Co-authored-by: NAdrieanKhisbe <adriean.khisbe@live.fr>

fixes #5181

* application/json
* application/xml
* application/x-www-form-urlencoded

* Set requestBodyValue values to be an immutable Map, as "value". Previously stored as a normal String.
* This enables adding "errors" to the Map, for validation use

* note: getOAS3RequiredRequestBodyContentType requires state.spec,
* which is not available to state.oas3

This reverts commit 1b6cb7d1.

This reverts commit b9b32c9c.

Refs #6203 #5830

swagger-client in versions =3.10.9 exports it's build artifacts in multiple ways.
One artifact is exposed as ES5 compatible code with ES6 imports.
We use this fact to utilize webpack tree shaking algorithm.
This commit also updates swagger-client to v3.10.0
and decreases bundle size for around 10%.

Import of helpers from swagger-client worked because of the fact
that commonjs exports are basically an objects that can be destructured.
Whenever swagger-client switches to ES6 imports as primary mechanism
of webpack consuptions imports like that will fail. This change makes
sure that import mechanism is both compatible with ES6 and commonjs
import systems.

Along with that rename default import of swagger-client
to more appropriate SwaggerClient.

Avoid mapping Immutable.Map as React children.
Co-authored-by: NVladimir Gorej <vladimir.gorej@gmail.com>

Ref https://github.com/immutable-js/immutable-js/issues/667

Ref https://github.com/immutable-js/immutable-js/issues/667

Refs #6082

* use curlify flag isMultipartFormDataRequest
* curlify test updated
Co-authored-by: NVladimir Gorej <vladimir.gorej@gmail.com>

* directly load data:image/svg+xml
* current webpack config only allows inline file via jsx

On server-side execution `dompurify` exports factory function instead of
a purifier instance. Because of this, server-side code that imports
SwaggerUI (e.g. via `swagger-ui-react`) fails, since `DomPurify.addHook`
does not exist.

This affects universal rendering apps which share code
between client-side and server-side.

* Move next to download button and match styling
Co-authored-by: NAldrin Abastillas <AAbastillas@rcanalytics.com>
Co-authored-by: NTim Lai <timothy.lai@gmail.com>

This commit changes markdown sanitization behaviour in following way:

class, style and data-* attributes are removed by default. These attributes
open possible vulnerability vectors to attackers.

The original behavior of sanitizer (before this commit) can be enabled by *useUnsafeMarkdown* configuration option.
Use this configuration option with caution and only in cases when you know
what you're doing.

* Replace Base64 encoded SVGs with unencoded version. Replace partially URL encoded SVGs with unencoded version, removing extraneous LF character

* fix: convert propStyle to propClass

Co-authored-by: NTim Lai <timothy.lai@gmail.com>

* disabled on string values: "127.0.0.1", "localhost", "none"

* improvement: oauth "scopes" init parameter

* improvement: add "select all" and "select none" to oauth scopes popup

Refs: #6050

* fix: flaky bugs/4641 test

* fix: apply isFunc check for security.getIn

* Add empty data param to cURL if no request body was given

Some middleware applications do not allow POST requests without a content-length header. By adding a empty data parameter to the curl command, the content-length header will be set by curl. Besides this it is more obvious to the user that no request body is sent.

* use double quotes like the rest of the curl command

Ref: #6033

* 'createObjWithHashedKeys' validation consistency with isFunction
* 'createObjWithHashedKeys' additional jsdoc example

oas3 - files
oas2 - file

ft: utils.createObjWithHashedKeys
ft: curlify.extractKey
test: curlify with array representation

bug: JsonSchema components should validate schema properties exists
  - schema
  - type
  - format
  - enum
bug: fix a debounce error in JsonSchema_string if value is null
ft: new simplified JsonSchemaArrayItemText component
test: use immutableJS for `json-schema-form` test
test: add dev scripts to run `cypress open`
test: new cypress `schema-form` tests

This is a force-pushed squash of two PR merges (#5919, #5940) that were
formerly present on master as individual commits.
Co-Authored-By: Nkyle shockey <kyleshockey@gmail.com>