@seafile/sdoc-editor 3.0.250 → 3.0.252

package/dist/extension/plugins/embed-link/helper.js

@@ -9,6 +9,7 @@ var _slicedToArray2 = _interopRequireDefault(require("@babel/runtime/helpers/esm
 var _slate = require("@seafile/slate");
 var _slateReact = require("@seafile/slate-react");
 var _slugid = _interopRequireDefault(require("slugid"));
+var _urlUtils = require("../../../utils/url-utils");
 var _constants = require("../../constants");
 var _elementType = require("../../constants/element-type");
 var _core = require("../../core");
@@ -46,7 +47,8 @@ var isInsertEmbedLinkDisabled = exports.isInsertEmbedLinkDisabled = function isI
   return false;
 };
 var getEmbedLinkType = exports.getEmbedLinkType = function getEmbedLinkType(text) {
-  var link = text.trim();
+  var link = (0, _urlUtils.normalizeWebUrl)(text);
+  if (!link) return null;
   try {
     var url = new URL(link);
     var host = url.hostname.toLowerCase();
@@ -66,7 +68,8 @@ var getEmbedLinkType = exports.getEmbedLinkType = function getEmbedLinkType(text
   }
 };
 var normalizeFigmaEmbedLink = exports.normalizeFigmaEmbedLink = function normalizeFigmaEmbedLink(text) {
-  var link = text.trim();
+  var link = (0, _urlUtils.normalizeWebUrl)(text);
+  if (!link) return null;
   try {
     var url = new URL(link);
     var host = url.hostname.toLowerCase();
@@ -88,7 +91,7 @@ var generateEmbedLinkNode = exports.generateEmbedLinkNode = function generateEmb
   var embedLinkNode = {
     id: _slugid["default"].nice(),
     type: _elementType.EMBED_LINK,
-    link: link,
+    link: (0, _urlUtils.normalizeWebUrl)(link),
     link_type: type,
     children: [{
       id: _slugid["default"].nice(),
@@ -100,7 +103,7 @@ var generateEmbedLinkNode = exports.generateEmbedLinkNode = function generateEmb
 var insertEmbedLink = exports.insertEmbedLink = function insertEmbedLink(editor, link, type) {
   var _editor$selection;
   if (isInsertEmbedLinkDisabled(editor)) return;
-  if (editor.selection == null) return;
+  if (editor.selection == null || !(0, _urlUtils.normalizeWebUrl)(link)) return;
   var embedLinkNode = generateEmbedLinkNode(link, type);
   var path = (_editor$selection = editor.selection) === null || _editor$selection === void 0 ? void 0 : _editor$selection.anchor.path;
 

package/dist/extension/plugins/embed-link/render-elem.js

@@ -15,8 +15,8 @@ var _reactI18next = require("react-i18next");
 var _slate = require("@seafile/slate");
 var _slateReact = require("@seafile/slate-react");
 var _classnames = _interopRequireDefault(require("classnames"));
-var _isUrl = _interopRequireDefault(require("is-url"));
 var _useScrollContext = require("../../../hooks/use-scroll-context");
+var _urlUtils = require("../../../utils/url-utils");
 var _core = require("../../core");
 var _utils = require("../../utils");
 var _constants = require("./constants");
@@ -59,13 +59,10 @@ var EmbedLink = function EmbedLink(_ref) {
     setIsResizing = _useState8[1];
   var originalLink = element.link,
     link_type = element.link_type;
-  var link = originalLink;
-  if (link_type === _constants.EMBED_LINK_SOURCE.FIGMA) {
-    link = (0, _helper.normalizeFigmaEmbedLink)(originalLink);
-  }
-  var isValidUrl = (0, _react.useMemo)(function () {
-    return (0, _isUrl["default"])(link);
-  }, [link]);
+  var link = (0, _react.useMemo)(function () {
+    return (0, _urlUtils.normalizeWebUrl)(link_type === _constants.EMBED_LINK_SOURCE.FIGMA ? (0, _helper.normalizeFigmaEmbedLink)(originalLink) : originalLink);
+  }, [originalLink, link_type]);
+  var isValidUrl = Boolean(link);
   var registerEvent = (0, _react.useCallback)(function (eventList) {
     eventList.forEach(function (element) {
       document.addEventListener(element.eventName, element.event);
@@ -147,7 +144,7 @@ var EmbedLink = function EmbedLink(_ref) {
   var handleDoubleClick = function handleDoubleClick(event) {
     event.preventDefault();
     if (!isValidUrl) return;
-    window.open(link, '_blank');
+    window.open(link, '_blank', 'noopener,noreferrer');
     return;
   };
   var handleScroll = (0, _react.useCallback)(function (e) {
@@ -248,7 +245,7 @@ var EmbedLink = function EmbedLink(_ref) {
     onOpen: handleDoubleClick,
     openFullscreen: openFullscreen,
     onDeleteEmbedLink: onDeleteEmbedLink
-  }), isShowZoomOut && (/*#__PURE__*/_reactDom["default"].createPortal(/*#__PURE__*/_react["default"].createElement("div", {
+  }), isShowZoomOut && isValidUrl && (/*#__PURE__*/_reactDom["default"].createPortal(/*#__PURE__*/_react["default"].createElement("div", {
     className: "embed-link-zoom-out-container",
     onClick: function onClick() {
       return setIsShowZoomOut(false);

