react-router 7.13.1 → 7.13.2

package/dist/production/dom-export.d.mts

@@ -1,6 +1,7 @@
 import * as React from 'react';
-import { f as RouterProviderProps$1, e as RouterInit, u as unstable_ClientInstrumentation, g as ClientOnErrorFunction } from './router-cLsU7kHk.mjs';
-export { D as unstable_DecodeActionFunction, a as unstable_DecodeFormStateFunction, b as unstable_DecodeReplyFunction, R as unstable_RSCHydratedRouter, d as unstable_RSCManifestPayload, e as unstable_RSCPayload, f as unstable_RSCRenderPayload, c as unstable_createCallServer } from './browser-DzsJABDQ.mjs';
+import { a as RouterProviderProps$1, R as RouterInit, u as unstable_ClientInstrumentation, C as ClientOnErrorFunction } from './context-phCt_zmH.mjs';
+export { D as unstable_DecodeActionFunction, a as unstable_DecodeFormStateFunction, b as unstable_DecodeReplyFunction, R as unstable_RSCHydratedRouter, d as unstable_RSCManifestPayload, e as unstable_RSCPayload, f as unstable_RSCRenderPayload, c as unstable_createCallServer } from './browser-Di6-vSl-.mjs';
+import './routeModules-BRrCYrSL.mjs';
 
 type RouterProviderProps = Omit<RouterProviderProps$1, "flushSync">;
 declare function RouterProvider(props: Omit<RouterProviderProps, "flushSync">): React.JSX.Element;

package/dist/production/dom-export.d.ts

@@ -1,7 +1,8 @@
 import * as React from 'react';
 import { RouterProviderProps as RouterProviderProps$1, RouterInit, ClientOnErrorFunction } from 'react-router';
-import { u as unstable_ClientInstrumentation } from './instrumentation--6Pioq_G.js';
-export { D as unstable_DecodeActionFunction, a as unstable_DecodeFormStateFunction, b as unstable_DecodeReplyFunction, R as unstable_RSCHydratedRouter, d as unstable_RSCManifestPayload, e as unstable_RSCPayload, f as unstable_RSCRenderPayload, c as unstable_createCallServer } from './browser-sPQ7eaK4.js';
+import { u as unstable_ClientInstrumentation } from './instrumentation-BYr6ff5D.js';
+export { D as unstable_DecodeActionFunction, a as unstable_DecodeFormStateFunction, b as unstable_DecodeReplyFunction, R as unstable_RSCHydratedRouter, d as unstable_RSCManifestPayload, e as unstable_RSCPayload, f as unstable_RSCRenderPayload, c as unstable_createCallServer } from './browser-Bfn3xw9E.js';
+import './routeModules-CA7kSxJJ.js';
 
 type RouterProviderProps = Omit<RouterProviderProps$1, "flushSync">;
 declare function RouterProvider(props: Omit<RouterProviderProps, "flushSync">): React.JSX.Element;

package/dist/production/dom-export.js

@@ -1,5 +1,5 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }/**
- * react-router v7.13.1
+ * react-router v7.13.2
  *
  * Copyright (c) Remix Software Inc.
  *
@@ -13,7 +13,7 @@
 
 
 
-var _chunkZJMCM6KTjs = require('./chunk-ZJMCM6KT.js');
+var _chunkCAFVLUDYjs = require('./chunk-CAFVLUDY.js');
 
 
 
@@ -32,7 +32,8 @@ var _chunkZJMCM6KTjs = require('./chunk-ZJMCM6KT.js');
 
 
 
-var _chunk772H4TVRjs = require('./chunk-772H4TVR.js');
+
+var _chunkLKUVSIBAjs = require('./chunk-LKUVSIBA.js');
 
