@mintlify/common 1.0.780 → 1.0.782

package/dist/types/AnalyticsEvent.d.ts

@@ -7,7 +7,7 @@ export declare const PAGE_VIEW_EVENT = "docs.content.view";
  * - **noun**: The component or feature being interacted with (e.g., 'expandable', 'search')
  * - **action**: The specific action taken (e.g., 'open', 'click', 'copy')
  */
-export declare const ANALYTICS_EVENTS: readonly ["docs.content.view", "docs.expandable.open", "docs.expandable.close", "docs.accordion.open", "docs.accordion.close", "docs.navitem.click", "docs.navitem.cta_click", "docs.search.query", "docs.search.close", "docs.api_playground.request", "docs.search.result_click", "docs.code_block.copy", "docs.code_block.ask_ai", "docs.feedback.thumbs_up", "docs.feedback.thumbs_down", "docs.footer.powered_by_mintlify_click", "docs.assistant.enter", "docs.assistant.completed", "docs.assistant.shared", "docs.assistant.source_click", "docs.assistant.web_search_click", "docs.assistant.thumbs_up", "docs.assistant.thumbs_down", "docs.assistant.suggestion_click", "docs.assistant.starter_question_clicked", "docs.assistant.maximize_click", "docs.assistant.minimize_click", "docs.assistant.copy_response", "docs.assistant.ask_ai_on_text_selection", "docs.assistant.spam_detected", "docs.context_menu.copy_page", "docs.context_menu.copy_mcp_link", "docs.context_menu.ai_provider_click", "docs.context_menu.install_mcp_server", "docs.context_menu.copy_add_mcp_command", "docs.autopilot.suggestion.created", "docs.autopilot.suggestion.no_suggestion", "mcp.tool_call.search", "docs.content.md.view", "docs.banner.atlas_signup_click", "docs.banner.atlas_share_click", "docs.atlas_content.view"];
+export declare const ANALYTICS_EVENTS: readonly ["docs.content.view", "docs.expandable.open", "docs.expandable.close", "docs.accordion.open", "docs.accordion.close", "docs.navitem.click", "docs.navitem.cta_click", "docs.search.query", "docs.search.close", "docs.api_playground.request", "docs.search.result_click", "docs.code_block.copy", "docs.code_block.ask_ai", "docs.feedback.thumbs_up", "docs.feedback.thumbs_down", "docs.footer.powered_by_mintlify_click", "docs.assistant.enter", "docs.assistant.completed", "docs.assistant.shared", "docs.assistant.source_click", "docs.assistant.web_search_click", "docs.assistant.thumbs_up", "docs.assistant.thumbs_down", "docs.assistant.suggestion_click", "docs.assistant.starter_question_clicked", "docs.assistant.maximize_click", "docs.assistant.minimize_click", "docs.assistant.copy_response", "docs.assistant.ask_ai_on_text_selection", "docs.assistant.spam_detected", "docs.assistant.attachment_upload", "docs.assistant.attachment_rejected", "docs.assistant.attachment_limit_exceeded", "docs.context_menu.copy_page", "docs.context_menu.copy_mcp_link", "docs.context_menu.ai_provider_click", "docs.context_menu.install_mcp_server", "docs.context_menu.copy_add_mcp_command", "docs.autopilot.suggestion.created", "docs.autopilot.suggestion.no_suggestion", "mcp.tool_call.search", "docs.content.md.view", "docs.banner.atlas_signup_click", "docs.banner.atlas_share_click", "docs.atlas_content.view"];
 export type AnalyticsEvent = (typeof ANALYTICS_EVENTS)[number];
 export declare function isAnalyticsEvent(value: string): value is AnalyticsEvent;
 /**

package/dist/types/AnalyticsEvent.js

@@ -38,6 +38,9 @@ export const ANALYTICS_EVENTS = [
     'docs.assistant.copy_response',
     'docs.assistant.ask_ai_on_text_selection',
     'docs.assistant.spam_detected',
+    'docs.assistant.attachment_upload',
+    'docs.assistant.attachment_rejected',
+    'docs.assistant.attachment_limit_exceeded',
     'docs.context_menu.copy_page',
     'docs.context_menu.copy_mcp_link',
     'docs.context_menu.ai_provider_click',

package/dist/validateRedirectUrl.d.ts

@@ -0,0 +1,7 @@
+export interface ValidateRedirectUrlOptions {
+    redirectUrl: string | null | undefined;
+    currentOrigin: string;
+    allowedOrigins?: string[];
+    allowDifferentOrigin?: boolean;
+}
+export declare function validateRedirectUrl(options: ValidateRedirectUrlOptions): string | null | true;

package/dist/validateRedirectUrl.js

@@ -0,0 +1,77 @@
+const dangerousProtocols = ['javascript:', 'data:', 'vbscript:', 'file:', 'about:', 'blob:'];
+function hasDangerousPatterns(str) {
+    const lowerCased = str.toLowerCase();
+    for (const protocol of dangerousProtocols) {
+        if (lowerCased.startsWith(protocol)) {
+            return true;
+        }
+    }
+    if (str.startsWith('//')) {
+        return true;
+    }
+    if (str.includes('\t') || str.includes('\n') || str.includes('\r') || str.includes('\x00')) {
+        return true;
+    }
+    if (str.includes('&#')) {
+        return true;
+    }
+    return false;
+}
+export function validateRedirectUrl(options) {
+    const { redirectUrl, currentOrigin, allowedOrigins, allowDifferentOrigin } = options;
+    if (!redirectUrl) {
+        return true;
+    }
+    if (typeof redirectUrl !== 'string') {
+        return null;
+    }
+    const trimmed = redirectUrl.trim();
+    if (trimmed.length === 0) {
+        return true;
+    }
+    if (hasDangerousPatterns(trimmed)) {
+        return null;
+    }
+    let decoded = trimmed;
+    for (let i = 0; i < 3; i++) {
+        try {
+            const nextDecoded = decodeURIComponent(decoded);
+            if (nextDecoded === decoded) {
+                break;
+            }
+            decoded = nextDecoded;
+            if (hasDangerousPatterns(decoded)) {
+                return null;
+            }
+        }
+        catch (_a) {
+            return null;
+        }
+    }
+    if (trimmed.startsWith('/')) {
+        return trimmed;
+    }
+    if (!trimmed.includes('://')) {
+        return trimmed;
+    }
+    try {
+        const url = new URL(trimmed);
+        if (url.protocol !== 'https:') {
+            return null;
+        }
+        if (allowDifferentOrigin) {
+            return trimmed;
+        }
+        const urlOrigin = url.origin;
+        if (urlOrigin === currentOrigin) {
+            return trimmed;
+        }
+        if (allowedOrigins && allowedOrigins.includes(urlOrigin)) {
+            return trimmed;
+        }
+        return null;
+    }
+    catch (_b) {
+        return null;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mintlify/common",
-  "version": "1.0.780",
+  "version": "1.0.782",
   "description": "Commonly shared code within Mintlify",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -124,5 +124,5 @@
     "typescript": "5.5.3",
     "vitest": "2.0.4"
   },
-  "gitHead": "fdb677b1d3e00bc5630076a443585d384b724d1d"
+  "gitHead": "b8bbe7fe6abd35c1966c8f9c32c8f63b99aad83b"
 }