Skip to content

Commit 3a754db

Browse files
archmojarchmoj
committed
Revert "1.58.5"
This reverts commit 23fb7fa.
1 parent 23fb7fa commit 3a754db

22 files changed

+187
-322
lines changed

‎dist/README.md

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ object. This property must be set before the plotly.js script tag, for example:
5151
Plotly.js defaults to US English (en-US) and includes British English (en) in the standard bundle.
5252
Many other localizations are available - here is an example using Swiss-German (de-CH),
5353
see the contents of this directory for the full list.
54-
They are also available on our CDN as https://cdn.plot.ly/plotly-locale-de-ch-latest.js OR https://cdn.plot.ly/plotly-locale-de-ch-1.58.5.js
54+
They are also available on our CDN as https://cdn.plot.ly/plotly-locale-de-ch-latest.js OR https://cdn.plot.ly/plotly-locale-de-ch-1.58.4.js
5555
Note that the file names are all lowercase, even though the region is uppercase when you apply a locale.
5656

5757
*After* the plotly.js script tag, add:
@@ -74,12 +74,12 @@ The main plotly.js bundle includes all the official (non-beta) trace modules.
7474

7575
It be can imported as minified javascript
7676
- using dist file `dist/plotly.min.js`
77-
- using CDN URL https://cdn.plot.ly/plotly-latest.min.js OR https://cdn.plot.ly/plotly-1.58.5.min.js
77+
- using CDN URL https://cdn.plot.ly/plotly-latest.min.js OR https://cdn.plot.ly/plotly-1.58.4.min.js
7878

7979
or as raw javascript:
8080
- using the `plotly.js-dist` npm package (starting in `v1.39.0`)
8181
- using dist file `dist/plotly.js`
82-
- using CDN URL https://cdn.plot.ly/plotly-latest.js OR https://cdn.plot.ly/plotly-1.58.5.js
82+
- using CDN URL https://cdn.plot.ly/plotly-latest.js OR https://cdn.plot.ly/plotly-1.58.4.js
8383
- using CommonJS with `require('plotly.js')`
8484

8585
If you would like to have access to the attribute meta information (including attribute descriptions as on the [schema reference page](https://plotly.com/javascript/reference/)), use dist file `dist/plotly-with-meta.js`
@@ -88,7 +88,7 @@ The main plotly.js bundle weights in at:
8888

8989
| plotly.js | plotly.min.js | plotly.min.js + gzip | plotly-with-meta.js |
9090
|-----------|---------------|----------------------|---------------------|
91-
| 7.2 MB | 3.3 MB | 1007.3 kB | 7.5 MB |
91+
| 7.2 MB | 3.3 MB | 1007.2 kB | 7.5 MB |
9292

9393
## Partial bundles
9494

@@ -114,16 +114,16 @@ The `basic` partial bundle contains trace modules `scatter`, `bar` and `pie`.
114114

115115
| Raw size | Minified size | Minified + gzip size |
116116
|------|-----------------|------------------------|
117-
| 2.6 MB | 937.1 kB | 308 kB |
117+
| 2.6 MB | 937.1 kB | 307.9 kB |
118118

119119
#### CDN links
120120

121121
| Flavor | URL |
122122
| ------ | --- |
123123
| Latest | https://cdn.plot.ly/plotly-basic-latest.js |
124124
| Latest minified | https://cdn.plot.ly/plotly-basic-latest.min.js |
125-
| Tagged | https://cdn.plot.ly/plotly-basic-1.58.5.js |
126-
| Tagged minified | https://cdn.plot.ly/plotly-basic-1.58.5.min.js |
125+
| Tagged | https://cdn.plot.ly/plotly-basic-1.58.4.js |
126+
| Tagged minified | https://cdn.plot.ly/plotly-basic-1.58.4.min.js |
127127

