@cyberyozh/text-editor 0.4.0 → 0.5.0

package/dist/editor.mjs

@@ -4297,8 +4297,29 @@ var isSameDomain = (url) => {
     return false;
   }
 };
+var isTrustedDomain = (url, trustedDomains) => {
+  try {
+    const { hostname } = new URL(url);
+    if (typeof window !== "undefined" && hostname === window.location.hostname) {
+      return true;
+    }
+    return trustedDomains.some((trusted) => {
+      const domain2 = trusted.toLowerCase();
+      return hostname === domain2 || hostname.endsWith(`.${domain2}`);
+    });
+  } catch {
+    return false;
+  }
+};
 var LinkExtension = Link.extend({
+  addOptions() {
+    return {
+      ...this.parent?.() ?? {},
+      trustedDomains: []
+    };
+  },
   addAttributes() {
+    const { trustedDomains } = this.options;
     return {
       ...this.parent?.(),
       target: {
@@ -4312,7 +4333,7 @@ var LinkExtension = Link.extend({
         default: null,
         parseHTML: (element) => {
           const href = element.getAttribute("href") ?? "";
-          return isSameDomain(href) ? null : "noopener noreferrer nofollow";
+          return isTrustedDomain(href, trustedDomains) ? null : "noopener noreferrer nofollow";
         }
       }
     };
@@ -4330,15 +4351,20 @@ var LinkExtension = Link.extend({
             protocols,
             defaultProtocol
           })
-        ).filter((link) => this.options.shouldAutoLink?.(link.value) !== false).map((link) => ({ text: link.value, data: { href: link.href }, index: link.start })),
+        ).filter(
+          (link) => this.options.shouldAutoLink?.(link.value) !== false
+        ).map((link) => ({
+          text: link.value,
+          data: { href: link.href },
+          index: link.start
+        })),
         type: this.type,
         getAttributes: (match) => {
           const href = match.data?.href ?? "";
-          const sameDomain = isSameDomain(href);
           return {
             href,
-            target: sameDomain ? "_self" : "_blank",
-            rel: sameDomain ? null : "noopener noreferrer nofollow"
+            target: isSameDomain(href) ? "_self" : "_blank",
+            rel: isTrustedDomain(href, this.options.trustedDomains) ? null : "noopener noreferrer nofollow"
           };
         }
       })
@@ -4353,7 +4379,11 @@ var LinkExtension = Link.extend({
             if (!view.editable) return false;
             const range = getMarkRange(view.state.doc.resolve(pos), this.type);
             if (!range) return false;
-            const selection = TextSelection3.create(view.state.doc, range.from, range.to);
+            const selection = TextSelection3.create(
+              view.state.doc,
+              range.from,
+              range.to
+            );
             view.dispatch(view.state.tr.setSelection(selection));
             return true;
           }
@@ -6069,7 +6099,11 @@ var Commands = Extension.create({
 
 // src/utils/get-shared-extensions.ts
 import StarterKit from "@tiptap/starter-kit";
-import { Details, DetailsContent, DetailsSummary } from "@tiptap/extension-details";
+import {
+  Details,
+  DetailsContent,
+  DetailsSummary
+} from "@tiptap/extension-details";
 import Highlight from "@tiptap/extension-highlight";
 import Subscript from "@tiptap/extension-subscript";
 import Superscript from "@tiptap/extension-superscript";
@@ -6412,14 +6446,14 @@ var TextStyleKit = Extension6.create({
 });
 
 // src/utils/get-shared-extensions.ts
-function getSharedExtensions() {
+function getSharedExtensions(options = {}) {
   return [
     StarterKit.configure({
       codeBlock: false,
       link: false
     }),
     Highlight.configure({ multicolor: true }),
-    LinkExtension,
+    LinkExtension.configure({ trustedDomains: options.trustedDomains ?? [] }),
     Superscript,
     Subscript,
     TextAlign.configure({
@@ -6660,9 +6694,10 @@ function getEditorExtensions(options) {
     isEditable = false,
     getImageById,
     onKatexClick,
-    onFigureClick
+    onFigureClick,
+    trustedDomains
   } = options;
-  const sharedExtensions = getSharedExtensions();
+  const sharedExtensions = getSharedExtensions({ trustedDomains });
   return [
     ...sharedExtensions,
     Callout2,
@@ -7721,7 +7756,8 @@ function TiptapContent({
   isEditable = true,
   isDisabled = false,
   lang,
-  error
+  error,
+  trustedDomains
 }) {
   const [linkDialogContext, setLinkDialogContext] = useState13(null);
   const [katexDialogContext, setKatexDialogContext] = useState13(
@@ -7756,6 +7792,7 @@ function TiptapContent({
         suggestion: createSuggestions(translations2, !!imageHandlers),
         isEditable: isEditable && !disabled,
         getImageById: imageHandlers?.getImage,
+        trustedDomains,
         onKatexClick: (latex, pos) => {
           setKatexDialogContext({ latex, pos });
           openDialogCommand("katex");
@@ -7945,7 +7982,7 @@ import { TableKit as TableKit2 } from "@tiptap/extension-table";
 function isJSONContent(value) {
   return typeof value === "object" && value !== null && "type" in value && typeof value.type === "string";
 }
-function htmlToTiptapContent(content) {
+function htmlToTiptapContent(content, options = {}) {
   if (isJSONContent(content)) {
     return content;
   }
@@ -7961,7 +7998,7 @@ function htmlToTiptapContent(content) {
   if (!content || content.trim() === "") {
     return { type: "doc", content: [{ type: "paragraph" }] };
   }
-  const sharedExtensions = getSharedExtensions();
+  const sharedExtensions = getSharedExtensions(options);
   const extensions = [...sharedExtensions, BaseFigure, TableKit2, BaseCodeBlock];
   try {
     return generateJSON(content, extensions);