package/dist/extension/plugins/html/rules/link.js

@@ -7,6 +7,7 @@ Object.defineProperty(exports, "__esModule", {
 exports["default"] = void 0;
 var _objectSpread2 = _interopRequireDefault(require("@babel/runtime/helpers/esm/objectSpread2"));
 var _slugid = _interopRequireDefault(require("slugid"));
+var _urlUtils = require("../../../../utils/url-utils");
 var _constants = require("../../../constants");
 var _linkHelpers = require("../../image/link-helpers");
 var linkRule = function linkRule(element, parseChild) {
@@ -22,14 +23,14 @@ var linkRule = function linkRule(element, parseChild) {
         id: _slugid["default"].nice(),
         text: ''
       };
-      var href = (0, _linkHelpers.normalizeWebUrl)(element.getAttribute('href'));
+      var _href = (0, _urlUtils.normalizeWebUrl)(element.getAttribute('href'));
       return {
         id: _slugid["default"].nice(),
         type: _constants.IMAGE,
         data: (0, _objectSpread2["default"])({
           src: src
-        }, href && {
-          href: href
+        }, _href && {
+          href: _href
         }),
         children: [{
           text: '',
@@ -38,12 +39,12 @@ var linkRule = function linkRule(element, parseChild) {
       };
     }
     if (element.querySelector('img')) {
-      var _href = (0, _linkHelpers.normalizeWebUrl)(element.getAttribute('href'));
+      var _href2 = (0, _urlUtils.normalizeWebUrl)(element.getAttribute('href'));
       return parseChild(element.childNodes).map(function (child) {
-        if (!_href) return child;
+        if (!_href2) return child;
         if (child.type === _constants.IMAGE) return (0, _objectSpread2["default"])((0, _objectSpread2["default"])({}, child), {}, {
           data: (0, _objectSpread2["default"])((0, _objectSpread2["default"])({}, child.data), {}, {
-            href: _href
+            href: _href2
           })
         });
         if (typeof child.text === 'string') {
@@ -51,7 +52,7 @@ var linkRule = function linkRule(element, parseChild) {
           return {
             id: _slugid["default"].nice(),
             type: _constants.LINK,
-            href: _href,
+            href: _href2,
             title: element.getAttribute('title'),
             children: [child]
           };
@@ -63,10 +64,15 @@ var linkRule = function linkRule(element, parseChild) {
       id: _slugid["default"].nice(),
       text: ''
     };
+    var href = (0, _urlUtils.normalizeWebUrl)(element.getAttribute('href'));
+    if (!href) return {
+      id: _slugid["default"].nice(),
+      text: content
+    };
     return {
       id: _slugid["default"].nice(),
       type: _constants.LINK,
-      href: element.getAttribute('href'),
+      href: href,
       title: element.getAttribute('title'),
       children: [{
         id: _slugid["default"].nice(),

package/dist/extension/plugins/image/link-helpers.js

@@ -4,28 +4,25 @@ var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefau
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.normalizeWebUrl = exports.isValidWebUrl = exports.isInternalWebUrl = exports.isCurrentServerUrl = exports.getOnlyImageChild = exports.getImageWikiPageUrl = void 0;
+exports.isInternalWebUrl = exports.isCurrentServerUrl = exports.getOnlyImageChild = exports.getImageWikiPageUrl = void 0;
+Object.defineProperty(exports, "isValidWebUrl", {
+  enumerable: true,
+  get: function get() {
+    return _urlUtils.isValidWebUrl;
+  }
+});
+Object.defineProperty(exports, "normalizeWebUrl", {
+  enumerable: true,
+  get: function get() {
+    return _urlUtils.normalizeWebUrl;
+  }
+});
 var _context = _interopRequireDefault(require("../../../context"));
+var _urlUtils = require("../../../utils/url-utils");
 var _helpers = require("../wiki-link/helpers");
-var normalizeWebUrl = exports.normalizeWebUrl = function normalizeWebUrl() {
-  var value = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : '';
-  if (typeof value !== 'string') return '';
-  var url = value.trim();
-  if (!/^https?:\/\//i.test(url)) return '';
-  try {
-    var parsedUrl = new URL(url);
-    return ['http:', 'https:'].includes(parsedUrl.protocol) && parsedUrl.hostname ? url : '';
-  } catch (error) {
-    return '';
-  }
-};
-var isValidWebUrl = exports.isValidWebUrl = function isValidWebUrl() {
-  var value = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : '';
-  return Boolean(normalizeWebUrl(value));
-};
 var isInternalWebUrl = exports.isInternalWebUrl = function isInternalWebUrl() {
   var value = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : '';
-  var url = normalizeWebUrl(value);
+  var url = (0, _urlUtils.normalizeWebUrl)(value);
   var serviceUrl = _context["default"].getSetting('serviceUrl');
   if (!url || !serviceUrl) return false;
   try {

