@uniformdev/richtext 20.72.2 → 20.72.3-alpha.14

package/dist/index.d.mts

@@ -111,6 +111,12 @@ declare function isDangerousLinkAttributeKey(key: string): boolean;
  * `rel="noopener noreferrer"` for any case variant of `target="_blank"`.
  */
 declare function linkParamValueToHtmlAttributes(link: LinkParamValue): Record<string, string>;
+/**
+ * Converts a link parameter value into a React-compatible anchor prop bag.
+ * Delegates to `linkParamValueToHtmlAttributes` for the security denylist /
+ * auto-rel logic, then renames the literal `class` key to `className` for React.
+ */
+declare function linkParamValueToAnchorProps(link: LinkParamValue): Record<string, string>;
 /** Derives the href string from a link parameter value. */
 declare function linkParamValueToHref(link: LinkParamValue): string | undefined;
 
@@ -264,4 +270,4 @@ declare const emptyRichTextValue: {
 };
 declare const defaultParameterConfiguration: RichTextParamConfiguration;
 
-export { type AssetNode, type HeadingNode, type LinkAttrConfig, type LinkAttributesConfiguration, type LinkNode, type ListItemNode, type ListNode, type NodeStringRenderer, type NodeStringRendererProps, type ParagraphNode, type ParameterRichTextValue, type ResolveStringRenderer, type RichTextBuiltInElement, type RichTextBuiltInFormat, type RichTextNode, type RichTextNodeWithChildren, type RichTextParamConfiguration, type StringRenderContext, type TableCellNode, type TableNode, type TableRowNode, type TextNode, assetHtmlRenderer, defaultParameterConfiguration, emptyRichTextValue, getLabelForElement, getLabelForFormat, getRichTextTagFromTableCellHeaderState, getRichTextTagsFromTextFormat, hasChildren, headingHtmlRenderer, isArrayWithLength, isDangerousLinkAttributeKey, isPureDirection, isPureTextAlign, isRichTextNode, isRichTextNodeType, isRichTextValue, isRichTextValueConsideredEmpty, linkHtmlRenderer, linkParamValueToHref, linkParamValueToHtmlAttributes, listHtmlRenderer, listitemHtmlRenderer, paragraphHtmlRenderer, purifyText, renderChildrenToHtml, renderChildrenToText, renderHtmlElement, renderToHtml, renderToText, resolveDefaultRenderer$1 as resolveDefaultHtmlRenderer, resolveDefaultRenderer as resolveDefaultTextRenderer, resolveLinkAttrConfig, richTextBuiltInElements, richTextBuiltInFormats, rootHtmlRenderer, tableHtmlRenderer, tablecellHtmlRenderer, tablerowHtmlRenderer, textHtmlRenderer, walkRichTextTree };
+export { type AssetNode, type HeadingNode, type LinkAttrConfig, type LinkAttributesConfiguration, type LinkNode, type ListItemNode, type ListNode, type NodeStringRenderer, type NodeStringRendererProps, type ParagraphNode, type ParameterRichTextValue, type ResolveStringRenderer, type RichTextBuiltInElement, type RichTextBuiltInFormat, type RichTextNode, type RichTextNodeWithChildren, type RichTextParamConfiguration, type StringRenderContext, type TableCellNode, type TableNode, type TableRowNode, type TextNode, assetHtmlRenderer, defaultParameterConfiguration, emptyRichTextValue, getLabelForElement, getLabelForFormat, getRichTextTagFromTableCellHeaderState, getRichTextTagsFromTextFormat, hasChildren, headingHtmlRenderer, isArrayWithLength, isDangerousLinkAttributeKey, isPureDirection, isPureTextAlign, isRichTextNode, isRichTextNodeType, isRichTextValue, isRichTextValueConsideredEmpty, linkHtmlRenderer, linkParamValueToAnchorProps, linkParamValueToHref, linkParamValueToHtmlAttributes, listHtmlRenderer, listitemHtmlRenderer, paragraphHtmlRenderer, purifyText, renderChildrenToHtml, renderChildrenToText, renderHtmlElement, renderToHtml, renderToText, resolveDefaultRenderer$1 as resolveDefaultHtmlRenderer, resolveDefaultRenderer as resolveDefaultTextRenderer, resolveLinkAttrConfig, richTextBuiltInElements, richTextBuiltInFormats, rootHtmlRenderer, tableHtmlRenderer, tablecellHtmlRenderer, tablerowHtmlRenderer, textHtmlRenderer, walkRichTextTree };

