url-sanitizer 0.1.1

package/dist/url-sanitizer.min.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/mjs/common.js", "../src/lib/iana/uri-schemes.json", "../src/mjs/uri-util.js"],
+  "sourcesContent": ["/**\n * common.js\n */\n\n/* constants */\nconst TYPE_FROM = 8;\nconst TYPE_TO = -1;\n\n/**\n * get type\n *\n * @param {*} o - object to check\n * @returns {string} - type of object\n */\nexport const getType = o =>\n  Object.prototype.toString.call(o).slice(TYPE_FROM, TYPE_TO);\n\n/**\n * is string\n *\n * @param {*} o - object to check\n * @returns {boolean} - result\n */\nexport const isString = o => typeof o === 'string' || o instanceof String;\n", "[\n  \"aaa\",\n  \"aaas\",\n  \"about\",\n  \"acap\",\n  \"acct\",\n  \"acd\",\n  \"acr\",\n  \"adiumxtra\",\n  \"adt\",\n  \"afp\",\n  \"afs\",\n  \"aim\",\n  \"amss\",\n  \"android\",\n  \"appdata\",\n  \"apt\",\n  \"ar\",\n  \"ark\",\n  \"attachment\",\n  \"aw\",\n  \"barion\",\n  \"beshare\",\n  \"bitcoin\",\n  \"bitcoincash\",\n  \"blob\",\n  \"bolo\",\n  \"browserext\",\n  \"cabal\",\n  \"calculator\",\n  \"callto\",\n  \"cap\",\n  \"cast\",\n  \"casts\",\n  \"chrome\",\n  \"chrome-extension\",\n  \"cid\",\n  \"coap\",\n  \"coaps\",\n  \"com-eventbrite-attendee\",\n  \"content\",\n  \"content-type\",\n  \"crid\",\n  \"cstr\",\n  \"cvs\",\n  \"dab\",\n  \"dat\",\n  \"data\",\n  \"dav\",\n  \"diaspora\",\n  \"dict\",\n  \"did\",\n  \"dis\",\n  \"dlna-playcontainer\",\n  \"dlna-playsingle\",\n  \"dns\",\n  \"dntp\",\n  \"doi\",\n  \"dpp\",\n  \"drm\",\n  \"dtmi\",\n  \"dtn\",\n  \"dvb\",\n  \"dvx\",\n  \"dweb\",\n  \"ed2k\",\n  \"eid\",\n  \"elsi\",\n  \"embedded\",\n  \"ens\",\n  \"ethereum\",\n  \"example\",\n  \"facetime\",\n  \"feed\",\n  \"feedready\",\n  \"fido\",\n  \"file\",\n  \"finger\",\n  \"first-run-pen-experience\",\n  \"fish\",\n  \"fm\",\n  \"ftp\",\n  \"fuchsia-pkg\",\n  \"geo\",\n  \"gg\",\n  \"git\",\n  \"gitoid\",\n  \"gizmoproject\",\n  \"go\",\n  \"gopher\",\n  \"graph\",\n  \"gtalk\",\n  \"h323\",\n  \"ham\",\n  \"hcap\",\n  \"hcp\",\n  \"http\",\n  \"https\",\n  \"hxxp\",\n  \"hxxps\",\n  \"hydrazone\",\n  \"hyper\",\n  \"iax\",\n  \"icap\",\n  \"icon\",\n  \"im\",\n  \"imap\",\n  \"info\",\n  \"iotdisco\",\n  \"ipfs\",\n  \"ipn\",\n  \"ipns\",\n  \"ipp\",\n  \"ipps\",\n  \"irc\",\n  \"irc6\",\n  \"ircs\",\n  \"iris\",\n  \"iris.beep\",\n  \"iris.lwz\",\n  \"iris.xpc\",\n  \"iris.xpcs\",\n  \"isostore\",\n  \"itms\",\n  \"jabber\",\n  \"jar\",\n  \"jms\",\n  \"keyparc\",\n  \"lastfm\",\n  \"lbry\",\n  \"ldap\",\n  \"ldaps\",\n  \"leaptofrogans\",\n  \"lorawan\",\n  \"lpa\",\n  \"lvlt\",\n  \"magnet\",\n  \"mailto\",\n  \"maps\",\n  \"market\",\n  \"matrix\",\n  \"message\",\n  \"microsoft.windows.camera\",\n  \"microsoft.windows.camera.multipicker\",\n  \"microsoft.windows.camera.picker\",\n  \"mid\",\n  \"mms\",\n  \"mongodb\",\n  \"moz\",\n  \"moz-extension\",\n  \"ms-access\",\n  \"ms-appinstaller\",\n  \"ms-browser-extension\",\n  \"ms-calculator\",\n  \"ms-drive-to\",\n  \"ms-enrollment\",\n  \"ms-excel\",\n  \"ms-eyecontrolspeech\",\n  \"ms-gamebarservices\",\n  \"ms-gamingoverlay\",\n  \"ms-getoffice\",\n  \"ms-help\",\n  \"ms-infopath\",\n  \"ms-inputapp\",\n  \"ms-lockscreencomponent-config\",\n  \"ms-media-stream-id\",\n  \"ms-meetnow\",\n  \"ms-mixedrealitycapture\",\n  \"ms-mobileplans\",\n  \"ms-newsandinterests\",\n  \"ms-officeapp\",\n  \"ms-people\",\n  \"ms-powerpoint\",\n  \"ms-project\",\n  \"ms-publisher\",\n  \"ms-remotedesktop-launch\",\n  \"ms-restoretabcompanion\",\n  \"ms-screenclip\",\n  \"ms-screensketch\",\n  \"ms-search\",\n  \"ms-search-repair\",\n  \"ms-secondary-screen-controller\",\n  \"ms-secondary-screen-setup\",\n  \"ms-settings\",\n  \"ms-settings-airplanemode\",\n  \"ms-settings-bluetooth\",\n  \"ms-settings-camera\",\n  \"ms-settings-cellular\",\n  \"ms-settings-cloudstorage\",\n  \"ms-settings-connectabledevices\",\n  \"ms-settings-displays-topology\",\n  \"ms-settings-emailandaccounts\",\n  \"ms-settings-language\",\n  \"ms-settings-location\",\n  \"ms-settings-lock\",\n  \"ms-settings-nfctransactions\",\n  \"ms-settings-notifications\",\n  \"ms-settings-power\",\n  \"ms-settings-privacy\",\n  \"ms-settings-proximity\",\n  \"ms-settings-screenrotation\",\n  \"ms-settings-wifi\",\n  \"ms-settings-workplace\",\n  \"ms-spd\",\n  \"ms-stickers\",\n  \"ms-sttoverlay\",\n  \"ms-transit-to\",\n  \"ms-useractivityset\",\n  \"ms-virtualtouchpad\",\n  \"ms-visio\",\n  \"ms-walk-to\",\n  \"ms-whiteboard\",\n  \"ms-whiteboard-cmd\",\n  \"ms-word\",\n  \"msnim\",\n  \"msrp\",\n  \"msrps\",\n  \"mss\",\n  \"mt\",\n  \"mtqp\",\n  \"mumble\",\n  \"mupdate\",\n  \"mvn\",\n  \"news\",\n  \"nfs\",\n  \"ni\",\n  \"nih\",\n  \"nntp\",\n  \"notes\",\n  \"num\",\n  \"ocf\",\n  \"oid\",\n  \"onenote\",\n  \"onenote-cmd\",\n  \"opaquelocktoken\",\n  \"openpgp4fpr\",\n  \"otpauth\",\n  \"palm\",\n  \"paparazzi\",\n  \"payment\",\n  \"payto\",\n  \"pkcs11\",\n  \"platform\",\n  \"pop\",\n  \"pres\",\n  \"proxy\",\n  \"psyc\",\n  \"pttp\",\n  \"pwid\",\n  \"qb\",\n  \"query\",\n  \"quic-transport\",\n  \"redis\",\n  \"rediss\",\n  \"reload\",\n  \"res\",\n  \"resource\",\n  \"rmi\",\n  \"rsync\",\n  \"rtmfp\",\n  \"rtmp\",\n  \"rtsp\",\n  \"rtsps\",\n  \"rtspu\",\n  \"sarif\",\n  \"secondlife\",\n  \"secret-token\",\n  \"service\",\n  \"session\",\n  \"sftp\",\n  \"sgn\",\n  \"shc\",\n  \"sieve\",\n  \"simpleledger\",\n  \"simplex\",\n  \"sip\",\n  \"sips\",\n  \"skype\",\n  \"smb\",\n  \"smp\",\n  \"sms\",\n  \"smtp\",\n  \"snmp\",\n  \"soap.beep\",\n  \"soap.beeps\",\n  \"soldat\",\n  \"spiffe\",\n  \"spotify\",\n  \"ssb\",\n  \"ssh\",\n  \"starknet\",\n  \"steam\",\n  \"stun\",\n  \"stuns\",\n  \"submit\",\n  \"svn\",\n  \"swh\",\n  \"swid\",\n  \"swidpath\",\n  \"tag\",\n  \"taler\",\n  \"teamspeak\",\n  \"tel\",\n  \"teliaeid\",\n  \"telnet\",\n  \"tftp\",\n  \"things\",\n  \"thismessage\",\n  \"tip\",\n  \"tn3270\",\n  \"tool\",\n  \"turn\",\n  \"turns\",\n  \"tv\",\n  \"udp\",\n  \"unreal\",\n  \"urn\",\n  \"ut2004\",\n  \"uuid-in-package\",\n  \"v-event\",\n  \"vemmi\",\n  \"ventrilo\",\n  \"ves\",\n  \"view-source\",\n  \"vnc\",\n  \"vscode\",\n  \"vscode-insiders\",\n  \"vsls\",\n  \"w3\",\n  \"wcr\",\n  \"web3\",\n  \"webcal\",\n  \"wifi\",\n  \"ws\",\n  \"wss\",\n  \"wtai\",\n  \"wyciwyg\",\n  \"xcon\",\n  \"xcon-userid\",\n  \"xfire\",\n  \"xmlrpc.beep\",\n  \"xmlrpc.beeps\",\n  \"xmpp\",\n  \"xri\",\n  \"ymsgr\",\n  \"z39.50r\",\n  \"z39.50s\"\n]\n", "/**\n * uri-util.js\n */\n\n/* shared */\nimport { getType, isString } from './common.js';\nimport uriSchemes from '../lib/iana/uri-schemes.json' assert { type: 'json' };\n\n/* constants */\nconst HEX = 16;\n\n/**\n * get URL encoded string\n *\n * @param {string} str - string\n * @returns {string} - URL encoded string\n */\nexport const getUrlEncodedString = str => {\n  if (!isString(str)) {\n    throw new TypeError(`Expected String but got ${getType(str)}.`);\n  }\n  const chars = [];\n  for (const ch of str) {\n    chars.push(`%${ch.charCodeAt(0).toString(HEX).toUpperCase()}`);\n  }\n  return chars.join('');\n};\n\n/**\n * escape URL encoded HTML special chars\n *\n * @param {string} ch - URL encoded (percent encoded) char\n * @returns {string} - escaped URL encoded HTML special char / URL encoded char\n */\nexport const escapeUrlEncodedHtmlChars = ch => {\n  if (isString(ch)) {\n    if (/^%[\\dA-F]{2}$/i.test(ch)) {\n      ch = ch.toUpperCase();\n    } else {\n      throw new Error(`${ch} is not a URL encoded character.