package/dist/extension/plugins/link/helpers.js

@@ -12,6 +12,7 @@ var _slate = require("@seafile/slate");
 var _slateReact = require("@seafile/slate-react");
 var _slugid = _interopRequireDefault(require("slugid"));
 var _constants = require("../../../constants");
+var _urlUtils = require("../../../utils/url-utils");
 var _constants2 = require("../../constants");
 var _core = require("../../core");
 var isMenuDisabled = exports.isMenuDisabled = function isMenuDisabled(editor, readonly) {
@@ -28,16 +29,13 @@ var isMenuDisabled = exports.isMenuDisabled = function isMenuDisabled(editor, re
   return false; // enable
 };
 var checkLink = exports.checkLink = function checkLink(url) {
-  if (url.indexOf('http') !== 0) {
-    return true;
-  }
-  return false;
+  return !(0, _urlUtils.isValidWebUrl)(url);
 };
 var genLinkNode = exports.genLinkNode = function genLinkNode(url, text, nodeId, pageId) {
   var linkNode = {
     id: _slugid["default"].nice(),
     type: 'link',
-    href: url || '',
+    href: (0, _urlUtils.normalizeWebUrl)(url),
     title: text,
     linked_id: nodeId || '',
     linked_wiki_page_id: pageId || '',
@@ -78,7 +76,7 @@ var insertLink = exports.insertLink = function insertLink(editor, title, url) {
     return;
   }
   if (position === _constants2.INSERT_POSITION.CURRENT && isMenuDisabled(editor)) return;
-  if (!title || !url && !linkedNodeId && !selectedPageId) return;
+  if (!title || !(0, _urlUtils.normalizeWebUrl)(url) && !linkedNodeId && !selectedPageId) return;
   var linkNode = genLinkNode(url, title);
   if (linkedNodeId) {
     linkNode = genLinkNode(url, title, linkedNodeId);
@@ -129,6 +127,9 @@ var insertLink = exports.insertLink = function insertLink(editor, title, url) {
   });
 };
 var updateLink = exports.updateLink = function updateLink(editor, newText, newUrl, linkedNodeId, linkedPageId) {
+  var href = (0, _urlUtils.normalizeWebUrl)(newUrl);
+  if (!href && !linkedNodeId && !linkedPageId) return false;
+
   // Update children
   var linkAbove = (0, _core.getAboveNode)(editor, {
     match: {
@@ -177,10 +178,10 @@ var updateLink = exports.updateLink = function updateLink(editor, newText, newUr
         });
       }
     }
-    if (!linkedNodeId && !linkedPageId && (oldUrl !== newUrl || oldText !== newText)) {
+    if (!linkedNodeId && !linkedPageId && (oldUrl !== href || oldText !== newText)) {
       if (editor.editorType === _constants.WIKI_EDITOR) {
         _slate.Transforms.setNodes(editor, {
-          href: newUrl,
+          href: href,
           title: newText,
           linked_id: '',
           linked_wiki_page_id: ''
@@ -189,7 +190,7 @@ var updateLink = exports.updateLink = function updateLink(editor, newText, newUr
         });
       } else {
         _slate.Transforms.setNodes(editor, {
-          href: newUrl,
+          href: href,
           title: newText,
           linked_id: ''
         }, {

package/dist/extension/plugins/link/hover/index.js

@@ -12,10 +12,10 @@ var _reactDom = require("react-dom");
 var _reactI18next = require("react-i18next");
 var _slate = require("@seafile/slate");
 var _slateReact = require("@seafile/slate-react");
-var _isUrl = _interopRequireDefault(require("is-url"));
 var _toast = _interopRequireDefault(require("../../../../components/toast"));
 var _tooltip = _interopRequireDefault(require("../../../../components/tooltip"));
 var _eventBus = _interopRequireDefault(require("../../../../utils/event-bus"));
+var _urlUtils = require("../../../../utils/url-utils");
 var _helpers = require("../helpers");
 require("./index.css");
 var LinkHover = function LinkHover(_ref) {
@@ -37,15 +37,15 @@ var LinkHover = function LinkHover(_ref) {
     setIsShowTooltip(true);
   }, []);
   var onMouseDown = (0, _react.useCallback)(function (event) {
-    var href = (0, _helpers.getElementHref)(element);
-    if (!(0, _isUrl["default"])(href)) {
+    var href = (0, _urlUtils.normalizeWebUrl)((0, _helpers.getElementHref)(element));
+    if (!href) {
       event.preventDefault();
       _toast["default"].danger(t('The_link_is_invalid'));
       return;
     }
     event.stopPropagation();
     if (!(0, _helpers.isWeChat)()) {
-      window.open(href);
+      window.open(href, '_blank', 'noopener,noreferrer');
     } else {
       // eslint-disable-next-line no-restricted-globals
       location.href = href;

