url-sanitizer 0.9.4 → 0.9.6

package/dist/url-sanitizer-wo-dompurify.js

@@ -1,588 +1,3 @@
-// bundle_wo_dompurify/lib/file/text-chars.json
-var text_chars_default = [
-  7,
-  8,
-  9,
-  10,
-  11,
-  12,
-  13,
-  27,
-  32,
-  33,
-  34,
-  35,
-  36,
-  37,
-  38,
-  39,
-  40,
-  41,
-  42,
-  43,
-  44,
-  45,
-  46,
-  47,
-  48,
-  49,
-  50,
-  51,
-  52,
-  53,
-  54,
-  55,
-  56,
-  57,
-  58,
-  59,
-  60,
-  61,
-  62,
-  63,
-  64,
-  65,
-  66,
-  67,
-  68,
-  69,
-  70,
-  71,
-  72,
-  73,
-  74,
-  75,
-  76,
-  77,
-  78,
-  79,
-  80,
-  81,
-  82,
-  83,
-  84,
-  85,
-  86,
-  87,
-  88,
-  89,
-  90,
-  91,
-  92,
-  93,
-  94,
-  95,
-  96,
-  97,
-  98,
-  99,
-  100,
-  101,
-  102,
-  103,
-  104,
-  105,
-  106,
-  107,
-  108,
-  109,
-  110,
-  111,
-  112,
-  113,
-  114,
-  115,
-  116,
-  117,
-  118,
-  119,
-  120,
-  121,
-  122,
-  123,
-  124,
-  125,
-  126,
-  128,
-  129,
-  130,
-  131,
-  132,
-  133,
-  134,
-  135,
-  136,
-  137,
-  138,
-  139,
-  140,
-  141,
-  142,
-  143,
-  144,
-  145,
-  146,
-  147,
-  148,
-  149,
-  150,
-  151,
-  152,
-  153,
-  154,
-  155,
-  156,
-  157,
-  158,
-  159,
-  160,
-  161,
-  162,
-  163,
-  164,
-  165,
-  166,
-  167,
-  168,
-  169,
-  170,
-  171,
-  172,
-  173,
-  174,
-  175,
-  176,
-  177,
-  178,
-  179,
-  180,
-  181,
-  182,
-  183,
-  184,
-  185,
-  186,
-  187,
-  188,
-  189,
-  190,
-  191,
-  192,
-  193,
-  194,
-  195,
-  196,
-  197,
-  198,
-  199,
-  200,
-  201,
-  202,
-  203,
-  204,
-  205,
-  206,
-  207,
-  208,
-  209,
-  210,
-  211,
-  212,
-  213,
-  214,
-  215,
-  216,
-  217,
-  218,
-  219,
-  220,
-  221,
-  222,
-  223,
-  224,
-  225,
-  226,
-  227,
-  228,
-  229,
-  230,
-  231,
-  232,
-  233,
-  234,
-  235,
-  236,
-  237,
-  238,
-  239,
-  240,
-  241,
-  242,
-  243,
-  244,
-  245,
-  246,
-  247,
-  248,
-  249,
-  250,
-  251,
-  252,
-  253,
-  254,
-  255
-];
-
-// bundle_wo_dompurify/lib/iana/uri-schemes.json
-var uri_schemes_default = [
-  "aaa",
-  "aaas",
-  "about",
-  "acap",
-  "acct",
-  "acd",
-  "acr",
-  "adiumxtra",
-  "adt",
-  "afp",
-  "afs",
-  "aim",
-  "amss",
-  "android",
-  "appdata",
-  "apt",
-  "ar",
-  "ark",
-  "attachment",
-  "aw",
-  "barion",
-  "beshare",
-  "bitcoin",
-  "bitcoincash",
-  "blob",
-  "bolo",
-  "browserext",
-  "cabal",
-  "calculator",
-  "callto",
-  "cap",
-  "cast",
-  "casts",
-  "chrome",
-  "chrome-extension",
-  "cid",
-  "coap",
-  "coaps",
-  "com-eventbrite-attendee",
-  "content",
-  "content-type",
-  "crid",
-  "cstr",
-  "cvs",
-  "dab",
-  "dat",
-  "data",
