\n _removeAttribute(name, currentNode);\n }\n\n /* Did the hooks approve of the attribute? */\n if (!hookEvent.keepAttr) {\n continue;\n }\n\n /* Make sure attribute cannot clobber */\n if (\n SANITIZE_DOM &&\n (lcName === 'id' || lcName === 'name') &&\n (value in window || value in document || value in formElement)\n ) {\n continue;\n }\n\n /* Sanitize attribute content to be template-safe */\n if (SAFE_FOR_TEMPLATES) {\n value = value.replace(MUSTACHE_EXPR, ' ');\n value = value.replace(ERB_EXPR, ' ');\n }\n\n /* Allow valid data-* attributes: At least one character after \"-\"\n (https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-*-attributes)\n XML-compatible (https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible and http://www.w3.org/TR/xml/#d0e804)\n We don't need to check the value; it's always URI safe. */\n if (ALLOW_DATA_ATTR && DATA_ATTR.test(lcName)) {\n // This attribute is safe\n } else if (ALLOW_ARIA_ATTR && ARIA_ATTR.test(lcName)) {\n // This attribute is safe\n /* Otherwise, check the name is permitted */\n } else if (!ALLOWED_ATTR[lcName] || FORBID_ATTR[lcName]) {\n continue;\n\n /* Check value is safe. First, is attr inert? If so, is safe */\n } else if (URI_SAFE_ATTRIBUTES[lcName]) {\n // This attribute is safe\n /* Check no script, data or unknown possibly unsafe URI\n unless we know URI values are safe for that attribute */\n } else if (IS_ALLOWED_URI.test(value.replace(ATTR_WHITESPACE, ''))) {\n // This attribute is safe\n /* Keep image data URIs alive if src/xlink:href is allowed */\n } else if (\n (lcName === 'src' || lcName === 'xlink:href') &&\n value.indexOf('data:') === 0 &&\n DATA_URI_TAGS[currentNode.nodeName.toLowerCase()]\n ) {\n // This attribute is safe\n /* Allow unknown protocols: This provides support for links that\n are handled by protocol handlers which may be unknown ahead of\n time, e.g. fb:, spotify: */\n } else if (\n ALLOW_UNKNOWN_PROTOCOLS &&\n !IS_SCRIPT_OR_DATA.test(value.replace(ATTR_WHITESPACE, ''))\n ) {\n // This attribute is safe\n /* Check for binary attributes */\n // eslint-disable-next-line no-negated-condition\n } else if (!value) {\n // Binary attributes are safe at this point\n /* Anything else, presume unsafe, do not add it back */\n } else {\n continue;\n }\n\n /* Handle invalid data-* attribute set by try-catching it */\n try {\n currentNode.setAttribute(name, value);\n DOMPurify.removed.pop();\n } catch (err) {}\n }\n\n /* Execute a hook if present */\n _executeHook('afterSanitizeAttributes', currentNode, null);\n };\n\n /**\n * _sanitizeShadowDOM\n *\n * @param fragment to iterate over recursively\n * @return void\n */\n const _sanitizeShadowDOM = function(fragment) {\n let shadowNode;\n const shadowIterator = _createIterator(fragment);\n\n /* Execute a hook if present */\n _executeHook('beforeSanitizeShadowDOM', fragment, null);\n\n while ((shadowNode = shadowIterator.nextNode())) {\n /* Execute a hook if present */\n _executeHook('uponSanitizeShadowNode', shadowNode, null);\n\n /* Sanitize tags and elements */\n if (_sanitizeElements(shadowNode)) {\n continue;\n }\n\n /* Deep shadow DOM detected */\n if (shadowNode.content instanceof DocumentFragment) {\n _sanitizeShadowDOM(shadowNode.content);\n }\n\n /* Check attributes, sanitize if necessary */\n _sanitizeAttributes(shadowNode);\n }\n\n /* Execute a hook if present */\n _executeHook('afterSanitizeShadowDOM', fragment, null);\n };\n\n /**\n * Sanitize\n * Public method providing core sanitation functionality\n *\n * @param {String|Node} dirty string or DOM node\n * @param {Object} configuration object\n */\n // eslint-disable-next-line complexity\n DOMPurify.sanitize = function(dirty, cfg) {\n let body;\n let importedNode;\n let currentNode;\n let oldNode;\n let returnNode;\n /* Make sure we have a string to sanitize.