 // lib/dom-export/dom-router-provider.tsx
 var _react = require('react'); var React = _interopRequireWildcard(_react); var React2 = _interopRequireWildcard(_react); var React3 = _interopRequireWildcard(_react);
@@ -165,7 +166,7 @@ function createHydratedRouter({
     unstable_instrumentations,
     mapRouteProperties: _reactrouter.UNSAFE_mapRouteProperties,
     future: {
-      middleware: ssrInfo.context.future.v8_middleware
+      unstable_passThroughRequests: ssrInfo.context.future.unstable_passThroughRequests
     },
     dataStrategy: _reactrouter.UNSAFE_getTurboStreamSingleFetchDataStrategy.call(void 0, 
       () => router2,
@@ -212,7 +213,7 @@ function HydratedRouter(props) {
   }, []);
   React2.useEffect(() => {
     if (process.env.NODE_ENV === "development" && criticalCss === void 0) {
-      document.querySelectorAll(`[${_chunk772H4TVRjs.CRITICAL_CSS_DATA_ATTRIBUTE}]`).forEach((element) => element.remove());
+      document.querySelectorAll(`[${_chunkLKUVSIBAjs.CRITICAL_CSS_DATA_ATTRIBUTE}]`).forEach((element) => element.remove());
     }
   }, [criticalCss]);
   let [location2, setLocation] = React2.useState(router.state.location);
@@ -305,6 +306,9 @@ function createCallServer({
         Promise.resolve(payloadPromise).then(async (payload) => {
           if (payload.type === "redirect") {
             if (payload.reload || isExternalLocation(payload.location)) {
+              if (hasInvalidProtocol(payload.location)) {
+                throw new Error("Invalid redirect location");
+              }
               window.location.href = payload.location;
               return;
             }
@@ -322,6 +326,9 @@ function createCallServer({
           if (rerender && landedActionId < actionId && globalVar.__routerActionID <= actionId) {
             if (rerender.type === "redirect") {
               if (rerender.reload || isExternalLocation(rerender.location)) {
+                if (hasInvalidProtocol(rerender.location)) {
+                  throw new Error("Invalid redirect location");
+                }
                 window.location.href = rerender.location;
                 return;
               }
@@ -384,10 +391,10 @@ function createRouterFromPayload({
     };
   if (payload.type !== "render") throw new Error("Invalid payload type");
   globalVar.__reactRouterRouteModules = _nullishCoalesce(globalVar.__reactRouterRouteModules, () => ( {}));
-  _chunkZJMCM6KTjs.populateRSCRouteModules.call(void 0, globalVar.__reactRouterRouteModules, payload.matches);
+  _chunkCAFVLUDYjs.populateRSCRouteModules.call(void 0, globalVar.__reactRouterRouteModules, payload.matches);
   let patches = /* @__PURE__ */ new Map();
   _optionalChain([payload, 'access', _22 => _22.patches, 'optionalAccess', _23 => _23.forEach, 'call', _24 => _24((patch) => {
-    _chunk772H4TVRjs.invariant.call(void 0, patch.parentId, "Invalid patch parentId");
+    _chunkLKUVSIBAjs.invariant.call(void 0, patch.parentId, "Invalid patch parentId");
     if (!patches.has(patch.parentId)) {
       patches.set(patch.parentId, []);
     }
@@ -409,12 +416,12 @@ function createRouterFromPayload({
     }
     return [route];
   }, []);
-  globalVar.__reactRouterDataRouter = _chunk772H4TVRjs.createRouter.call(void 0, {
+  globalVar.__reactRouterDataRouter = _chunkLKUVSIBAjs.createRouter.call(void 0, {
     routes,
     getContext,
     basename: payload.basename,
-    history: _chunk772H4TVRjs.createBrowserHistory.call(void 0, ),
-    hydrationData: _chunkZJMCM6KTjs.getHydrationData.call(void 0, {
+    history: _chunkLKUVSIBAjs.createBrowserHistory.call(void 0, ),
+    hydrationData: _chunkCAFVLUDYjs.getHydrationData.call(void 0, {
       state: {
         loaderData: payload.loaderData,
         actionData: payload.actionData,
@@ -423,7 +430,7 @@ function createRouterFromPayload({
       routes,
       getRouteInfo: (routeId) => {
         let match = payload.matches.find((m) => m.id === routeId);
