@accelerated-agency/visual-editor 0.4.7 → 0.4.9

package/dist/vite.cjs

@@ -3235,11 +3235,36 @@ function isIframeDomReady(iframe, doc) {
 
 function parseEditorUrlPayload(rawUrl) {
   if (!rawUrl) return null;
+  function stripVolatileQueryParams(urlObj) {
+    if (!urlObj || !urlObj.searchParams) return urlObj;
+    var keys = [];
+    urlObj.searchParams.forEach(function(_v, k) { keys.push(k); });
+    for (var i = 0; i < keys.length; i++) {
+      var key = String(keys[i] || '');
+      var low = key.toLowerCase();
+      var isVolatile =
+        low.indexOf('__cf') === 0 ||
+        low.indexOf('cf_chl') === 0 ||
+        low.indexOf('_cf') === 0 ||
+        low === 'bm_sv' ||
+        low === '_abck' ||
+        low === 'ak_bmsc' ||
+        low === 'visid_incap' ||
+        low.indexOf('incap_ses') === 0;
+      if (isVolatile) urlObj.searchParams.delete(key);
+    }
+    return urlObj;
+  }
   try {
     var parsed = new URL(String(rawUrl), window.location.href);
     var nestedUrl = parsed.searchParams.get('url');
     var nestedPassword = parsed.searchParams.get('password');
     if (nestedUrl || nestedPassword) {
+      if (nestedUrl) {
+        try {
+          nestedUrl = stripVolatileQueryParams(new URL(String(nestedUrl), window.location.href)).toString();
+        } catch(_) {}
+      }
       return {
         url: nestedUrl || undefined,
         password: nestedPassword || undefined,
@@ -3265,6 +3290,7 @@ function parseEditorUrlPayload(rawUrl) {
         recovered.search = '';
         qp.forEach(function(v, k) { recovered.searchParams.set(k, v); });
         recovered.hash = parsed.hash || '';
+        stripVolatileQueryParams(recovered);
         return {
           url: recovered.toString(),
           password:
@@ -3274,8 +3300,27 @@ function parseEditorUrlPayload(rawUrl) {
         };
       }
     }
+    var fallbackUrl2 = (experimentData && experimentData.pageUrl) ? String(experimentData.pageUrl) : '';
+    if (fallbackUrl2) {
+      try {
+        var targetBase = new URL(fallbackUrl2, window.location.href);
+        if (parsed.origin !== targetBase.origin) {
+          var normalized = new URL(parsed.pathname || '/', targetBase.origin);
+          normalized.search = parsed.search || '';
+          normalized.hash = parsed.hash || '';
+          stripVolatileQueryParams(normalized);
+          return {
+            url: normalized.toString(),
+            password:
+              (experimentData && experimentData.editorPassword)
+                ? String(experimentData.editorPassword)
+                : undefined,
+          };
+        }
+      } catch(_) {}
+    }
     return {
-      url: parsed.toString(),
+      url: stripVolatileQueryParams(parsed).toString(),
       password:
         (experimentData && experimentData.editorPassword)
           ? String(experimentData.editorPassword)
@@ -6501,9 +6546,34 @@ try{
 }catch(_){}
 function getEditorUrlPayload(){
   try{
+    function stripVolatileQueryParams(urlObj){
+      try{
+        if(!urlObj||!urlObj.searchParams) return urlObj;
+        var keys=[];
+        urlObj.searchParams.forEach(function(_v,k){keys.push(k);});
+        for(var i=0;i<keys.length;i++){
+          var key=String(keys[i]||"");
+          var low=key.toLowerCase();
+          var isVolatile=
+            low.indexOf("__cf")===0||
+            low.indexOf("cf_chl")===0||
+            low.indexOf("_cf")===0||
+            low==="bm_sv"||
+            low==="_abck"||
+            low==="ak_bmsc"||
+            low==="visid_incap"||
+            low.indexOf("incap_ses")===0;
+          if(isVolatile) urlObj.searchParams.delete(key);
+        }
+      }catch(_){}
+      return urlObj;
+    }
     var u=new URL(window.location.href);
     var nested=u.searchParams.get("url");
     if(nested){
+      try{
+        nested=stripVolatileQueryParams(new URL(String(nested),window.location.href)).toString();
+      }catch(_){}
       return {url:nested,password:u.searchParams.get("password")||undefined};
     }
     var p=u.pathname||"";
@@ -6521,9 +6591,20 @@ function getEditorUrlPayload(){
       recoveredBase.search="";
       qp.forEach(function(v,k){recoveredBase.searchParams.set(k,v);});
       recoveredBase.hash=u.hash||"";
+      stripVolatileQueryParams(recoveredBase);
       return {url:recoveredBase.toString(),password:u.searchParams.get("password")||undefined};
     }
-    return {url:u.toString(),password:u.searchParams.get("password")||undefined};
+    try{
+      var targetBase2=new URL(TARGET_PAGE_URL,window.location.href);
+      if(u.origin!==targetBase2.origin){
+        var normalized2=new URL((u.pathname||"/"),targetBase2.origin);
+        normalized2.search=u.search||"";
+        normalized2.hash=u.hash||"";
+        stripVolatileQueryParams(normalized2);
+        return {url:normalized2.toString(),password:u.searchParams.get("password")||undefined};
+      }
+    }catch(_){}
+    return {url:stripVolatileQueryParams(u).toString(),password:u.searchParams.get("password")||undefined};
   }catch(_){
     return null;
   }