\n DO NOT return early, as this will return the wrong type if\n the user has requested a DOM object rather than a string */\n if (!dirty) {\n dirty = '';\n }\n\n /* Stringify, in case dirty is an object */\n if (typeof dirty !== 'string' && !_isNode(dirty)) {\n // eslint-disable-next-line no-negated-condition\n if (typeof dirty.toString !== 'function') {\n throw new TypeError('toString is not a function');\n } else {\n dirty = dirty.toString();\n }\n }\n\n /* Check we can run. Otherwise fall back or ignore */\n if (!DOMPurify.isSupported) {\n if (\n typeof window.toStaticHTML === 'object' ||\n typeof window.toStaticHTML === 'function'\n ) {\n if (typeof dirty === 'string') {\n return window.toStaticHTML(dirty);\n } else if (_isNode(dirty)) {\n return window.toStaticHTML(dirty.outerHTML);\n }\n }\n return dirty;\n }\n\n /* Assign config vars */\n if (!SET_CONFIG) {\n _parseConfig(cfg);\n }\n\n /* Clean up removed elements */\n DOMPurify.removed = [];\n\n if (dirty instanceof Node) {\n /* If dirty is a DOM element, append to an empty document to avoid\n elements being stripped by the parser */\n body = _initDocument('');\n importedNode = body.ownerDocument.importNode(dirty, true);\n if (importedNode.nodeType === 1 && importedNode.nodeName === 'BODY') {\n /* Node is already a body, use as is */\n body = importedNode;\n } else {\n body.appendChild(importedNode);\n }\n } else {\n /* Exit directly if we have nothing to do */\n if (!RETURN_DOM && !WHOLE_DOCUMENT && dirty.indexOf('<') === -1) {\n return dirty;\n }\n\n /* Initialize the document to work on */\n body = _initDocument(dirty);\n\n /* Check we have a DOM node from the data */\n if (!body) {\n return RETURN_DOM ? null : '';\n }\n }\n\n /* Remove first element node (ours) if FORCE_BODY is set */\n if (FORCE_BODY) {\n _forceRemove(body.firstChild);\n }\n\n /* Get node iterator */\n const nodeIterator = _createIterator(body);\n\n /* Now start iterating over the created document */\n while ((currentNode = nodeIterator.nextNode())) {\n /* Fix IE's strange behavior with manipulated textNodes #89 */\n if (currentNode.nodeType === 3 && currentNode === oldNode) {\n continue;\n }\n\n /* Sanitize tags and elements */\n if (_sanitizeElements(currentNode)) {\n continue;\n }\n\n /* Shadow DOM detected, sanitize it */\n if (currentNode.content instanceof DocumentFragment) {\n _sanitizeShadowDOM(currentNode.content);\n }\n\n /* Check attributes, sanitize if necessary */\n _sanitizeAttributes(currentNode);\n\n oldNode = currentNode;\n }\n\n /* Return sanitized string or DOM */\n if (RETURN_DOM) {\n if (RETURN_DOM_FRAGMENT) {\n returnNode = createDocumentFragment.call(body.ownerDocument);\n\n while (body.firstChild) {\n returnNode.appendChild(body.firstChild);\n }\n } else {\n returnNode = body;\n }\n\n if (RETURN_DOM_IMPORT) {\n /* AdoptNode() is not used because internal state is not reset\n (e.g. the past names map of a HTMLFormElement), this is safe\n in theory but we would rather not risk another attack vector.