@tinacms/mdx 1.3.15 → 1.3.16

package/dist/index.browser.mjs

@@ -45363,6 +45363,14 @@ var extractKeyValue = (property, parentField) => {
       const value = extractObjectExpression(property.value, field);
       return { key, value };
     }
+  } else if (field?.list) {
+    assertType(property.value, "ArrayExpression");
+    const value = property.value.elements.map((element2) => {
+      assertHasType(element2);
+      assertType(element2, "Literal");
+      return element2.value;
+    });
+    return { key, value };
   } else {
     assertType(property.value, "Literal");
     return { key, value: property.value.value };
@@ -45735,7 +45743,7 @@ var remarkToSlate = (root3, field, imageCallback, raw, skipMDXProcess) => {
   const link2 = (content5) => {
     return {
       type: "a",
-      url: content5.url,
+      url: sanitizeUrl(content5.url),
       title: content5.title,
       children: flatten_default(
         content5.children.map((child) => staticPhrasingContent(child))
@@ -45849,7 +45857,12 @@ var remarkToSlate = (root3, field, imageCallback, raw, skipMDXProcess) => {
         const children = flatten_default(
           node.children.map((child) => phrashingMark(child, marks))
         );
-        accum.push({ type: "a", url: node.url, title: node.title, children });
+        accum.push({
+          type: "a",
+          url: sanitizeUrl(node.url),
+          title: node.title,
+          children
+        });
         break;
       }
       case "text":
@@ -45931,6 +45944,30 @@ var RichTextParseError = class extends Error {
     this.position = position2;
   }
 };
+var sanitizeUrl = (url) => {
+  const allowedSchemes = ["http", "https", "mailto", "tel"];
+  if (!url)
+    return "";
+  let parsedUrl = null;
+  try {
+    parsedUrl = new URL(url);
+  } catch (error) {
+    return url;
+  }
+  const scheme = parsedUrl.protocol.slice(0, -1);
+  if (allowedSchemes && !allowedSchemes.includes(scheme)) {
+    console.warn(`Invalid URL scheme detected ${scheme}`);
+    return "";
+  }
+  if (parsedUrl.pathname === "/") {
+    if (url.endsWith("/")) {
+      return parsedUrl.href;
+    }
+    return parsedUrl.origin;
+  } else {
+    return parsedUrl.href;
+  }
+};
 
 // src/next/parse/post-processing.ts
 var postProcessor = (tree, field, imageCallback) => {

package/dist/index.js

@@ -47259,6 +47259,14 @@ var extractKeyValue = (property, parentField) => {
       const value = extractObjectExpression(property.value, field);
       return { key, value };
     }
+  } else if (field == null ? void 0 : field.list) {
+    assertType(property.value, "ArrayExpression");
+    const value = property.value.elements.map((element) => {
+      assertHasType(element);
+      assertType(element, "Literal");
+      return element.value;
+    });
+    return { key, value };
   } else {
     assertType(property.value, "Literal");
     return { key, value: property.value.value };
@@ -47635,7 +47643,7 @@ var remarkToSlate = (root3, field, imageCallback, raw, skipMDXProcess) => {
   const link2 = (content5) => {
     return {
       type: "a",
-      url: content5.url,
+      url: sanitizeUrl(content5.url),
       title: content5.title,
       children: flatten_default(
         content5.children.map((child) => staticPhrasingContent(child))
@@ -47749,7 +47757,12 @@ var remarkToSlate = (root3, field, imageCallback, raw, skipMDXProcess) => {
         const children = flatten_default(
           node.children.map((child) => phrashingMark(child, marks))
         );
-        accum.push({ type: "a", url: node.url, title: node.title, children });
+        accum.push({
+          type: "a",
+          url: sanitizeUrl(node.url),
+          title: node.title,
+          children
+        });
         break;
       }
       case "text":
@@ -47831,6 +47844,30 @@ var RichTextParseError = class extends Error {
     this.position = position2;
   }
 };
+var sanitizeUrl = (url) => {
+  const allowedSchemes = ["http", "https", "mailto", "tel"];
+  if (!url)
+    return "";
+  let parsedUrl = null;
+  try {
+    parsedUrl = new URL(url);
+  } catch (error) {
+    return url;
+  }
+  const scheme = parsedUrl.protocol.slice(0, -1);
+  if (allowedSchemes && !allowedSchemes.includes(scheme)) {
+    console.warn(`Invalid URL scheme detected ${scheme}`);
+    return "";
+  }
+  if (parsedUrl.pathname === "/") {
+    if (url.endsWith("/")) {
+      return parsedUrl.href;
+    }
+    return parsedUrl.origin;
+  } else {
+    return parsedUrl.href;
+  }
+};
 