package/dist/index.d.ts

@@ -111,6 +111,12 @@ declare function isDangerousLinkAttributeKey(key: string): boolean;
  * `rel="noopener noreferrer"` for any case variant of `target="_blank"`.
  */
 declare function linkParamValueToHtmlAttributes(link: LinkParamValue): Record<string, string>;
+/**
+ * Converts a link parameter value into a React-compatible anchor prop bag.
+ * Delegates to `linkParamValueToHtmlAttributes` for the security denylist /
+ * auto-rel logic, then renames the literal `class` key to `className` for React.
+ */
+declare function linkParamValueToAnchorProps(link: LinkParamValue): Record<string, string>;
 /** Derives the href string from a link parameter value. */
 declare function linkParamValueToHref(link: LinkParamValue): string | undefined;
 
@@ -264,4 +270,4 @@ declare const emptyRichTextValue: {
 };
 declare const defaultParameterConfiguration: RichTextParamConfiguration;
 
-export { type AssetNode, type HeadingNode, type LinkAttrConfig, type LinkAttributesConfiguration, type LinkNode, type ListItemNode, type ListNode, type NodeStringRenderer, type NodeStringRendererProps, type ParagraphNode, type ParameterRichTextValue, type ResolveStringRenderer, type RichTextBuiltInElement, type RichTextBuiltInFormat, type RichTextNode, type RichTextNodeWithChildren, type RichTextParamConfiguration, type StringRenderContext, type TableCellNode, type TableNode, type TableRowNode, type TextNode, assetHtmlRenderer, defaultParameterConfiguration, emptyRichTextValue, getLabelForElement, getLabelForFormat, getRichTextTagFromTableCellHeaderState, getRichTextTagsFromTextFormat, hasChildren, headingHtmlRenderer, isArrayWithLength, isDangerousLinkAttributeKey, isPureDirection, isPureTextAlign, isRichTextNode, isRichTextNodeType, isRichTextValue, isRichTextValueConsideredEmpty, linkHtmlRenderer, linkParamValueToHref, linkParamValueToHtmlAttributes, listHtmlRenderer, listitemHtmlRenderer, paragraphHtmlRenderer, purifyText, renderChildrenToHtml, renderChildrenToText, renderHtmlElement, renderToHtml, renderToText, resolveDefaultRenderer$1 as resolveDefaultHtmlRenderer, resolveDefaultRenderer as resolveDefaultTextRenderer, resolveLinkAttrConfig, richTextBuiltInElements, richTextBuiltInFormats, rootHtmlRenderer, tableHtmlRenderer, tablecellHtmlRenderer, tablerowHtmlRenderer, textHtmlRenderer, walkRichTextTree };
+export { type AssetNode, type HeadingNode, type LinkAttrConfig, type LinkAttributesConfiguration, type LinkNode, type ListItemNode, type ListNode, type NodeStringRenderer, type NodeStringRendererProps, type ParagraphNode, type ParameterRichTextValue, type ResolveStringRenderer, type RichTextBuiltInElement, type RichTextBuiltInFormat, type RichTextNode, type RichTextNodeWithChildren, type RichTextParamConfiguration, type StringRenderContext, type TableCellNode, type TableNode, type TableRowNode, type TextNode, assetHtmlRenderer, defaultParameterConfiguration, emptyRichTextValue, getLabelForElement, getLabelForFormat, getRichTextTagFromTableCellHeaderState, getRichTextTagsFromTextFormat, hasChildren, headingHtmlRenderer, isArrayWithLength, isDangerousLinkAttributeKey, isPureDirection, isPureTextAlign, isRichTextNode, isRichTextNodeType, isRichTextValue, isRichTextValueConsideredEmpty, linkHtmlRenderer, linkParamValueToAnchorProps, linkParamValueToHref, linkParamValueToHtmlAttributes, listHtmlRenderer, listitemHtmlRenderer, paragraphHtmlRenderer, purifyText, renderChildrenToHtml, renderChildrenToText, renderHtmlElement, renderToHtml, renderToText, resolveDefaultRenderer$1 as resolveDefaultHtmlRenderer, resolveDefaultRenderer as resolveDefaultTextRenderer, resolveLinkAttrConfig, richTextBuiltInElements, richTextBuiltInFormats, rootHtmlRenderer, tableHtmlRenderer, tablecellHtmlRenderer, tablerowHtmlRenderer, textHtmlRenderer, walkRichTextTree };

