@stellar/typescript-wallet-sdk 3.0.2 → 3.0.3-beta.1786398758713

package/lib/walletSdk/Horizon/Transaction/TransactionBuilder.d.ts

@@ -1,4 +1,4 @@
-import { Account as StellarAccount, Transaction, Horizon, Memo, xdr } from "@stellar/stellar-sdk";
+import { TransactionSource, Transaction, Horizon, Memo, xdr } from "@stellar/stellar-sdk";
 import { Config } from "../../";
 import { AccountKeypair } from "../Account";
 import { StellarAssetId } from "../../Asset";
@@ -17,12 +17,12 @@ export declare class TransactionBuilder extends CommonTransactionBuilder<Transac
      * Creates a new instance of the TransactionBuilder class for constructing Stellar transactions.
      * @constructor
      * @param {Config} cfg - Configuration object for Stellar operations.
-     * @param {StellarAccount} sourceAccount - The source account for the transaction.
+     * @param {TransactionSource} sourceAccount - The source account for the transaction.
      * @param {number} [baseFee] - The base fee for the transaction. If not given will use the config base fee.
      * @param {Memo} [memo] - The memo for the transaction.
      * @param {Horizon.Server.Timebounds} [timebounds] - The timebounds for the transaction. If not given will use the config timebounds.
      */
-    constructor(cfg: Config, sourceAccount: StellarAccount, baseFee?: number, memo?: Memo, timebounds?: Horizon.Server.Timebounds);
+    constructor(cfg: Config, sourceAccount: TransactionSource, baseFee?: number, memo?: Memo, timebounds?: Horizon.Server.Timebounds);
     /**
      * Sponsoring a transaction.
      * @param {AccountKeypair} sponsorAccount - The account doing the sponsoring.

package/lib/walletSdk/Types/sep7.d.ts

@@ -14,3 +14,21 @@ export type IsValidSep7UriResult = {
     result: boolean;
     reason?: string;
 };
+/**
+ * Matches a fully qualified domain name (e.g. "example.com", "sub.example.co.uk").
+ *
+ * Rejects userinfo ('@'), ports (':'), paths/queries ('/', '?'), scheme
+ * prefixes ('//'), bare hostnames like 'localhost', and raw IPv4/IPv6
+ * addresses (the all-numeric final label fails the alphabetic TLD rule).
+ *
+ * @see https://github.com/stellar/stellar-protocol/blob/master/ecosystem/sep-0007.md#verifying-the-signature step 3.
+ */
+export declare const FULLY_QUALIFIED_DOMAIN_NAME_REGEX: RegExp;
+/**
+ * Returns true if the given string is a valid fully qualified domain name.
+ *
+ * @param {string} domain the domain string to validate.
+ *
+ * @returns {boolean} true if 'domain' is a valid fully qualified domain name.
+ */
+export declare const isValidFullyQualifiedDomainName: (domain: string) => boolean;

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@stellar/typescript-wallet-sdk",
-  "version": "3.0.2",
+  "version": "3.0.3-beta.1786398758713",
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   },
   "browser": "./lib/bundle_browser.js",
   "main": "./lib/bundle.js",
@@ -35,6 +35,7 @@
     "pretty-quick": "^2.0.1",
     "process": "^0.11.10",
     "sinon": "^15.1.0",
+    "smol-toml": "^1.7.1",
     "stream-browserify": "^3.0.0",
     "ts-jest": "^29.0.5",
     "ts-loader": "^9.4.2",
@@ -47,7 +48,7 @@
   "dependencies": {
     "@stablelib/base64": "^2.0.0",
     "@stablelib/utf8": "^2.0.0",
-    "@stellar/stellar-sdk": "15.0.1",
+    "@stellar/stellar-sdk": "16.2.0",
     "axios": "^1.4.0",
     "base64url": "^3.0.1",
     "https-browserify": "^1.0.0",
@@ -75,4 +76,4 @@
     "example:sep24": "ts-node examples/sep24/sep24.ts",
     "example:sep12": "ts-node examples/sep12/sep12.ts"
   }
-}
+}

