@supernova-studio/client 0.59.17 → 0.59.18

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supernova-studio/client",
-  "version": "0.59.17",
+  "version": "0.59.18",
   "description": "Supernova Data Models",
   "source": "src/index.ts",
   "main": "dist/index.js",

package/src/utils/index.ts

@@ -1,3 +1,4 @@
 export * from "./figma";
 export * from "./hash";
 export * from "./query";
+export * from "./redirect-validation";

package/src/utils/redirect-validation.ts

@@ -0,0 +1,76 @@
+export const exhaustiveInvalidUriPaths = {
+  emptyPath: "",
+  spacesInPath: "/invalid path/with spaces",
+  specialCharacter1: "/path/with|invalid>characters",
+  specialCharacter2: "/path/with<invalid*characters",
+  specialCharacter3: "/path/{invalid}?characters",
+  consecutiveSlashes: "/path//with///too/many/slashes",
+  unencodedPercent: "/path/with/unencoded%percent",
+  unencodedSpaces: "/path/with unencoded spaces",
+  fragmentIdentifier: "/path/with#fragment",
+  queryParameters: "/path/with?query=parameter",
+  nullCharacter: "/path/with/\u0000nullcharacter",
+  onlySlash: "/",
+  controlCharacter: "/path/with/control\0character",
+  extremelyLongPath: "/" + "a".repeat(2047),
+  invalidStartCharacter: "///path/starting/with/slashes",
+  invalidStartCharacterColon: ":/path/starting/with/colon",
+  invalidTrailingDot: "/path/ending/with/dot.",
+  invalidPercentEncoding1: "/path/with/%2",
+  invalidPercentEncoding2: "/path/with/%ZZ",
+  invalidPercentEncoding3: "/path/with/%G1",
+  reservedCharacter1: "/path/with?<reserved>",
+  reservedCharacter2: '/path/with/"quotes"',
+  reservedCharacter3: "/path/with/[brackets]",
+  reservedCharacter4: "/path/with/\\backslashes",
+  nonAscii1: "/path/with/你好",
+  nonAscii2: "/path/with/emoji/😃",
+  mixedEncodingPath: "/path/%41A%42B%C3%28",
+  directoryTraversal1: "/path/../../etc/passwd",
+  directoryTraversal2: "/path/./././",
+};
+
+type ValidationErrorReason = "TooLong" | "InvalidURI" | "Empty" | "ContainsQuery" | "ContainsFragment";
+
+export function isValidRedirectPath(path: string): { isValid: boolean; reason: ValidationErrorReason | undefined } {
+  const trimmedPath = path.toLowerCase().trim();
+  const url = "https://www.example.com" + trimmedPath;
+  if (url.length > 2048) {
+    return {
+      isValid: false,
+      reason: "TooLong",
+    };
+  }
+  if (trimmedPath === "") {
+    return {
+      isValid: false,
+      reason: "Empty",
+    };
+  }
+  if (url === "/") {
+    return {
+      isValid: false,
+      reason: "Empty",
+    };
+  }
+
+  if (url.includes("?")) {
+    return {
+      isValid: false,
+      reason: "ContainsQuery",
+    };
+  }
+  if (url.includes("#")) {
+    return {
+      isValid: false,
+      reason: "ContainsFragment",
+    };
+  }
+
+  const regex = /^\/[A-Za-z0-9_-]+(\/[A-Za-z0-9_-]+)*$/;
+  const isValid = regex.test(trimmedPath);
+  return {
+    isValid: regex.test(trimmedPath),
+    reason: !isValid ? "InvalidURI" : undefined,
+  };
+}