@vizzly-testing/cli 0.22.0 → 0.22.1

package/dist/server/routers/screenshot.js

@@ -45,9 +45,10 @@ export function createScreenshotRouter({
         return true;
       } catch (error) {
         output.debug('Screenshot processing error:', {
-          error: error.message
+          error: error.message,
+          stack: error.stack
         });
-        sendError(res, 500, 'Failed to process screenshot');
+        sendError(res, 500, `Failed to process screenshot: ${error.message}`);
         return true;
       }
     }

package/dist/utils/browser.js

@@ -11,7 +11,7 @@ import { platform } from 'node:os';
  * @param {string} url - URL to validate
  * @returns {boolean} True if safe
  */
-function isValidUrl(url) {
+export function isValidBrowserUrl(url) {
   if (typeof url !== 'string' || url.length === 0) {
     return false;
   }
@@ -28,7 +28,7 @@ function isValidUrl(url) {
  */
 export async function openBrowser(url) {
   // Validate URL to prevent command injection
-  if (!isValidUrl(url)) {
+  if (!isValidBrowserUrl(url)) {
     return false;
   }
   return new Promise(resolve => {

package/dist/utils/image-input-detector.js

@@ -27,17 +27,32 @@ export function isBase64(str) {
   // Strip data URI prefix if present (e.g., data:image/png;base64,...)
   let base64Content = str;
   if (str.startsWith('data:')) {
-    const match = str.match(/^data:[a-zA-Z0-9+/.-]+;base64,(.+)$/);
+    let match = str.match(/^data:[a-zA-Z0-9+/.-]+;base64,(.+)$/);
     if (!match) {
       return false; // Has data: prefix but invalid format
     }
     base64Content = match[1];
   }
 
-  // Base64 regex: groups of 4 chars [A-Za-z0-9+/], with optional padding
-  // Valid endings: no padding, or 2/3 chars + padding (= or ==)
-  const base64Pattern = /^([A-Za-z0-9+/]{4})*([A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
-  return base64Pattern.test(base64Content);
+  // Quick check: base64 only contains these characters
+  // Use a simple character class check instead of a complex regex to avoid
+  // catastrophic backtracking on large strings
+  if (!/^[A-Za-z0-9+/=]+$/.test(base64Content)) {
+    return false;
+  }
+
+  // Check length is valid (must be multiple of 4, accounting for padding)
+  let len = base64Content.length;
+  if (len % 4 !== 0) {
+    return false;
+  }
+
+  // Check padding is valid (only at end, max 2 = chars)
+  let paddingMatch = base64Content.match(/=+$/);
+  if (paddingMatch && paddingMatch[0].length > 2) {
+    return false;
+  }
+  return true;
 }
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vizzly-testing/cli",
-  "version": "0.22.0",
+  "version": "0.22.1",
   "description": "Visual review platform for UI developers and designers",
   "keywords": [
     "visual-testing",
@@ -87,7 +87,8 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@vizzly-testing/honeydiff": "^0.7.1",
+    "@vizzly-testing/honeydiff": "^0.8.0",
+    "@vizzly-testing/static-site": "^0.0.11",
     "ansis": "^4.2.0",
     "commander": "^14.0.0",
     "cosmiconfig": "^9.0.0",