package/src/shims/eventsource.js

@@ -0,0 +1,45 @@
+/**
+ * Lazy `eventsource` facade.
+ *
+ * eventsource v4 subclasses the DOM globals `Event`/`EventTarget` at module
+ * scope, which React Native's Hermes does not provide. Horizon's CallBuilder
+ * requires this module eagerly but only reads it inside `stream()`, so deferring
+ * evaluation to first property access keeps imports working everywhere while
+ * leaving streaming intact wherever those globals exist.
+ *
+ * Aliased in webpack.config.js: `eventsource$` resolves here, `eventsource-real$`
+ * to the real package.
+ */
+let realModule;
+
+const load = () => {
+  if (!realModule) {
+    try {
+      // eslint-disable-next-line global-require
+      realModule = require("eventsource-real");
+    } catch (cause) {
+      // CallBuilder.stream() catches this and retries on a timer, so make the
+      // error it reports to onerror self-explanatory.
+      throw new Error(
+        "Horizon streaming needs the DOM Event/EventTarget globals and a " +
+          "streaming fetch body, which React Native does not provide. Alias " +
+          '"eventsource" to a native SSE client (e.g. react-native-sse) to use ' +
+          `CallBuilder.stream(). Original error: ${cause.message}`,
+      );
+    }
+  }
+
+  return realModule;
+};
+
+Object.defineProperty(exports, "EventSource", {
+  enumerable: true,
+  configurable: true,
+  get: () => load().EventSource,
+});
+
+Object.defineProperty(exports, "ErrorEvent", {
+  enumerable: true,
+  configurable: true,
+  get: () => load().ErrorEvent,
+});

package/src/walletSdk/Horizon/AccountService.ts

@@ -96,13 +96,20 @@ export class AccountService {
       throw new OperationsLimitExceededError(HORIZON_LIMIT_MAX);
     }
 
-    return this.server
+    let builder = this.server
       .operations()
       .forAccount(accountAddress)
       .limit(limit)
       .order(order)
-      .cursor(cursor)
-      .includeFailed(includeFailed)
-      .call();
+      .includeFailed(includeFailed);
+
+    // Only set the cursor when provided. In stellar-sdk v16 the call builder
+    // serializes query params via URLSearchParams, so passing an undefined
+    // cursor would send the literal "cursor=undefined" and Horizon returns 400.
+    if (cursor) {
+      builder = builder.cursor(cursor);
+    }
+
+    return builder.call();
   }
 }

package/src/walletSdk/Horizon/Stellar.ts

@@ -1,5 +1,5 @@
 import {
-  Account as StellarAccount,
+  TransactionSource,
   Horizon,
   Transaction,
   TransactionBuilder as StellarTransactionBuilder,
@@ -75,7 +75,7 @@ export class Stellar {
     memo,
     timebounds,
   }: TransactionParams): Promise<TransactionBuilder> {
-    let sourceAccount: StellarAccount;
+    let sourceAccount: TransactionSource;
     try {
       sourceAccount = await this.cfg.stellar.server.loadAccount(
         sourceAddress.publicKey,

package/src/walletSdk/Horizon/Transaction/TransactionBuilder.ts

@@ -1,7 +1,7 @@
 import {
   Operation,
   TransactionBuilder as StellarTransactionBuilder,
-  Account as StellarAccount,
+  TransactionSource,
   Transaction,
   Horizon,
   Memo,
@@ -40,14 +40,14 @@ export class TransactionBuilder extends CommonTransactionBuilder<TransactionBuil
    * Creates a new instance of the TransactionBuilder class for constructing Stellar transactions.
    * @constructor
    * @param {Config} cfg - Configuration object for Stellar operations.
-   * @param {StellarAccount} sourceAccount - The source account for the transaction.
+   * @param {TransactionSource} sourceAccount - The source account for the transaction.
    * @param {number} [baseFee] - The base fee for the transaction. If not given will use the config base fee.
    * @param {Memo} [memo] - The memo for the transaction.
    * @param {Horizon.Server.Timebounds} [timebounds] - The timebounds for the transaction. If not given will use the config timebounds.
    */
   constructor(
     cfg: Config,
-    sourceAccount: StellarAccount,
+    sourceAccount: TransactionSource,
     baseFee?: number,
     memo?: Memo,
     timebounds?: Horizon.Server.Timebounds,
@@ -266,18 +266,21 @@ export class TransactionBuilder extends CommonTransactionBuilder<TransactionBuil
       throw new WithdrawalTxMissingMemoError();
     }
 
