@rlse/widget 0.1.4 → 0.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -1,6 +1,6 @@
1
1
  # @rlse/widget
2
2
 
3
- React component for embedding [rlse.dev](https://rlse.dev) release notes directly in your application.
3
+ React component for embedding [![](https://www.google.com/s2/favicons?domain=rlse.dev&sz=16) rlse.dev](https://rlse.dev) release notes directly in your application.
4
4
 
5
5
  [![npm](https://img.shields.io/npm/v/@rlse/widget)](https://www.npmjs.com/package/@rlse/widget)
6
6
  [![Socket Badge](https://badge.socket.dev/npm/package/@rlse/widget/latest)](https://socket.dev/npm/package/@rlse/widget)
@@ -24,7 +24,7 @@ function simpleMarkdownToHtml(markdown) {
24
24
  // Helper to sanitize URLs - only allow safe protocols
25
25
  const isSafeUrl = (url) => {
26
26
  try {
27
- const parsed = new URL(url, 'http://example.com');
27
+ const parsed = new URL(url);
28
28
  const protocol = parsed.protocol.replace(':', '');
29
29
  return ['http', 'https', 'mailto', 'tel'].includes(protocol);
30
30
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@rlse/widget",
3
- "version": "0.1.4",
3
+ "version": "0.1.5",
4
4
  "description": "React release notes widget for rlse.dev",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",