@instructure/platform-sanitize 0.2.2 → 0.3.1

package/dist/index.js

@@ -171,40 +171,42 @@ const d = /* @__PURE__ */ new Set([
   // throw in modern browsers.
   RETURN_TRUSTED_TYPE: !0
 };
-let o = null;
+let i = null;
 function g() {
-  return o || (o = typeof a == "function" ? a(window) : a, o.addHook("afterSanitizeAttributes", (t) => {
+  return i || (i = typeof a == "function" ? a(window) : a, i.addHook("afterSanitizeAttributes", (t) => {
     if (!(t instanceof Element) || !t.hasAttribute("style")) return;
-    const e = t.style, i = [];
+    const e = t.style, o = [];
     for (let r = 0; r < e.length; r++) {
       const n = e.item(r);
-      d.has(n) || i.push(n);
+      d.has(n) || o.push(n);
     }
-    for (const r of i) e.removeProperty(r);
+    for (const r of o) e.removeProperty(r);
     e.length === 0 && t.removeAttribute("style");
-  }), o.addHook("uponSanitizeAttribute", (t, e) => {
+  }), i.addHook("uponSanitizeAttribute", (t, e) => {
     c.has(e.attrName) && l.test(e.attrValue) && (e.keepAttr = !1);
-  }), o.addHook("afterSanitizeAttributes", (t) => {
+  }), i.addHook("afterSanitizeAttributes", (t) => {
     if (!(t instanceof Element) || !t.hasAttribute("srcset")) return;
     (t.getAttribute("srcset") ?? "").split(",").map((r) => r.trim().split(/\s+/)[0]).some((r) => l.test(r)) && t.removeAttribute("srcset");
-  }), o);
+  }), i);
 }
-function b(t) {
+function p(t) {
   if (typeof window > "u")
     throw new Error("sanitizeHtml requires a DOM environment (window is not defined)");
   return g().sanitize(t ?? "", f);
 }
-const m = /* @__PURE__ */ new Set(["http:", "https:", "mailto:", "tel:"]), s = "http://platform-sanitize.invalid/";
-function p(t) {
+const m = /* @__PURE__ */ new Set(["http:", "https:", "mailto:", "tel:"]), s = "http://platform-sanitize.invalid/", u = /^\s*\/\//;
+function h(t) {
   if (!t || !t.trim()) return "about:blank";
+  const e = t.replace(/\\/g, "/");
+  if (u.test(e)) return "about:blank";
   try {
-    const e = new URL(t, s);
-    return m.has(e.protocol) ? e.href.startsWith(s) ? t : e.href : "about:blank";
+    const o = new URL(e, s);
+    return m.has(o.protocol) ? o.href.startsWith(s) ? t : o.href : "about:blank";
   } catch {
     return "about:blank";
   }
 }
 export {
-  b as sanitizeHtml,
-  p as sanitizeUrl
+  p as sanitizeHtml,
+  h as sanitizeUrl
 };

package/dist/sanitizeUrl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitizeUrl.d.ts","sourceRoot":"","sources":["../src/sanitizeUrl.ts"],"names":[],"mappings":"AAiBA,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAYlE"}
+{"version":3,"file":"sanitizeUrl.d.ts","sourceRoot":"","sources":["../src/sanitizeUrl.ts"],"names":[],"mappings":"AAwBA,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAiBlE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@instructure/platform-sanitize",
-  "version": "0.2.2",
+  "version": "0.3.1",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",