`);\n    }\n  } else {\n    throw new TypeError(`Expected String but got ${getType(ch)}.`);\n  }\n  const [amp, num, lt, gt, quot, apos] =\n    ['&', '#', '<', '>', '\"', \"'\"].map(getUrlEncodedString);\n  let escapedChar;\n  if (ch === amp) {\n    escapedChar = `${amp}amp;`;\n  } else if (ch === lt) {\n    escapedChar = `${amp}lt;`;\n  } else if (ch === gt) {\n    escapedChar = `${amp}gt;`;\n  } else if (ch === quot) {\n    escapedChar = `${amp}quot;`;\n  } else if (ch === apos) {\n    escapedChar = `${amp}${num}39;`;\n  } else {\n    escapedChar = ch;\n  }\n  return escapedChar;\n};\n\n/**\n * parse base64\n *\n * @see {@link https://github.com/file/file/blob/master/src/encoding.c}\n * @param {string} data - base64 data\n * @returns {string} - parsed data / base64 data\n */\nexport const parseBase64 = data => {\n  if (!isString(data)) {\n    throw new TypeError(`Expected String but got ${getType(data)}.`);\n  }\n  const bin = atob(data);\n  const uint8arr = Uint8Array.from([...bin].map(c => c.charCodeAt(0)));\n  const textChars = new Set([0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x1b]);\n  for (let i = 0x20; i < 0x7f; i++) {\n    textChars.add(i);\n  }\n  for (let i = 0x80; i <= 0xff; i++) {\n    textChars.add(i);\n  }\n  let parsedData;\n  if (uint8arr.every(c => textChars.has(c))) {\n    parsedData = bin;\n  } else {\n    parsedData = data;\n  }\n  return parsedData;\n};\n\n/**\n * URI schemes\n *\n */\nexport class URISchemes {\n  /* private fields */\n  #schemes;\n\n  /**\n   * construct\n   */\n  constructor() {\n    this.#schemes = new Set(uriSchemes);\n  }\n\n  /**\n   * get schemes\n   *\n   * @see {@link https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml}\n   *      - Historical schemes omitted\n   *      - Added 'moz-extension' scheme by default\n   * @returns {Array.<string>} - array of schemes\n   */\n  get() {\n    return [...this.#schemes];\n  }\n\n  /**\n   * has scheme\n   *\n   * @param {string} scheme - scheme\n   * @returns {boolean} - result\n   */\n  has(scheme) {\n    return this.#schemes.has(scheme);\n  }\n\n  /**\n   * add scheme\n   * NOTE: `javascript` and/or `vbscript` schemes can not be registered\n   *\n   * @param {string} scheme - scheme\n   * @returns {Array.<string>} - array of schemes\n   */\n  add(scheme) {\n    if (!isString(scheme)) {\n      throw new TypeError(`Expected String but got ${getType(scheme)}.`);\n    } else if (/(?:java|vb)script/.test(scheme) ||\n               !/^[a-z][a-z0-9+\\-.]*$/.test(scheme)) {\n      throw new Error(`Invalid scheme: ${scheme}`);\n    }\n    this.#schemes.add(scheme);\n    return [...this.#schemes];\n  }\n\n  /**\n   * remove scheme\n   *\n   * @param {string} scheme - scheme\n   * @returns {boolean} - result\n   */\n  remove(scheme) {\n    return this.#schemes.delete(scheme);\n  }\n\n  /**\n   * is URI\n   *\n   * @param {string} uri - URI input\n   * @returns {boolean} - result\n   */\n  isURI(uri) {\n    let res;\n    if (isString(uri)) {\n      try {\n        const { protocol } = new URL(uri);\n        const scheme = protocol.replace(/:$/, '');\n        const schemeParts = scheme.split('+');\n        res = /^(?:ext|web)\\+[a-z]+$/.test(scheme) ||\n              schemeParts.every(s => this.#schemes.has(s));\n      } catch (e) {\n        res = false;\n      }\n    }\n    return !!res;\n  }\n}\n\n/* URL sanitizer */\nexport class URLSanitizer extends URISchemes {\n  /**\n   * sanitize URL\n   * NOTE: `data` and/or `file` schemes must be explicitly allowed\n   *       `javascript` and/or `vbscript` schemes can not be allowed\n   *\n   * @param {string} url - URL input\n   * @param {object} opt - options\n   * @param {Array.