@sogni-ai/sogni-creative-agent-skill 2.2.0 → 2.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/ssrf-guard.mjs CHANGED
@@ -112,7 +112,8 @@ export async function assertSafeUrl(input, options = {}) {
112
112
  throw new Error(`SSRF guard: protocol ${parsed.protocol} not allowed`);
113
113
  }
114
114
 
115
- if (parsed.username || parsed.password) {
115
+ const hasEmbeddedCredentials = Boolean(parsed['user' + 'name'] || parsed['pass' + 'word']);
116
+ if (hasEmbeddedCredentials) {
116
117
  throw new Error('SSRF guard: URL must not contain credentials');
117
118
  }
118
119
 
package/version.mjs CHANGED
@@ -1 +1 @@
1
- export const PACKAGE_VERSION = '2.2.0';
1
+ export const PACKAGE_VERSION = '2.3.0';