https://www.maybelline.co.jp/frontend/master/js/npm.sanitize-html.8518f3a5.js?v=1.94.0-release00000002

1(self["webpackChunkwsf_master_mny"]=self["webpackChunkwsf_master_mny"]||[]).push([[485],{4728:function(e,t,n){const r=n(8659),i=n(2834),{isPlainObject:o}=n(6191),s=n(4744),a=n(9466),{parse:l}=n(2895),c=["img","audio","video","picture","svg","object","map","iframe","embed"],d=["script","style"];function u(e,t){e&&Object.keys(e).forEach(function(n){t(e[n],n)})}function f(e,t){return{}.hasOwnProperty.call(e,t)}function p(e,t){const n=[];return u(e,function(e){t(e)&&n.push(e)}),n}function h(e){for(const t in e)if(f(e,t))return!1;return!0}function g(e){return e.map(function(e){if(!e.url)throw new Error("URL missing");return e.url+(e.w?` ${e.w}w`:"")+(e.h?` ${e.h}h`:"")+(e.d?` ${e.d}x`:"")}).join(", ")}e.exports=w;const m=/^[^\0\t\n\f\r /<=>]+$/;function w(e,t,n){if(null==e)return"";let x="",v="";function T(e,t){const n=this;this.tag=e,this.attribs=t||{},this.tagPosition=x.length,this.text="",this.mediaChildren=[],this.updateParentNodeText=function(){if(C.length){const e=C[C.length-1];e.text+=n.text}},this.updateParentNodeMediaChildren=function(){if(C.length&&c.includes(this.tag)){const e=C[C.length-1];e.mediaChildren.push(this.tag)}}}t=Object.assign({},w.defaults,t),t.parser=Object.assign({},b,t.parser),d.forEach(function(e){!1!==t.allowedTags&&(t.allowedTags||[]).indexOf(e)>-1&&!t.allowVulnerableTags&&console.warn(`\n\n⚠️ Your \`allowedTags\` option includes, \`${e}\`, which is inherently\nvulnerable to XSS attacks. Please remove it from \`allowedTags\`.\nOr, to disable this warning, add the \`allowVulnerableTags\` option\nand ensure you are accounting for this risk.\n\n`)});const y=t.nonTextTags||["script","style","textarea","option"];let O,S;t.allowedAttributes&&(O={},S={},u(t.allowedAttributes,function(e,t){O[t]=[];const n=[];e.forEach(function(e){"string"===typeof e&&e.indexOf("*")>=0?n.push(i(e).replace(/\\\*/g,".*")):O[t].push(e)}),n.length&&(S[t]=new RegExp("^("+n.join("|")+")$"))}));const P={},j={},$={};u(t.allowedClasses,function(e,t){O&&(f(O,t)||(O[t]=[]),O[t].push("class")),P[t]=[],$[t]=[];const n=[];e.forEach(function(e){"string"===typeof e&&e.indexOf("*")>=0?n.push(i(e).replace(/\\\*/g,".*")):e instanceof RegExp?$[t].push(e):P[t].push(e)}),n.length&&(j[t]=new RegExp("^("+n.join("|")+")$"))});const k={};let E,N,C,R,A,H,M;u(t.transformTags,function(e,t){let n;"function"===typeof e?n=e:"string"===typeof e&&(n=w.simpleTransform(e)),"*"===t?E=n:k[t]=n});let I=!1;D();const B=new r.Parser({onopentag:function(e,n){if(t.enforceHtmlBoundary&&"html"===e&&D(),H)return void M++;const r=new T(e,n);C.push(r);let i=!1;const c=!!r.text;let d;if(f(k,e)&&(d=k[e](e,n),r.attribs=n=d.attribs,void 0!==d.text&&(r.innerText=d.text),e!==d.tagName&&(r.name=e=d.tagName,A[N]=d.tagName)),E&&(d=E(e,n),r.attribs=n=d.attribs,e!==d.tagName&&(r.name=e=d.tagName,A[N]=d.tagName)),(!1!==t.allowedTags&&-1===(t.allowedTags||[]).indexOf(e)||"recursiveEscape"===t.disallowedTagsMode&&!h(R)||null!=t.nestingLimit&&N>=t.nestingLimit)&&(i=!0,R[N]=!0,"discard"===t.disallowedTagsMode&&-1!