<string>} opt.allow - array of allowed schemes\n   * @param {Array.<string>} opt.deny - array of denied schemes\n   * @param {boolean} opt.escapeTags - escape tags and quotes in data URL\n   * @returns {?string} - sanitized URL\n   */\n  sanitize(url, opt = { allow: [], deny: [], escapeTags: true }) {\n    let sanitizedUrl;\n    if (super.isURI(url)) {\n      const { allow, deny, escapeTags } = opt ?? {};\n      const { href, pathname, protocol } = new URL(url);\n      const scheme = protocol.replace(/:$/, '');\n      const schemeParts = scheme.split('+');\n      const schemeMap = new Map([['data', false], ['file', false]]);\n      if (Array.isArray(allow) && allow.length) {\n        const items = Object.values(allow);\n        for (let item of items) {\n          if (isString(item)) {\n            item = item.trim();\n            if (/(?:java|vb)script/.test(item)) {\n              schemeMap.set(item, false);\n            } else if (item) {\n              schemeMap.set(item, true);\n            }\n          }\n        }\n      }\n      if (Array.isArray(deny) && deny.length) {\n        const items = Object.values(deny);\n        for (let item of items) {\n          if (isString(item)) {\n            item = item.trim();\n            if (item) {\n              schemeMap.set(item, false);\n            }\n          }\n        }\n      }\n      let bool;\n      for (const [key, value] of schemeMap.entries()) {\n        bool = value || (scheme !== key && schemeParts.every(s => s !== key));\n        if (!bool) {\n          break;\n        }\n      }\n      if (bool) {\n        let urlToSanitize = href;\n        if (schemeParts.includes('data')) {\n          const [header, data] = pathname.split(',');\n          const mediaType = header.split(';');\n          const isBase64 = mediaType.pop() === 'base64';\n          if (isBase64) {\n            const parsedData = parseBase64(data);\n            if (parsedData !== data) {\n              urlToSanitize = `${scheme}:${mediaType.join(';')},${parsedData}`;\n            }\n          }\n        }\n        const [amp, lt, gt, quot, apos] =\n          ['&', '<', '>', '\"', \"'\"].map(getUrlEncodedString);\n        const regChars = /[<>\"']/g;\n        const regAmp = new RegExp(amp, 'g');\n        const regEncodedChars =\n          new RegExp(`(${lt}|${gt}|${quot}|${apos})`, 'g');\n        if (schemeParts.includes('data') && !(escapeTags ?? true)) {\n          sanitizedUrl = urlToSanitize.replace(regChars, getUrlEncodedString)\n            .replace(regAmp, escapeUrlEncodedHtmlChars);\n        } else {\n          sanitizedUrl = urlToSanitize.replace(regChars, getUrlEncodedString)\n            .replace(regAmp, escapeUrlEncodedHtmlChars)\n            .replace(regEncodedChars, escapeUrlEncodedHtmlChars);\n        }\n      }\n    }\n    return sanitizedUrl || null;\n  }\n}\n\nconst urlSanitizer = new URLSanitizer();\n\n/* alias */\n/**\n * is URI sync\n *\n * @param {string} uri - URI input\n * @returns {boolean} - result\n */\nconst isUri = uri => urlSanitizer.isURI(uri);\n\n/**\n * is URI async\n *\n * @param {string} uri - URI input\n * @returns {boolean} - result\n */\nexport const isURI = async uri => {\n  const res = await isUri(uri);\n  return res;\n};\n\n/**\n * sanitize URL sync\n *\n * @param {string} url - URL input\n * @param {object} opt - options\n * @returns {?string} - sanitized URL\n */\nconst sanitizeUrl = (url, opt) => urlSanitizer.sanitize(url, opt ?? {\n  allow: [],\n  deny: [],\n  escapeTags: true\n});\n\n/**\n * sanitize URL async\n *\n * @param {string} url - URL input\n * @param {object} opt - options\n * @returns {?string} - sanitized URL\n */\nexport const sanitizeURL = async (url, opt) => {\n  const res = await sanitizeUrl(url, opt);\n  return res;\n};\n\nexport {\n  urlSanitizer as default,\n  isUri as isURISync,\n  sanitizeUrl as sanitizeURLSync\n};\n"],