package/dist/index.esm.js

@@ -118,7 +118,7 @@ function linkParamValueToHtmlAttributes(link) {
   var _a;
   const result = {};
   const href = linkParamValueToHref(link);
-  if (href && !hasDangerousScheme(href)) {
+  if (href) {
     result.href = href;
   }
   if (!(link == null ? void 0 : link.attributes)) {
@@ -142,11 +142,25 @@ function linkParamValueToHtmlAttributes(link) {
     }
     result[key] = value;
   }
-  if (((_a = result["target"]) == null ? void 0 : _a.toLowerCase()) === "_blank" && !("rel" in result)) {
+  const targetEntry = Object.entries(result).find(([key]) => key.toLowerCase() === "target");
+  const hasRel = Object.keys(result).some((key) => key.toLowerCase() === "rel");
+  if (((_a = targetEntry == null ? void 0 : targetEntry[1]) == null ? void 0 : _a.toLowerCase()) === "_blank" && !hasRel) {
     result.rel = "noopener noreferrer";
   }
   return result;
 }
+function linkParamValueToAnchorProps(link) {
+  const raw = linkParamValueToHtmlAttributes(link);
+  const result = {};
+  for (const [key, value] of Object.entries(raw)) {
+    if (key === "class") {
+      result["className"] = value;
+    } else {
+      result[key] = value;
+    }
+  }
+  return result;
+}
 function linkParamValueToHref(link) {
   switch (link == null ? void 0 : link.type) {
     case "email":
@@ -154,8 +168,11 @@ function linkParamValueToHref(link) {
     case "tel":
       return `tel:${link.path}`;
     case "url":
-      return link.path;
     case "projectMapNode":
+      if (hasDangerousScheme(link.path)) {
+        console.warn(`[richtext] Dropped disallowed link URL scheme: "${link.path}"`);
+        return void 0;
+      }
       return link.path;
   }
 }
@@ -608,6 +625,7 @@ export {
   isRichTextValue,
   isRichTextValueConsideredEmpty,
   linkHtmlRenderer,
+  linkParamValueToAnchorProps,
   linkParamValueToHref,
   linkParamValueToHtmlAttributes,
   listHtmlRenderer,

package/dist/index.js

@@ -38,6 +38,7 @@ __export(index_exports, {
   isRichTextValue: () => isRichTextValue,
   isRichTextValueConsideredEmpty: () => isRichTextValueConsideredEmpty,
   linkHtmlRenderer: () => linkHtmlRenderer,
+  linkParamValueToAnchorProps: () => linkParamValueToAnchorProps,
   linkParamValueToHref: () => linkParamValueToHref,
   linkParamValueToHtmlAttributes: () => linkParamValueToHtmlAttributes,
   listHtmlRenderer: () => listHtmlRenderer,
@@ -183,7 +184,7 @@ function linkParamValueToHtmlAttributes(link) {
   var _a;
   const result = {};
   const href = linkParamValueToHref(link);
-  if (href && !hasDangerousScheme(href)) {
+  if (href) {
     result.href = href;
   }
   if (!(link == null ? void 0 : link.attributes)) {
@@ -207,11 +208,25 @@ function linkParamValueToHtmlAttributes(link) {
     }
     result[key] = value;
   }
-  if (((_a = result["target"]) == null ? void 0 : _a.toLowerCase()) === "_blank" && !("rel" in result)) {
+  const targetEntry = Object.entries(result).find(([key]) => key.toLowerCase() === "target");
+  const hasRel = Object.keys(result).some((key) => key.toLowerCase() === "rel");
+  if (((_a = targetEntry == null ? void 0 : targetEntry[1]) == null ? void 0 : _a.toLowerCase()) === "_blank" && !hasRel) {
     result.rel = "noopener noreferrer";
   }
   return result;
 }
+function linkParamValueToAnchorProps(link) {
+  const raw = linkParamValueToHtmlAttributes(link);
+  const result = {};
+  for (const [key, value] of Object.entries(raw)) {
+    if (key === "class") {
+      result["className"] = value;
+    } else {
+      result[key] = value;
+    }
+  }
+  return result;
+}
 function linkParamValueToHref(link) {
   switch (link == null ? void 0 : link.type) {
     case "email":
@@ -219,8 +234,11 @@ function linkParamValueToHref(link) {
     case "tel":
       return `tel:${link.path}`;
     case "url":
-      return link.path;
     case "projectMapNode":
+      if (hasDangerousScheme(link.path)) {
+        console.warn(`[richtext] Dropped disallowed link URL scheme: "${link.path}"`);
+        return void 0;
+      }
       return link.path;
   }
 }
@@ -674,6 +692,7 @@ var defaultParameterConfiguration = {
   isRichTextValue,
   isRichTextValueConsideredEmpty,
   linkHtmlRenderer,
+  linkParamValueToAnchorProps,
   linkParamValueToHref,
   linkParamValueToHtmlAttributes,
   listHtmlRenderer,

