enmi-conf.org: comparison wp/wp-includes/js/dist/vendor/lodash.js

Mercurial Mercurial > enmi-conf.org / comparison

summary | shortlog | changelog | graph | tags | bookmarks | branches | files | changeset | file | latest | revisions | annotate | diff | comparison | raw | help

wp/wp-includes/js/dist/vendor/lodash.js

changeset 18	be944660c56a
parent 16	a86126ab1dd4

equal deleted inserted replaced

-:34716fd837a4
+:be944660c56a
 /** Used as a safe reference for `undefined` in pre-ES5 environments. */
 var undefined;
 /** Used as the semantic version number. */
-var VERSION = '4.17.19';
+var VERSION = '4.17.21';
 /** Used as the size to enable large array optimizations. */
 var LARGE_ARRAY_SIZE = 200;
 /** Error message constants. */
 var CORE_ERROR_TEXT = 'Unsupported core-js use. Try https://npms.io/search?q=ponyfill.',
-FUNC_ERROR_TEXT = 'Expected a function';
+FUNC_ERROR_TEXT = 'Expected a function',
+INVALID_TEMPL_VAR_ERROR_TEXT = 'Invalid `variable` option passed into `_.template`';
 /** Used to stand-in for `undefined` hash values. */
 var HASH_UNDEFINED = '__lodash_hash_undefined__';
 /** Used as the maximum memoize cache size. */
 * [syntax characters](http://ecma-international.org/ecma-262/7.0/#sec-patterns).
 */
 var reRegExpChar = /[\\^$.*+?()[\]{}|]/g,
 reHasRegExpChar = RegExp(reRegExpChar.source);
-/** Used to match leading and trailing whitespace. */
+/** Used to match leading whitespace. */
-var reTrim = /^\s+|\s+$/g,
+var reTrimStart = /^\s+/;
-reTrimStart = /^\s+/,
-reTrimEnd = /\s+$/;
+/** Used to match a single whitespace character. */
+var reWhitespace = /\s/;
 /** Used to match wrap detail comments. */
 var reWrapComment = /\{(?:\n\/\* \[wrapped with .+\] \*\/)?\n?/,
 reWrapDetails = /\{\n\/\* \[wrapped with (.+)\] \*/,
 reSplitDetails = /,? & /;
 /** Used to match words composed of alphanumeric characters. */
 var reAsciiWord = /[^\x00-\x2f\x3a-\x40\x5b-\x60\x7b-\x7f]+/g;
+/**
+* Used to validate the `validate` option in `_.template` variable.
+*
+* Forbids characters which could potentially change the meaning of the function argument definition:
+* - "()," (modification of function parameters)
+* - "=" (default value)
+* - "[]{}" (destructuring of function parameters)
+* - "/" (beginning of a comment)
+* - whitespace
+*/
+var reForbiddenIdentifierChars = /[()=,{}\[\]\/\s]/;
 /** Used to match backslashes in property paths. */
 var reEscapeChar = /\\(\\)?/g;
 /**
 return [key, object[key]];
 });
 }
 /**
+* The base implementation of `_.trim`.
+*
+* @private
+* @param {string} string The string to trim.
+* @returns {string} Returns the trimmed string.
+*/
+function baseTrim(string) {
+return string
+? string.slice(0, trimmedEndIndex(string) + 1).replace(reTrimStart, '')
+: string;
+}
+/**
 * The base implementation of `_.unary` without support for storing metadata.
 *
 * @private
 * @param {Function} func The function to cap arguments for.
 * @returns {Function} Returns the new capped function.
 */
 function stringToArray(string) {
 return hasUnicode(string)
 ? unicodeToArray(string)
 : asciiToArray(string);
+}
+/**
+* Used by `_.trim` and `_.trimEnd` to get the index of the last non-whitespace
+* character of `string`.
+*
+* @private
+* @param {string} string The string to inspect.
+* @returns {number} Returns the index of the last non-whitespace character.
+*/
+function trimmedEndIndex(string) {
+var index = string.length;
+while (index-- && reWhitespace.test(string.charAt(index))) {}
+return index;
 }
 /**
 * Used by `_.unescape` to convert HTML entities to characters.
 *
 value = isObject(other) ? (other + '') : other;
 }
 if (typeof value != 'string') {
 return value === 0 ? value : +value;
 }
-value = value.replace(reTrim, '');
+value = baseTrim(value);
 var isBinary = reIsBinary.test(value);
 return (isBinary || reIsOctal.test(value))
 ? freeParseInt(value.slice(2), isBinary ? 2 : 8)
 : (reIsBadHex.test(value) ? NAN : +value);
 }
 // code to add the data object to the top of the scope chain.
 var variable = hasOwnProperty.call(options, 'variable') && options.variable;
 if (!variable) {
 source = 'with (obj) {\n' + source + '\n}\n';
 }
+// Throw an error if a forbidden character was found in `variable`, to prevent
+// potential command injection attacks.
+else if (reForbiddenIdentifierChars.test(variable)) {
+throw new Error(INVALID_TEMPL_VAR_ERROR_TEXT);
+}
 // Cleanup code by stripping empty strings.
 source = (isEvaluating ? source.replace(reEmptyStringLeading, '') : source)
 .replace(reEmptyStringMiddle, '$1')
 .replace(reEmptyStringTrailing, '$1;');
 * // => ['foo', 'bar']
 */
 function trim(string, chars, guard) {
 string = toString(string);
 if (string && (guard || chars === undefined)) {
-return string.replace(reTrim, '');
+return baseTrim(string);
 }
 if (!string || !(chars = baseToString(chars))) {
 return string;
 }
 var strSymbols = stringToArray(string),
 * // => '-_-abc'
 */
 function trimEnd(string, chars, guard) {
 string = toString(string);
 if (string && (guard || chars === undefined)) {
-return string.replace(reTrimEnd, '');
+return string.slice(0, trimmedEndIndex(string) + 1);
 }
 if (!string || !(chars = baseToString(chars))) {
 return string;
 }
 var strSymbols = stringToArray(string),
 *
 * _.filter(objects, _.matches({ 'a': 4, 'c': 6 }));
 * // => [{ 'a': 4, 'b': 5, 'c': 6 }]
 *
 * // Checking for several possible values
-* _.filter(users, _.overSome([_.matches({ 'a': 1 }), _.matches({ 'a': 4 })]));
+* _.filter(objects, _.overSome([_.matches({ 'a': 1 }), _.matches({ 'a': 4 })]));
 * // => [{ 'a': 1, 'b': 2, 'c': 3 }, { 'a': 4, 'b': 5, 'c': 6 }]
 */
 function matches(source) {
 return baseMatches(baseClone(source, CLONE_DEEP_FLAG));
 }
 *
 * _.find(objects, _.matchesProperty('a', 4));
 * // => { 'a': 4, 'b': 5, 'c': 6 }
 *
 * // Checking for several possible values
-* _.filter(users, _.overSome([_.matchesProperty('a', 1), _.matchesProperty('a', 4)]));
+* _.filter(objects, _.overSome([_.matchesProperty('a', 1), _.matchesProperty('a', 4)]));
 * // => [{ 'a': 1, 'b': 2, 'c': 3 }, { 'a': 4, 'b': 5, 'c': 6 }]
 */
 function matchesProperty(path, srcValue) {
 return baseMatchesProperty(path, baseClone(srcValue, CLONE_DEEP_FLAG));
 }

enmi-conf.org