careermate 0.1.1 → 0.1.2

package/dist/migrate.mjs

@@ -4201,7 +4201,7 @@ ZodNaN.create = (params) => {
     ...processCreateParams(params)
   });
 };
-var BRAND = Symbol("zod_brand");
+var BRAND = /* @__PURE__ */ Symbol("zod_brand");
 var ZodBranded = class extends ZodType {
   _parse(input) {
     const { ctx } = this._processInputParams(input);
@@ -4403,20 +4403,27 @@ var ostring = () => stringType().optional();
 var onumber = () => numberType().optional();
 var oboolean = () => booleanType().optional();
 var coerce = {
-  string: (arg) => ZodString.create({ ...arg, coerce: true }),
-  number: (arg) => ZodNumber.create({ ...arg, coerce: true }),
-  boolean: (arg) => ZodBoolean.create({
+  string: ((arg) => ZodString.create({ ...arg, coerce: true })),
+  number: ((arg) => ZodNumber.create({ ...arg, coerce: true })),
+  boolean: ((arg) => ZodBoolean.create({
     ...arg,
     coerce: true
-  }),
-  bigint: (arg) => ZodBigInt.create({ ...arg, coerce: true }),
-  date: (arg) => ZodDate.create({ ...arg, coerce: true })
+  })),
+  bigint: ((arg) => ZodBigInt.create({ ...arg, coerce: true })),
+  date: ((arg) => ZodDate.create({ ...arg, coerce: true }))
 };
 var NEVER = INVALID;
 
 // packages/shared/src/schemas.ts
 var isoDateTime = external_exports.string();
 var id = external_exports.string();
+function isSafeUrl(u) {
+  const s = u.trim();
+  return !/^[a-z][a-z0-9+.-]*:/i.test(s) || /^(https?:|mailto:)/i.test(s);
+}
+var UNSAFE_URL_MSG = "javascript: \uAC19\uC740 \uC704\uD5D8\uD55C \uB9C1\uD06C\uB294 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. http(s) \uB9C1\uD06C\uB97C \uC0AC\uC6A9\uD558\uC138\uC694.";
+var SafeUrl = external_exports.string().min(1).refine(isSafeUrl, { message: UNSAFE_URL_MSG });
+var SafeUrlOptional = external_exports.string().optional().refine((u) => u == null || u === "" || isSafeUrl(u), { message: UNSAFE_URL_MSG });
 var baseRecord = {
   id,
   created_at: isoDateTime,
@@ -4424,7 +4431,7 @@ var baseRecord = {
 };
 var LinkSchema = external_exports.object({
   label: external_exports.string().min(1),
-  url: external_exports.string().min(1)
+  url: SafeUrl
 });
 var ProfileInputSchema = external_exports.object({
   name: external_exports.string().min(1).optional(),
@@ -4484,7 +4491,7 @@ var ProjectInputSchema = external_exports.object({
   description: external_exports.string().optional(),
   highlights: external_exports.array(external_exports.string()).optional(),
   tech: external_exports.array(external_exports.string()).optional(),
-  url: external_exports.string().optional(),
+  url: SafeUrlOptional,
   start_date: external_exports.string().optional(),
   end_date: external_exports.string().optional(),
   order_index: external_exports.number().optional()
@@ -4572,7 +4579,7 @@ var CoverLetterRecordSchema = external_exports.object({
 var JobInputSchema = external_exports.object({
   company: external_exports.string().min(1),
   position: external_exports.string().min(1).describe("\uC9C1\uBB34/\uD3EC\uC9C0\uC158\uBA85"),
-  url: external_exports.string().optional(),
+  url: SafeUrlOptional,
   location: external_exports.string().optional(),
   employment_type: external_exports.string().optional(),
   description: external_exports.string().optional().describe("\uACF5\uACE0 \uC6D0\uBB38 \uB610\uB294 \uC815\uB9AC\uB41C \uD14D\uC2A4\uD2B8"),