+  "mappings": "AAcO,IAAMA,EAAUC,GACrB,OAAO,UAAU,SAAS,KAAKA,CAAC,EAAE,MAAM,EAAW,EAAO,EAQ/CC,EAAWD,GAAK,OAAOA,GAAM,UAAYA,aAAa,OCvBnE,IAAAE,EAAA,CACE,MACA,OACA,QACA,OACA,OACA,MACA,MACA,YACA,MACA,MACA,MACA,MACA,OACA,UACA,UACA,MACA,KACA,MACA,aACA,KACA,SACA,UACA,UACA,cACA,OACA,OACA,aACA,QACA,aACA,SACA,MACA,OACA,QACA,SACA,mBACA,MACA,OACA,QACA,0BACA,UACA,eACA,OACA,OACA,MACA,MACA,MACA,OACA,MACA,WACA,OACA,MACA,MACA,qBACA,kBACA,MACA,OACA,MACA,MACA,MACA,OACA,MACA,MACA,MACA,OACA,OACA,MACA,OACA,WACA,MACA,WACA,UACA,WACA,OACA,YACA,OACA,OACA,SACA,2BACA,OACA,KACA,MACA,cACA,MACA,KACA,MACA,SACA,eACA,KACA,SACA,QACA,QACA,OACA,MACA,OACA,MACA,OACA,QACA,OACA,QACA,YACA,QACA,MACA,OACA,OACA,KACA,OACA,OACA,WACA,OACA,MACA,OACA,MACA,OACA,MACA,OACA,OACA,OACA,YACA,WACA,WACA,YACA,WACA,OACA,SACA,MACA,MACA,UACA,SACA,OACA,OACA,QACA,gBACA,UACA,MACA,OACA,SACA,SACA,OACA,SACA,SACA,UACA,2BACA,uCACA,kCACA,MACA,MACA,UACA,MACA,gBACA,YACA,kBACA,uBACA,gBACA,cACA,gBACA,WACA,sBACA,qBACA,mBACA,eACA,UACA,cACA,cACA,gCACA,qBACA,aACA,yBACA,iBACA,sBACA,eACA,YACA,gBACA,aACA,eACA,0BACA,yBACA,gBACA,kBACA,YACA,mBACA,iCACA,4BACA,cACA,2BACA,wBACA,qBACA,uBACA,2BACA,iCACA,gCACA,+BACA,uBACA,uBACA,mBACA,8BACA,4BACA,oBACA,sBACA,wBACA,6BACA,mBACA,wBACA,SACA,cACA,gBACA,gBACA,qBACA,qBACA,WACA,aACA,gBACA,oBACA,UACA,QACA,OACA,QACA,MACA,KACA,OACA,SACA,UACA,MACA,OACA,MACA,KACA,MACA,OACA,QACA,MACA,MACA,MACA,UACA,cACA,kBACA,cACA,UACA,OACA,YACA,UACA,QACA,SACA,WACA,MACA,OACA,QACA,OACA,OACA,OACA,KACA,QACA,iBACA,QACA,SACA,SACA,MACA,WACA,MACA,QACA,QACA,OACA,OACA,QACA,QACA,QACA,aACA,eACA,UACA,UACA,OACA,MACA,MACA,QACA,eACA,UACA,MACA,OACA,QACA,MACA,MACA,MACA,OACA,OACA,YACA,aACA,SACA,SACA,UACA,MACA,MACA,WACA,QACA,OACA,QACA,SACA,MACA,MACA,OACA,WACA,MACA,QACA,YACA,MACA,WACA,SACA,OACA,SACA,cACA,MACA,SACA,OACA,OACA,QACA,KACA,MACA,SACA,MACA,SACA,kBACA,UACA,QACA,WACA,MACA,cACA,MACA,SACA,kBACA,OACA,KACA,MACA,OACA,SACA,OACA,KACA,MACA,OACA,UACA,OACA,cACA,QACA,cACA,eACA,OACA,MACA,QACA,UACA,SACF,EClVA,IAAMC,EAAM,GAQCC,EAAsBC,GAAO,CACxC,GAAI,CAACC,EAASD,CAAG,EACf,MAAM,IAAI,UAAU,2BAA2BE,EAAQF,CAAG,IAAI,EAEhE,IAAMG,EAAQ,CAAC,EACf,QAAWC,KAAMJ,EACfG,EAAM,KAAK,IAAIC,EAAG,WAAW,CAAC,EAAE,SAASN,CAAG,EAAE,YAAY,GAAG,EAE/D,OAAOK,EAAM,KAAK,EAAE,CACtB,EAQaE,EAA4BD,GAAM,CAC7C,GAAIH,EAASG,CAAE,EACb,GAAI,iBAAiB,KAAKA,CAAE,EAC1BA,EAAKA,EAAG,YAAY,MAEpB,OAAM,IAAI,MAAM,GAAGA,mCAAoC,MAGzD,OAAM,IAAI,UAAU,2BAA2BF,EAAQE,CAAE,IAAI,EAE/D,GAAM,CAACE,EAAKC,EAAKC,EAAIC,EAAIC,EAAMC,CAAI,EACjC,CAAC,IAAK,IAAK,IAAK,IAAK,IAAK,GAAG,EAAE,IAAIZ,CAAmB,EACpDa,EACJ,OAAIR,IAAOE,EACTM,EAAc,GAAGN,QACRF,IAAOI,EAChBI,EAAc,GAAGN,OACRF,IAAOK,EAChBG,EAAc,GAAGN,OACRF,IAAOM,EAChBE,EAAc,GAAGN,SACRF,IAAOO,EAChBC,EAAc,GAAGN,IAAMC,OAEvBK,EAAcR,EAETQ,CACT,EASaC,EAAcC,GAAQ,CACjC,GAAI,CAACb,EAASa,CAAI,EAChB,MAAM,IAAI,UAAU,2BAA2BZ,EAAQY,CAAI,IAAI,EAEjE,IAAMC,EAAM,KAAKD,CAAI,EACfE,EAAW,WAAW,KAAK,CAAC,GAAGD,CAAG,EAAE,IAAIE,GAAKA,EAAE,WAAW,CAAC,CAAC,CAAC,EAC7DC,EAAY,IAAI,IAAI,CAAC,EAAM,EAAM,EAAM,GAAM,GAAM,GAAM,GAAM,EAAI,CAAC,EAC1E,QAASC,EAAI,GAAMA,EAAI,IAAMA,IAC3BD,EAAU,IAAIC,CAAC,EAEjB,QAASA,EAAI,IAAMA,GAAK,IAAMA,IAC5BD,EAAU,IAAIC,CAAC,EAEjB,IAAIC,EACJ,OAAIJ,EAAS,MAAMC,GAAKC,EAAU,IAAID,CAAC,CAAC,EACtCG,EAAaL,EAEbK,EAAaN,EAERM,CACT,EAMaC,EAAN,KAAiB,CAEtBC,GAKA,aAAc,CACZ,KAAKA,GAAW,IAAI,IAAIC,CAAU,CACpC,CAUA,KAAM,CACJ,MAAO,CAAC,GAAG,KAAKD,EAAQ,CAC1B,