platform-types 1.10.690 → 1.10.691

package/dist/cjs/storefrontWebLiteralKeys.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isStorefrontLiteralKey = exports.STOREFRONT_WEB_LITERAL_KEYS = void 0;
+exports.isAllowedStorefrontLiteralValue = exports.isStorefrontLiteralKey = exports.STOREFRONT_WEB_LITERAL_KEYS = void 0;
 /**
  * Every storefront `WEB` literal key a shop may override, in code-unit order.
  *
@@ -1113,3 +1113,23 @@ const STOREFRONT_WEB_LITERAL_KEY_SET = new Set(exports.STOREFRONT_WEB_LITERAL_KE
 /** Whether a shop may override `key` — membership in {@link STOREFRONT_WEB_LITERAL_KEYS}. */
 const isStorefrontLiteralKey = (key) => STOREFRONT_WEB_LITERAL_KEY_SET.has(key);
 exports.isStorefrontLiteralKey = isStorefrontLiteralKey;
+/** Keys whose value is a storefront route the storefront renders as a link target. */
+const STOREFRONT_NAVIGATE_LITERAL_PREFIX = 'NAVIGATE_';
+/**
+ * A same-origin path: a leading `/`, a second character that is neither `/` nor `\`
+ * (`//host` and `/\host` are protocol-relative to a browser), and no whitespace or
+ * backslash anywhere — a browser strips tab and newline before parsing, so `/\t/host`
+ * becomes `//host`. A value with a scheme cannot start with `/`.
+ *
+ * The storefront is to apply this identical pattern in `src/app/slices/literals.ts`
+ * `resolveLayer` (its change is pending there); keep the two the same.
+ */
+const STOREFRONT_SAME_ORIGIN_PATH_RE = /^\/(?![/\\])[^\s\\]*$/;
+/**
+ * Whether `value` may be stored, published or served for `key`. A `NAVIGATE_*` key is
+ * rendered as a link, so it must be a same-origin path — otherwise an override could
+ * send a shop's customers to an off-site look-alike login page. Every other key is
+ * unconstrained here (key membership, well-formedness and length are checked apart).
+ */
+const isAllowedStorefrontLiteralValue = (key, value) => !key.startsWith(STOREFRONT_NAVIGATE_LITERAL_PREFIX) || STOREFRONT_SAME_ORIGIN_PATH_RE.test(value);
+exports.isAllowedStorefrontLiteralValue = isAllowedStorefrontLiteralValue;

package/dist/storefrontWebLiteralKeys.d.ts

@@ -21,3 +21,10 @@
 export declare const STOREFRONT_WEB_LITERAL_KEYS: readonly string[];
 /** Whether a shop may override `key` — membership in {@link STOREFRONT_WEB_LITERAL_KEYS}. */
 export declare const isStorefrontLiteralKey: (key: string) => boolean;
+/**
+ * Whether `value` may be stored, published or served for `key`. A `NAVIGATE_*` key is
+ * rendered as a link, so it must be a same-origin path — otherwise an override could
+ * send a shop's customers to an off-site look-alike login page. Every other key is
+ * unconstrained here (key membership, well-formedness and length are checked apart).
+ */
+export declare const isAllowedStorefrontLiteralValue: (key: string, value: string) => boolean;

package/dist/storefrontWebLiteralKeys.js

@@ -1109,3 +1109,22 @@ export const STOREFRONT_WEB_LITERAL_KEYS = Object.freeze([
 const STOREFRONT_WEB_LITERAL_KEY_SET = new Set(STOREFRONT_WEB_LITERAL_KEYS);
 /** Whether a shop may override `key` — membership in {@link STOREFRONT_WEB_LITERAL_KEYS}. */
 export const isStorefrontLiteralKey = (key) => STOREFRONT_WEB_LITERAL_KEY_SET.has(key);
+/** Keys whose value is a storefront route the storefront renders as a link target. */
+const STOREFRONT_NAVIGATE_LITERAL_PREFIX = 'NAVIGATE_';
+/**
+ * A same-origin path: a leading `/`, a second character that is neither `/` nor `\`
+ * (`//host` and `/\host` are protocol-relative to a browser), and no whitespace or
+ * backslash anywhere — a browser strips tab and newline before parsing, so `/\t/host`
+ * becomes `//host`. A value with a scheme cannot start with `/`.
+ *
+ * The storefront is to apply this identical pattern in `src/app/slices/literals.ts`
+ * `resolveLayer` (its change is pending there); keep the two the same.
+ */
+const STOREFRONT_SAME_ORIGIN_PATH_RE = /^\/(?![/\\])[^\s\\]*$/;
+/**
+ * Whether `value` may be stored, published or served for `key`. A `NAVIGATE_*` key is
+ * rendered as a link, so it must be a same-origin path — otherwise an override could
+ * send a shop's customers to an off-site look-alike login page. Every other key is
+ * unconstrained here (key membership, well-formedness and length are checked apart).
+ */
+export const isAllowedStorefrontLiteralValue = (key, value) => !key.startsWith(STOREFRONT_NAVIGATE_LITERAL_PREFIX) || STOREFRONT_SAME_ORIGIN_PATH_RE.test(value);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.690",
+	"version": "1.10.691",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",