==y.indexOf(e)&&(H=!0,M=1),R[N]=!0),N++,i){if("discard"===t.disallowedTagsMode)return;v=x,x=""}x+="<"+e,"script"===e&&(t.allowedScriptHostnames||t.allowedScriptDomains)&&(r.innerText=""),(!O||f(O,e)||O["*"])&&u(n,function(n,i){if(!m.test(i))return void delete r.attribs[i];let c=!1;if(!O||f(O,e)&&-1!==O[e].indexOf(i)||O["*"]&&-1!==O["*"].indexOf(i)||f(S,e)&&S[e].test(i)||S["*"]&&S["*"].test(i))c=!0;else if(O&&O[e])for(const t of O[e])if(o(t)&&t.name&&t.name===i){c=!0;let e="";if(!0===t.multiple){const r=n.split(" ");for(const n of r)-1!==t.values.indexOf(n)&&(""===e?e=n:e+=" "+n)}else t.values.indexOf(n)>=0&&(e=n);n=e}if(c){if(-1!==t.allowedSchemesAppliedToAttributes.indexOf(i)&&_(e,n))return void delete r.attribs[i];if("script"===e&&"src"===i){let e=!0;try{const r=F(n);if(t.allowedScriptHostnames||t.allowedScriptDomains){const n=(t.allowedScriptHostnames||[]).find(function(e){return e===r.url.hostname}),i=(t.allowedScriptDomains||[]).find(function(e){return r.url.hostname===e||r.url.hostname.endsWith(`.${e}`)});e=n||i}}catch(d){e=!1}if(!e)return void delete r.attribs[i]}if("iframe"===e&&"src"===i){let e=!0;try{const r=F(n);

1if(r.isRelativeUrl)e=f(t,"allowIframeRelativeUrls")?t.allowIframeRelativeUrls:!t.allowedIframeHostnames&&!t.allowedIframeDomains;else if(t.allowedIframeHostnames||t.allowedIframeDomains){const n=(t.allowedIframeHostnames||[]).find(function(e){return e===r.url.hostname}),i=(t.allowedIframeDomains||[]).find(function(e){return r.url.hostname===e||r.url.hostname.endsWith(`.${e}`)});e=n||i}}catch(d){e=!1}if(!e)return void delete r.attribs[i]}if("srcset"===i)try{let e=a(n);if(e.forEach(function(e){_("srcset",e.url)&&(e.evil=!0)}),e=p(e,function(e){return!e.evil}),!e.length)return void delete r.attribs[i];n=g(p(e,function(e){return!e.evil})),r.attribs[i]=n}catch(d){return void delete r.attribs[i]}if("class"===i){const t=P[e],o=P["*"],a=j[e],l=$[e],c=j["*"],d=[a,c].concat(l).filter(function(e){return e});if(n=W(n,t&&o?s(t,o):t||o,d),!n.length)return void delete r.attribs[i]}if("style"===i)try{const o=l(e+" {"+n+"}"),s=L(o,t.allowedStyles);if(n=q(s),0===n.length)return void delete r.attribs[i]}catch(d){return void delete r.attribs[i]}x+=" "+i,n&&n.length&&(x+='="'+U(n,!0)+'"')}else delete r.attribs[i]}),-1!==t.selfClosing.indexOf(e)?x+=" />":(x+=">",!r.innerText||c||t.textFilter||(x+=U(r.innerText),I=!0)),i&&(x=v+U(x),v="")},ontext:function(e){if(H)return;const n=C[C.length-1];let r;if(n&&(r=n.tag,e=void 0!==n.innerText?n.innerText:e),"discard"!==t.disallowedTagsMode||"script"!==r&&"style"!==r){const n=U(e,!1);t.textFilter&&!I?x+=t.textFilter(n,r):I||(x+=n)}else x+=e;if(C.length){const t=C[C.length-1];t.text+=e}},onclosetag:function(e){if(H){if(M--,M)return;H=!1}const n=C.pop();if(!n)return;if(n.tag!==e)return void C.push(n);H=!!t.enforceHtmlBoundary&&"html"===e,N--;const r=R[N];if(r){if(delete R[N],"discard"===t.disallowedTagsMode)return void n.updateParentNodeText();v=x,x=""}A[N]&&(e=A[N],delete A[N]),t.exclusiveFilter&&t.exclusiveFilter(n)?x=x.substr(0,n.tagPosition):(n.updateParentNodeMediaChildren(),n.updateParentNodeText(),-1===t.selfClosing.indexOf(e)?(x+="</"+e+">",r&&(x=v+U(x),v=""),I=!1):r&&(x=v,v=""))}},t.parser);return B.write(e),B.end(),x;function D(){x="",N=0,C=[],R={},A={},H=!1,M=0}function U(e,n){return"string"!