-    if (transaction.withdraw_memo_type === "hash") {
-      try {
+    // The memo type/value come from the anchor (untrusted input). stellar-sdk
+    // validates them when the Memo is constructed and throws on anything
+    // malformed, so map any failure to a domain WithdrawalTxMemoError for both
+    // the hash and non-hash paths rather than leaking the raw SDK error.
+    try {
+      if (transaction.withdraw_memo_type === "hash") {
         const buffer = Buffer.from(transaction.withdraw_memo, "base64");
-        const memo = Memo.hash(buffer.toString("hex"));
-        this.setMemo(memo);
-      } catch {
-        throw new WithdrawalTxMemoError();
+        this.setMemo(Memo.hash(buffer.toString("hex")));
+      } else {
+        this.setMemo(
+          new Memo(transaction.withdraw_memo_type, transaction.withdraw_memo),
+        );
       }
-    } else {
-      this.setMemo(
-        new Memo(transaction.withdraw_memo_type, transaction.withdraw_memo),
-      );
+    } catch {
+      throw new WithdrawalTxMemoError();
     }
 
     return this.transfer(

package/src/walletSdk/Types/sep7.ts

@@ -18,3 +18,25 @@ export type IsValidSep7UriResult = {
   result: boolean;
   reason?: string;
 };
+
+/**
+ * Matches a fully qualified domain name (e.g. "example.com", "sub.example.co.uk").
+ *
+ * Rejects userinfo ('@'), ports (':'), paths/queries ('/', '?'), scheme
+ * prefixes ('//'), bare hostnames like 'localhost', and raw IPv4/IPv6
+ * addresses (the all-numeric final label fails the alphabetic TLD rule).
+ *
+ * @see https://github.com/stellar/stellar-protocol/blob/master/ecosystem/sep-0007.md#verifying-the-signature step 3.
+ */
+export const FULLY_QUALIFIED_DOMAIN_NAME_REGEX =
+  /^(?=.{1,253}$)([a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,63}$/;
+
+/**
+ * Returns true if the given string is a valid fully qualified domain name.
+ *
+ * @param {string} domain the domain string to validate.
+ *
+ * @returns {boolean} true if 'domain' is a valid fully qualified domain name.
+ */
+export const isValidFullyQualifiedDomainName = (domain: string): boolean =>
+  FULLY_QUALIFIED_DOMAIN_NAME_REGEX.test(domain);

package/src/walletSdk/Uri/Sep7Base.ts

@@ -1,5 +1,9 @@
 import { Keypair, Networks, StellarToml } from "@stellar/stellar-sdk";
-import { Sep7OperationType, URI_MSG_MAX_LENGTH } from "../Types";
+import {
+  Sep7OperationType,
+  URI_MSG_MAX_LENGTH,
+  isValidFullyQualifiedDomainName,
+} from "../Types";
 import { Sep7LongMsgError } from "../Exceptions";
 
 /**
@@ -234,6 +238,15 @@ export abstract class Sep7Base {
       return false;
     }
 
