add inline js options and upgrade less version

package.json

@@ -20,7 +20,7 @@
     "test.watch": "jest --watch"
   },
   "dependencies": {
-    "less": "^3.9.0"
+    "less": "^3.10.0"
   },
   "peerDependencies": {
     "@stencil/core": "^1.0.2"

readme.md

@@ -65,6 +65,22 @@ exports.config = {
 
 Note that each of these files are always added to each component, so in most cases they shouldn't contain CSS because it'll get duplicated in each component. Instead, `injectGlobalPaths` should only be used for Less variables, mixins and functions, but not contain any CSS.
 
+### Enable Inline JavaScript
+
+False by default starting in Less.js v3.0.0. Enables evaluation of JavaScript inline in .less files. This created a security problem for some developers who didn't expect user input for style sheets to have executable code.
+
+```js
+exports.config = {
+  plugins: [
+    less({
+      javascriptEnabled: true
+    })
+  ]
+};
+```
+
+
+
 ## Related
 
 * [Less](https://www.npmjs.com/package/less)

src/declarations.ts

@@ -3,4 +3,5 @@ export * from '@stencil/core/internal';
 export interface PluginOptions {
   plugins?: Less.Plugin[];
   injectGlobalPaths?: string[];
+  javascriptEnabled?: boolean;
 }

src/index.ts

@@ -29,6 +29,7 @@ export function less(opts: d.PluginOptions = {}): d.Plugin {
 
         render(renderOpts.data, {
           plugins: renderOpts.plugins,
+          javascriptEnabled: renderOpts.javascriptEnabled,
           filename: fileName
         }, (err: any, lessResult: any) => {
           if (err) {

src/util.ts

@@ -7,7 +7,7 @@ export function usePlugin(fileName: string) {
 }
 
 
-export function getRenderOptions(opts: d.PluginOptions, sourceText: string, context: d.PluginCtx): { data: string; plugins: Less.Plugin[] } {
+export function getRenderOptions(opts: d.PluginOptions, sourceText: string, context: d.PluginCtx): { data: string; javascriptEnabled: boolean; plugins: Less.Plugin[] } {
   const injectGlobalPaths = Array.isArray(opts.injectGlobalPaths) ? opts.injectGlobalPaths.slice() : [];
 
   let injectText = '';
@@ -26,6 +26,7 @@ export function getRenderOptions(opts: d.PluginOptions, sourceText: string, cont
 
   return {
     data: `${injectText}${sourceText}`,
+    javascriptEnabled: opts.javascriptEnabled || false,
     plugins: opts.plugins || []
   };
 }

test/utils.spec.ts

@@ -43,6 +43,13 @@ describe('getRenderOptions', () => {
     expect(output.data).toBe(sourceText);
   });
 
+  it('should enabled inline javaScript', ()=>{
+    const input: d.PluginOptions = {
+      javascriptEnabled: true
+    };
+    const output = util.getRenderOptions(input, sourceText,context);
+    expect(output.javascriptEnabled).toBe(true);
+  })
 });