@wirexapp/card-sdk-core 1.1.0-beta.4 → 1.1.0

package/dist/walletReturnUrl.js

@@ -0,0 +1,63 @@
+/**
+ * Return-link policy for STANDALONE launches (the result screen's "Return to
+ * the app" — `returnUrl` in the init, `r` in the launch fragment).
+ *
+ * Any scheme an app can register is accepted: `https:` (an Android App Link /
+ * iOS Universal Link — the OS verifies it for the partner's package, the
+ * preferred form) or the app's own scheme (`com.partner.app:/wallet/return` —
+ * works on both platforms without a domain; any installed app may claim it,
+ * which the partner accepts). Refused are only the schemes that differ IN
+ * KIND from "open the partner's app": the ones a browser executes as content
+ * in the checkout's own origin (`javascript:`, `data:`, `blob:`, …),
+ * browser-internal ones, and cleartext `http:`. Everything else is reachable
+ * through an https redirect anyway, so a longer denylist would be theatre.
+ *
+ * The link carries `estimation_id` and `outcome` only — never the token,
+ * never the wallet payload — and is a UX signal: the app reconciles by
+ * estimation status. Mirrored byte-for-byte in
+ * `sdk-service/frames-src/src/returnLink.ts` (the frames bundle must not
+ * pull the host SDK in) — change both.
+ */
+export const PCI_WALLET_RETURN_URL_BLOCKED_SCHEMES = [
+    // executed as content in this origin
+    'javascript:',
+    'vbscript:',
+    'data:',
+    'blob:',
+    'filesystem:',
+    // browser-internal
+    'file:',
+    'about:',
+    'chrome:',
+    'chrome-extension:',
+    'edge:',
+    'moz-extension:',
+    'safari-web-extension:',
+    'view-source:',
+    // cleartext — https is the only web scheme
+    'http:',
+];
+const BLOCKED = new Set(PCI_WALLET_RETURN_URL_BLOCKED_SCHEMES);
+/** Longest return link accepted — the launch URL is a QR payload / a Custom
+ *  Tab URL, and a partner's return link is a short route. */
+const MAX_RETURN_URL_CHARS = 2048;
+/**
+ * The normalised href when `candidate` is an acceptable return link, else
+ * `null`. Parsed with the WHATWG URL parser BEFORE the scheme check, so case
+ * tricks and embedded tabs / newlines in the scheme (`JavaScript:`,
+ * `java\tscript:`) are normalised away rather than slipping past a string
+ * compare.
+ */
+export const resolveWalletReturnUrl = (candidate) => {
+    if (typeof candidate !== 'string' || !candidate || candidate.length > MAX_RETURN_URL_CHARS)
+        return null;
+    let url;
+    try {
+        url = new URL(candidate);
+    }
+    catch {
+        return null;
+    }
+    return BLOCKED.has(url.protocol) ? null : url.href;
+};
+//# sourceMappingURL=walletReturnUrl.js.map

package/dist/walletReturnUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walletReturnUrl.js","sourceRoot":"","sources":["../src/walletReturnUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAsB;IACtE,qCAAqC;IACrC,aAAa;IACb,WAAW;IACX,OAAO;IACP,OAAO;IACP,aAAa;IACb,mBAAmB;IACnB,OAAO;IACP,QAAQ;IACR,SAAS;IACT,mBAAmB;IACnB,OAAO;IACP,gBAAgB;IAChB,uBAAuB;IACvB,cAAc;IACd,2CAA2C;IAC3C,OAAO;CACR,CAAC;AAEF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,qCAAqC,CAAC,CAAC;AAE/D;6DAC6D;AAC7D,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,SAAkB,EAAiB,EAAE;IAC1E,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,oBAAoB;QAAE,OAAO,IAAI,CAAC;IACxG,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AACrD,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirexapp/card-sdk-core",
-  "version": "1.1.0-beta.4",
+  "version": "1.1.0",
   "type": "module",
   "description": "Shared foundation of the Wirex PCI card SDK: postMessage protocol, frame channel, frame-URL building, collect machinery. CHD-free.",
   "license": "UNLICENSED",