-        _chunk772H4TVRjs.invariant.call(void 0, match, "Route not found in payload");
+        _chunkLKUVSIBAjs.invariant.call(void 0, match, "Route not found in payload");
         return {
           clientLoader: match.clientLoader,
           hasLoader: match.hasLoader,
@@ -521,9 +528,9 @@ function createRouterFromPayload({
     routeModules: globalVar.__reactRouterRouteModules
   };
 }
-var renderedRoutesContext = _chunk772H4TVRjs.createContext.call(void 0, );
+var renderedRoutesContext = _chunkLKUVSIBAjs.createContext.call(void 0, );
 function getRSCSingleFetchDataStrategy(getRouter, ssr, basename, createFromReadableStream, fetchImplementation) {
-  let dataStrategy = _chunk772H4TVRjs.getSingleFetchDataStrategyImpl.call(void 0, 
+  let dataStrategy = _chunkLKUVSIBAjs.getSingleFetchDataStrategyImpl.call(void 0, 
     getRouter,
     (match) => {
       let M = match;
@@ -581,20 +588,20 @@ function getRSCSingleFetchDataStrategy(getRouter, ssr, basename, createFromReada
 function getFetchAndDecodeViaRSC(createFromReadableStream, fetchImplementation) {
   return async (args, basename, trailingSlashAware, targetRoutes) => {
     let { request, context } = args;
-    let url = _chunk772H4TVRjs.singleFetchUrl.call(void 0, request.url, basename, trailingSlashAware, "rsc");
+    let url = _chunkLKUVSIBAjs.singleFetchUrl.call(void 0, request.url, basename, trailingSlashAware, "rsc");
     if (request.method === "GET") {
-      url = _chunk772H4TVRjs.stripIndexParam.call(void 0, url);
+      url = _chunkLKUVSIBAjs.stripIndexParam.call(void 0, url);
       if (targetRoutes) {
         url.searchParams.set("_routes", targetRoutes.join(","));
       }
     }
     let res = await fetchImplementation(
-      new Request(url, await _chunk772H4TVRjs.createRequestInit.call(void 0, request))
+      new Request(url, await _chunkLKUVSIBAjs.createRequestInit.call(void 0, request))
     );
     if (res.status >= 400 && !res.headers.has("X-Remix-Response")) {
-      throw new (0, _chunk772H4TVRjs.ErrorResponseImpl)(res.status, res.statusText, await res.text());
+      throw new (0, _chunkLKUVSIBAjs.ErrorResponseImpl)(res.status, res.statusText, await res.text());
     }
-    _chunk772H4TVRjs.invariant.call(void 0, res.body, "No response body to decode");
+    _chunkLKUVSIBAjs.invariant.call(void 0, res.body, "No response body to decode");
     try {
       const payload = await createFromReadableStream(res.body, {
         temporaryReferences: void 0
@@ -618,7 +625,7 @@ function getFetchAndDecodeViaRSC(createFromReadableStream, fetchImplementation)
       }
       context.get(renderedRoutesContext).push(...payload.matches);
       let results = { routes: {} };
-      const dataKey = _chunk772H4TVRjs.isMutationMethod.call(void 0, request.method) ? "actionData" : "loaderData";
+      const dataKey = _chunkLKUVSIBAjs.isMutationMethod.call(void 0, request.method) ? "actionData" : "loaderData";
       for (let [routeId, data] of Object.entries(payload[dataKey] || {})) {
         results.routes[routeId] = { data };
       }
@@ -651,7 +658,7 @@ function RSCHydratedRouter({
     [createFromReadableStream, payload, fetchImplementation, getContext]
   );
   React3.useEffect(() => {
-    _chunk772H4TVRjs.setIsHydrated.call(void 0, );
+    _chunkLKUVSIBAjs.setIsHydrated.call(void 0, );
   }, []);
   React3.useLayoutEffect(() => {
     const globalVar = window;
@@ -737,7 +744,9 @@ function RSCHydratedRouter({
       // flags that drive runtime behavior they'll need to be proxied through.
       v8_middleware: false,
       unstable_subResourceIntegrity: false,
-      unstable_trailingSlashAwareDataRequests: true
+      unstable_trailingSlashAwareDataRequests: true,
+      // always on for RSC
+      unstable_passThroughRequests: true
       // always on for RSC
     },
     isSpaMode: false,
@@ -755,8 +764,8 @@ function RSCHydratedRouter({
     routeDiscovery: { mode: "lazy", manifestPath: "/__manifest" },
     routeModules
   };