package/dist/index.mjs

@@ -118,7 +118,7 @@ function linkParamValueToHtmlAttributes(link) {
   var _a;
   const result = {};
   const href = linkParamValueToHref(link);
-  if (href && !hasDangerousScheme(href)) {
+  if (href) {
     result.href = href;
   }
   if (!(link == null ? void 0 : link.attributes)) {
@@ -142,11 +142,25 @@ function linkParamValueToHtmlAttributes(link) {
     }
     result[key] = value;
   }
-  if (((_a = result["target"]) == null ? void 0 : _a.toLowerCase()) === "_blank" && !("rel" in result)) {
+  const targetEntry = Object.entries(result).find(([key]) => key.toLowerCase() === "target");
+  const hasRel = Object.keys(result).some((key) => key.toLowerCase() === "rel");
+  if (((_a = targetEntry == null ? void 0 : targetEntry[1]) == null ? void 0 : _a.toLowerCase()) === "_blank" && !hasRel) {
     result.rel = "noopener noreferrer";
   }
   return result;
 }
+function linkParamValueToAnchorProps(link) {
+  const raw = linkParamValueToHtmlAttributes(link);
+  const result = {};
+  for (const [key, value] of Object.entries(raw)) {
+    if (key === "class") {
+      result["className"] = value;
+    } else {
+      result[key] = value;
+    }
+  }
+  return result;
+}
 function linkParamValueToHref(link) {
   switch (link == null ? void 0 : link.type) {
     case "email":
@@ -154,8 +168,11 @@ function linkParamValueToHref(link) {
     case "tel":
       return `tel:${link.path}`;
     case "url":
-      return link.path;
     case "projectMapNode":
+      if (hasDangerousScheme(link.path)) {
+        console.warn(`[richtext] Dropped disallowed link URL scheme: "${link.path}"`);
+        return void 0;
+      }
       return link.path;
   }
 }
@@ -608,6 +625,7 @@ export {
   isRichTextValue,
   isRichTextValueConsideredEmpty,
   linkHtmlRenderer,
+  linkParamValueToAnchorProps,
   linkParamValueToHref,
   linkParamValueToHtmlAttributes,
   listHtmlRenderer,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniformdev/richtext",
-  "version": "20.72.2",
+  "version": "20.72.3-alpha.14+1e232e59cd",
   "description": "Common functionality and types for Uniform Rich Text parameters",
   "license": "SEE LICENSE IN LICENSE.txt",
   "main": "./dist/index.js",
@@ -44,7 +44,7 @@
     "@lexical/link": "0.45.0",
     "@lexical/list": "0.45.0",
     "@lexical/rich-text": "0.45.0",
-    "@uniformdev/assets": "20.72.2",
+    "@uniformdev/assets": "20.72.3-alpha.14+1e232e59cd",
     "lexical": "0.45.0"
   },
   "files": [
@@ -53,5 +53,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "8b65535fb3ec81e23f9eb8e0ed0b0be478f6e0e8"
+  "gitHead": "1e232e59cd3ded97b85b063986cc95e954b8c937"
 }