package/dist/extension/plugins/link/plugin.js

@@ -12,10 +12,10 @@ var _slicedToArray2 = _interopRequireDefault(require("@babel/runtime/helpers/esm
 var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/esm/asyncToGenerator"));
 var _slate = require("@seafile/slate");
 var _isHotkey = _interopRequireDefault(require("is-hotkey"));
-var _isUrl = _interopRequireDefault(require("is-url"));
 var _constants = require("../../../constants");
 var _context2 = _interopRequireDefault(require("../../../context"));
 var _eventBus = _interopRequireDefault(require("../../../utils/event-bus"));
+var _urlUtils = require("../../../utils/url-utils");
 var _constants2 = require("../../constants");
 var _core = require("../../core");
 var _utils = require("../../utils");
@@ -44,12 +44,13 @@ var withLink = function withLink(editor) {
   };
   newEditor.insertData = /*#__PURE__*/function () {
     var _ref = (0, _asyncToGenerator2["default"])(/*#__PURE__*/(0, _regenerator2["default"])().m(function _callee(data) {
-      var text, selectedElems, isCodeContext, res, fileInfo, fileName, fileUuid, _fileName, fileParentPath, filePath, repoId, _fileName2, _fileUuid, url, pathname, _context$getSetting, parts, wikiPageId, title, wikiPageList, page, linkedNodeId, _title, params, link, _link, embedLinkType, _link2, _Editor$next, _Editor$next2, focusPath, focusPoint, _t;
+      var pastedText, text, selectedElems, isCodeContext, res, fileInfo, fileName, fileUuid, _fileName, fileParentPath, filePath, repoId, _fileName2, _fileUuid, url, pathname, _context$getSetting, parts, wikiPageId, title, wikiPageList, page, linkedNodeId, _title, params, link, _link, embedLinkType, _link2, _Editor$next, _Editor$next2, focusPath, focusPoint, _t;
       return (0, _regenerator2["default"])().w(function (_context) {
         while (1) switch (_context.p = _context.n) {
           case 0:
             // Paste link content
-            text = data.getData('text/plain');
+            pastedText = data.getData('text/plain');
+            text = (0, _urlUtils.normalizeWebUrl)(pastedText);
             selectedElems = (0, _core.getSelectedElems)(newEditor);
             isCodeContext = selectedElems.some(function (elem) {
               return [_constants2.CODE_BLOCK, _constants2.CODE_LINE].includes(elem === null || elem === void 0 ? void 0 : elem.type);
@@ -60,7 +61,7 @@ var withLink = function withLink(editor) {
             }
             return _context.a(2, insertData(data));
           case 1:
-            if (!((0, _isUrl["default"])(text) && !(0, _utils.isImage)(text))) {
+            if (!(text && !(0, _utils.isImage)(text))) {
               _context.n = 16;
               break;
             }

package/dist/extension/plugins/link/render-elem.js

@@ -1,6 +1,5 @@
 "use strict";
 
-var _interopRequireWildcard = require("@babel/runtime/helpers/interopRequireWildcard")["default"];
 var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault")["default"];
 Object.defineProperty(exports, "__esModule", {
   value: true
@@ -16,13 +15,12 @@ var _react = _interopRequireDefault(require("react"));
 var _reactI18next = require("react-i18next");
 var _slate = require("@seafile/slate");
 var _classnames = _interopRequireDefault(require("classnames"));
-var _isUrl = _interopRequireDefault(require("is-url"));
-var _propTypes = _interopRequireWildcard(require("prop-types"));
 var _toast = _interopRequireDefault(require("../../../components/toast"));
 var _constants = require("../../../constants");
 var _useScrollContext = require("../../../hooks/use-scroll-context");
 var _commonUtils = require("../../../utils/common-utils");
 var _eventBus = _interopRequireDefault(require("../../../utils/event-bus"));
+var _urlUtils = require("../../../utils/url-utils");
 var _InlineBugFixWrapper = _interopRequireDefault(require("../../commons/Inline-bug-fix-wrapper"));
 var _constants2 = require("../../constants");
 var _helpers = require("./helpers");
@@ -86,22 +84,21 @@ var Link = /*#__PURE__*/function (_React$Component) {
     });
     (0, _defineProperty2["default"])(_this, "onLinkClick", function (e) {
       var isModClick = (0, _commonUtils.isMac)() ? e.metaKey : e.ctrlKey;
-      var _this$props$element = _this.props.element,
-        linked_id = _this$props$element.linked_id,
-        linked_wiki_page_id = _this$props$element.linked_wiki_page_id;
-      var href = (0, _helpers.getElementHref)(_propTypes.element);
+      var element = _this.props.element;
+      var linked_id = element.linked_id,
+        linked_wiki_page_id = element.linked_wiki_page_id;
       // mod + click
       if (isModClick && !linked_id && !linked_wiki_page_id) {
-        window.open(href, '_blank', 'noreferrer');
+        _this.onOpenLink(e);
         return;
       }
       // mod + click on linked wiki page
       if (isModClick && linked_wiki_page_id) {
-        var _href = window.location.href;
-        var parts = _href.split('/');
+        var href = window.location.href;
+        var parts = href.split('/');
         parts[parts.length - 2] = linked_wiki_page_id;
-        var newHref = parts.join('/');
-        window.open(newHref, '_blank', 'noreferrer');
+        var newHref = (0, _urlUtils.normalizeWebUrl)(parts.join('/'));
+        if (newHref) window.open(newHref, '_blank', 'noopener,noreferrer');
         return;
       }
       _this.setPosition(e.target);
@@ -122,8 +119,8 @@ var Link = /*#__PURE__*/function (_React$Component) {
       var _this$props = _this.props,
         element = _this$props.element,
         t = _this$props.t;
-      var href = (0, _helpers.getElementHref)(element);
-      if (!(0, _isUrl["default"])(href)) {
+      var href = (0, _urlUtils.normalizeWebUrl)((0, _helpers.getElementHref)(element));
+      if (!href) {
         _toast["default"].danger(t('The_link_is_invalid'));
         return;
       }
@@ -172,15 +169,16 @@ var Link = /*#__PURE__*/function (_React$Component) {
       var className = isShowLinkMenu ? 'seafile-ed-hovermenu-mouseclick' : null;
       var linkText = _slate.Node.string(element);
       if (readonly) {
+        var href = (0, _urlUtils.normalizeWebUrl)((0, _helpers.getElementHref)(element));
         return /*#__PURE__*/_react["default"].createElement("span", Object.assign({
           className: (0, _classnames["default"])(className, 'virtual-link')
-        }, attributes), /*#__PURE__*/_react["default"].createElement("a", {
-          href: (0, _helpers.getElementHref)(element),
+        }, attributes), href ? /*#__PURE__*/_react["default"].createElement("a", {
+          href: href,
           title: linkText,
           onClick: this.onOpenLink,
           target: "_blank",
-          rel: "noreferrer"
-        }, children));
+          rel: "noopener noreferrer"
+        }, children) : children);
       }
       return /*#__PURE__*/_react["default"].createElement(_react["default"].Fragment, null, /*#__PURE__*/_react["default"].createElement("span", Object.assign({
         className: className