128128
#### npm package (starting in `v1.39.0`)
129129

@@ -175,8 +175,8 @@ The `cartesian` partial bundle contains trace modules `scatter`, `bar`, `box`, `
175175
| ------ | --- |
176176
| Latest | https://cdn.plot.ly/plotly-cartesian-latest.js |
177177
| Latest minified | https://cdn.plot.ly/plotly-cartesian-latest.min.js |
178-
| Tagged | https://cdn.plot.ly/plotly-cartesian-1.58.5.js |
179-
| Tagged minified | https://cdn.plot.ly/plotly-cartesian-1.58.5.min.js |
178+
| Tagged | https://cdn.plot.ly/plotly-cartesian-1.58.4.js |
179+
| Tagged minified | https://cdn.plot.ly/plotly-cartesian-1.58.4.min.js |
180180

181181
#### npm package (starting in `v1.39.0`)
182182

@@ -228,8 +228,8 @@ The `geo` partial bundle contains trace modules `scatter`, `scattergeo` and `cho
228228
| ------ | --- |
229229
| Latest | https://cdn.plot.ly/plotly-geo-latest.js |
230230
| Latest minified | https://cdn.plot.ly/plotly-geo-latest.min.js |
231-
| Tagged | https://cdn.plot.ly/plotly-geo-1.58.5.js |
232-
| Tagged minified | https://cdn.plot.ly/plotly-geo-1.58.5.min.js |
231+
| Tagged | https://cdn.plot.ly/plotly-geo-1.58.4.js |
232+
| Tagged minified | https://cdn.plot.ly/plotly-geo-1.58.4.min.js |
233233

234234
#### npm package (starting in `v1.39.0`)
235235

@@ -281,8 +281,8 @@ The `gl3d` partial bundle contains trace modules `scatter`, `scatter3d`, `surfac
281281
| ------ | --- |
282282
| Latest | https://cdn.plot.ly/plotly-gl3d-latest.js |
283283
| Latest minified | https://cdn.plot.ly/plotly-gl3d-latest.min.js |
284-
| Tagged | https://cdn.plot.ly/plotly-gl3d-1.58.5.js |
285-
| Tagged minified | https://cdn.plot.ly/plotly-gl3d-1.58.5.min.js |
284+
| Tagged | https://cdn.plot.ly/plotly-gl3d-1.58.4.js |
285+
| Tagged minified | https://cdn.plot.ly/plotly-gl3d-1.58.4.min.js |
286286

287287
#### npm package (starting in `v1.39.0`)
288288

@@ -326,16 +326,16 @@ The `gl2d` partial bundle contains trace modules `scatter`, `scattergl`, `splom`
326326

327327
| Raw size | Minified size | Minified + gzip size |
328328
|------|-----------------|------------------------|
329-
| 3.7 MB | 1.5 MB | 488.7 kB |
329+
| 3.7 MB | 1.5 MB | 488.6 kB |
330330

331331
#### CDN links
332332

333333
| Flavor | URL |
334334
| ------ | --- |
335335
| Latest | https://cdn.plot.ly/plotly-gl2d-latest.js |
336336
| Latest minified | https://cdn.plot.ly/plotly-gl2d-latest.min.js |
337-
| Tagged | https://cdn.plot.ly/plotly-gl2d-1.58.5.js |
338-
| Tagged minified | https://cdn.plot.ly/plotly-gl2d-1.58.5.min.js |
337+
| Tagged | https://cdn.plot.ly/plotly-gl2d-1.58.4.js |
338+
| Tagged minified | https://cdn.plot.ly/plotly-gl2d-1.58.4.min.js |
339339

340340
#### npm package (starting in `v1.39.0`)
341341

@@ -387,8 +387,8 @@ The `mapbox` partial bundle contains trace modules `scatter`, `scattermapbox`, `
387387
| ------ | --- |
388388
| Latest | https://cdn.plot.ly/plotly-mapbox-latest.js |
389389
| Latest minified | https://cdn.plot.ly/plotly-mapbox-latest.min.js |
390-
| Tagged | https://cdn.plot.ly/plotly-mapbox-1.58.5.js |
391-
| Tagged minified | https://cdn.plot.ly/plotly-mapbox-1.58.5.min.js |
390+
| Tagged | https://cdn.plot.ly/plotly-mapbox-1.58.4.js |
391+
| Tagged minified | https://cdn.plot.ly/plotly-mapbox-1.58.4.min.js |
392392

