zan-choose-dialog - npm Package Compare versions

Comparing version 4.5.4 to 4.5.5

lib/config/feature.js

@@ -12,2 +12,10 @@ 'use strict';
 
+var _get = require('lodash/get');
+
+var _get2 = _interopRequireDefault(_get);
+
+var _isArray = require('lodash/isArray');
+
+var _isArray2 = _interopRequireDefault(_isArray);
+
 var _compatible = require('../compatible');
@@ -21,2 +29,5 @@
 
+var disableNoticeTextMap = {
+  83: '不支持选择顶部导航模版创建的微页面'
+}; // 微页面，别问我为什么叫这个风马牛不相及的名字
 function getConfig(options) {
@@ -26,2 +37,25 @@ var config = options.config;
 
+  var isOldTemplate = function isOldTemplate(data) {
+    var templateId = data.template_id;
+
+    return templateId > 1 && templateId < 19 && templateId !== 17;
+  };
+
+  // 获取disable提示文案
+  var getDisableNoticeText = function getDisableNoticeText(data) {
+    var disableNoticeText = '';
+    var templateId = data.template_id;
+
+
+    var disableTemplateIds = (0, _get2['default'])(options, 'disableTemplateIds');
+    if ((0, _isArray2['default'])(disableTemplateIds) && disableTemplateIds.indexOf(templateId) !== -1) {
+      disableNoticeText = disableNoticeTextMap[templateId];
+    } else if (isOldTemplate(data)) {
+      disableNoticeText = '不支持选择老版编辑器创建的微页面';
+    }
+
+    return disableNoticeText;
+  };
+
+  // 判断是否可选
   var canSelectRow = function canSelectRow(data) {
@@ -40,4 +74,8 @@ // disableH5Only = true 仅在小程序使用的链接，需要走下面的老模版判断
 
-    var isOldTemplate = templateId > 1 && templateId < 19 && templateId !== 17;
-    return !isOldTemplate;
+    // 添加不支持的模板ids
+    var disableTemplateIds = (0, _get2['default'])(options, 'disableTemplateIds');
+    if ((0, _isArray2['default'])(disableTemplateIds) && disableTemplateIds.indexOf(templateId) !== -1) {
+      return false;
+    }
+    return !isOldTemplate(data);
   };
@@ -68,3 +106,3 @@
             { style: { marginTop: 5, color: '#999' } },
-            '\u8BE5\u5FAE\u9875\u9762\u6682\u4E0D\u652F\u6301\u5E94\u7528\u4E8E\u5C0F\u7A0B\u5E8F'
+            getDisableNoticeText(data)
           ) : null
@@ -121,4 +159,3 @@ );
   };
-} // 微页面，别问我为什么叫这个风马牛不相及的名字
-
+}
 module.exports = exports['default'];

package.json

 {
   "name": "zan-choose-dialog",
-  "version": "4.5.4",
+  "version": "4.5.5",
   "description": "这是一个React组件",
@@ -5,0 +5,0 @@ "main": "./lib/index.js",

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

1221830

2.77%

Lines of code

34172

2.63%

Number of low supply chain risk alerts

1

-95.45%

Number of medium supply chain risk alerts

0

-100%

No dependency changes