update voby-via-demo

Author: Launch Event Invitation

package.json

@@ -3,9 +3,9 @@
  "amdName": "vhtml",
  "version": "2.2.1",
  "description": "Hyperscript reviver that constructs a sanitized HTML string.",
- "main": "dist/vhtml.js",
- "minified:main": "dist/vhtml.min.js",
- "jsnext:main": "src/vhtml.js",
+ "main": "./dist/vhtml.js",
+ "minified:main": "./dist/vhtml.umd.js",
+ "jsnext:main": "./src/vhtml.ts",
  "scripts": {
  "preinstall": "npx only-allow pnpm",
  "build": "vite build && tsc --declaration && pnpm size",

src/vhtml.ts

@@ -26,32 +26,26 @@ export default function h(name: string | Function | null, attrs: any, ..._args:
  // return name(attrs, stack.reverse());
  }
 
+ const loopAttr = () => {
+ if (attrs) for (let i in attrs) {
+ if (attrs[i] !== false && attrs[i] != null && i !== setInnerHTMLAttr) {
+ //@ts-ignore
+ s += ` ${DOMAttributeNames[i] ? DOMAttributeNames[i] : esc(i)}="${esc(attrs[i])}"`
+ }
+ }
+ }
+
  if (name) {
  if (name === '!') {
  s += '<!-- '
- if (attrs) for (let i in attrs) {
- if (attrs[i] !== false && attrs[i] != null && i !== setInnerHTMLAttr) {
- //@ts-ignore
- s += ` ${DOMAttributeNames[i] ? DOMAttributeNames[i] : esc(i)}="${esc(attrs[i])}"`
- }
- }
+ loopAttr()
  }
  else if (name === 'text') {
- if (attrs) for (let i in attrs) {
- if (attrs[i] !== false && attrs[i] != null && i !== setInnerHTMLAttr) {
- //@ts-ignore
- s += ` ${DOMAttributeNames[i] ? DOMAttributeNames[i] : esc(i)}="${esc(attrs[i])}"`
- }
- }
+ loopAttr()
  }
  else {
  s += '<' + name
- if (attrs) for (let i in attrs) {
- if (attrs[i] !== false && attrs[i] != null && i !== setInnerHTMLAttr) {
- //@ts-ignore
- s += ` ${DOMAttributeNames[i] ? DOMAttributeNames[i] : esc(i)}="${esc(attrs[i])}"`
- }
- }
+ loopAttr()
  s += '>'
  }
  }

test/vhtml.test.tsx

@@ -45,6 +45,14 @@ describe('vhtml', () => {
  )
  })
 
+ // it('should sanitize function', () => {
+ // expect(
+ // <div onClick={() => alert('hello')} />
+ // ).to.equal(
+ // `<div onclick="&amp;&lt;&gt;&quot;&apos;"></div>`
+ // )
+ // })
+
  it('should not sanitize the "dangerouslySetInnerHTML" attribute, and directly set its `__html` property as innerHTML', () => {
  expect(
  <div dangerouslySetInnerHTML={{ __html: "<span>Injected HTML</span>" }} />