\n The state that is cloned by importNode() is explicitly defined\n by the specs. */\n returnNode = importNode.call(originalDocument, returnNode, true);\n }\n\n return returnNode;\n }\n\n return WHOLE_DOCUMENT ? body.outerHTML : body.innerHTML;\n };\n\n /**\n * Public method to set the configuration once\n * setConfig\n *\n * @param {Object} configuration object\n * @return void\n */\n DOMPurify.setConfig = function(cfg) {\n _parseConfig(cfg);\n SET_CONFIG = true;\n };\n\n /**\n * Public method to remove the configuration\n * clearConfig\n *\n * @return void\n */\n DOMPurify.clearConfig = function() {\n CONFIG = null;\n SET_CONFIG = false;\n };\n\n /**\n * AddHook\n * Public method to add DOMPurify hooks\n *\n * @param {String} entryPoint\n * @param {Function} hookFunction\n */\n DOMPurify.addHook = function(entryPoint, hookFunction) {\n if (typeof hookFunction !== 'function') {\n return;\n }\n hooks[entryPoint] = hooks[entryPoint] || [];\n hooks[entryPoint].push(hookFunction);\n };\n\n /**\n * RemoveHook\n * Public method to remove a DOMPurify hook at a given entryPoint\n * (pops it from the stack of hooks if more are present)\n *\n * @param {String} entryPoint\n * @return void\n */\n DOMPurify.removeHook = function(entryPoint) {\n if (hooks[entryPoint]) {\n hooks[entryPoint].pop();\n }\n };\n\n /**\n * RemoveHooks\n * Public method to remove all DOMPurify hooks at a given entryPoint\n *\n * @param {String} entryPoint\n * @return void\n */\n DOMPurify.removeHooks = function(entryPoint) {\n if (hooks[entryPoint]) {\n hooks[entryPoint] = [];\n }\n };\n\n /**\n * RemoveAllHooks\n * Public method to remove all DOMPurify hooks\n *\n * @return void\n */\n DOMPurify.removeAllHooks = function() {\n hooks = {};\n };\n\n return DOMPurify;\n}\n\nmodule.exports = createDOMPurify();\n\n\n\n// WEBPACK FOOTER //\n// ./src/purify.js"],"sourceRoot":""} \ No newline at end of file diff --git a/package.json b/package.json index cb4d6bf16..0a04b9b48 100644 --- a/package.json +++ b/package.json @@ -2,7 +2,7 @@ "scripts": { "build-demo": "node scripts/build-demo.js", "lint": "xo src/*.js", - "format": "prettier --write --trailing-comma all --single-quote 'src/*.js'", + "format": "prettier --write --trailing-comma es5 --single-quote 'src/*.js'", "amend-build": "scripts/amend-build.sh", "prebuild": "rimraf dist/**", "build": "npm run build:umd && npm run build:umd:min", diff --git a/src/purify.js b/src/purify.js index c731f9440..402e54395 100644 --- a/src/purify.js +++ b/src/purify.js @@ -326,8 +326,8 @@ function createDOMPurify(window = getGlobal()) { if (useXHR) { try { dirty = encodeURI(dirty); - } catch (e) {} - var xhr = new XMLHttpRequest(); + } catch (err) {} + const xhr = new XMLHttpRequest(); xhr.responseType = 'document'; xhr.open('GET', 'data:text/html;charset=utf-8,' + dirty, false); xhr.send(null); @@ -375,13 +375,13 @@ function createDOMPurify(window = getGlobal()) { if (DOMPurify.isSupported) { (function() { let doc = _initDocument( - '', + '' ); if (!doc.querySelector('svg')) { useXHR = true; } doc = _initDocument( - '', + '' ); if (doc.querySelector('svg img')) { useDOMParser = true; @@ -403,7 +403,7 @@ function createDOMPurify(window = getGlobal()) { () => { return NodeFilter.FILTER_ACCEPT; }, - false, + false ); };