package/dist/extension/plugins/table/plugin.js

@@ -11,11 +11,11 @@ var _slicedToArray2 = _interopRequireDefault(require("@babel/runtime/helpers/esm
 var _slate = require("@seafile/slate");
 var _slateReact = require("@seafile/slate-react");
 var _isHotkey = _interopRequireDefault(require("is-hotkey"));
-var _isUrl = _interopRequireDefault(require("is-url"));
 var _constants = require("../../../constants");
 var _helpers = require("../../../node-id/helpers");
 var _eventBus = _interopRequireDefault(require("../../../utils/event-bus"));
 var _objectUtils = _interopRequireDefault(require("../../../utils/object-utils"));
+var _urlUtils = require("../../../utils/url-utils");
 var _constants2 = require("../../constants");
 var _core = require("../../core");
 var _utils = require("../../utils");
@@ -442,7 +442,7 @@ var withTable = function withTable(editor) {
     if (!text) return;
 
     // Keep URL paste behavior consistent with normal text while preserving multi-cell paste behavior.
-    if ((0, _isUrl["default"])(text) && !(0, _utils.isImage)(text) && (0, _helpers2.isInTableSameCell)(newEditor)) {
+    if ((0, _urlUtils.isValidWebUrl)(text) && !(0, _utils.isImage)(text) && (0, _helpers2.isInTableSameCell)(newEditor)) {
       return insertData(data);
     }
     return _slate.Editor.insertText(newEditor, text);

package/dist/extension/plugins/whiteboard/render-elem.js

@@ -14,11 +14,11 @@ var _reactI18next = require("react-i18next");
 var _slate = require("@seafile/slate");
 var _slateReact = require("@seafile/slate-react");
 var _classnames = _interopRequireDefault(require("classnames"));
-var _isUrl = _interopRequireDefault(require("is-url"));
 var _constants = require("../../../constants");
 var _context = _interopRequireDefault(require("../../../context"));
 var _useScrollContext = require("../../../hooks/use-scroll-context");
 var _eventBus = _interopRequireDefault(require("../../../utils/event-bus"));
+var _urlUtils = require("../../../utils/url-utils");
 var _core = require("../../core");
 var _utils = require("../../utils");
 var _hoverMenu = _interopRequireDefault(require("./hover-menu"));
@@ -29,7 +29,7 @@ var Whiteboard = function Whiteboard(_ref) {
   var file_path = element.file_path,
     repo_id = element.repo_id,
     title = element.title,
-    link = element.link;
+    originalLink = element.link;
   var whiteboardRef = (0, _react.useRef)();
   var fullscreenRef = (0, _react.useRef)();
   var scrollRef = (0, _useScrollContext.useScrollContext)();
@@ -48,9 +48,10 @@ var Whiteboard = function Whiteboard(_ref) {
     _useState4 = (0, _slicedToArray2["default"])(_useState3, 2),
     isShowZoomOut = _useState4[0],
     setIsShowZoomOut = _useState4[1];
-  var isValidUrl = (0, _react.useMemo)(function () {
-    return (0, _isUrl["default"])(link);
-  }, [link]);
+  var link = (0, _react.useMemo)(function () {
+    return (0, _urlUtils.normalizeWebUrl)(originalLink);
+  }, [originalLink]);
+  var isValidUrl = Boolean(link);
   (0, _react.useEffect)(function () {
     if (!isValidUrl) return;
     var handleMessage = function handleMessage(event) {
@@ -200,7 +201,7 @@ var Whiteboard = function Whiteboard(_ref) {
     onOpen: handleDoubleClick,
     openFullscreen: openFullscreen,
     onDeleteWhiteboard: onDeleteWhiteboard
-  }), isShowZoomOut && (/*#__PURE__*/_reactDom["default"].createPortal(/*#__PURE__*/_react["default"].createElement("div", {
+  }), isShowZoomOut && isValidUrl && (/*#__PURE__*/_reactDom["default"].createPortal(/*#__PURE__*/_react["default"].createElement("div", {
     className: "whiteboard-zoom-out-container",
     onClick: function onClick() {
       return setIsShowZoomOut(false);

