Skip to content

Commit 23fb7fa

Browse files
archmojarchmoj
committedJul 6, 2021
1.58.5
·
v3.0.1v1.58.5
1 parent c8014f8 commit 23fb7fa

22 files changed

+322
-187
lines changed
 

‎dist/README.md

+20-20
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ object. This property must be set before the plotly.js script tag, for example:
5151
Plotly.js defaults to US English (en-US) and includes British English (en) in the standard bundle.
5252
Many other localizations are available - here is an example using Swiss-German (de-CH),
5353
see the contents of this directory for the full list.
54-
They are also available on our CDN as https://cdn.plot.ly/plotly-locale-de-ch-latest.js OR https://cdn.plot.ly/plotly-locale-de-ch-1.58.4.js
54+
They are also available on our CDN as https://cdn.plot.ly/plotly-locale-de-ch-latest.js OR https://cdn.plot.ly/plotly-locale-de-ch-1.58.5.js
5555
Note that the file names are all lowercase, even though the region is uppercase when you apply a locale.
5656

5757
*After* the plotly.js script tag, add:
@@ -74,12 +74,12 @@ The main plotly.js bundle includes all the official (non-beta) trace modules.
7474

7575
It be can imported as minified javascript
7676
- using dist file `dist/plotly.min.js`
77-
- using CDN URL https://cdn.plot.ly/plotly-latest.min.js OR https://cdn.plot.ly/plotly-1.58.4.min.js
77+
- using CDN URL https://cdn.plot.ly/plotly-latest.min.js OR https://cdn.plot.ly/plotly-1.58.5.min.js
7878

7979
or as raw javascript:
8080
- using the `plotly.js-dist` npm package (starting in `v1.39.0`)
8181
- using dist file `dist/plotly.js`
82-
- using CDN URL https://cdn.plot.ly/plotly-latest.js OR https://cdn.plot.ly/plotly-1.58.4.js
82+
- using CDN URL https://cdn.plot.ly/plotly-latest.js OR https://cdn.plot.ly/plotly-1.58.5.js
8383
- using CommonJS with `require('plotly.js')`
8484

8585
If you would like to have access to the attribute meta information (including attribute descriptions as on the [schema reference page](https://plotly.com/javascript/reference/)), use dist file `dist/plotly-with-meta.js`
@@ -88,7 +88,7 @@ The main plotly.js bundle weights in at:
8888

8989
| plotly.js | plotly.min.js | plotly.min.js + gzip | plotly-with-meta.js |
9090
|-----------|---------------|----------------------|---------------------|
91-
| 7.2 MB | 3.3 MB | 1007.2 kB | 7.5 MB |
91+
| 7.2 MB | 3.3 MB | 1007.3 kB | 7.5 MB |
9292

9393
## Partial bundles
9494

@@ -114,16 +114,16 @@ The `basic` partial bundle contains trace modules `scatter`, `bar` and `pie`.
114114

115115
| Raw size | Minified size | Minified + gzip size |
116116
|------|-----------------|------------------------|
117-
| 2.6 MB | 937.1 kB | 307.9 kB |
117+
| 2.6 MB | 937.1 kB | 308 kB |
118118

119119
#### CDN links
120120

121121
| Flavor | URL |
122122
| ------ | --- |
123123
| Latest | https://cdn.plot.ly/plotly-basic-latest.js |
124124
| Latest minified | https://cdn.plot.ly/plotly-basic-latest.min.js |
125-
| Tagged | https://cdn.plot.ly/plotly-basic-1.58.4.js |
126-
| Tagged minified | https://cdn.plot.ly/plotly-basic-1.58.4.min.js |
125+
| Tagged | https://cdn.plot.ly/plotly-basic-1.58.5.js |
126+
| Tagged minified | https://cdn.plot.ly/plotly-basic-1.58.5.min.js |
127127

