@rebuy/rebuy 2.33.0-rc.8 → 2.33.0

package/dist/server/composeOffer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"composeOffer.d.ts","sourceRoot":"","sources":["../../src/server/composeOffer.ts"],"names":[],"mappings":"AAAA,OAAO,EAMH,KAAK,UAAU,EASlB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AA6ErD;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,GAAI,OAAO,cAAc,EAAE,OAAO,aAAa,KAAG,UAAU,GAAG,SAwF3F,CAAC"}
+{"version":3,"file":"composeOffer.d.ts","sourceRoot":"","sources":["../../src/server/composeOffer.ts"],"names":[],"mappings":"AAAA,OAAO,EAMH,KAAK,UAAU,EASlB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AA8ErD;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,GAAI,OAAO,cAAc,EAAE,OAAO,aAAa,KAAG,UAAU,GAAG,SA8F3F,CAAC"}

package/dist/server/index.js

@@ -3761,9 +3761,15 @@ var composeOfferCard = (offer, input) => {
           sectionType: SectionType.layout
         },
         /**
-         * Ad-unit Privacy Policy footer (compliance); a valid href is required for the Tiptap link mark.
-         * Its own end-aligned layout packs a fit-content paragraph right; the paragraph's own
-         * `textAlign: end` covers the full-width case — together they right-align on every host.
+         * Ad-unit Privacy Policy footer (compliance). Its own end-aligned layout packs a fit-content
+         * paragraph right; the paragraph's own `textAlign: end` covers the full-width case — together
+         * they right-align on every host. The link mark rides ONLY an {@link isValidHref}-safe href:
+         * `privacyPolicyUrl` is merchant-typed and only length-checked at the request boundary, an
+         * unsafe href must cost the LINK, never the card (the same URL feeds every offer, so a schema
+         * rejection here would silently drop the whole batch), and `isValidHref` also blocks the
+         * `javascript:`-style schemes that `z.url()` alone would let through. It accepts strictly less
+         * than the TiptapText href union (same token/root-relative regexes + a scheme allowlist), so a
+         * gated href can never fail the parse.
          */
         ...input.privacyPolicyUrl ? [
           {
@@ -3773,7 +3779,7 @@ var composeOfferCard = (offer, input) => {
                 align: "end",
                 color: TextColorName.subdued,
                 fontSize: "extraSmall",
-                href: input.privacyPolicyUrl
+                ...isValidHref(input.privacyPolicyUrl) && { href: input.privacyPolicyUrl }
               })
             ],
             sectionType: SectionType.layout