package/dist/extension/toolbar/side-toolbar/index.js

@@ -26,7 +26,8 @@ var _event = require("./event");
 var _helpers2 = require("./helpers");
 var _sideMenu = _interopRequireDefault(require("./side-menu"));
 require("./index.css");
-var HORIZONTAL_DROP_ZONE_WIDTH = 48;
+// Keep the visual drop indicator narrow, but make the invisible hit area easier to reach.
+var HORIZONTAL_DROP_ZONE_WIDTH = 72;
 var getSafeNodeEntry = function getSafeNodeEntry(editor, element) {
   try {
     return (0, _helpers2.getNodeEntry)(editor, element);
@@ -278,6 +279,7 @@ var SideToolbar = function SideToolbar() {
     event.stopPropagation();
     sourceElementRef.current = null;
     isDraggingEditorElementRef.current = true;
+    event.dataTransfer.effectAllowed = 'move';
     // Create the preview container when dragging more than one listNodes
     var noDrag = _slate.Path.equals(editor.selection.focus.path, editor.selection.anchor.path);
     if (showSelectedNodesRef.current && showSelectedNodesRef.current.length > 1 && !noDrag) {
@@ -645,9 +647,8 @@ var SideToolbar = function SideToolbar() {
     isDraggingEditorElementRef.current = false;
   }, [clearAllDragStyles]);
   var handleDragover = (0, _react.useCallback)(function (event) {
-    var _target;
+    var _event$target, _event$target$closest, _target;
     if (!isEditorDrag()) return;
-    event.preventDefault();
     var _getSafeNodeEntry7 = getSafeNodeEntry(editor, sourceElementRef.current),
       _getSafeNodeEntry8 = (0, _slicedToArray2["default"])(_getSafeNodeEntry7, 2),
       sourceNode = _getSafeNodeEntry8[0],
@@ -677,6 +678,11 @@ var SideToolbar = function SideToolbar() {
       clearAllDragStyles();
       return;
     }
+    var eventEditorContainer = (_event$target = event.target) === null || _event$target === void 0 ? void 0 : (_event$target$closest = _event$target.closest) === null || _event$target$closest === void 0 ? void 0 : _event$target$closest.call(_event$target, '.sdoc-article-container');
+    if (eventEditorContainer && eventEditorContainer !== editorContainer) {
+      clearAllDragStyles();
+      return;
+    }
     var containerRect = editorContainer.getBoundingClientRect();
 
     // Current visible area of editor container
@@ -769,6 +775,9 @@ var SideToolbar = function SideToolbar() {
         previousRect = rect;
       });
       if (activeColumn) {
+        event.preventDefault();
+        event.stopPropagation();
+        event.dataTransfer.dropEffect = 'move';
         activeColumn.classList.add("sdoc-dragging-".concat(activeDirection));
         activeDragElRef.current = activeColumn;
         pendingSideDropRef.current = {
@@ -806,11 +815,20 @@ var SideToolbar = function SideToolbar() {
       };
     } else {
       clearAllDragStyles();
+      return;
     }
+    event.preventDefault();
+    event.stopPropagation();
+    event.dataTransfer.dropEffect = 'move';
   }, [clearAllDragStyles, editor, getEditorContainer, isEditorDrag]);
   var handleDragLeave = (0, _react.useCallback)(function (event) {
+    var _pendingSideDropRef$c;
     var editorContainer = event.currentTarget;
     var relatedTarget = event.relatedTarget;
+    var pendingDropElement = (_pendingSideDropRef$c = pendingSideDropRef.current) === null || _pendingSideDropRef$c === void 0 ? void 0 : _pendingSideDropRef$c.element;
+
+    // Preserve a pending move within this editor until drop or dragend.
+    if (pendingDropElement && editorContainer.contains(pendingDropElement)) return;
 
     // Ignore dragleave events from descendants. Some browsers report a null
     // relatedTarget when moving between block elements, so clearing here
@@ -892,20 +910,14 @@ var SideToolbar = function SideToolbar() {
     return true;
   }, [editor]);
   var handleDropCapture = (0, _react.useCallback)(function (event) {
-    if (!isEditorDrag() || !pendingSideDropRef.current) return;
+    if (!isEditorDrag()) return;
 
-    // Stop the normal block drop before mutating Slate. The actual target and
-    // direction were recorded during dragover, so this path does not depend
-    // on the final drop event target or on a final dragover being delivered.
-    event.preventDefault();
-    event.stopPropagation();
-    var handled = handleDrop();
-    if (!handled) {
-      resetDragState();
-      return;
-    }
+    // Recheck the final position and stop the normal block drop for side hits.
+    handleDragover(event);
+    if (!pendingSideDropRef.current) return;
+    handleDrop();
     resetDragState();
-  }, [handleDrop, isEditorDrag, resetDragState]);
+  }, [handleDragover, handleDrop, isEditorDrag, resetDragState]);
   var handleDragEnd = (0, _react.useCallback)(function () {
     // dragend also fires when the user cancels a drag or releases outside the
     // editor. Only a confirmed drop event may mutate the Slate document.
@@ -916,17 +928,18 @@ var SideToolbar = function SideToolbar() {
     var editorContainer = getEditorContainer();
     if (!editorContainer) return undefined;
 