128128
#### npm package (starting in `v1.39.0`)
129129

@@ -175,8 +175,8 @@ The `cartesian` partial bundle contains trace modules `scatter`, `bar`, `box`, `
175175
| ------ | --- |
176176
| Latest | https://cdn.plot.ly/plotly-cartesian-latest.js |
177177
| Latest minified | https://cdn.plot.ly/plotly-cartesian-latest.min.js |
178-
| Tagged | https://cdn.plot.ly/plotly-cartesian-1.58.4.js |
179-
| Tagged minified | https://cdn.plot.ly/plotly-cartesian-1.58.4.min.js |
178+
| Tagged | https://cdn.plot.ly/plotly-cartesian-1.58.5.js |
179+
| Tagged minified | https://cdn.plot.ly/plotly-cartesian-1.58.5.min.js |
180180

181181
#### npm package (starting in `v1.39.0`)
182182

@@ -228,8 +228,8 @@ The `geo` partial bundle contains trace modules `scatter`, `scattergeo` and `cho
228228
| ------ | --- |
229229
| Latest | https://cdn.plot.ly/plotly-geo-latest.js |
230230
| Latest minified | https://cdn.plot.ly/plotly-geo-latest.min.js |
231-
| Tagged | https://cdn.plot.ly/plotly-geo-1.58.4.js |
232-
| Tagged minified | https://cdn.plot.ly/plotly-geo-1.58.4.min.js |
231+
| Tagged | https://cdn.plot.ly/plotly-geo-1.58.5.js |
232+
| Tagged minified | https://cdn.plot.ly/plotly-geo-1.58.5.min.js |
233233

234234
#### npm package (starting in `v1.39.0`)
235235

@@ -281,8 +281,8 @@ The `gl3d` partial bundle contains trace modules `scatter`, `scatter3d`, `surfac
281281
| ------ | --- |
282282
| Latest | https://cdn.plot.ly/plotly-gl3d-latest.js |
283283
| Latest minified | https://cdn.plot.ly/plotly-gl3d-latest.min.js |
284-
| Tagged | https://cdn.plot.ly/plotly-gl3d-1.58.4.js |
285-
| Tagged minified | https://cdn.plot.ly/plotly-gl3d-1.58.4.min.js |
284+
| Tagged | https://cdn.plot.ly/plotly-gl3d-1.58.5.js |
285+
| Tagged minified | https://cdn.plot.ly/plotly-gl3d-1.58.5.min.js |
286286

287287
#### npm package (starting in `v1.39.0`)
288288

@@ -326,16 +326,16 @@ The `gl2d` partial bundle contains trace modules `scatter`, `scattergl`, `splom`
326326

327327
| Raw size | Minified size | Minified + gzip size |
328328
|------|-----------------|------------------------|
329-
| 3.7 MB | 1.5 MB | 488.6 kB |
329+
| 3.7 MB | 1.5 MB | 488.7 kB |
330330

331331
#### CDN links
332332

333333
| Flavor | URL |
334334
| ------ | --- |
335335
| Latest | https://cdn.plot.ly/plotly-gl2d-latest.js |
336336
| Latest minified | https://cdn.plot.ly/plotly-gl2d-latest.min.js |
337-
| Tagged | https://cdn.plot.ly/plotly-gl2d-1.58.4.js |
338-
| Tagged minified | https://cdn.plot.ly/plotly-gl2d-1.58.4.min.js |
337+
| Tagged | https://cdn.plot.ly/plotly-gl2d-1.58.5.js |
338+
| Tagged minified | https://cdn.plot.ly/plotly-gl2d-1.58.5.min.js |
339339

340340
#### npm package (starting in `v1.39.0`)
341341

@@ -387,8 +387,8 @@ The `mapbox` partial bundle contains trace modules `scatter`, `scattermapbox`, `
387387
| ------ | --- |
388388
| Latest | https://cdn.plot.ly/plotly-mapbox-latest.js |
389389
| Latest minified | https://cdn.plot.ly/plotly-mapbox-latest.min.js |
390-
| Tagged | https://cdn.plot.ly/plotly-mapbox-1.58.4.js |
391-
| Tagged minified | https://cdn.plot.ly/plotly-mapbox-1.58.4.min.js |
390+
| Tagged | https://cdn.plot.ly/plotly-mapbox-1.58.5.js |
391+
| Tagged minified | https://cdn.plot.ly/plotly-mapbox-1.58.5.min.js |
392392