'\n );\n if (doc.querySelector('svg img')) {\n useDOMParser = true;\n }\n })();\n }\n\n /**\n * _createIterator\n *\n * @param document/fragment to create iterator for\n * @return iterator instance\n */\n const _createIterator = function(root) {\n return createNodeIterator.call(\n root.ownerDocument || root,\n root,\n NodeFilter.SHOW_ELEMENT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_TEXT,\n () => {\n return NodeFilter.FILTER_ACCEPT;\n },\n false\n );\n };\n\n /**\n * _isClobbered\n *\n * @param element to check for clobbering attacks\n * @return true if clobbered, false if safe\n */\n const _isClobbered = function(elm) {\n if (elm instanceof Text || elm instanceof Comment) {\n return false;\n }\n if (\n typeof elm.nodeName !== 'string' ||\n typeof elm.textContent !== 'string' ||\n typeof elm.removeChild !== 'function' ||\n !(elm.attributes instanceof NamedNodeMap) ||\n typeof elm.removeAttribute !== 'function' ||\n typeof elm.setAttribute !== 'function'\n ) {\n return true;\n }\n return false;\n };\n\n /**\n * _isNode\n *\n * @param object to check whether it's a DOM node\n * @return true is object is a DOM node\n */\n const _isNode = function(obj) {\n return typeof Node === 'object'\n ? obj instanceof Node\n : obj &&\n typeof obj === 'object' &&\n typeof obj.nodeType === 'number' &&\n typeof obj.nodeName === 'string';\n };\n\n /**\n * _executeHook\n * Execute user configurable hooks\n *\n * @param {String} entryPoint Name of the hook's entry point\n * @param {Node} currentNode\n */\n const _executeHook = function(entryPoint, currentNode, data) {\n if (!hooks[entryPoint]) {\n return;\n }\n\n hooks[entryPoint].forEach(hook => {\n hook.call(DOMPurify, currentNode, data, CONFIG);\n });\n };\n\n /**\n * _sanitizeElements\n *\n * @protect nodeName\n * @protect textContent\n * @protect removeChild\n *\n * @param node to check for permission to exist\n * @return true if node was killed, false if left alive\n */\n const _sanitizeElements = function(currentNode) {\n let content;\n\n /* Execute a hook if present */\n _executeHook('beforeSanitizeElements', currentNode, null);\n\n /* Check if element is clobbered or can clobber */\n if (_isClobbered(currentNode)) {\n _forceRemove(currentNode);\n return true;\n }\n\n /* Now let's check the element's type and name */\n const tagName = currentNode.nodeName.toLowerCase();\n\n /* Execute a hook if present */\n _executeHook('uponSanitizeElement', currentNode, {\n tagName,\n allowedTags: ALLOWED_TAGS,\n });\n\n /* Remove element if anything forbids its presence */\n if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {\n /* Keep content except for black-listed elements */\n if (\n KEEP_CONTENT &&\n !FORBID_CONTENTS[tagName] &&\n typeof currentNode.insertAdjacentHTML === 'function'\n ) {\n try {\n currentNode.insertAdjacentHTML('AfterEnd', currentNode.innerHTML);\n } catch (err) {}\n }\n _forceRemove(currentNode);\n return true;\n }\n\n /* Convert markup to cover jQuery behavior */\n if (\n SAFE_FOR_JQUERY &&\n !currentNode.firstElementChild &&\n (!currentNode.content || !currentNode.content.firstElementChild) &&\n / tag that has an \"id\"\n // attribute at the time.\n if (\n lcName === 'name' &&\n currentNode.nodeName === 'IMG' &&\n attributes.id\n ) {\n idAttr = attributes.id;\n attributes = Array.prototype.slice.apply(attributes);\n _removeAttribute('id', currentNode);\n _removeAttribute(name, currentNode);\n if (attributes.indexOf(idAttr) > l) {\n currentNode.setAttribute('id', idAttr.value);\n }\n } else if (\n // This works around a bug in Safari, where input[type=file]\n // cannot be dynamically set after type has been removed\n currentNode.nodeName === 'INPUT' &&\n lcName === 'type' &&\n value === 'file' &&\n (ALLOWED_ATTR[lcName] || !FORBID_ATTR[lcName])\n ) {\n continue;\n } else {\n // This avoids a crash in Safari v9.0 with double-ids.