-    // Keep drag events scoped to the current editor container. Capture phase
-    // still lets this handler run before block-level handlers in the editor.
-    editorContainer.addEventListener('dragover', handleDragover, true);
+    // Side hit areas can extend outside the editor container. Accept them at
+    // document level, while the handlers still validate this editor's drag.
+    var dragEventTarget = editorContainer.ownerDocument;
+    dragEventTarget.addEventListener('dragover', handleDragover, true);
     editorContainer.addEventListener('dragend', handleDragEnd, true);
     editorContainer.addEventListener('dragleave', handleDragLeave, true);
-    editorContainer.addEventListener('drop', handleDropCapture, true);
+    dragEventTarget.addEventListener('drop', handleDropCapture, true);
     return function () {
-      editorContainer.removeEventListener('dragover', handleDragover, true);
+      dragEventTarget.removeEventListener('dragover', handleDragover, true);
       editorContainer.removeEventListener('dragend', handleDragEnd, true);
       editorContainer.removeEventListener('dragleave', handleDragLeave, true);
-      editorContainer.removeEventListener('drop', handleDropCapture, true);
+      dragEventTarget.removeEventListener('drop', handleDropCapture, true);
     };
   }, [getEditorContainer, handleDragEnd, handleDragLeave, handleDragover, handleDropCapture]);
   return /*#__PURE__*/_react["default"].createElement(_react["default"].Fragment, null, !_commonUtils.isMobile && /*#__PURE__*/_react["default"].createElement("div", {
@@ -943,7 +956,6 @@ var SideToolbar = function SideToolbar() {
     onMouseDown: onMouseDown,
     draggable: true,
     onDragStart: dragStart,
-    onDragEnd: handleDragEnd,
     className: "sdoc-side-op-icon",
     onClick: onShowSideMenuToggle,
     onMouseEnter: onMouseEnter,

package/dist/extension/utils/index.js

@@ -1,21 +1,23 @@
 "use strict";
 
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault")["default"];
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.onHandleOverflowScroll = exports.isSameDomain = exports.isOverflowPortByDirection = exports.isImage = exports.getMenuPosition = exports.IMAGE_TYPES = void 0;
-var _isUrl = _interopRequireDefault(require("is-url"));
+var _urlUtils = require("../../utils/url-utils");
 var IMAGE_TYPES = exports.IMAGE_TYPES = ['png', 'jpg', 'gif'];
 var isImage = exports.isImage = function isImage(url) {
   if (!url) return false;
-  if (!(0, _isUrl["default"])(url)) return false;
+  if (!(0, _urlUtils.isValidWebUrl)(url)) return false;
   var suffix = url.split('.')[1]; // http://xx/mm/*.png
   if (!suffix) return false;
   return IMAGE_TYPES.includes(suffix.toLowerCase());
 };
 var isSameDomain = exports.isSameDomain = function isSameDomain(currentUrl, targetUrl) {
-  return String(currentUrl).split('/')[2] === String(targetUrl).split('/')[2];
+  var current = (0, _urlUtils.normalizeWebUrl)(currentUrl);
+  var target = (0, _urlUtils.normalizeWebUrl)(targetUrl);
+  if (!current || !target) return false;
+  return new URL(current).origin === new URL(target).origin;
 };
 var isOverflowPortByDirection = exports.isOverflowPortByDirection = function isOverflowPortByDirection(targetDom, direction) {
   var viewWidth = window.innerWidth || document.documentElement.clientWidth;

package/dist/slate-convert/html-to-slate/rules/link.js

@@ -8,6 +8,7 @@ exports["default"] = void 0;
 var _objectSpread2 = _interopRequireDefault(require("@babel/runtime/helpers/esm/objectSpread2"));
 var _slugid = _interopRequireDefault(require("slugid"));
 var _linkHelpers = require("../../../extension/plugins/image/link-helpers");
+var _urlUtils = require("../../../utils/url-utils");
 var _constants = require("../constants");
 var linkRule = function linkRule(element, parseChild) {
   var nodeName = element.nodeName;
@@ -22,14 +23,14 @@ var linkRule = function linkRule(element, parseChild) {
         id: _slugid["default"].nice(),
         text: ''
       };
-      var href = (0, _linkHelpers.normalizeWebUrl)(element.getAttribute('href'));
+      var _href = (0, _urlUtils.normalizeWebUrl)(element.getAttribute('href'));
       return {
         id: _slugid["default"].nice(),
         type: _constants.IMAGE,
         data: (0, _objectSpread2["default"])({
           src: src
-        }, href && {
-          href: href
+        }, _href && {
+          href: _href
         }),
         children: [{
           text: '',
@@ -38,12 +39,12 @@ var linkRule = function linkRule(element, parseChild) {
       };
     }
     if (element.querySelector('img')) {
-      var _href = (0, _linkHelpers.normalizeWebUrl)(element.getAttribute('href'));
+      var _href2 = (0, _urlUtils.normalizeWebUrl)(element.getAttribute('href'));
       return parseChild(element.childNodes).map(function (child) {
-        if (!_href) return child;
+        if (!_href2) return child;
         if (child.type === _constants.IMAGE) return (0, _objectSpread2["default"])((0, _objectSpread2["default"])({}, child), {}, {
           data: (0, _objectSpread2["default"])((0, _objectSpread2["default"])({}, child.data), {}, {
-            href: _href
+            href: _href2
           })
         });
         if (typeof child.text === 'string') {
@@ -51,7 +52,7 @@ var linkRule = function linkRule(element, parseChild) {
           return {
             id: _slugid["default"].nice(),
             type: _constants.LINK,
-            href: _href,
+            href: _href2,
             title: element.getAttribute('title'),
             children: [child]
           };
@@ -63,10 +64,15 @@ var linkRule = function linkRule(element, parseChild) {
       id: _slugid["default"].nice(),
       text: ''
     };
+    var href = (0, _urlUtils.normalizeWebUrl)(element.getAttribute('href'));
+    if (!href) return {
+      id: _slugid["default"].nice(),
+      text: content
+    };
     return {
       id: _slugid["default"].nice(),
       type: _constants.LINK,
-      href: element.getAttribute('href'),
+      href: href,
       title: element.getAttribute('title'),
       children: [{
         id: _slugid["default"].nice(),

