[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_171":172,"_173":174},"routes/_app.x.$handle.$name",{"_101":100,"_38":50,"_109":91,"_33":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_26":-5,"_121":-5,"_122":-5,"_123":32,"_124":125,"_126":30,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_48":49,"_38":50,"_43":51,"_52":-5,"_53":32,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":62,"_63":30,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":32},"version",13,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","6c64ae72-1add-4770-8374-00dc52ed229a","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":32,"_33":34,"_35":34},"file",{"_36":37,"_38":34,"_39":40,"_41":42,"_43":44,"_45":14,"_46":47,"_29":32},"previous","deleted",true,"deletedHere",false,"path","debug.ts","latestPath","fileId","64d5c5d0-9e11-11f1-a3a5-1607ee4eb77e","name","fileType","script","content","import DOMPurify from \"https://esm.sh/dompurify@3.2.3\";\n\nconsole.log(\"typeof default:\", typeof DOMPurify);\nconsole.log(\"keys:\", Object.keys(DOMPurify as any));\nconsole.log(\"typeof sanitize:\", typeof (DOMPurify as any)?.sanitize);\nconsole.log(\"typeof sanitize[[]]:\", typeof ((DOMPurify as any) ?? {})?.sanitize);\n\nconst r = (DOMPurify as any)?.sanitize?.(\n \"\",\n { USE_PROFILES: { svg: true, svgFilters: true }, FORBID_TAGS: [\"script\"], FORBID_ATTR: [\"onload\"] },\n);\nconsole.log(\"result:\", r);\n","createdAt",["D",1787393296833],"branchVersion","branchId","11e8aa49-9adc-4367-b80a-12165a26a9bf","id","89b8674c-29a2-42c5-9697-75f5e30658bb","svg-markup-to-img",["D",1787391542074],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","receive raw SVG markup, then respond image/svg+xml","imageUrl","1503fe37-2d29-431d-9c4d-04c28bef7179","pinnedFileId","4eecd794-9e0d-11f1-a085-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","1a4ba75e-50a6-4110-b735-f44a06c525c9","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_108":104},"org",{"_101":100,"_102":-5,"_103":104,"_19":60,"_105":106,"_107":32},"branch",{"_13":90,"_38":91,"_48":47,"_92":49,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":50,"_99":100},"isOwned",22,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","vilmid","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18ycTNtNDhUSFpRcE10bEZqVXlYbFJRRUdqWVYifQ","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_38":50,"_43":167,"_52":-5,"_53":32,"_54":55,"_56":55,"_57":58,"_59":-5,"_19":60,"_61":62,"_63":30,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":168,"_85":169,"_87":170,"_89":32},"tree",[158,159],"files",[158,159],"counts",{"_147":67,"_148":149,"_150":67,"_151":152,"_153":154},"contents",[131,132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_48":144,"_38":34,"_36":37,"_135":-5,"_46":47,"_45":14,"_137":32,"_43":145,"_13":67,"_39":40,"_41":42,"_29":32,"_142":-5,"_33":146},{"_48":133,"_38":134,"_36":62,"_135":-5,"_46":47,"_45":136,"_137":32,"_43":138,"_13":139,"_39":140,"_41":141,"_29":32,"_142":50,"_33":143},"238bf009-1624-42da-9015-dc902154da16","main.ts","parentId",12,"latest",["D",1787393289470],11,"http","import DOMPurify from \"https://esm.sh/dompurify@3.2.3\";\n\n// SVG passthrough API. Applies CORS headers so the SVG can be embedded cross-origin.\n//\n// GET /api/to-svg?svg=%3Csvg%3E...%3C%2Fsvg%3E\n// `svg` is the raw SVG markup, URL-encoded. It is sanitized so scripting and\n// event-handler content is stripped before being returned as `image/svg+xml`.\n//\n// -> Returns the sanitized SVG as `image/svg+xml`.\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n\n const cors = {\n \"access-control-allow-origin\": \"*\",\n \"access-control-allow-methods\": \"GET, OPTIONS\",\n \"access-control-allow-headers\": \"content-type\",\n };\n\n // CORS preflight\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n\n if (url.pathname === \"/health\") {\n return json({ status: \"online\" }, 200, cors);\n }\n\n if (url.pathname === \"/api/to-svg\" && req.method === \"GET\") {\n const svg = url.searchParams.get(\"svg\") ?? \"\";\n if (!/^\\s*(<\\?xml[^>]*\\?>)?\\s*(]*>)?\\s*<\\s*(svg|!DOCTYPE|\\?xml)/im\n .test(svg)) {\n return json({ error: \"Query param `svg` does not look like SVG markup.\" }, 400, cors);\n }\n\n const clean = DOMPurify.sanitize(svg, {\n USE_PROFILES: { svg: true, svgFilters: true },\n FORBID_TAGS: [\"script\", \"foreignObject\", \"use\"],\n FORBID_ATTR: [\"onerror\", \"onload\", \"onclick\", \"onmouseover\", \"href\", \"xlink:href\"],\n });\n\n if (!clean || !/\\s*

Diff · v13