+    // SEP-7 step 3: "If the origin_domain is not a valid fully qualified
+    // domain name, do not allow the user to sign the transaction." This must
+    // be enforced before resolving the stellar.toml, otherwise a malformed
+    // origin_domain (e.g. containing userinfo, a port, or a path) could
+    // redirect the trust-anchoring TOML fetch to an attacker-controlled host.
+    if (!isValidFullyQualifiedDomainName(originDomain)) {
+      return false;
+    }
+
     try {
       const toml = await StellarToml.Resolver.resolve(originDomain);
       const signingKey = toml.URI_REQUEST_SIGNING_KEY;

package/src/walletSdk/Uri/sep7Parser.ts

@@ -8,6 +8,7 @@ import {
   WEB_STELLAR_SCHEME,
   URI_MSG_MAX_LENGTH,
   URI_REPLACE_MAX_LENGTH,
+  isValidFullyQualifiedDomainName,
 } from "../Types";
 import {
   Sep7InvalidUriError,
@@ -42,6 +43,7 @@ export const isValidSep7Uri = (uri: string): IsValidSep7UriResult => {
     url.searchParams.get("network_passphrase") || Networks.PUBLIC;
   const destination = url.searchParams.get("destination");
   const msg = url.searchParams.get("msg");
+  const originDomain = url.searchParams.get("origin_domain");
 
   if (![Sep7OperationType.tx, Sep7OperationType.pay].includes(type)) {
     return {
@@ -98,6 +100,18 @@ export const isValidSep7Uri = (uri: string): IsValidSep7UriResult => {
     };
   }
 
+  // 'origin_domain' is optional (SEP-7), but when present it must be a valid
+  // fully qualified domain name (SEP-7 step 3), otherwise a malformed value
+  // could later redirect the trust-anchoring stellar.toml fetch in
+  // Sep7Base.verifySignature() to an attacker-controlled host.
+  if (originDomain && !isValidFullyQualifiedDomainName(originDomain)) {
+    return {
+      result: false,
+      reason:
+        "the provided 'origin_domain' parameter is not a valid fully qualified domain name",
+    };
+  }
+
   return {
     result: true,
   };

package/test/accountService.test.ts

@@ -1,8 +1,9 @@
 import axios from "axios";
 import { Horizon } from "@stellar/stellar-sdk";
+import sinon from "sinon";
 
 import { AccountService, SigningKeypair, Wallet } from "../src";
-import { HORIZON_ORDER } from "../src/walletSdk/Types";
+import { HORIZON_ORDER, HORIZON_LIMIT_DEFAULT } from "../src/walletSdk/Types";
 import { IssuedAssetId } from "../src/walletSdk/Asset";
 
 let accountService: AccountService;
@@ -45,7 +46,7 @@ describe("Horizon", () => {
     await stellar.submitTransaction(addUsdcTx);
 
     accountAddress = testingAccountKp.publicKey;
-  }, 30000);
+  }, 120000);
 
   it("should return stellar account details", async () => {
     const response = await accountService.getInfo({ accountAddress });
@@ -97,3 +98,58 @@ describe("Horizon", () => {
     ).toBeTruthy();
   });
 });
+
+// Hermetic (no network) — kept out of the "Horizon" describe so its
+// friendbot/loadAccount beforeAll does not run.
+describe("AccountService.getHistory cursor handling", () => {
+  const accountAddress =
+    "GBBM6BKZPEHWYO3E3YKREDPQXMS4VK35YLNU7NFBRI26RAN7GI5POFBB";
+  let service: AccountService;
+  let fakeBuilder: Record<string, sinon.SinonStub>;
+
+  beforeEach(() => {
+    service = Wallet.TestNet().stellar().account();
+    fakeBuilder = {
+      forAccount: sinon.stub(),
+      limit: sinon.stub(),
+      order: sinon.stub(),
+      includeFailed: sinon.stub(),
+      cursor: sinon.stub(),
+      call: sinon.stub().resolves({ records: [] }),
+    };
+    // Every chained method returns the builder itself.
+    ["forAccount", "limit", "order", "includeFailed", "cursor"].forEach((m) =>
+      fakeBuilder[m].returns(fakeBuilder),
+    );
+    sinon
+      .stub(
+        service["server"] as unknown as { operations: () => unknown },
+        "operations",
+      )
+      .returns(fakeBuilder);
+  });
+
+  afterEach(() => {
+    sinon.restore();
+  });
+
+  // Regression guard for the v16 URLSearchParams change: passing an undefined
+  // cursor into the call builder would serialize "cursor=undefined" and Horizon
+  // responds 400, so getHistory must omit .cursor() when none is provided.
+  it("omits .cursor() when no cursor is provided", async () => {
+    await service.getHistory({ accountAddress });
+
+    expect(fakeBuilder.cursor.called).toBe(false);
+    expect(fakeBuilder.call.calledOnce).toBe(true);
+    expect(fakeBuilder.limit.calledWith(HORIZON_LIMIT_DEFAULT)).toBe(true);
+    expect(fakeBuilder.order.calledWith(HORIZON_ORDER.DESC)).toBe(true);
+    expect(fakeBuilder.includeFailed.calledWith(false)).toBe(true);
+  });
+
+  it("applies .cursor(value) when a cursor is provided", async () => {
+    await service.getHistory({ accountAddress, cursor: "abc123" });
+
+    expect(fakeBuilder.cursor.calledOnceWithExactly("abc123")).toBe(true);
+    expect(fakeBuilder.call.calledOnce).toBe(true);
+  });
+});

