@eshal-bot/chat-widget 0.1.115 → 0.1.117

package/dist/chat-widget-markdown-chunk.js

@@ -88003,6 +88003,23 @@
     return t;
   }
 
+  /**
+   * EV-2850 (WAPT) - the agent's `eshal-ui`/`eshal-chart` fence output can be
+   * influenced by the end user's own message or by prompt-injection planted in
+   * a knowledge-base document. A2uiBlock renders `href`/`src` values straight
+   * from that JSON with no filtering - a `javascript:` action URL renders as a
+   * legitimate-looking button that executes attacker JS in the visitor's page
+   * when clicked (an authenticated victim's session cookie, DOM, etc. are all
+   * in scope; no account needed to trigger it).
+   *
+   * Every `href`/`src` sink in A2uiBlock must go through this first. Only
+   * absolute http(s) URLs pass; anything else (javascript:, data:, vbscript:,
+   * a bare relative path, non-string) is dropped rather than rendered.
+   */
+  function safeUrl(u) {
+    return typeof u === 'string' && /^https?:\/\//i.test(u) ? u : undefined;
+  }
+
   function A2uiBlock(_ref) {
     let {
       spec,
@@ -88669,8 +88686,8 @@
             display: 'flex',
             flexDirection: 'column'
           },
-          children: [item.image && /*#__PURE__*/jsxRuntimeExports.jsx("img", {
-            src: item.image,
+          children: [safeUrl(item.image) && /*#__PURE__*/jsxRuntimeExports.jsx("img", {
+            src: safeUrl(item.image),
             alt: item.name || '',
             referrerPolicy: "no-referrer",
             onError: e => {
@@ -88787,8 +88804,8 @@
             fontWeight: 700,
             fontSize: 16
           },
-          children: spec.avatar ? /*#__PURE__*/jsxRuntimeExports.jsx("img", {
-            src: spec.avatar,
+          children: safeUrl(spec.avatar) ? /*#__PURE__*/jsxRuntimeExports.jsx("img", {
+            src: safeUrl(spec.avatar),
             alt: spec.name || '',
             referrerPolicy: "no-referrer",
             onError: e => {
@@ -88864,9 +88881,10 @@
         },
         children: actions.map((a, i) => {
           const primary = a.variant !== 'secondary';
-          if (a.url) {
+          const url = safeUrl(a.url);
+          if (url) {
             return /*#__PURE__*/jsxRuntimeExports.jsx("a", {
-              href: a.url,
+              href: url,
               target: "_blank",
               rel: "noopener noreferrer",
               style: secondaryButtonStyle(isDark, false),
@@ -89231,7 +89249,7 @@
             background: isDark ? '#111827' : '#f9fafb'
           },
           children: [/*#__PURE__*/jsxRuntimeExports.jsx("img", {
-            src: img.url,
+            src: safeUrl(img.url),
             alt: img.caption || "Image ".concat(i + 1),
             referrerPolicy: "no-referrer",
             onError: e => {