\n // The trick is to first set the id to be empty and then to\n // remove the attribute\n if (name === 'id') {\n currentNode.setAttribute(name, '');\n }\n _removeAttribute(name, currentNode);\n }\n\n /* Did the hooks approve of the attribute? */\n if (!hookEvent.keepAttr) {\n continue;\n }\n\n /* Make sure attribute cannot clobber */\n if (\n SANITIZE_DOM &&\n (lcName === 'id' || lcName === 'name') &&\n (value in window || value in document || value in formElement)\n ) {\n continue;\n }\n\n /* Sanitize attribute content to be template-safe */\n if (SAFE_FOR_TEMPLATES) {\n value = value.replace(MUSTACHE_EXPR, ' ');\n value = value.replace(ERB_EXPR, ' ');\n }\n\n /* Allow valid data-* attributes: At least one character after \"-\"\n (https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-*-attributes)\n XML-compatible (https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible and http://www.w3.org/TR/xml/#d0e804)\n We don't need to check the value; it's always URI safe. */\n if (ALLOW_DATA_ATTR && DATA_ATTR.test(lcName)) {\n // This attribute is safe\n } else if (ALLOW_ARIA_ATTR && ARIA_ATTR.test(lcName)) {\n // This attribute is safe\n /* Otherwise, check the name is permitted */\n } else if (!ALLOWED_ATTR[lcName] || FORBID_ATTR[lcName]) {\n continue;\n\n /* Check value is safe. First, is attr inert? If so, is safe */\n } else if (URI_SAFE_ATTRIBUTES[lcName]) {\n // This attribute is safe\n /* Check no script, data or unknown possibly unsafe URI\n unless we know URI values are safe for that attribute */\n } else if (IS_ALLOWED_URI.test(value.replace(ATTR_WHITESPACE, ''))) {\n // This attribute is safe\n /* Keep image data URIs alive if src/xlink:href is allowed */\n } else if (\n (lcName === 'src' || lcName === 'xlink:href') &&\n value.indexOf('data:') === 0 &&\n DATA_URI_TAGS[currentNode.nodeName.toLowerCase()]\n ) {\n // This attribute is safe\n /* Allow unknown protocols: This provides support for links that\n are handled by protocol handlers which may be unknown ahead of\n time, e.g. fb:, spotify: */\n } else if (\n ALLOW_UNKNOWN_PROTOCOLS &&\n !IS_SCRIPT_OR_DATA.test(value.replace(ATTR_WHITESPACE, ''))\n ) {\n // This attribute is safe\n /* Check for binary attributes */\n // eslint-disable-next-line no-negated-condition\n } else if (!value) {\n // Binary attributes are safe at this point\n /* Anything else, presume unsafe, do not add it back */\n } else {\n continue;\n }\n\n /* Handle invalid data-* attribute set by try-catching it */\n try {\n currentNode.setAttribute(name, value);\n DOMPurify.removed.pop();\n } catch (err) {}\n }\n\n /* Execute a hook if present */\n _executeHook('afterSanitizeAttributes', currentNode, null);\n };\n\n /**\n * _sanitizeShadowDOM\n *\n * @param fragment to iterate over recursively\n * @return void\n */\n const _sanitizeShadowDOM = function(fragment) {\n let shadowNode;\n const shadowIterator = _createIterator(fragment);\n\n /* Execute a hook if present */\n _executeHook('beforeSanitizeShadowDOM', fragment, null);\n\n while ((shadowNode = shadowIterator.nextNode())) {\n /* Execute a hook if present */\n _executeHook('uponSanitizeShadowNode', shadowNode, null);\n\n /* Sanitize tags and elements */\n if (_sanitizeElements(shadowNode)) {\n continue;\n }\n\n /* Deep shadow DOM detected */\n if (shadowNode.content instanceof DocumentFragment) {\n _sanitizeShadowDOM(shadowNode.content);\n }\n\n /* Check attributes, sanitize if necessary */\n _sanitizeAttributes(shadowNode);\n }\n\n /* Execute a hook if present */\n _executeHook('afterSanitizeShadowDOM', fragment, null);\n };\n\n /**\n * Sanitize\n * Public method providing core sanitation functionality\n *\n * @param {String|Node} dirty string or DOM node\n * @param {Object} configuration object\n */\n // eslint-disable-next-line complexity\n DOMPurify.sanitize = function(dirty, cfg) {\n let body;\n let importedNode;\n let currentNode;\n let oldNode;\n let returnNode;\n /* Make sure we have a string to sanitize.