CAQA,IAAIE,EAAQ,CACV,OAAO,KAAKF,GAAS,IAAIE,CAAM,CACjC,CASA,IAAIA,EAAQ,CACV,GAAKvB,EAASuB,CAAM,GAEb,GAAI,oBAAoB,KAAKA,CAAM,GAC/B,CAAC,uBAAuB,KAAKA,CAAM,EAC5C,MAAM,IAAI,MAAM,mBAAmBA,GAAQ,MAH3C,OAAM,IAAI,UAAU,2BAA2BtB,EAAQsB,CAAM,IAAI,EAKnE,YAAKF,GAAS,IAAIE,CAAM,EACjB,CAAC,GAAG,KAAKF,EAAQ,CAC1B,CAQA,OAAOE,EAAQ,CACb,OAAO,KAAKF,GAAS,OAAOE,CAAM,CACpC,CAQA,MAAMC,EAAK,CACT,IAAIC,EACJ,GAAIzB,EAASwB,CAAG,EACd,GAAI,CACF,GAAM,CAAE,SAAAE,CAAS,EAAI,IAAI,IAAIF,CAAG,EAC1BD,EAASG,EAAS,QAAQ,KAAM,EAAE,EAClCC,EAAcJ,EAAO,MAAM,GAAG,EACpCE,EAAM,wBAAwB,KAAKF,CAAM,GACnCI,EAAY,MAAMC,GAAK,KAAKP,GAAS,IAAIO,CAAC,CAAC,CACnD,MAAE,CACAH,EAAM,EACR,CAEF,MAAO,CAAC,CAACA,CACX,CACF,EAGaI,EAAN,cAA2BT,CAAW,CAa3C,SAASU,EAAKC,EAAM,CAAE,MAAO,CAAC,EAAG,KAAM,CAAC,EAAG,WAAY,EAAK,EAAG,CAC7D,IAAIC,EACJ,GAAI,MAAM,MAAMF,CAAG,EAAG,CACpB,GAAM,CAAE,MAAAG,EAAO,KAAAC,EAAM,WAAAC,CAAW,EAAIJ,GAAO,CAAC,EACtC,CAAE,KAAAK,EAAM,SAAAC,EAAU,SAAAX,CAAS,EAAI,IAAI,IAAII,CAAG,EAC1CP,EAASG,EAAS,QAAQ,KAAM,EAAE,EAClCC,EAAcJ,EAAO,MAAM,GAAG,EAC9Be,EAAY,IAAI,IAAI,CAAC,CAAC,OAAQ,EAAK,EAAG,CAAC,OAAQ,EAAK,CAAC,CAAC,EAC5D,GAAI,MAAM,QAAQL,CAAK,GAAKA,EAAM,OAAQ,CACxC,IAAMM,EAAQ,OAAO,OAAON,CAAK,EACjC,QAASO,KAAQD,EACXvC,EAASwC,CAAI,IACfA,EAAOA,EAAK,KAAK,EACb,oBAAoB,KAAKA,CAAI,EAC/BF,EAAU,IAAIE,EAAM,EAAK,EAChBA,GACTF,EAAU,IAAIE,EAAM,EAAI,EAIhC,CACA,GAAI,MAAM,QAAQN,CAAI,GAAKA,EAAK,OAAQ,CACtC,IAAMK,EAAQ,OAAO,OAAOL,CAAI,EAChC,QAASM,KAAQD,EACXvC,EAASwC,CAAI,IACfA,EAAOA,EAAK,KAAK,EACbA,GACFF,EAAU,IAAIE,EAAM,EAAK,EAIjC,CACA,IAAIC,EACJ,OAAW,CAACC,EAAKC,CAAK,IAAKL,EAAU,QAAQ,EAE3C,GADAG,EAAOE,GAAUpB,IAAWmB,GAAOf,EAAY,MAAMC,GAAKA,IAAMc,CAAG,EAC/D,CAACD,EACH,MAGJ,GAAIA,EAAM,CACR,IAAIG,EAAgBR,EACpB,GAAIT,EAAY,SAAS,MAAM,EAAG,CAChC,GAAM,CAACkB,EAAQhC,CAAI,EAAIwB,EAAS,MAAM,GAAG,EACnCS,EAAYD,EAAO,MAAM,GAAG,EAElC,GADiBC,EAAU,IAAI,IAAM,SACvB,CACZ,IAAM3B,EAAaP,EAAYC,CAAI,EAC/BM,IAAeN,IACjB+B,EAAgB,GAAGrB,KAAUuB,EAAU,KAAK,GAAG,KAAK3B,IAExD,CACF,CACA,GAAM,CAACd,EAAKE,EAAIC,EAAIC,EAAMC,CAAI,EAC5B,CAAC,IAAK,IAAK,IAAK,IAAK,GAAG,EAAE,IAAIZ,CAAmB,EAC7CiD,EAAW,UACXC,EAAS,IAAI,OAAO3C,EAAK,GAAG,EAC5B4C,EACJ,IAAI,OAAO,IAAI1C,KAAMC,KAAMC,KAAQC,KAAS,GAAG,EAC7CiB,EAAY,SAAS,MAAM,GAAK,EAAEQ,GAAc,IAClDH,EAAeY,EAAc,QAAQG,EAAUjD,CAAmB,EAC/D,QAAQkD,EAAQ5C,CAAyB,EAE5C4B,EAAeY,EAAc,QAAQG,EAAUjD,CAAmB,EAC/D,QAAQkD,EAAQ5C,CAAyB,EACzC,QAAQ6C,EAAiB7C,CAAyB,CAEzD,CACF,CACA,OAAO4B,GAAgB,IACzB,CACF,EAEMkB,EAAe,IAAIrB,EASnBsB,EAAQ3B,GAAO0B,EAAa,MAAM1B,CAAG,EAQ9B4B,EAAQ,MAAM5B,GACb,MAAM2B,EAAM3B,CAAG,EAWvB6B,EAAc,CAACvB,EAAKC,IAAQmB,EAAa,SAASpB,EAAKC,GAAO,CAClE,MAAO,CAAC,EACR,KAAM,CAAC,EACP,WAAY,EACd,CAAC,EASYuB,EAAc,MAAOxB,EAAKC,IACzB,MAAMsB,EAAYvB,EAAKC,CAAG",
+  "names": ["getType", "o", "isString", "uri_schemes_default", "HEX", "getUrlEncodedString", "str", "isString", "getType", "chars", "ch", "escapeUrlEncodedHtmlChars", "amp", "num", "lt", "gt", "quot", "apos", "escapedChar", "parseBase64", "data", "bin", "uint8arr", "c", "textChars", "i", "parsedData", "URISchemes", "#schemes", "uri_schemes_default", "scheme", "uri", "res", "protocol", "schemeParts", "s", "URLSanitizer", "url", "opt", "sanitizedUrl", "allow", "deny", "escapeTags", "href", "pathname", "schemeMap", "items", "item", "bool", "key", "value", "urlToSanitize", "header", "mediaType", "regChars", "regAmp", "regEncodedChars", "urlSanitizer", "isUri", "isURI", "sanitizeUrl", "sanitizeURL"]
+}

package/index.js

@@ -0,0 +1,7 @@
+/**
+ * index.js
+ */
+
+export {
+  default, isURI, isURISync, sanitizeURL, sanitizeURLSync
+} from './src/mjs/uri-util.js';

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "url-sanitizer",
+  "description": "Sanitize URL",
+  "author": "asamuzaK",
+  "homepage": "https://github.com/asamuzaK/urlSanitizer",