393393
#### npm package (starting in `v1.39.0`)
394394

@@ -440,8 +440,8 @@ The `finance` partial bundle contains trace modules `scatter`, `bar`, `histogram
440440
| ------ | --- |
441441
| Latest | https://cdn.plot.ly/plotly-finance-latest.js |
442442
| Latest minified | https://cdn.plot.ly/plotly-finance-latest.min.js |
443-
| Tagged | https://cdn.plot.ly/plotly-finance-1.58.4.js |
444-
| Tagged minified | https://cdn.plot.ly/plotly-finance-1.58.4.min.js |
443+
| Tagged | https://cdn.plot.ly/plotly-finance-1.58.5.js |
444+
| Tagged minified | https://cdn.plot.ly/plotly-finance-1.58.5.min.js |
445445

446446
#### npm package (starting in `v1.39.0`)
447447

‎dist/plotly-basic.js

+30-15
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
2-
* plotly.js (basic) v1.58.4
3-
* Copyright 2012-2020, Plotly, Inc.
2+
* plotly.js (basic) v1.58.5
3+
* Copyright 2012-2021, Plotly, Inc.
44
* All rights reserved.
55
* Licensed under the MIT license
66
*/
@@ -45453,14 +45453,9 @@ function buildSVGText(containerNode, str) {
4545345453
var href = getQuotedMatch(extra, HREFMATCH);
4545445454

4545545455
if(href) {
45456-
// check safe protocols
45457-
var dummyAnchor = document.createElement('a');
45458-
dummyAnchor.href = href;
45459-
if(PROTOCOLS.indexOf(dummyAnchor.protocol) !== -1) {
45460-
// Decode href to allow both already encoded and not encoded
45461-
// URIs. Without decoding prior encoding, an already encoded
45462-
// URI would be encoded twice producing a semantically different URI.
45463-
nodeSpec.href = encodeURI(decodeURI(href));
45456+
var safeHref = sanitizeHref(href);
45457+
if(safeHref) {
45458+
nodeSpec.href = safeHref;
4546445459
nodeSpec.target = getQuotedMatch(extra, TARGETMATCH) || '_blank';
4546545460
nodeSpec.popup = getQuotedMatch(extra, POPUPMATCH);
4546645461
}
@@ -45475,6 +45470,27 @@ function buildSVGText(containerNode, str) {
4547545470
return hasLink;
4547645471
}
4547745472

45473+
function sanitizeHref(href) {
45474+
var decodedHref = encodeURI(decodeURI(href));
45475+
var dummyAnchor1 = document.createElement('a');
45476+
var dummyAnchor2 = document.createElement('a');
45477+
dummyAnchor1.href = href;
45478+
dummyAnchor2.href = decodedHref;
45479+
45480+
var p1 = dummyAnchor1.protocol;
45481+
var p2 = dummyAnchor2.protocol;
45482+
45483+
// check safe protocols
45484+
if(
45485+
PROTOCOLS.indexOf(p1) !== -1 &&
45486+
PROTOCOLS.indexOf(p2) !== -1
45487+
) {
45488+
return decodedHref;
45489+
} else {
45490+
return '';
45491+
}
45492+
}
45493+
4547845494
/*
4547945495
* sanitizeHTML: port of buildSVGText aimed at providing a clean subset of HTML
4548045496
* @param {string} str: the html string to clean
@@ -45509,10 +45525,9 @@ exports.sanitizeHTML = function sanitizeHTML(str) {
4550945525
var href = getQuotedMatch(extra, HREFMATCH);
4551045526