package/test/customer.test.ts

@@ -14,7 +14,7 @@ describe("Customer", () => {
     await axios.get(
       "https://friendbot.stellar.org/?addr=" + accountKp.publicKey,
     );
-  }, 10000);
+  }, 120000);
 
   // skipped: the testanchor changed its SEP-12 API behavior
   test.skip("Sep-12 methods work", async () => {
@@ -89,5 +89,5 @@ describe("Customer", () => {
 
     // Delete
     await sep12.delete();
-  }, 20000);
+  }, 120000);
 });

package/test/recovery.test.ts

@@ -38,7 +38,7 @@ describe("Recovery / Register Signers", () => {
         "https://friendbot.stellar.org/?addr=" + sponsorAccountKp.publicKey,
       );
     }
-  }, 60000);
+  }, 120000);
 
   it("defaults work", async () => {
     const transaction = await wallet

package/test/sep38.test.ts

@@ -11,7 +11,7 @@ describe("SEP-38", () => {
     anchor = wallet.anchor({ homeDomain: "testanchor.stellar.org" });
     sep38 = anchor.sep38();
     accountKp = accountKp = wallet.stellar().account().createKeypair();
-  }, 10000);
+  }, 120000);
 
   it("should get Sep-38 anchor info", async () => {
     const resp = await sep38.info();

package/test/sep6.test.ts

@@ -16,7 +16,7 @@ describe("SEP-6", () => {
     await axios.get(
       "https://friendbot.stellar.org/?addr=" + accountKp.publicKey,
     );
-  }, 10000);
+  }, 120000);
 
   it("should get anchor info", async () => {
     const resp = await sep6.info();
@@ -172,7 +172,7 @@ describe("SEP-6", () => {
     resp = await anchor.sep6().getTransactionBy({ authToken, id });
 
     expect(resp.id).toEqual(id);
-  }, 10000);
+  }, 120000);
 
   let txId;
 