\n DO NOT return early, as this will return the wrong type if\n the user has requested a DOM object rather than a string */\n if (!dirty) {\n dirty = '';\n }\n\n /* Stringify, in case dirty is an object */\n if (typeof dirty !== 'string' && !_isNode(dirty)) {\n // eslint-disable-next-line no-negated-condition\n if (typeof dirty.toString !== 'function') {\n throw new TypeError('toString is not a function');\n } else {\n dirty = dirty.toString();\n }\n }\n\n /* Check we can run. Otherwise fall back or ignore */\n if (!DOMPurify.isSupported) {\n if (\n typeof window.toStaticHTML === 'object' ||\n typeof window.toStaticHTML === 'function'\n ) {\n if (typeof dirty === 'string') {\n return window.toStaticHTML(dirty);\n } else if (_isNode(dirty)) {\n return window.toStaticHTML(dirty.outerHTML);\n }\n }\n return dirty;\n }\n\n /* Assign config vars */\n if (!SET_CONFIG) {\n _parseConfig(cfg);\n }\n\n /* Clean up removed elements */\n DOMPurify.removed = [];\n\n if (dirty instanceof Node) {\n /* If dirty is a DOM element, append to an empty document to avoid\n elements being stripped by the parser */\n body = _initDocument('');\n importedNode = body.ownerDocument.importNode(dirty, true);\n if (importedNode.nodeType === 1 && importedNode.nodeName === 'BODY') {\n /* Node is already a body, use as is */\n body = importedNode;\n } else {\n body.appendChild(importedNode);\n }\n } else {\n /* Exit directly if we have nothing to do */\n if (!RETURN_DOM && !WHOLE_DOCUMENT && dirty.indexOf('<') === -1) {\n return dirty;\n }\n\n /* Initialize the document to work on */\n body = _initDocument(dirty);\n\n /* Check we have a DOM node from the data */\n if (!body) {\n return RETURN_DOM ? null : '';\n }\n }\n\n /* Remove first element node (ours) if FORCE_BODY is set */\n if (FORCE_BODY) {\n _forceRemove(body.firstChild);\n }\n\n /* Get node iterator */\n const nodeIterator = _createIterator(body);\n\n /* Now start iterating over the created document */\n while ((currentNode = nodeIterator.nextNode())) {\n /* Fix IE's strange behavior with manipulated textNodes #89 */\n if (currentNode.nodeType === 3 && currentNode === oldNode) {\n continue;\n }\n\n /* Sanitize tags and elements */\n if (_sanitizeElements(currentNode)) {\n continue;\n }\n\n /* Shadow DOM detected, sanitize it */\n if (currentNode.content instanceof DocumentFragment) {\n _sanitizeShadowDOM(currentNode.content);\n }\n\n /* Check attributes, sanitize if necessary */\n _sanitizeAttributes(currentNode);\n\n oldNode = currentNode;\n }\n\n /* Return sanitized string or DOM */\n if (RETURN_DOM) {\n if (RETURN_DOM_FRAGMENT) {\n returnNode = createDocumentFragment.call(body.ownerDocument);\n\n while (body.firstChild) {\n returnNode.appendChild(body.firstChild);\n }\n } else {\n returnNode = body;\n }\n\n if (RETURN_DOM_IMPORT) {\n /* AdoptNode() is not used because internal state is not reset\n (e.g. the past names map of a HTMLFormElement), this is safe\n in theory but we would rather not risk another attack vector.