393393
#### npm package (starting in `v1.39.0`)
394394

@@ -440,8 +440,8 @@ The `finance` partial bundle contains trace modules `scatter`, `bar`, `histogram
440440
| ------ | --- |
441441
| Latest | https://cdn.plot.ly/plotly-finance-latest.js |
442442
| Latest minified | https://cdn.plot.ly/plotly-finance-latest.min.js |
443-
| Tagged | https://cdn.plot.ly/plotly-finance-1.58.5.js |
444-
| Tagged minified | https://cdn.plot.ly/plotly-finance-1.58.5.min.js |
443+
| Tagged | https://cdn.plot.ly/plotly-finance-1.58.4.js |
444+
| Tagged minified | https://cdn.plot.ly/plotly-finance-1.58.4.min.js |
445445

446446
#### npm package (starting in `v1.39.0`)
447447

‎dist/plotly-basic.js

Lines changed: 15 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
2-
* plotly.js (basic) v1.58.5
3-
* Copyright 2012-2021, Plotly, Inc.
2+
* plotly.js (basic) v1.58.4
3+
* Copyright 2012-2020, Plotly, Inc.
44
* All rights reserved.
55
* Licensed under the MIT license
66
*/
@@ -45453,9 +45453,14 @@ function buildSVGText(containerNode, str) {
4545345453
var href = getQuotedMatch(extra, HREFMATCH);
4545445454

4545545455
if(href) {
45456-
var safeHref = sanitizeHref(href);
45457-
if(safeHref) {
45458-
nodeSpec.href = safeHref;
45456+
// check safe protocols
45457+
var dummyAnchor = document.createElement('a');
45458+
dummyAnchor.href = href;
45459+
if(PROTOCOLS.indexOf(dummyAnchor.protocol) !== -1) {
45460+
// Decode href to allow both already encoded and not encoded
45461+
// URIs. Without decoding prior encoding, an already encoded
45462+
// URI would be encoded twice producing a semantically different URI.
45463+
nodeSpec.href = encodeURI(decodeURI(href));
4545945464
nodeSpec.target = getQuotedMatch(extra, TARGETMATCH) || '_blank';
4546045465
nodeSpec.popup = getQuotedMatch(extra, POPUPMATCH);
4546145466
}
@@ -45470,27 +45475,6 @@ function buildSVGText(containerNode, str) {
4547045475
return hasLink;
4547145476
}
4547245477

45473-
function sanitizeHref(href) {
45474-
var decodedHref = encodeURI(decodeURI(href));
45475-
var dummyAnchor1 = document.createElement('a');
45476-
var dummyAnchor2 = document.createElement('a');
45477-
dummyAnchor1.href = href;
45478-
dummyAnchor2.href = decodedHref;
45479-
45480-
var p1 = dummyAnchor1.protocol;
45481-
var p2 = dummyAnchor2.protocol;
45482-
45483-
// check safe protocols
45484-
if(
45485-
PROTOCOLS.indexOf(p1) !== -1 &&
45486-
PROTOCOLS.indexOf(p2) !== -1
45487-
) {
45488-
return decodedHref;
45489-
} else {
45490-
return '';
45491-
}
45492-
}
45493-
4549445478
/*
4549545479
* sanitizeHTML: port of buildSVGText aimed at providing a clean subset of HTML
4549645480
* @param {string} str: the html string to clean
@@ -45525,9 +45509,10 @@ exports.sanitizeHTML = function sanitizeHTML(str) {
4552545509
var href = getQuotedMatch(extra, HREFMATCH);
4552645510