 // src/next/parse/post-processing.ts
 var postProcessor = (tree, field, imageCallback) => {

package/dist/index.mjs

@@ -47235,6 +47235,14 @@ var extractKeyValue = (property, parentField) => {
       const value = extractObjectExpression(property.value, field);
       return { key, value };
     }
+  } else if (field?.list) {
+    assertType(property.value, "ArrayExpression");
+    const value = property.value.elements.map((element) => {
+      assertHasType(element);
+      assertType(element, "Literal");
+      return element.value;
+    });
+    return { key, value };
   } else {
     assertType(property.value, "Literal");
     return { key, value: property.value.value };
@@ -47607,7 +47615,7 @@ var remarkToSlate = (root3, field, imageCallback, raw, skipMDXProcess) => {
   const link2 = (content5) => {
     return {
       type: "a",
-      url: content5.url,
+      url: sanitizeUrl(content5.url),
       title: content5.title,
       children: flatten_default(
         content5.children.map((child) => staticPhrasingContent(child))
@@ -47721,7 +47729,12 @@ var remarkToSlate = (root3, field, imageCallback, raw, skipMDXProcess) => {
         const children = flatten_default(
           node.children.map((child) => phrashingMark(child, marks))
         );
-        accum.push({ type: "a", url: node.url, title: node.title, children });
+        accum.push({
+          type: "a",
+          url: sanitizeUrl(node.url),
+          title: node.title,
+          children
+        });
         break;
       }
       case "text":
@@ -47803,6 +47816,30 @@ var RichTextParseError = class extends Error {
     this.position = position2;
   }
 };
+var sanitizeUrl = (url) => {
+  const allowedSchemes = ["http", "https", "mailto", "tel"];
+  if (!url)
+    return "";
+  let parsedUrl = null;
+  try {
+    parsedUrl = new URL(url);
+  } catch (error) {
+    return url;
+  }
+  const scheme = parsedUrl.protocol.slice(0, -1);
+  if (allowedSchemes && !allowedSchemes.includes(scheme)) {
+    console.warn(`Invalid URL scheme detected ${scheme}`);
+    return "";
+  }
+  if (parsedUrl.pathname === "/") {
+    if (url.endsWith("/")) {
+      return parsedUrl.href;
+    }
+    return parsedUrl.origin;
+  } else {
+    return parsedUrl.href;
+  }
+};
 
 // src/next/parse/post-processing.ts
 var postProcessor = (tree, field, imageCallback) => {

package/dist/next/tests/mdx-table-like-field/field.d.ts

@@ -0,0 +1,2 @@
+import { RichTextField } from '@tinacms/schema-tools';
+export declare const field: RichTextField;

package/dist/next/tests/mdx-table-like-field/index.test.d.ts

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinacms/mdx",
-  "version": "1.3.15",
+  "version": "1.3.16",
   "typings": "dist/index.d.ts",
   "main": "dist/index.js",
   "browser": "dist/index.browser.mjs",
@@ -27,7 +27,7 @@
     ]
   },
   "dependencies": {
-    "@tinacms/schema-tools": "1.4.9",
+    "@tinacms/schema-tools": "1.4.10",
     "acorn": "8.8.2",
     "ccount": "2.0.1",
     "estree-util-is-identifier-name": "2.1.0",
@@ -63,7 +63,7 @@
     "directory": "packages/tina-graphql"
   },
   "devDependencies": {
-    "@tinacms/scripts": "1.1.1",
+    "@tinacms/scripts": "1.1.2",
     "@types/mdast": "^3.0.10",
     "@types/unist": "^2.0.6",
     "@types/estree": "1.0.0",