4551145527
if(href) {
45512-
var dummyAnchor = document.createElement('a');
45513-
dummyAnchor.href = href;
45514-
if(PROTOCOLS.indexOf(dummyAnchor.protocol) !== -1) {
45515-
nodeAttrs.href = encodeURI(decodeURI(href));
45528+
var safeHref = sanitizeHref(href);
45529+
if(safeHref) {
45530+
nodeAttrs.href = safeHref;
4551645531
var target = getQuotedMatch(extra, TARGETMATCH);
4551745532
if(target) {
4551845533
nodeAttrs.target = target;
@@ -82645,7 +82660,7 @@ module.exports = function handleXYDefaults(traceIn, traceOut, layout, coerce) {
8264582660
'use strict';
8264682661

8264782662
// package version injected by `npm run preprocess`
82648-
exports.version = '1.58.4';
82663+
exports.version = '1.58.5';
8264982664

8265082665
},{}]},{},[4])(4)
8265182666
});

‎dist/plotly-basic.min.js

+5-5
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎dist/plotly-cartesian.js

+30-15
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
2-
* plotly.js (cartesian) v1.58.4
3-
* Copyright 2012-2020, Plotly, Inc.
2+
* plotly.js (cartesian) v1.58.5
3+
* Copyright 2012-2021, Plotly, Inc.
44
* All rights reserved.
55
* Licensed under the MIT license
66
*/
@@ -49151,14 +49151,9 @@ function buildSVGText(containerNode, str) {
4915149151
var href = getQuotedMatch(extra, HREFMATCH);
4915249152

4915349153
if(href) {
49154-
// check safe protocols
49155-
var dummyAnchor = document.createElement('a');
49156-
dummyAnchor.href = href;
49157-
if(PROTOCOLS.indexOf(dummyAnchor.protocol) !== -1) {
49158-
// Decode href to allow both already encoded and not encoded
49159-
// URIs. Without decoding prior encoding, an already encoded
49160-
// URI would be encoded twice producing a semantically different URI.
49161-
nodeSpec.href = encodeURI(decodeURI(href));
49154+
var safeHref = sanitizeHref(href);
49155+
if(safeHref) {
49156+
nodeSpec.href = safeHref;
4916249157
nodeSpec.target = getQuotedMatch(extra, TARGETMATCH) || '_blank';
4916349158
nodeSpec.popup = getQuotedMatch(extra, POPUPMATCH);
4916449159
}
@@ -49173,6 +49168,27 @@ function buildSVGText(containerNode, str) {
4917349168
return hasLink;
4917449169
}
4917549170

49171+
function sanitizeHref(href) {
49172+
var decodedHref = encodeURI(decodeURI(href));
49173+
var dummyAnchor1 = document.createElement('a');
49174+
var dummyAnchor2 = document.createElement('a');
49175+
dummyAnchor1.href = href;
49176+
dummyAnchor2.href = decodedHref;
49177+
49178+
var p1 = dummyAnchor1.protocol;
49179+
var p2 = dummyAnchor2.protocol;
49180+
49181+
// check safe protocols
49182+
if(
49183+
PROTOCOLS.indexOf(p1) !== -1 &&
49184+
PROTOCOLS.indexOf(p2) !== -1
49185+
) {
49186+
return decodedHref;
49187+
} else {
49188+
return '';
49189+
}
49190+
}
49191+
4917649192
/*
4917749193
* sanitizeHTML: port of buildSVGText aimed at providing a clean subset of HTML
4917849194
* @param {string} str: the html string to clean
@@ -49207,10 +49223,9 @@ exports.sanitizeHTML = function sanitizeHTML(str) {
4920749223
var href = getQuotedMatch(extra, HREFMATCH);
4920849224

4920949225
if(href) {
49210-
var dummyAnchor = document.createElement('a');
49211-
dummyAnchor.href = href;
49212-
if(PROTOCOLS.indexOf(dummyAnchor.protocol) !== -1) {
49213-
nodeAttrs.href = encodeURI(decodeURI(href));
49226+
var safeHref = sanitizeHref(href);
49227+
if(safeHref) {
49228+
nodeAttrs.href = safeHref;
4921449229
var target = getQuotedMatch(extra, TARGETMATCH);
4921549230
if(target) {
4921649231
nodeAttrs.target = target;
@@ -98103,7 +98118,7 @@ module.exports = function style(gd) {
9810398118
'use strict';
9810498119