4552745511
if(href) {
45528-
var safeHref = sanitizeHref(href);
45529-
if(safeHref) {
45530-
nodeAttrs.href = safeHref;
45512+
var dummyAnchor = document.createElement('a');
45513+
dummyAnchor.href = href;
45514+
if(PROTOCOLS.indexOf(dummyAnchor.protocol) !== -1) {
45515+
nodeAttrs.href = encodeURI(decodeURI(href));
4553145516
var target = getQuotedMatch(extra, TARGETMATCH);
4553245517
if(target) {
4553345518
nodeAttrs.target = target;
@@ -82660,7 +82645,7 @@ module.exports = function handleXYDefaults(traceIn, traceOut, layout, coerce) {
8266082645
'use strict';
8266182646

8266282647
// package version injected by `npm run preprocess`
82663-
exports.version = '1.58.5';
82648+
exports.version = '1.58.4';
8266482649

8266582650
},{}]},{},[4])(4)
8266682651
});

‎dist/plotly-basic.min.js

Lines changed: 5 additions & 5 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎dist/plotly-cartesian.js

Lines changed: 15 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
2-
* plotly.js (cartesian) v1.58.5
3-
* Copyright 2012-2021, Plotly, Inc.
2+
* plotly.js (cartesian) v1.58.4
3+
* Copyright 2012-2020, Plotly, Inc.
44
* All rights reserved.
55
* Licensed under the MIT license
66
*/
@@ -49151,9 +49151,14 @@ function buildSVGText(containerNode, str) {
4915149151
var href = getQuotedMatch(extra, HREFMATCH);
4915249152

4915349153
if(href) {
49154-
var safeHref = sanitizeHref(href);
49155-
if(safeHref) {
49156-
nodeSpec.href = safeHref;
49154+
// check safe protocols
49155+
var dummyAnchor = document.createElement('a');
49156+
dummyAnchor.href = href;
49157+
if(PROTOCOLS.indexOf(dummyAnchor.protocol) !== -1) {
49158+
// Decode href to allow both already encoded and not encoded
49159+
// URIs. Without decoding prior encoding, an already encoded
49160+
// URI would be encoded twice producing a semantically different URI.
49161+
nodeSpec.href = encodeURI(decodeURI(href));
4915749162
nodeSpec.target = getQuotedMatch(extra, TARGETMATCH) || '_blank';
4915849163
nodeSpec.popup = getQuotedMatch(extra, POPUPMATCH);
4915949164
}
@@ -49168,27 +49173,6 @@ function buildSVGText(containerNode, str) {
4916849173
return hasLink;
4916949174
}
4917049175

49171-
function sanitizeHref(href) {
49172-
var decodedHref = encodeURI(decodeURI(href));
49173-
var dummyAnchor1 = document.createElement('a');
49174-
var dummyAnchor2 = document.createElement('a');
49175-
dummyAnchor1.href = href;
49176-
dummyAnchor2.href = decodedHref;
49177-
49178-
var p1 = dummyAnchor1.protocol;
49179-
var p2 = dummyAnchor2.protocol;
49180-
49181-
// check safe protocols
49182-
if(
49183-
PROTOCOLS.indexOf(p1) !== -1 &&
49184-
PROTOCOLS.indexOf(p2) !== -1
49185-
) {
49186-
return decodedHref;
49187-
} else {
49188-
return '';
49189-
}
49190-
}
49191-
4919249176
/*
4919349177
* sanitizeHTML: port of buildSVGText aimed at providing a clean subset of HTML
4919449178
* @param {string} str: the html string to clean
@@ -49223,9 +49207,10 @@ exports.sanitizeHTML = function sanitizeHTML(str) {
4922349207
var href = getQuotedMatch(extra, HREFMATCH);
4922449208

4922549209
if(href) {
49226-
var safeHref = sanitizeHref(href);
49227-
if(safeHref) {
49228-
nodeAttrs.href = safeHref;
49210+
var dummyAnchor = document.createElement('a');
49211+
dummyAnchor.href = href;
49212+
if(PROTOCOLS.indexOf(dummyAnchor.protocol) !== -1) {
49213+
nodeAttrs.href = encodeURI(decodeURI(href));
4922949214
var target = getQuotedMatch(extra, TARGETMATCH);
4923049215
if(target) {
4923149216
nodeAttrs.target = target;
@@ -98118,7 +98103,7 @@ module.exports = function style(gd) {
9811898103
'use strict';
9811998104

