@learncard/helpers 1.4.0 → 1.4.1

package/dist/helpers.cjs.development.cjs

@@ -24911,6 +24911,7 @@ __export(index_exports, {
   requiredEnvironmentString: () => requiredEnvironmentString,
   resizeAndChangeQuality: () => resizeAndChangeQuality4,
   resolveStorageReadResult: () => resolveStorageReadResult,
+  sanitizeImageUrl: () => sanitizeImageUrl,
   setBitstringStatusListBit: () => setBitstringStatusListBit,
   stripSdJwtReservedClaims: () => stripSdJwtReservedClaims,
   synthesizeDidJwk: () => synthesizeDidJwk,
@@ -25127,11 +25128,21 @@ var generateSrcSet3 = /* @__PURE__ */ __name((url, resolutions, { fix = false }
 
 // src/images/images.helpers.ts
 var Providers = { filestack: filestack_helpers_exports, unsplash: unsplash_helpers_exports, discord: discord_helpers_exports };
+var isHostnameMatch = /* @__PURE__ */ __name((hostname, target) => {
+  return hostname === target || hostname.endsWith(`.${target}`);
+}, "isHostnameMatch");
 var getProvider = /* @__PURE__ */ __name((url) => {
-  if (url?.includes("cdn.filestackcontent.com")) return "filestack";
-  if (url?.includes("images.unsplash.com")) return "unsplash";
-  if (url?.includes("cdn.discordapp.com")) return "discord";
-  return null;
+  if (!url) return null;
+  try {
+    const normalizedUrl = url.startsWith("//") ? `https:${url}` : url;
+    const { hostname } = new URL(normalizedUrl);
+    if (isHostnameMatch(hostname, "cdn.filestackcontent.com")) return "filestack";
+    if (isHostnameMatch(hostname, "images.unsplash.com")) return "unsplash";
+    if (isHostnameMatch(hostname, "cdn.discordapp.com")) return "discord";
+    return null;
+  } catch {
+    return null;
+  }
 }, "getProvider");
 var changeQuality4 = /* @__PURE__ */ __name((url, quality) => {
   const provider = getProvider(url);
@@ -25162,6 +25173,30 @@ var getUrlsFromSrcSet = /* @__PURE__ */ __name((srcSet) => {
   }, []);
 }, "getUrlsFromSrcSet");
 
+// src/images/sanitize.helpers.ts
+var sanitizeImageUrl = /* @__PURE__ */ __name((url, options = {}) => {
+  if (!url) return void 0;
+  const { allowBlobUrls = false, allowDataUrls = false } = options;
+  try {
+    const parsed = new URL(url);
+    if (parsed.protocol === "https:" || parsed.protocol === "http:") {
+      return parsed.href;
+    }
+    if (allowBlobUrls && parsed.protocol === "blob:") {
+      return parsed.href;
+    }
+    if (allowDataUrls && parsed.protocol === "data:") {
+      if (url.startsWith("data:image/")) {
+        return url;
+      }
+      return void 0;
+    }
+    return void 0;
+  } catch {
+    return void 0;
+  }
+}, "sanitizeImageUrl");
+
 // src/types/index.ts
 var isNotMaybe = /* @__PURE__ */ __name((value) => value !== void 0 && value !== null, "isNotMaybe");
 var filterMaybes = /* @__PURE__ */ __name((array) => array?.filter(isNotMaybe) ?? [], "filterMaybes");
@@ -25896,6 +25931,7 @@ var isAppDidWeb = /* @__PURE__ */ __name((did) => {
   requiredEnvironmentString,
   resizeAndChangeQuality,
   resolveStorageReadResult,
+  sanitizeImageUrl,
   setBitstringStatusListBit,
   stripSdJwtReservedClaims,
   synthesizeDidJwk,