-  return /* @__PURE__ */ React3.createElement(_chunk772H4TVRjs.RSCRouterContext.Provider, { value: true }, /* @__PURE__ */ React3.createElement(_chunkZJMCM6KTjs.RSCRouterGlobalErrorBoundary, { location: state.location }, /* @__PURE__ */ React3.createElement(_chunk772H4TVRjs.FrameworkContext.Provider, { value: frameworkContext }, /* @__PURE__ */ React3.createElement(
-    _chunk772H4TVRjs.RouterProvider,
+  return /* @__PURE__ */ React3.createElement(_chunkLKUVSIBAjs.RSCRouterContext.Provider, { value: true }, /* @__PURE__ */ React3.createElement(_chunkCAFVLUDYjs.RSCRouterGlobalErrorBoundary, { location: state.location }, /* @__PURE__ */ React3.createElement(_chunkLKUVSIBAjs.FrameworkContext.Provider, { value: frameworkContext }, /* @__PURE__ */ React3.createElement(
+    _chunkLKUVSIBAjs.RouterProvider,
     {
       router: transitionEnabledRouter,
       flushSync: ReactDOM2.flushSync
@@ -772,8 +781,8 @@ function createRouteFromServerManifest(match, payload) {
   // the server loader flow regardless of whether the client loader calls
   // `serverLoader` or not, otherwise we'll have nothing to render.
   match.hasComponent && !match.element;
-  _chunk772H4TVRjs.invariant.call(void 0, window.__reactRouterRouteModules);
-  _chunkZJMCM6KTjs.populateRSCRouteModules.call(void 0, window.__reactRouterRouteModules, match);
+  _chunkLKUVSIBAjs.invariant.call(void 0, window.__reactRouterRouteModules);
+  _chunkCAFVLUDYjs.populateRSCRouteModules.call(void 0, window.__reactRouterRouteModules, match);
   let dataRoute = {
     id: match.id,
     element: match.element,
@@ -823,7 +832,7 @@ function createRouteFromServerManifest(match, payload) {
         return await callSingleFetch(singleFetch);
       }
     }) : match.hasAction ? (_, singleFetch) => callSingleFetch(singleFetch) : () => {
-      throw _chunk772H4TVRjs.noActionDefinedError.call(void 0, "action", match.id);
+      throw _chunkLKUVSIBAjs.noActionDefinedError.call(void 0, "action", match.id);
     },
     path: match.path,
     shouldRevalidate: match.shouldRevalidate,
@@ -836,7 +845,7 @@ function createRouteFromServerManifest(match, payload) {
     hasShouldRevalidate: match.shouldRevalidate != null
   };
   if (typeof dataRoute.loader === "function") {
-    dataRoute.loader.hydrate = _chunk772H4TVRjs.shouldHydrateRouteLoader.call(void 0, 
+    dataRoute.loader.hydrate = _chunkLKUVSIBAjs.shouldHydrateRouteLoader.call(void 0, 
       match.id,
       match.clientLoader,
       match.hasLoader,
@@ -846,7 +855,7 @@ function createRouteFromServerManifest(match, payload) {
   return dataRoute;
 }
 function callSingleFetch(singleFetch) {
-  _chunk772H4TVRjs.invariant.call(void 0, typeof singleFetch === "function", "Invalid singleFetch parameter");
+  _chunkLKUVSIBAjs.invariant.call(void 0, typeof singleFetch === "function", "Invalid singleFetch parameter");
   return singleFetch();
 }
 function preventInvalidServerHandlerCall(type, routeId, hasHandler) {
@@ -854,7 +863,7 @@ function preventInvalidServerHandlerCall(type, routeId, hasHandler) {
     let fn = type === "action" ? "serverAction()" : "serverLoader()";
     let msg = `You are trying to call ${fn} on a route that does not have a server ${type} (routeId: "${routeId}")`;
     console.error(msg);
-    throw new (0, _chunk772H4TVRjs.ErrorResponseImpl)(400, "Bad Request", new Error(msg), true);
+    throw new (0, _chunkLKUVSIBAjs.ErrorResponseImpl)(400, "Bad Request", new Error(msg), true);
   }
 }
 var nextPaths = /* @__PURE__ */ new Set();
@@ -924,6 +933,13 @@ function isExternalLocation(location2) {
   const newLocation = new URL(location2, window.location.href);
   return newLocation.origin !== window.location.origin;
 }
+function hasInvalidProtocol(location2) {
+  try {
+    return _chunkLKUVSIBAjs.invalidProtocols.includes(new URL(location2).protocol);
+  } catch (e2) {
+    return false;
+  }
+}
 function cloneRoutes(routes) {
   if (!routes) return void 0;
   return routes.map((route) => ({

