@mcp-use/client 2.4.5-canary.1 → 2.4.6-canary.0

package/dist/auth/url.d.ts

@@ -3,11 +3,10 @@
  *
  * Sanitizes URLs to prevent security issues by:
  * - Restricting to http/https protocols only
- * - Encoding URL components properly
- * - Validating hostnames
+ * - Validating URL structure using the WHATWG URL parser
  */
 /**
- * Sanitizes a URL string by encoding all components and validating the protocol.
+ * Sanitizes a URL string by validating the protocol and returning its normalized href.
  *
  * @param raw - The raw URL string to sanitize
  * @returns The sanitized URL as a string

package/dist/auth/url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/auth/url.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA+B/C"}
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/auth/url.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAa/C"}

package/dist/index-browser.js

@@ -128,7 +128,7 @@ var Logger = class {
 var logger = Logger.get();
 
 // src/utils/version.ts
-var VERSION = "2.4.5-canary.1";
+var VERSION = "2.4.6-canary.0";
 function getPackageVersion() {
   return VERSION;
 }
@@ -822,27 +822,17 @@ import { validateClientMetadataUrl } from "@modelcontextprotocol/client";
 
 // src/auth/url.ts
 function sanitizeUrl(raw) {
-  const abort = () => {
-    throw new Error(`Invalid url to pass to open(): ${raw}`);
-  };
   let url;
   try {
     url = new URL(raw);
-  } catch (_) {
-    abort();
-  }
-  if (url.protocol !== "https:" && url.protocol !== "http:") abort();
-  if (url.hostname !== encodeURIComponent(url.hostname)) abort();
-  if (url.username) url.username = encodeURIComponent(url.username);
-  if (url.password) url.password = encodeURIComponent(url.password);
-  url.pathname = url.pathname.slice(0, 1) + encodeURIComponent(url.pathname.slice(1)).replace(/%2f/gi, "/");
-  url.search = url.search.slice(0, 1) + Array.from(url.searchParams.entries()).map(sanitizeParam).join("&");
-  url.hash = url.hash.slice(0, 1) + encodeURIComponent(url.hash.slice(1));
+  } catch {
+    throw new Error(`Invalid url to pass to open(): ${raw}`);
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new Error(`Invalid url to pass to open(): ${raw}`);
+  }
   return url.href;
 }
-function sanitizeParam([k, v]) {
-  return `${encodeURIComponent(k)}${v.length > 0 ? `=${encodeURIComponent(v)}` : ""}`;
-}
 
 // src/auth/session-store.ts
 var OAuthSessionStore = class _OAuthSessionStore {