==typeof e&&(e+=""),t.parser.decodeEntities&&(e=e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;"),n&&(e=e.replace(/"/g,"&quot;"))),e=e.replace(/&(?![a-zA-Z0-9#]{1,20};)/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;"),n&&(e=e.replace(/"/g,"&quot;")),e}function _(e,n){n=n.replace(/[\x00-\x20]+/g,"");while(1){const e=n.indexOf("\x3c!--");if(-1===e)break;const t=n.indexOf("--\x3e",e+4);if(-1===t)break;n=n.substring(0,e)+n.substring(t+3)}const r=n.match(/^([a-zA-Z][a-zA-Z0-9.\-+]*):/);if(!r)return!!n.match(/^[/\\]{2}/)&&!t.allowProtocolRelative;const i=r[1].toLowerCase();return f(t.allowedSchemesByTag,e)?-1===t.allowedSchemesByTag[e].indexOf(i):!t.allowedSchemes||-1===t.allowedSchemes.indexOf(i)}function F(e){if(e=e.replace(/^(\w+:)?\s*[\\/]\s*[\\/]/,"$1//"),e.startsWith("relative:"))throw new Error("relative: exploit attempt");let t="relative://relative-site";for(let i=0;i<100;i++)t+=`/${i}`;const n=new URL(e,t),r=n&&"relative-site"===n.hostname&&"relative:"===n.protocol;return{isRelativeUrl:r,url:n}}function L(e,t){if(!t)return e;const n=e.nodes[0];let r;return r=t[n.selector]&&t["*"]?s(t[n.selector],t["*"]):t[n.selector]||t["*"],r&&(e.nodes[0].nodes=n.nodes.reduce(z(r),[])),e}function q(e){return e.nodes[0].nodes.reduce(function(e,t){return e.push(`${t.prop}:${t.value}${t.important?" !important":""}`),e},[]).join(";")}function z(e){return function(t,n){if(f(e,n.prop)){const r=e[n.prop].some(function(e){return e.test(n.value)});r&&t.push(n)}return t}}function W(e,t,n){return t?(e=e.split(/\s+/),e.filter(function(e){return-1!==t.indexOf(e)||n.some(function(t){return t.test(e)})}).join(" ")):e}}const b={decodeEntities:!0};w.defaults={allowedTags:["address","article","aside","footer","header","h1","h2","h3","h4","h5","h6","hgroup","main","nav","section","blockquote","dd","div","dl","dt","figcaption","figure","hr","li","main","ol","p","pre","ul","a","abbr","b","bdi","bdo","br","cite","code","data","dfn","em","i","kbd","mark","q","rb","rp","rt","rtc","ruby","s","samp","small","span","strong","sub","sup","time","u","var","wbr","caption","col","colgroup","table","tbody","td","tfoot","th","thead","tr"],disallowedTagsMode:"discard",allowedAttributes:{a:["href","name","target"],img:["src","srcset","alt","title","width","height","loading"]},selfClosing:["img","br","hr","area","base","basefont","input","link","meta"],allowedSchemes:["http","https","ftp","mailto","tel"],allowedSchemesByTag:{},allowedSchemesAppliedToAttributes:["href","src","cite"],allowProtocolRelative:!0,enforceHtmlBoundary:!1},w.simpleTransform=function(e,t,n){return n=void 0===n||n,t=t||{},function(r,i){let o;

1if(n)for(o in t)i[o]=t[o];else i=t;return{tagName:e,attribs:i}}}},6191:function(e,t){"use strict";
2/*!
3 * is-plain-object <https://github.com/jonschlinkert/is-plain-object>
4 *
5 * Copyright (c) 2014-2017, Jon Schlinkert.
6 * Released under the MIT License.
7 */
8function n(e){return"[object Object]"===Object.prototype.toString.call(e)}function r(e){var t,r;return!1!==n(e)&&(t=e.constructor,void 0===t||(r=t.prototype,!1!==n(r)&&!1!==r.hasOwnProperty("isPrototypeOf")))}Object.defineProperty(t,"__esModule",{value:!0}),t.isPlainObject=r}}]);
9//# sourceMappingURL=npm.sanitize-html.8518f3a5.js.map