@tinacms/mdx 2.2.2 → 2.2.3

package/dist/index.browser.js

@@ -37180,6 +37180,9 @@ var fromMarkdown2 = (value, field) => {
 };
 
 // src/sanitize-url.ts
+var IGNORED_IN_SCHEME = /[\p{Cc}\p{Cf}]/gu;
+var SCHEME_PREFIX = /^[a-zA-Z][a-zA-Z0-9+.\-]*:/;
+var namesAScheme = (url) => SCHEME_PREFIX.test(url.replace(IGNORED_IN_SCHEME, "").trim());
 var sanitizeUrl = (url) => {
   const allowedSchemes = ["http", "https", "mailto", "tel", "xref"];
   if (!url) return "";
@@ -37187,6 +37190,10 @@ var sanitizeUrl = (url) => {
   try {
     parsedUrl = new URL(url);
   } catch (error) {
+    if (namesAScheme(url)) {
+      console.warn(`Invalid URL scheme detected ${url}`);
+      return "";
+    }
     return url;
   }
   const scheme = parsedUrl.protocol.slice(0, -1);

package/dist/index.js

@@ -39046,6 +39046,9 @@ var fromMarkdown2 = (value, field) => {
 };
 
 // src/sanitize-url.ts
+var IGNORED_IN_SCHEME = /[\p{Cc}\p{Cf}]/gu;
+var SCHEME_PREFIX = /^[a-zA-Z][a-zA-Z0-9+.\-]*:/;
+var namesAScheme = (url) => SCHEME_PREFIX.test(url.replace(IGNORED_IN_SCHEME, "").trim());
 var sanitizeUrl = (url) => {
   const allowedSchemes = ["http", "https", "mailto", "tel", "xref"];
   if (!url) return "";
@@ -39053,6 +39056,10 @@ var sanitizeUrl = (url) => {
   try {
     parsedUrl = new URL(url);
   } catch (error) {
+    if (namesAScheme(url)) {
+      console.warn(`Invalid URL scheme detected ${url}`);
+      return "";
+    }
     return url;
   }
   const scheme = parsedUrl.protocol.slice(0, -1);

package/dist/sanitize-url.js

@@ -1,3 +1,6 @@
+const IGNORED_IN_SCHEME = /[\p{Cc}\p{Cf}]/gu;
+const SCHEME_PREFIX = /^[a-zA-Z][a-zA-Z0-9+.\-]*:/;
+const namesAScheme = (url) => SCHEME_PREFIX.test(url.replace(IGNORED_IN_SCHEME, "").trim());
 const sanitizeUrl = (url) => {
   const allowedSchemes = ["http", "https", "mailto", "tel", "xref"];
   if (!url) return "";
@@ -5,6 +8,10 @@ const sanitizeUrl = (url) => {
   try {
     parsedUrl = new URL(url);
   } catch (error) {
+    if (namesAScheme(url)) {
+      console.warn(`Invalid URL scheme detected ${url}`);
+      return "";
+    }
     return url;
   }
   const scheme = parsedUrl.protocol.slice(0, -1);

package/dist/sanitize-url.test.d.ts

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinacms/mdx",
-  "version": "2.2.2",
+  "version": "2.2.3",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",