@uniformdev/next-app-router 20.50.2-alpha.109 → 20.50.2-alpha.146

package/dist/handler.js

@@ -1688,8 +1688,17 @@ var createPreviewGETRouteHandler = (options) => {
   };
 };
 function validateLocalRedirectUrl(pathToRedirectTo) {
-  if (pathToRedirectTo == null ? void 0 : pathToRedirectTo.match(/^[a-z]+:\/\//g)) {
-    throw new Error("Tried to redirect to absolute URL with protocol. Disallowing open redirect.");
+  if (!pathToRedirectTo) {
+    return;
+  }
+  let resolved;
+  try {
+    resolved = new URL(pathToRedirectTo, BASE_URL_EXAMPLE);
+  } catch (e) {
+    throw new Error("Invalid redirect path. Disallowing open redirect.");
+  }
+  if (resolved.origin !== BASE_URL_EXAMPLE) {
+    throw new Error("Tried to redirect off-origin. Disallowing open redirect.");
   }
 }
 var resolveFullPathDefault = ({ slug, path }) => {

package/dist/handler.mjs

@@ -1673,8 +1673,17 @@ var createPreviewGETRouteHandler = (options) => {
   };
 };
 function validateLocalRedirectUrl(pathToRedirectTo) {
-  if (pathToRedirectTo == null ? void 0 : pathToRedirectTo.match(/^[a-z]+:\/\//g)) {
-    throw new Error("Tried to redirect to absolute URL with protocol. Disallowing open redirect.");
+  if (!pathToRedirectTo) {
+    return;
+  }
+  let resolved;
+  try {
+    resolved = new URL(pathToRedirectTo, BASE_URL_EXAMPLE);
+  } catch (e) {
+    throw new Error("Invalid redirect path. Disallowing open redirect.");
+  }
+  if (resolved.origin !== BASE_URL_EXAMPLE) {
+    throw new Error("Tried to redirect off-origin. Disallowing open redirect.");
   }
 }
 var resolveFullPathDefault = ({ slug, path }) => {

package/package.json

@@ -1,11 +1,10 @@
 {
   "name": "@uniformdev/next-app-router",
-  "version": "20.50.2-alpha.109+846837c66a",
+  "version": "20.50.2-alpha.146+88f341e03e",
   "license": "SEE LICENSE IN LICENSE.txt",
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
-    "lint": "eslint \"src/**/*.{ts,tsx}\" --fix",
     "test": "vitest run"
   },
   "sideEffects": false,
@@ -99,12 +98,12 @@
     "vitest": "3.2.4"
   },
   "dependencies": {
-    "@uniformdev/canvas-react": "20.50.2-alpha.109+846837c66a",
-    "@uniformdev/next-app-router-client": "20.50.2-alpha.109+846837c66a",
-    "@uniformdev/next-app-router-shared": "20.50.2-alpha.109+846837c66a",
-    "@uniformdev/redirect": "20.50.2-alpha.109+846837c66a",
-    "@uniformdev/richtext": "20.50.2-alpha.109+846837c66a",
-    "@uniformdev/webhooks": "20.50.2-alpha.109+846837c66a",
+    "@uniformdev/canvas-react": "20.50.2-alpha.146+88f341e03e",
+    "@uniformdev/next-app-router-client": "20.50.2-alpha.146+88f341e03e",
+    "@uniformdev/next-app-router-shared": "20.50.2-alpha.146+88f341e03e",
+    "@uniformdev/redirect": "20.50.2-alpha.146+88f341e03e",
+    "@uniformdev/richtext": "20.50.2-alpha.146+88f341e03e",
+    "@uniformdev/webhooks": "20.50.2-alpha.146+88f341e03e",
     "@vercel/functions": "^2.2.2",
     "encoding": "^0.1.13",
     "server-only": "^0.0.1",
@@ -121,5 +120,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "846837c66ad0f518683c100615b59b27f91498ba"
+  "gitHead": "88f341e03ec871c6af2cd47b9ce257ff4a394816"
 }