@supernova-studio/client 0.59.17 → 0.59.18

package/dist/index.mjs

@@ -7512,6 +7512,79 @@ function serializeQuery(query) {
   return new URLSearchParams(queryWithStrings);
 }
 
+// src/utils/redirect-validation.ts
+var exhaustiveInvalidUriPaths = {
+  emptyPath: "",
+  spacesInPath: "/invalid path/with spaces",
+  specialCharacter1: "/path/with|invalid>characters",
+  specialCharacter2: "/path/with<invalid*characters",
+  specialCharacter3: "/path/{invalid}?characters",
+  consecutiveSlashes: "/path//with///too/many/slashes",
+  unencodedPercent: "/path/with/unencoded%percent",
+  unencodedSpaces: "/path/with unencoded spaces",
+  fragmentIdentifier: "/path/with#fragment",
+  queryParameters: "/path/with?query=parameter",
+  nullCharacter: "/path/with/\0nullcharacter",
+  onlySlash: "/",
+  controlCharacter: "/path/with/control\0character",
+  extremelyLongPath: "/" + "a".repeat(2047),
+  invalidStartCharacter: "///path/starting/with/slashes",
+  invalidStartCharacterColon: ":/path/starting/with/colon",
+  invalidTrailingDot: "/path/ending/with/dot.",
+  invalidPercentEncoding1: "/path/with/%2",
+  invalidPercentEncoding2: "/path/with/%ZZ",
+  invalidPercentEncoding3: "/path/with/%G1",
+  reservedCharacter1: "/path/with?<reserved>",
+  reservedCharacter2: '/path/with/"quotes"',
+  reservedCharacter3: "/path/with/[brackets]",
+  reservedCharacter4: "/path/with/\\backslashes",
+  nonAscii1: "/path/with/\u4F60\u597D",
+  nonAscii2: "/path/with/emoji/\u{1F603}",
+  mixedEncodingPath: "/path/%41A%42B%C3%28",
+  directoryTraversal1: "/path/../../etc/passwd",
+  directoryTraversal2: "/path/./././"
+};
+function isValidRedirectPath(path) {
+  const trimmedPath = path.toLowerCase().trim();
+  const url = "https://www.example.com" + trimmedPath;
+  if (url.length > 2048) {
+    return {
+      isValid: false,
+      reason: "TooLong"
+    };
+  }
+  if (trimmedPath === "") {
+    return {
+      isValid: false,
+      reason: "Empty"
+    };
+  }
+  if (url === "/") {
+    return {
+      isValid: false,
+      reason: "Empty"
+    };
+  }
+  if (url.includes("?")) {
+    return {
+      isValid: false,
+      reason: "ContainsQuery"
+    };
+  }
+  if (url.includes("#")) {
+    return {
+      isValid: false,
+      reason: "ContainsFragment"
+    };
+  }
+  const regex = /^\/[A-Za-z0-9_-]+(\/[A-Za-z0-9_-]+)*$/;
+  const isValid = regex.test(trimmedPath);
+  return {
+    isValid: regex.test(trimmedPath),
+    reason: !isValid ? "InvalidURI" : void 0
+  };
+}
+
 // src/api/endpoints/codegen/exporters.ts
 var ExportersEndpoint = class {
   constructor(requestExecutor) {
@@ -13766,6 +13839,7 @@ export {
   elementGroupsToDocumentationGroupFixedConfigurationDTOV1,
   elementGroupsToDocumentationGroupFixedConfigurationDTOV2,
   elementGroupsToDocumentationGroupStructureDTOV1,
+  exhaustiveInvalidUriPaths,
   generateHash,
   generatePageContentHash,
   getDtoDefaultItemConfigurationV1,
@@ -13778,6 +13852,7 @@ export {
   innerEditorProsemirrorSchema,
   integrationCredentialToDto,
   integrationToDto,
+  isValidRedirectPath,
   itemConfigurationToYjs,
   mainEditorProsemirrorSchema,
   pageToProsemirrorDoc,