package/dist/production/dom-export.mjs

@@ -1,5 +1,5 @@
 /**
- * react-router v7.13.1
+ * react-router v7.13.2
  *
  * Copyright (c) Remix Software Inc.
  *
@@ -14,7 +14,7 @@ import {
   deserializeErrors,
   getHydrationData,
   populateRSCRouteModules
-} from "./chunk-TXB4YXR2.mjs";
+} from "./chunk-PY35PE22.mjs";
 import {
   CRITICAL_CSS_DATA_ATTRIBUTE,
   ErrorResponseImpl,
@@ -33,6 +33,7 @@ import {
   getSingleFetchDataStrategyImpl,
   getTurboStreamSingleFetchDataStrategy,
   hydrationRouteProperties,
+  invalidProtocols,
   invariant,
   isMutationMethod,
   mapRouteProperties,
@@ -42,7 +43,7 @@ import {
   singleFetchUrl,
   stripIndexParam,
   useFogOFWarDiscovery
-} from "./chunk-RJCJ3EYF.mjs";
+} from "./chunk-2BDJPJTA.mjs";
 
 // lib/dom-export/dom-router-provider.tsx
 import * as React from "react";
@@ -157,7 +158,7 @@ function createHydratedRouter({
     unstable_instrumentations,
     mapRouteProperties,
     future: {
-      middleware: ssrInfo.context.future.v8_middleware
+      unstable_passThroughRequests: ssrInfo.context.future.unstable_passThroughRequests
     },
     dataStrategy: getTurboStreamSingleFetchDataStrategy(
       () => router2,
@@ -297,6 +298,9 @@ function createCallServer({
         Promise.resolve(payloadPromise).then(async (payload) => {
           if (payload.type === "redirect") {
             if (payload.reload || isExternalLocation(payload.location)) {
+              if (hasInvalidProtocol(payload.location)) {
+                throw new Error("Invalid redirect location");
+              }
               window.location.href = payload.location;
               return;
             }
@@ -314,6 +318,9 @@ function createCallServer({
           if (rerender && landedActionId < actionId && globalVar.__routerActionID <= actionId) {
             if (rerender.type === "redirect") {
               if (rerender.reload || isExternalLocation(rerender.location)) {
+                if (hasInvalidProtocol(rerender.location)) {
+                  throw new Error("Invalid redirect location");
+                }
                 window.location.href = rerender.location;
                 return;
               }
@@ -729,7 +736,9 @@ function RSCHydratedRouter({
       // flags that drive runtime behavior they'll need to be proxied through.
       v8_middleware: false,
       unstable_subResourceIntegrity: false,
-      unstable_trailingSlashAwareDataRequests: true
+      unstable_trailingSlashAwareDataRequests: true,
+      // always on for RSC
+      unstable_passThroughRequests: true
       // always on for RSC
     },
     isSpaMode: false,
@@ -916,6 +925,13 @@ function isExternalLocation(location2) {
   const newLocation = new URL(location2, window.location.href);
   return newLocation.origin !== window.location.origin;
 }
+function hasInvalidProtocol(location2) {
+  try {
+    return invalidProtocols.includes(new URL(location2).protocol);
+  } catch {
+    return false;
+  }
+}
 function cloneRoutes(routes) {
   if (!routes) return void 0;
   return routes.map((route) => ({