9812098105
// package version injected by `npm run preprocess`
98121-
exports.version = '1.58.5';
98106+
exports.version = '1.58.4';
9812298107

9812398108
},{}]},{},[11])(11)
9812498109
});

‎dist/plotly-cartesian.min.js

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎dist/plotly-finance.js

Lines changed: 15 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
2-
* plotly.js (finance) v1.58.5
3-
* Copyright 2012-2021, Plotly, Inc.
2+
* plotly.js (finance) v1.58.4
3+
* Copyright 2012-2020, Plotly, Inc.
44
* All rights reserved.
55
* Licensed under the MIT license
66
*/
@@ -45573,9 +45573,14 @@ function buildSVGText(containerNode, str) {
4557345573
var href = getQuotedMatch(extra, HREFMATCH);
4557445574

4557545575
if(href) {
45576-
var safeHref = sanitizeHref(href);
45577-
if(safeHref) {
45578-
nodeSpec.href = safeHref;
45576+
// check safe protocols
45577+
var dummyAnchor = document.createElement('a');
45578+
dummyAnchor.href = href;
45579+
if(PROTOCOLS.indexOf(dummyAnchor.protocol) !== -1) {
45580+
// Decode href to allow both already encoded and not encoded
45581+
// URIs. Without decoding prior encoding, an already encoded
45582+
// URI would be encoded twice producing a semantically different URI.
45583+
nodeSpec.href = encodeURI(decodeURI(href));
4557945584
nodeSpec.target = getQuotedMatch(extra, TARGETMATCH) || '_blank';
4558045585
nodeSpec.popup = getQuotedMatch(extra, POPUPMATCH);
4558145586
}
@@ -45590,27 +45595,6 @@ function buildSVGText(containerNode, str) {
4559045595
return hasLink;
4559145596
}
4559245597

45593-
function sanitizeHref(href) {
45594-
var decodedHref = encodeURI(decodeURI(href));
45595-
var dummyAnchor1 = document.createElement('a');
45596-
var dummyAnchor2 = document.createElement('a');
45597-
dummyAnchor1.href = href;
45598-
dummyAnchor2.href = decodedHref;
45599-
45600-
var p1 = dummyAnchor1.protocol;
45601-
var p2 = dummyAnchor2.protocol;
45602-
45603-
// check safe protocols
45604-
if(
45605-
PROTOCOLS.indexOf(p1) !== -1 &&
45606-
PROTOCOLS.indexOf(p2) !== -1
45607-
) {
45608-
return decodedHref;
45609-
} else {
45610-
return '';
45611-
}
45612-
}
45613-
4561445598
/*
4561545599
* sanitizeHTML: port of buildSVGText aimed at providing a clean subset of HTML
4561645600
* @param {string} str: the html string to clean
@@ -45645,9 +45629,10 @@ exports.sanitizeHTML = function sanitizeHTML(str) {
4564545629
var href = getQuotedMatch(extra, HREFMATCH);
4564645630

4564745631
if(href) {
45648-
var safeHref = sanitizeHref(href);
45649-
if(safeHref) {
45650-
nodeAttrs.href = safeHref;
45632+
var dummyAnchor = document.createElement('a');
45633+
dummyAnchor.href = href;
45634+
if(PROTOCOLS.indexOf(dummyAnchor.protocol) !== -1) {
45635+
nodeAttrs.href = encodeURI(decodeURI(href));
4565145636
var target = getQuotedMatch(extra, TARGETMATCH);
4565245637
if(target) {
4565345638
nodeAttrs.target = target;
@@ -90250,7 +90235,7 @@ module.exports = {
9025090235
'use strict';
9025190236

9025290237
// package version injected by `npm run preprocess`
90253-
exports.version = '1.58.5';
90238+
exports.version = '1.58.4';
9025490239

9025590240
},{}]},{},[8])(8)
9025690241
});

‎dist/plotly-finance.min.js

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎dist/plotly-geo-assets.js

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)