+  "bugs": "https://github.com/asamuzaK/urlSanitizer",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/asamuzaK/urlSanitizer.git"
+  },
+  "license": "MIT",
+  "main": "index.js",
+  "type": "module",
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "dist",
+    "src",
+    "index.js"
+  ],
+  "scripts": {
+    "build": "npm run include && npm run lint && npm test && npm run bundle",
+    "bundle": "npm-run-all -s bundle-*",
+    "bundle-src": "esbuild --format=esm --platform=browser --outfile=./dist/url-sanitizer.js --bundle --sourcemap ./index.js",
+    "bundle-min": "esbuild --format=esm --platform=browser --outfile=./dist/url-sanitizer.min.js --bundle --minify --sourcemap ./index.js",
+    "doc": "documentation build src/mjs/uri-util.js -f md -o doc.md",
+    "include": "node ./modules/index include --dir=iana -i",
+    "lint": "eslint --fix .",
+    "test": "c8 --reporter=text mocha --exit test/*.test.js"
+  },
+  "devDependencies": {
+    "@babel/eslint-parser": "^7.19.1",
+    "@babel/plugin-syntax-import-assertions": "^7.20.0",
+    "c8": "^7.12.0",
+    "chai": "^4.3.7",
+    "commander": "^10.0.0",
+    "csvtojson": "^2.0.10",
+    "documentation": "^14.0.1",
+    "esbuild": "^0.17.3",
+    "eslint": "^8.32.0",
+    "eslint-config-standard": "^17.0.0",
+    "eslint-plugin-import": "^2.27.4",
+    "eslint-plugin-jsdoc": "^39.6.4",
+    "eslint-plugin-n": "^15.6.1",
+    "eslint-plugin-node": "^11.1.0",
+    "eslint-plugin-promise": "^6.1.1",
+    "eslint-plugin-unicorn": "^45.0.2",
+    "jsdoc-to-markdown": "^8.0.0",
+    "mocha": "^10.2.0",
+    "npm-run-all": "^4.1.5",
+    "sinon": "^15.0.1",
+    "undici": "^5.15.0"
+  },
+  "version": "0.1.1"
+}

package/src/lib/iana/uri-schemes.json

@@ -0,0 +1,348 @@
+[
+  "aaa",
+  "aaas",
+  "about",
+  "acap",
+  "acct",
+  "acd",
+  "acr",
+  "adiumxtra",
+  "adt",
+  "afp",
+  "afs",
+  "aim",
+  "amss",
+  "android",
+  "appdata",
+  "apt",
+  "ar",
+  "ark",
+  "attachment",
+  "aw",
+  "barion",
+  "beshare",
+  "bitcoin",
+  "bitcoincash",
+  "blob",
+  "bolo",
+  "browserext",
+  "cabal",
+  "calculator",
+  "callto",
+  "cap",
+  "cast",
+  "casts",
+  "chrome",
+  "chrome-extension",
+  "cid",
+  "coap",
+  "coaps",
+  "com-eventbrite-attendee",
+  "content",
+  "content-type",
+  "crid",
+  "cstr",
+  "cvs",
+  "dab",
+  "dat",
+  "data",
+  "dav",
+  "diaspora",
+  "dict",
+  "did",
+  "dis",
+  "dlna-playcontainer",
+  "dlna-playsingle",
+  "dns",
+  "dntp",
+  "doi",
+  "dpp",
+  "drm",
+  "dtmi",
+  "dtn",
+  "dvb",
+  "dvx",
+  "dweb",
+  "ed2k",
+  "eid",
+  "elsi",
+  "embedded",
+  "ens",
+  "ethereum",
+  "example",
+  "facetime",
+  "feed",
+  "feedready",
+  "fido",
+  "file",
+  "finger",
+  "first-run-pen-experience",
+  "fish",
+  "fm",
+  "ftp",
+  "fuchsia-pkg",
+  "geo",
+  "gg",
+  "git",
+  "gitoid",
+  "gizmoproject",
+  "go",
+  "gopher",
+  "graph",
+  "gtalk",
+  "h323",
+  "ham",
+  "hcap",
+  "hcp",
+  "http",
+  "https",
+  "hxxp",
+  "hxxps",
+  "hydrazone",
+  "hyper",
+  "iax",
+  "icap",
+  "icon",
+  "im",
+  "imap",
+  "info",
+  "iotdisco",
+  "ipfs",
+  "ipn",
+  "ipns",
+  "ipp",
+  "ipps",
+  "irc",
+  "irc6",
+  "ircs",
+  "iris",
+  "iris.beep",
+  "iris.lwz",
+  "iris.xpc",
+  "iris.xpcs",
+  "isostore",
+  "itms",
+  "jabber",
+  "jar",
+  "jms",
+  "keyparc",
+  "lastfm",
+  "lbry",
+  "ldap",
+  "ldaps",
+  "leaptofrogans",
+  "lorawan",
+  "lpa",
+  "lvlt",
+  "magnet",
+  "mailto",
+  "maps",
+  "market",
+  "matrix",
+  "message",
+  "microsoft.windows.camera",
+  "microsoft.windows.camera.multipicker",
+  "microsoft.windows.camera.picker",
+  "mid",
+  "mms",
+  "mongodb",
+  "moz",
+  "moz-extension",
+  "ms-access",