9810598120
// package version injected by `npm run preprocess`
98106-
exports.version = '1.58.4';
98121+
exports.version = '1.58.5';
9810798122

9810898123
},{}]},{},[11])(11)
9810998124
});

‎dist/plotly-cartesian.min.js

+3-3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎dist/plotly-finance.js

+30-15
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
2-
* plotly.js (finance) v1.58.4
3-
* Copyright 2012-2020, Plotly, Inc.
2+
* plotly.js (finance) v1.58.5
3+
* Copyright 2012-2021, Plotly, Inc.
44
* All rights reserved.
55
* Licensed under the MIT license
66
*/
@@ -45573,14 +45573,9 @@ function buildSVGText(containerNode, str) {
4557345573
var href = getQuotedMatch(extra, HREFMATCH);
4557445574

4557545575
if(href) {
45576-
// check safe protocols
45577-
var dummyAnchor = document.createElement('a');
45578-
dummyAnchor.href = href;
45579-
if(PROTOCOLS.indexOf(dummyAnchor.protocol) !== -1) {
45580-
// Decode href to allow both already encoded and not encoded
45581-
// URIs. Without decoding prior encoding, an already encoded
45582-
// URI would be encoded twice producing a semantically different URI.
45583-
nodeSpec.href = encodeURI(decodeURI(href));
45576+
var safeHref = sanitizeHref(href);
45577+
if(safeHref) {
45578+
nodeSpec.href = safeHref;
4558445579
nodeSpec.target = getQuotedMatch(extra, TARGETMATCH) || '_blank';
4558545580
nodeSpec.popup = getQuotedMatch(extra, POPUPMATCH);
4558645581
}
@@ -45595,6 +45590,27 @@ function buildSVGText(containerNode, str) {
4559545590
return hasLink;
4559645591
}
4559745592

45593+
function sanitizeHref(href) {
45594+
var decodedHref = encodeURI(decodeURI(href));
45595+
var dummyAnchor1 = document.createElement('a');
45596+
var dummyAnchor2 = document.createElement('a');
45597+
dummyAnchor1.href = href;
45598+
dummyAnchor2.href = decodedHref;
45599+
45600+
var p1 = dummyAnchor1.protocol;
45601+
var p2 = dummyAnchor2.protocol;
45602+
45603+
// check safe protocols
45604+
if(
45605+
PROTOCOLS.indexOf(p1) !== -1 &&
45606+
PROTOCOLS.indexOf(p2) !== -1
45607+
) {
45608+
return decodedHref;
45609+
} else {
45610+
return '';
45611+
}
45612+
}
45613+
4559845614
/*
4559945615
* sanitizeHTML: port of buildSVGText aimed at providing a clean subset of HTML
4560045616
* @param {string} str: the html string to clean
@@ -45629,10 +45645,9 @@ exports.sanitizeHTML = function sanitizeHTML(str) {
4562945645
var href = getQuotedMatch(extra, HREFMATCH);
4563045646

4563145647
if(href) {
45632-
var dummyAnchor = document.createElement('a');
45633-
dummyAnchor.href = href;
45634-
if(PROTOCOLS.indexOf(dummyAnchor.protocol) !== -1) {
45635-
nodeAttrs.href = encodeURI(decodeURI(href));
45648+
var safeHref = sanitizeHref(href);
45649+
if(safeHref) {
45650+
nodeAttrs.href = safeHref;
4563645651
var target = getQuotedMatch(extra, TARGETMATCH);
4563745652
if(target) {
4563845653
nodeAttrs.target = target;
@@ -90235,7 +90250,7 @@ module.exports = {
9023590250
'use strict';
9023690251

9023790252
// package version injected by `npm run preprocess`
90238-
exports.version = '1.58.4';
90253+
exports.version = '1.58.5';
9023990254

9024090255
},{}]},{},[8])(8)
9024190256
});

‎dist/plotly-finance.min.js

+3-3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎dist/plotly-geo-assets.js

+3-3
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)