ooxml-ui 1.30.0 → 1.31.0

package/dist/pptx/{chunk-KY75GY5O.mjs → chunk-7FXQHSPE.mjs}

@@ -1,30 +1,12 @@
+import { isStorableHyperlinkHref, isOpenableHyperlinkHref } from 'ooxml-core/opc';
+
 // src/pptx/render/hyperlink-security.ts
-var BLOCKED_PROTOCOLS = /* @__PURE__ */ new Set([
-  `${"javascript"}:`,
-  "data:",
-  "vbscript:",
-  "mhtml:",
-  `x-]${"javascript"}:`
-]);
+var PPTX_HYPERLINK_POLICY = { additionalOpenSchemes: ["ftp", "tel", "file"], openRelative: true };
 function isUrlSafe(url) {
-  if (!url || typeof url !== "string") {
-    return false;
-  }
-  const trimmed = url.trim();
-  if (trimmed.length === 0) {
-    return false;
-  }
-  const lower = trimmed.toLowerCase();
-  const stripped = lower.replace(/[\s​]/gu, "").replace(/‌/gu, "").replace(/‍/gu, "").split(String.fromCharCode(0)).join("");
-  for (const protocol of BLOCKED_PROTOCOLS) {
-    if (stripped.startsWith(protocol)) {
-      return false;
-    }
-  }
-  return true;
+  return isPpactionUrl(url) || isStorableHyperlinkHref(url, PPTX_HYPERLINK_POLICY);
 }
 function safeOpenUrl(url, target = "_blank") {
-  if (!isUrlSafe(url)) {
+  if (isPpactionUrl(url) || !isOpenableHyperlinkHref(url, PPTX_HYPERLINK_POLICY)) {
     if (typeof console !== "undefined") {
       console.warn(`[pptx-viewer] Blocked attempt to open unsafe URL: ${url.slice(0, 100)}`);
     }
@@ -75,7 +57,7 @@ function isPpactionUrl(url) {
   return url.toLowerCase().startsWith("ppaction://");
 }
 function resolveHyperlinkHref(url) {
-  if (!url || isPpactionUrl(url) || !isUrlSafe(url)) {
+  if (!url || isPpactionUrl(url) || !isOpenableHyperlinkHref(url, PPTX_HYPERLINK_POLICY)) {
     return void 0;
   }
   return url.trim();