package/dist/slate-convert/md-to-slate/transform.js

@@ -11,7 +11,7 @@ var _objectSpread3 = _interopRequireDefault(require("@babel/runtime/helpers/esm/
 var _slugid = _interopRequireDefault(require("slugid"));
 var _elementType = require("../../extension/constants/element-type");
 var _core = require("../../extension/core");
-var _linkHelpers = require("../../extension/plugins/image/link-helpers");
+var _urlUtils = require("../../utils/url-utils");
 var _htmlToSlate = _interopRequireDefault(require("../html-to-slate"));
 var INLINE_KEY_MAP = {
   strong: 'bold',
@@ -52,7 +52,7 @@ var _applyMarkForInlineItem = function applyMarkForInlineItem(result, item) {
       value: ''
     } : children[0];
     if (child.type === _elementType.IMAGE) {
-      var href = (0, _linkHelpers.normalizeWebUrl)(item.url);
+      var href = (0, _urlUtils.normalizeWebUrl)(item.url);
       var image = {
         id: _slugid["default"].nice(),
         type: _elementType.IMAGE,

package/dist/slate-convert/slate-to-md/transform.js

@@ -8,8 +8,8 @@ exports.formatSlateToMd = void 0;
 var _createForOfIteratorHelper2 = _interopRequireDefault(require("@babel/runtime/helpers/esm/createForOfIteratorHelper"));
 var _objectSpread2 = _interopRequireDefault(require("@babel/runtime/helpers/esm/objectSpread2"));
 var _slate = require("@seafile/slate");
-var _linkHelpers = require("../../extension/plugins/image/link-helpers");
 var _isPunctuationMark = _interopRequireDefault(require("../../utils/is-punctuation-mark"));
+var _urlUtils = require("../../utils/url-utils");
 var escapeHtmlAttribute = function escapeHtmlAttribute(value) {
   return String(value).replace(/&/g, '&amp;').replace(/"/g, '&quot;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
 };
@@ -80,7 +80,7 @@ var transformInlineChildren = function transformInlineChildren(result, item) {
         value: "<img src=\"".concat(escapeHtmlAttribute(data.src), "\" alt=\"").concat(escapeHtmlAttribute(data.alt), "\" title=\"").concat(escapeHtmlAttribute(data.title), "\" width=\"").concat(escapeHtmlAttribute(data.width), "\" height=\"").concat(escapeHtmlAttribute(data.height), "\" />")
       };
     }
-    var imageLinkUrl = (0, _linkHelpers.normalizeWebUrl)(data.href);
+    var imageLinkUrl = (0, _urlUtils.normalizeWebUrl)(data.href);
     if (imageLinkUrl) {
       image = image.type === 'html' ? {
         type: 'html',

package/dist/utils/url-utils.js

@@ -0,0 +1,24 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.normalizeWebUrl = exports.isValidWebUrl = void 0;
+// Only absolute HTTP(S) URLs may be opened or embedded in the editor.
+var normalizeWebUrl = exports.normalizeWebUrl = function normalizeWebUrl() {
+  var value = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : '';
+  if (typeof value !== 'string') return '';
+  var input = value.trim();
+  if (!/^https?:\/\//i.test(input)) return '';
+  try {
+    var url = new URL(input);
+    if (!['http:', 'https:'].includes(url.protocol) || !url.hostname) return '';
+    return url.href;
+  } catch (error) {
+    return '';
+  }
+};
+var isValidWebUrl = exports.isValidWebUrl = function isValidWebUrl() {
+  var value = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : '';
+  return Boolean(normalizeWebUrl(value));
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seafile/sdoc-editor",
-  "version": "3.0.250",
+  "version": "3.0.252",
   "main": "dist/index.js",
   "scripts": {
     "test": "jest",
@@ -30,7 +30,6 @@
     "dayjs": "1.10.7",
     "deep-copy": "1.4.2",
     "is-hotkey": "0.2.0",
-    "is-url": "^1.2.4",
     "lodash.throttle": "4.1.1",
     "prismjs": "^1.30.0",
     "randomcolor": "0.6.2",
@@ -71,5 +70,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "9c4af0de615f973e844f37e346f7f0d7aeeaf41f"
+  "gitHead": "d555e51c2e28eb62c1d77b6a83ec76b0f6b2cdfd"
 }