+  "ms-appinstaller",
+  "ms-browser-extension",
+  "ms-calculator",
+  "ms-drive-to",
+  "ms-enrollment",
+  "ms-excel",
+  "ms-eyecontrolspeech",
+  "ms-gamebarservices",
+  "ms-gamingoverlay",
+  "ms-getoffice",
+  "ms-help",
+  "ms-infopath",
+  "ms-inputapp",
+  "ms-lockscreencomponent-config",
+  "ms-media-stream-id",
+  "ms-meetnow",
+  "ms-mixedrealitycapture",
+  "ms-mobileplans",
+  "ms-newsandinterests",
+  "ms-officeapp",
+  "ms-people",
+  "ms-powerpoint",
+  "ms-project",
+  "ms-publisher",
+  "ms-remotedesktop-launch",
+  "ms-restoretabcompanion",
+  "ms-screenclip",
+  "ms-screensketch",
+  "ms-search",
+  "ms-search-repair",
+  "ms-secondary-screen-controller",
+  "ms-secondary-screen-setup",
+  "ms-settings",
+  "ms-settings-airplanemode",
+  "ms-settings-bluetooth",
+  "ms-settings-camera",
+  "ms-settings-cellular",
+  "ms-settings-cloudstorage",
+  "ms-settings-connectabledevices",
+  "ms-settings-displays-topology",
+  "ms-settings-emailandaccounts",
+  "ms-settings-language",
+  "ms-settings-location",
+  "ms-settings-lock",
+  "ms-settings-nfctransactions",
+  "ms-settings-notifications",
+  "ms-settings-power",
+  "ms-settings-privacy",
+  "ms-settings-proximity",
+  "ms-settings-screenrotation",
+  "ms-settings-wifi",
+  "ms-settings-workplace",
+  "ms-spd",
+  "ms-stickers",
+  "ms-sttoverlay",
+  "ms-transit-to",
+  "ms-useractivityset",
+  "ms-virtualtouchpad",
+  "ms-visio",
+  "ms-walk-to",
+  "ms-whiteboard",
+  "ms-whiteboard-cmd",
+  "ms-word",
+  "msnim",
+  "msrp",
+  "msrps",
+  "mss",
+  "mt",
+  "mtqp",
+  "mumble",
+  "mupdate",
+  "mvn",
+  "news",
+  "nfs",
+  "ni",
+  "nih",
+  "nntp",
+  "notes",
+  "num",
+  "ocf",
+  "oid",
+  "onenote",
+  "onenote-cmd",
+  "opaquelocktoken",
+  "openpgp4fpr",
+  "otpauth",
+  "palm",
+  "paparazzi",
+  "payment",
+  "payto",
+  "pkcs11",
+  "platform",
+  "pop",
+  "pres",
+  "proxy",
+  "psyc",
+  "pttp",
+  "pwid",
+  "qb",
+  "query",
+  "quic-transport",
+  "redis",
+  "rediss",
+  "reload",
+  "res",
+  "resource",
+  "rmi",
+  "rsync",
+  "rtmfp",
+  "rtmp",
+  "rtsp",
+  "rtsps",
+  "rtspu",
+  "sarif",
+  "secondlife",
+  "secret-token",
+  "service",
+  "session",
+  "sftp",
+  "sgn",
+  "shc",
+  "sieve",
+  "simpleledger",
+  "simplex",
+  "sip",
+  "sips",
+  "skype",
+  "smb",
+  "smp",
+  "sms",
+  "smtp",
+  "snmp",
+  "soap.beep",
+  "soap.beeps",
+  "soldat",
+  "spiffe",
+  "spotify",
+  "ssb",
+  "ssh",
+  "starknet",
+  "steam",
+  "stun",
+  "stuns",
+  "submit",
+  "svn",
+  "swh",
+  "swid",
+  "swidpath",
+  "tag",
+  "taler",
+  "teamspeak",
+  "tel",
+  "teliaeid",
+  "telnet",
+  "tftp",
+  "things",
+  "thismessage",
+  "tip",
+  "tn3270",
+  "tool",
+  "turn",
+  "turns",
+  "tv",
+  "udp",
+  "unreal",
+  "urn",
+  "ut2004",
+  "uuid-in-package",
+  "v-event",
+  "vemmi",
+  "ventrilo",
+  "ves",
+  "view-source",
+  "vnc",
+  "vscode",
+  "vscode-insiders",
+  "vsls",
+  "w3",
+  "wcr",
+  "web3",
+  "webcal",
+  "wifi",
+  "ws",
+  "wss",
+  "wtai",
+  "wyciwyg",
+  "xcon",
+  "xcon-userid",
+  "xfire",
+  "xmlrpc.beep",
+  "xmlrpc.beeps",
+  "xmpp",
+  "xri",
+  "ymsgr",
+  "z39.50r",
+  "z39.50s"
+]

package/src/mjs/common.js

@@ -0,0 +1,24 @@
+/**
+ * common.js
+ */
+
+/* constants */
+const TYPE_FROM = 8;
+const TYPE_TO = -1;
+
+/**
+ * get type
+ *
+ * @param {*} o - object to check
+ * @returns {string} - type of object
+ */
+export const getType = o =>
+  Object.prototype.toString.call(o).slice(TYPE_FROM, TYPE_TO);
+
+/**
+ * is string
+ *
+ * @param {*} o - object to check
+ * @returns {boolean} - result
+ */
+export const isString = o => typeof o === 'string' || o instanceof String;