package/dist/{development/index-react-server-client-EzWJGpN_.d.mts → production/index-react-server-client-BcrVT7Dd.d.mts}

@@ -1,5 +1,6 @@
-import { bG as RouteManifest, q as RouteModules, W as HydrationState, a3 as DataRouteObject, a as ClientLoaderFunction, a7 as StaticHandlerContext, bH as ServerRouteModule, s as MiddlewareEnabled, c as RouterContextProvider, t as AppLoadContext, an as LoaderFunctionArgs, ae as ActionFunctionArgs, aw as unstable_ServerInstrumentation, al as HTMLFormMethod, aj as FormEncType, y as RelativeRoutingType, bh as PageLinkDescriptor, T as To, bI as History, a6 as GetScrollRestorationKeyFunction, e as RouterInit, bJ as FutureConfig$1, u as unstable_ClientInstrumentation, r as DataStrategyFunction, a2 as PatchRoutesOnNavigationFunction, v as NavigateOptions, a8 as Fetcher, Q as RouteObject, p as Router, x as SerializeFrom, B as BlockerFunction, L as Location, bK as CreateStaticHandlerOptions$1, a4 as StaticHandler } from './router-cLsU7kHk.mjs';
+import { H as HydrationState, h as StaticHandlerContext, n as unstable_ServerInstrumentation, d as RelativeRoutingType, g as GetScrollRestorationKeyFunction, R as RouterInit, ah as FutureConfig$1, u as unstable_ClientInstrumentation, N as NavigateOptions, F as Fetcher, b as Router, B as BlockerFunction, ai as CreateStaticHandlerOptions$1, S as StaticHandler } from './context-phCt_zmH.mjs';
 import * as React from 'react';
+import { aD as RouteManifest, X as RouteModules, E as DataRouteObject, a as ClientLoaderFunction, aE as ServerRouteModule, p as MiddlewareEnabled, c as RouterContextProvider, q as AppLoadContext, o as LoaderFunctionArgs, a1 as ActionFunctionArgs, m as HTMLFormMethod, n as FormEncType, au as PageLinkDescriptor, T as To, s as History, z as DataStrategyFunction, B as PatchRoutesOnNavigationFunction, r as RouteObject, Y as SerializeFrom, L as Location } from './routeModules-BRrCYrSL.mjs';
 
 interface Route {
     index?: boolean;
@@ -58,6 +59,7 @@ interface EntryContext extends FrameworkContextObject {
     serverHandoffStream?: ReadableStream<Uint8Array>;
 }
 interface FutureConfig {
+    unstable_passThroughRequests: boolean;
     unstable_subResourceIntegrity: boolean;
     unstable_trailingSlashAwareDataRequests: boolean;
     v8_middleware: boolean;
@@ -1305,7 +1307,7 @@ interface LinkProps extends Omit<React.AnchorHTMLAttributes<HTMLAnchorElement>,
      */
     unstable_defaultShouldRevalidate?: boolean;
     /**
-     * Masked path for for this navigation, when you want to navigate the router to
+     * Masked path for this navigation, when you want to navigate the router to
      * one location but display a separate location in the URL bar.
      *
      * This is useful for contextual navigations such as opening an image in a modal