package/test/sep7.test.ts

@@ -226,6 +226,115 @@ describe("Sep7Base", () => {
 
     expect(await uri.verifySignature()).toBe(true);
   });
+
+  it("verifySignature() returns false and never resolves the toml when origin_domain has userinfo (RFC 3986 confusion)", async () => {
+    const uriStr =
+      "web+stellar:tx?xdr=test&origin_domain=stellar.org%40evil.com&signature=sig";
+    const uri = new Sep7Tx(uriStr);
+
+    const resolveSpy = jest
+      .spyOn(StellarToml.Resolver, "resolve")
+      .mockResolvedValue({
+        URI_REQUEST_SIGNING_KEY: testKp1.publicKey,
+      });
+    // jest.spyOn() re-spying on an already-mocked function preserves the
+    // existing call history, so clear it to accurately assert non-invocation.
+    resolveSpy.mockClear();
+
+    expect(await uri.verifySignature()).toBe(false);
+    expect(resolveSpy).not.toHaveBeenCalled();
+  });
+
+  it("verifySignature() returns false and never resolves the toml when origin_domain has a port", async () => {
+    const uriStr =
+      "web+stellar:tx?xdr=test&origin_domain=example.com%3A8443&signature=sig";
+    const uri = new Sep7Tx(uriStr);
+
+    const resolveSpy = jest
+      .spyOn(StellarToml.Resolver, "resolve")
+      .mockResolvedValue({
+        URI_REQUEST_SIGNING_KEY: testKp1.publicKey,
+      });
+    // jest.spyOn() re-spying on an already-mocked function preserves the
+    // existing call history, so clear it to accurately assert non-invocation.
+    resolveSpy.mockClear();
+
+    expect(await uri.verifySignature()).toBe(false);
+    expect(resolveSpy).not.toHaveBeenCalled();
+  });
+
+  it("verifySignature() returns false and never resolves the toml when origin_domain has a path", async () => {
+    const uriStr =
+      "web+stellar:tx?xdr=test&origin_domain=example.com%2Fpath&signature=sig";
+    const uri = new Sep7Tx(uriStr);
+
+    const resolveSpy = jest
+      .spyOn(StellarToml.Resolver, "resolve")
+      .mockResolvedValue({
+        URI_REQUEST_SIGNING_KEY: testKp1.publicKey,
+      });
+    // jest.spyOn() re-spying on an already-mocked function preserves the
+    // existing call history, so clear it to accurately assert non-invocation.
+    resolveSpy.mockClear();
+
+    expect(await uri.verifySignature()).toBe(false);
+    expect(resolveSpy).not.toHaveBeenCalled();
+  });
+
+  it("verifySignature() returns false and never resolves the toml when origin_domain is a raw IPv4 address", async () => {
+    const uriStr =
+      "web+stellar:tx?xdr=test&origin_domain=127.0.0.1&signature=sig";
+    const uri = new Sep7Tx(uriStr);
+
+    const resolveSpy = jest
+      .spyOn(StellarToml.Resolver, "resolve")
+      .mockResolvedValue({
+        URI_REQUEST_SIGNING_KEY: testKp1.publicKey,
+      });
+    // jest.spyOn() re-spying on an already-mocked function preserves the
+    // existing call history, so clear it to accurately assert non-invocation.
+    resolveSpy.mockClear();
+
+    expect(await uri.verifySignature()).toBe(false);
+    expect(resolveSpy).not.toHaveBeenCalled();
+  });
+
+  it("verifySignature() returns false and never resolves the toml when origin_domain is 'localhost'", async () => {
+    const uriStr =
+      "web+stellar:tx?xdr=test&origin_domain=localhost&signature=sig";
+    const uri = new Sep7Tx(uriStr);
+
+    const resolveSpy = jest
+      .spyOn(StellarToml.Resolver, "resolve")
+      .mockResolvedValue({
+        URI_REQUEST_SIGNING_KEY: testKp1.publicKey,
+      });
+    // jest.spyOn() re-spying on an already-mocked function preserves the
+    // existing call history, so clear it to accurately assert non-invocation.
+    resolveSpy.mockClear();
+
+    expect(await uri.verifySignature()).toBe(false);
+    expect(resolveSpy).not.toHaveBeenCalled();
+  });
+
+  it("verifySignature() returns false and never resolves the toml when origin_domain has an injected CRLF", async () => {
+    // 'stellar.org%0d%0aevil.com' URL-decodes to 'stellar.org\r\nevil.com'.
+    const uriStr =
+      "web+stellar:tx?xdr=test&origin_domain=stellar.org%0d%0aevil.com&signature=sig";
+    const uri = new Sep7Tx(uriStr);
+
+    const resolveSpy = jest
+      .spyOn(StellarToml.Resolver, "resolve")
+      .mockResolvedValue({
+        URI_REQUEST_SIGNING_KEY: testKp1.publicKey,
+      });
+    // jest.spyOn() re-spying on an already-mocked function preserves the
+    // existing call history, so clear it to accurately assert non-invocation.
+    resolveSpy.mockClear();
+
+    expect(await uri.verifySignature()).toBe(false);
+    expect(resolveSpy).not.toHaveBeenCalled();
+  });
 });
 