package/dist/vite.js

@@ -3227,11 +3227,36 @@ function isIframeDomReady(iframe, doc) {
 
 function parseEditorUrlPayload(rawUrl) {
   if (!rawUrl) return null;
+  function stripVolatileQueryParams(urlObj) {
+    if (!urlObj || !urlObj.searchParams) return urlObj;
+    var keys = [];
+    urlObj.searchParams.forEach(function(_v, k) { keys.push(k); });
+    for (var i = 0; i < keys.length; i++) {
+      var key = String(keys[i] || '');
+      var low = key.toLowerCase();
+      var isVolatile =
+        low.indexOf('__cf') === 0 ||
+        low.indexOf('cf_chl') === 0 ||
+        low.indexOf('_cf') === 0 ||
+        low === 'bm_sv' ||
+        low === '_abck' ||
+        low === 'ak_bmsc' ||
+        low === 'visid_incap' ||
+        low.indexOf('incap_ses') === 0;
+      if (isVolatile) urlObj.searchParams.delete(key);
+    }
+    return urlObj;
+  }
   try {
     var parsed = new URL(String(rawUrl), window.location.href);
     var nestedUrl = parsed.searchParams.get('url');
     var nestedPassword = parsed.searchParams.get('password');
     if (nestedUrl || nestedPassword) {
+      if (nestedUrl) {
+        try {
+          nestedUrl = stripVolatileQueryParams(new URL(String(nestedUrl), window.location.href)).toString();
+        } catch(_) {}
+      }
       return {
         url: nestedUrl || undefined,
         password: nestedPassword || undefined,
@@ -3257,6 +3282,7 @@ function parseEditorUrlPayload(rawUrl) {
         recovered.search = '';
         qp.forEach(function(v, k) { recovered.searchParams.set(k, v); });
         recovered.hash = parsed.hash || '';
+        stripVolatileQueryParams(recovered);
         return {
           url: recovered.toString(),
           password:
@@ -3266,8 +3292,27 @@ function parseEditorUrlPayload(rawUrl) {
         };
       }
     }
+    var fallbackUrl2 = (experimentData && experimentData.pageUrl) ? String(experimentData.pageUrl) : '';
+    if (fallbackUrl2) {
+      try {
+        var targetBase = new URL(fallbackUrl2, window.location.href);
+        if (parsed.origin !== targetBase.origin) {
+          var normalized = new URL(parsed.pathname || '/', targetBase.origin);
+          normalized.search = parsed.search || '';
+          normalized.hash = parsed.hash || '';
+          stripVolatileQueryParams(normalized);
+          return {
+            url: normalized.toString(),
+            password:
+              (experimentData && experimentData.editorPassword)
+                ? String(experimentData.editorPassword)
+                : undefined,
+          };
+        }
+      } catch(_) {}
+    }
     return {
-      url: parsed.toString(),
+      url: stripVolatileQueryParams(parsed).toString(),
       password:
         (experimentData && experimentData.editorPassword)
           ? String(experimentData.editorPassword)
@@ -6493,9 +6538,34 @@ try{
 }catch(_){}
 function getEditorUrlPayload(){
   try{
+    function stripVolatileQueryParams(urlObj){
+      try{
+        if(!urlObj||!urlObj.searchParams) return urlObj;
+        var keys=[];
+        urlObj.searchParams.forEach(function(_v,k){keys.push(k);});
+        for(var i=0;i<keys.length;i++){
+          var key=String(keys[i]||"");
+          var low=key.toLowerCase();
+          var isVolatile=
+            low.indexOf("__cf")===0||
+            low.indexOf("cf_chl")===0||
+            low.indexOf("_cf")===0||
+            low==="bm_sv"||
+            low==="_abck"||
+            low==="ak_bmsc"||
+            low==="visid_incap"||
+            low.indexOf("incap_ses")===0;
+          if(isVolatile) urlObj.searchParams.delete(key);
+        }
+      }catch(_){}
+      return urlObj;
+    }
     var u=new URL(window.location.href);
     var nested=u.searchParams.get("url");
     if(nested){
+      try{
+        nested=stripVolatileQueryParams(new URL(String(nested),window.location.href)).toString();
+      }catch(_){}
       return {url:nested,password:u.searchParams.get("password")||undefined};
     }
     var p=u.pathname||"";
@@ -6513,9 +6583,20 @@ function getEditorUrlPayload(){
       recoveredBase.search="";
       qp.forEach(function(v,k){recoveredBase.searchParams.set(k,v);});
       recoveredBase.hash=u.hash||"";
+      stripVolatileQueryParams(recoveredBase);
       return {url:recoveredBase.toString(),password:u.searchParams.get("password")||undefined};
     }
-    return {url:u.toString(),password:u.searchParams.get("password")||undefined};
+    try{
+      var targetBase2=new URL(TARGET_PAGE_URL,window.location.href);
+      if(u.origin!==targetBase2.origin){
+        var normalized2=new URL((u.pathname||"/"),targetBase2.origin);
+        normalized2.search=u.search||"";
+        normalized2.hash=u.hash||"";
+        stripVolatileQueryParams(normalized2);
+        return {url:normalized2.toString(),password:u.searchParams.get("password")||undefined};
+      }
+    }catch(_){}
+    return {url:stripVolatileQueryParams(u).toString(),password:u.searchParams.get("password")||undefined};
   }catch(_){
     return null;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@accelerated-agency/visual-editor",
-  "version": "0.4.7",
+  "version": "0.4.9",
   "private": false,
   "description": "Conversion visual editor as a reusable React package",
   "type": "module",