@drawbridge/drawbridge-utils 0.0.72 → 0.0.74

package/dist/sanitize.cjs

@@ -31,6 +31,7 @@ var sanitize_exports = {};
 __export(sanitize_exports, {
   sanitizeDomain: () => sanitizeDomain,
   sanitizeEmail: () => sanitizeEmail,
+  sanitizeHttps: () => sanitizeHttps,
   sanitizeQueries: () => sanitizeQueries,
   sanitizeString: () => sanitizeString,
   sanitizeUrl: () => sanitizeUrl
@@ -82,9 +83,13 @@ var sanitizeDomain = (value, pattern) => {
   }
   return cleaned;
 };
+var sanitizeHttps = (val) => {
+  const value = val == null ? void 0 : val.replace(/^(https?:\/\/)+/i, "");
+  return value ? "https://" + value : "";
+};
 var sanitizeUrl = (url) => {
-  var _a, _b;
-  return (_b = (_a = url == null ? void 0 : url.replace(/^http:\/\//, "https://")) == null ? void 0 : _a.replace(/^https:\/\/www\./, "https://")) == null ? void 0 : _b.replace(/\/$/, "");
+  if (!url) return url;
+  return sanitizeHttps(url).replace(/^https:\/\/www\./, "https://").replace(/\/$/, "");
 };
 var sanitizeEmail = (raw) => {
   if (typeof raw !== "string") return {
@@ -127,6 +132,7 @@ var sanitizeQueries = (req, res, next) => {
 0 && (module.exports = {
   sanitizeDomain,
   sanitizeEmail,
+  sanitizeHttps,
   sanitizeQueries,
   sanitizeString,
   sanitizeUrl

package/dist/sanitize.d.cts

@@ -89,10 +89,31 @@ const sanitizeDomain = ( value, pattern ) => {
 
 };
 
-const sanitizeUrl = ( url ) => url
-	?.replace( /^http:\/\//, 'https://' )
-	?.replace( /^https:\/\/www\./, 'https://' )
-	?.replace( /\/$/, '' );
+// Coerce a value to a canonical https prefix: strips ALL leading http(s)://
+// occurrences (case-insensitive — a doubled prefix from re-submitted input
+// self-heals) then prepends https://. Keystroke-safe, so the same helper
+// backs app-web's InputUrl and server routes that accept submitted urls.
+const sanitizeHttps = ( val ) => {
+
+	const value = val?.replace( /^(https?:\/\/)+/i, '' );
+
+	return value ? 'https://' + value : '';
+
+};
+
+// Full write-path normalizer for finished urls: canonical https prefix
+// (via sanitizeHttps — regex.url validation alone still lets a doubled
+// https://https:// prefix through), then strip www. and any trailing slash.
+// Keystroke-time inputs want sanitizeHttps alone — this one fights typing.
+const sanitizeUrl = ( url ) => {
+
+	if( ! url ) return url;
+
+	return sanitizeHttps( url )
+		.replace( /^https:\/\/www\./, 'https://' )
+		.replace( /\/$/, '' );
+
+};
 
 // Normalize + validate an email address. Trim, lowercase, basic shape
 // check, and reject disposable-domain providers. Returns the normalized
@@ -171,4 +192,4 @@ const sanitizeQueries = ( req, res, next ) => {
 
 };
 
-export { sanitizeDomain, sanitizeEmail, sanitizeQueries, sanitizeString, sanitizeUrl };
+export { sanitizeDomain, sanitizeEmail, sanitizeHttps, sanitizeQueries, sanitizeString, sanitizeUrl };

package/dist/sanitize.d.ts

@@ -89,10 +89,31 @@ const sanitizeDomain = ( value, pattern ) => {
 
 };
 
-const sanitizeUrl = ( url ) => url
-	?.replace( /^http:\/\//, 'https://' )
-	?.replace( /^https:\/\/www\./, 'https://' )
-	?.replace( /\/$/, '' );
+// Coerce a value to a canonical https prefix: strips ALL leading http(s)://
+// occurrences (case-insensitive — a doubled prefix from re-submitted input
+// self-heals) then prepends https://. Keystroke-safe, so the same helper
+// backs app-web's InputUrl and server routes that accept submitted urls.
+const sanitizeHttps = ( val ) => {
+
+	const value = val?.replace( /^(https?:\/\/)+/i, '' );
+
+	return value ? 'https://' + value : '';
+
+};
+
+// Full write-path normalizer for finished urls: canonical https prefix
+// (via sanitizeHttps — regex.url validation alone still lets a doubled
+// https://https:// prefix through), then strip www. and any trailing slash.
+// Keystroke-time inputs want sanitizeHttps alone — this one fights typing.
+const sanitizeUrl = ( url ) => {
+
+	if( ! url ) return url;
+
+	return sanitizeHttps( url )
+		.replace( /^https:\/\/www\./, 'https://' )
+		.replace( /\/$/, '' );
+
+};
 
 // Normalize + validate an email address. Trim, lowercase, basic shape
 // check, and reject disposable-domain providers. Returns the normalized
@@ -171,4 +192,4 @@ const sanitizeQueries = ( req, res, next ) => {
 
 };
 
-export { sanitizeDomain, sanitizeEmail, sanitizeQueries, sanitizeString, sanitizeUrl };
+export { sanitizeDomain, sanitizeEmail, sanitizeHttps, sanitizeQueries, sanitizeString, sanitizeUrl };

package/dist/sanitize.js

@@ -45,9 +45,13 @@ var sanitizeDomain = (value, pattern) => {
   }
   return cleaned;
 };
+var sanitizeHttps = (val) => {
+  const value = val == null ? void 0 : val.replace(/^(https?:\/\/)+/i, "");
+  return value ? "https://" + value : "";
+};
 var sanitizeUrl = (url) => {
-  var _a, _b;
-  return (_b = (_a = url == null ? void 0 : url.replace(/^http:\/\//, "https://")) == null ? void 0 : _a.replace(/^https:\/\/www\./, "https://")) == null ? void 0 : _b.replace(/\/$/, "");
+  if (!url) return url;
+  return sanitizeHttps(url).replace(/^https:\/\/www\./, "https://").replace(/\/$/, "");
 };
 var sanitizeEmail = (raw) => {
   if (typeof raw !== "string") return {
@@ -89,6 +93,7 @@ var sanitizeQueries = (req, res, next) => {
 export {
   sanitizeDomain,
   sanitizeEmail,
+  sanitizeHttps,
   sanitizeQueries,
   sanitizeString,
   sanitizeUrl

package/package.json

@@ -158,5 +158,5 @@
     "build": "tsup && npm publish"
   },
   "types": "dist/index.d.ts",
-  "version": "0.0.72"
+  "version": "0.0.74"
 }