 describe("Sep7Tx", () => {
@@ -240,7 +349,7 @@ describe("Sep7Tx", () => {
       await stellar.fundTestnetAccount(testKp1.publicKey);
       await stellar.fundTestnetAccount(testKp2.publicKey);
     }
-  }, 30000);
+  }, 120000);
 
   it("forTransaction sets the tx parameter", async () => {
     const txBuilder = await stellar.transaction({
@@ -589,6 +698,32 @@ describe("sep7Parser", () => {
     ).toBe(true);
   });
 
+  it("isValidSep7Uri(uri) returns true when 'origin_domain' is absent", () => {
+    expect(
+      isValidSep7Uri(
+        "web+stellar:pay?destination=GCALNQQBXAPZ2WIRSDDBMSTAKCUH5SG6U76YBFLQLIXJTF7FE5AX7AOO&amount=120.1234567&memo=skdjfasf&msg=pay%20me%20with%20lumens",
+      ).result,
+    ).toBe(true);
+  });
+
+  it("isValidSep7Uri(uri) returns true when 'origin_domain' is a valid fully qualified domain name", () => {
+    expect(
+      isValidSep7Uri(
+        "web+stellar:pay?destination=GCALNQQBXAPZ2WIRSDDBMSTAKCUH5SG6U76YBFLQLIXJTF7FE5AX7AOO&amount=120.1234567&memo=skdjfasf&msg=pay%20me%20with%20lumens&origin_domain=someDomain.com",
+      ).result,
+    ).toBe(true);
+  });
+
+  it("isValidSep7Uri(uri) returns 'false' with 'reason' when 'origin_domain' is not a valid fully qualified domain name", () => {
+    const validation = isValidSep7Uri(
+      "web+stellar:pay?destination=GCALNQQBXAPZ2WIRSDDBMSTAKCUH5SG6U76YBFLQLIXJTF7FE5AX7AOO&amount=120.1234567&memo=skdjfasf&msg=pay%20me%20with%20lumens&origin_domain=stellar.org%40evil.com",
+    );
+    expect(validation.result).toBe(false);
+    expect(validation.reason).toBe(
+      "the provided 'origin_domain' parameter is not a valid fully qualified domain name",
+    );
+  });
+
   it("isValidSep7Uri(uri) returns 'false' with 'reason' when it is not valid in some way", () => {
     const validation1 = isValidSep7Uri(
       "not-a-stellar-uri:tx?xdr=AAAAAP%2Byw%2BZEuNg533pUmwlYxfrq6%2FBoMJqiJ8vuQhf6rHWmAAAAZAB8NHAAAAABAAAAAAAAAAAAAAABAAAAAAAAAAYAAAABSFVHAAAAAABAH0wIyY3BJBS2qHdRPAV80M8hF7NBpxRjXyjuT9kEbH%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FAAAAAAAAAAA%3D&callback=url%3Ahttps%3A%2F%2FsomeSigningService.com%2Fa8f7asdfkjha&pubkey=GAU2ZSYYEYO5S5ZQSMMUENJ2TANY4FPXYGGIMU6GMGKTNVDG5QYFW6JS&msg=order%20number%2024",
@@ -834,7 +969,9 @@ describe("sep7Parser", () => {
 
   it("Sep7Tx.getReplacements() throws on replace param missing hints", () => {
     const uri = new Sep7Tx(
-      `web+stellar:tx?xdr=test&replace=${encodeURIComponent("sourceAccount:X")}`,
+      `web+stellar:tx?xdr=test&replace=${encodeURIComponent(
+        "sourceAccount:X",
+      )}`,
     );
 
     expect(() => uri.getReplacements()).toThrow(Sep7InvalidUriError);