\n The state that is cloned by importNode() is explicitly defined\n by the specs. */\n returnNode = importNode.call(originalDocument, returnNode, true);\n }\n\n return returnNode;\n }\n\n return WHOLE_DOCUMENT ? body.outerHTML : body.innerHTML;\n };\n\n /**\n * Public method to set the configuration once\n * setConfig\n *\n * @param {Object} configuration object\n * @return void\n */\n DOMPurify.setConfig = function(cfg) {\n _parseConfig(cfg);\n SET_CONFIG = true;\n };\n\n /**\n * Public method to remove the configuration\n * clearConfig\n *\n * @return void\n */\n DOMPurify.clearConfig = function() {\n CONFIG = null;\n SET_CONFIG = false;\n };\n\n /**\n * AddHook\n * Public method to add DOMPurify hooks\n *\n * @param {String} entryPoint\n * @param {Function} hookFunction\n */\n DOMPurify.addHook = function(entryPoint, hookFunction) {\n if (typeof hookFunction !== 'function') {\n return;\n }\n hooks[entryPoint] = hooks[entryPoint] || [];\n hooks[entryPoint].push(hookFunction);\n };\n\n /**\n * RemoveHook\n * Public method to remove a DOMPurify hook at a given entryPoint\n * (pops it from the stack of hooks if more are present)\n *\n * @param {String} entryPoint\n * @return void\n */\n DOMPurify.removeHook = function(entryPoint) {\n if (hooks[entryPoint]) {\n hooks[entryPoint].pop();\n }\n };\n\n /**\n * RemoveHooks\n * Public method to remove all DOMPurify hooks at a given entryPoint\n *\n * @param {String} entryPoint\n * @return void\n */\n DOMPurify.removeHooks = function(entryPoint) {\n if (hooks[entryPoint]) {\n hooks[entryPoint] = [];\n }\n };\n\n /**\n * RemoveAllHooks\n * Public method to remove all DOMPurify hooks\n *\n * @return void\n */\n DOMPurify.removeAllHooks = function() {\n hooks = {};\n };\n\n return DOMPurify;\n}\n\nmodule.exports = createDOMPurify();\n\n\n\n// WEBPACK FOOTER //\n// ./src/purify.js"],"sourceRoot":""} \ No newline at end of file diff --git a/package.json b/package.json index cb4d6bf16..0a04b9b48 100644 --- a/package.json +++ b/package.json @@ -2,7 +2,7 @@ "scripts": { "build-demo": "node scripts/build-demo.js", "lint": "xo src/*.js", - "format": "prettier --write --trailing-comma all --single-quote 'src/*.js'", + "format": "prettier --write --trailing-comma es5 --single-quote 'src/*.js'", "amend-build": "scripts/amend-build.sh", "prebuild": "rimraf dist/**", "build": "npm run build:umd && npm run build:umd:min", diff --git a/src/purify.js b/src/purify.js index c731f9440..402e54395 100644 --- a/src/purify.js +++ b/src/purify.js @@ -326,8 +326,8 @@ function createDOMPurify(window = getGlobal()) { if (useXHR) { try { dirty = encodeURI(dirty); - } catch (e) {} - var xhr = new XMLHttpRequest(); + } catch (err) {} + const xhr = new XMLHttpRequest(); xhr.responseType = 'document'; xhr.open('GET', 'data:text/html;charset=utf-8,' + dirty, false); xhr.send(null); @@ -375,13 +375,13 @@ function createDOMPurify(window = getGlobal()) { if (DOMPurify.isSupported) { (function() { let doc = _initDocument( - '', + '' ); if (!doc.querySelector('svg')) { useXHR = true; } doc = _initDocument( - '', + '' ); if (doc.querySelector('svg img')) { useDOMParser = true; @@ -403,7 +403,7 @@ function createDOMPurify(window = getGlobal()) { () => { return NodeFilter.FILTER_ACCEPT; }, - false, + false ); };
', + '' ); if (doc.querySelector('svg img')) { useDOMParser = true; @@ -403,7 +403,7 @@ function createDOMPurify(window = getGlobal()) { () => { return NodeFilter.FILTER_ACCEPT; }, - false, + false ); };
' ); if (doc.querySelector('svg img')) { useDOMParser = true; @@ -403,7 +403,7 @@ function createDOMPurify(window = getGlobal()) { () => { return NodeFilter.FILTER_ACCEPT; }, - false, + false ); };