-  "dav",
-  "diaspora",
-  "dict",
-  "did",
-  "dis",
-  "dlna-playcontainer",
-  "dlna-playsingle",
-  "dns",
-  "dntp",
-  "doi",
-  "dpp",
-  "drm",
-  "dtmi",
-  "dtn",
-  "dvb",
-  "dvx",
-  "dweb",
-  "ed2k",
-  "eid",
-  "elsi",
-  "embedded",
-  "ens",
-  "ethereum",
-  "example",
-  "facetime",
-  "feed",
-  "feedready",
-  "fido",
-  "file",
-  "finger",
-  "first-run-pen-experience",
-  "fish",
-  "fm",
-  "ftp",
-  "fuchsia-pkg",
-  "geo",
-  "gg",
-  "git",
-  "gitoid",
-  "gizmoproject",
-  "go",
-  "gopher",
-  "graph",
-  "gtalk",
-  "h323",
-  "ham",
-  "hcap",
-  "hcp",
-  "http",
-  "https",
-  "hxxp",
-  "hxxps",
-  "hydrazone",
-  "hyper",
-  "iax",
-  "icap",
-  "icon",
-  "im",
-  "imap",
-  "info",
-  "iotdisco",
-  "ipfs",
-  "ipn",
-  "ipns",
-  "ipp",
-  "ipps",
-  "irc",
-  "irc6",
-  "ircs",
-  "iris",
-  "iris.beep",
-  "iris.lwz",
-  "iris.xpc",
-  "iris.xpcs",
-  "isostore",
-  "itms",
-  "jabber",
-  "jar",
-  "jms",
-  "keyparc",
-  "lastfm",
-  "lbry",
-  "ldap",
-  "ldaps",
-  "leaptofrogans",
-  "lorawan",
-  "lpa",
-  "lvlt",
-  "magnet",
-  "mailto",
-  "maps",
-  "market",
-  "matrix",
-  "message",
-  "microsoft.windows.camera",
-  "microsoft.windows.camera.multipicker",
-  "microsoft.windows.camera.picker",
-  "mid",
-  "mms",
-  "mongodb",
-  "moz",
-  "moz-extension",
-  "ms-access",
-  "ms-appinstaller",
-  "ms-browser-extension",
-  "ms-calculator",
-  "ms-drive-to",
-  "ms-enrollment",
-  "ms-excel",
-  "ms-eyecontrolspeech",
-  "ms-gamebarservices",
-  "ms-gamingoverlay",
-  "ms-getoffice",
-  "ms-help",
-  "ms-infopath",
-  "ms-inputapp",
-  "ms-lockscreencomponent-config",
-  "ms-media-stream-id",
-  "ms-meetnow",
-  "ms-mixedrealitycapture",
-  "ms-mobileplans",
-  "ms-newsandinterests",
-  "ms-officeapp",
-  "ms-people",
-  "ms-powerpoint",
-  "ms-project",
-  "ms-publisher",
-  "ms-remotedesktop-launch",
-  "ms-restoretabcompanion",
-  "ms-screenclip",
-  "ms-screensketch",
-  "ms-search",
-  "ms-search-repair",
-  "ms-secondary-screen-controller",
-  "ms-secondary-screen-setup",
-  "ms-settings",
-  "ms-settings-airplanemode",
-  "ms-settings-bluetooth",
-  "ms-settings-camera",
-  "ms-settings-cellular",
-  "ms-settings-cloudstorage",
-  "ms-settings-connectabledevices",
-  "ms-settings-displays-topology",
-  "ms-settings-emailandaccounts",
-  "ms-settings-language",
-  "ms-settings-location",
-  "ms-settings-lock",
-  "ms-settings-nfctransactions",
-  "ms-settings-notifications",
-  "ms-settings-power",
-  "ms-settings-privacy",
-  "ms-settings-proximity",
-  "ms-settings-screenrotation",
-  "ms-settings-wifi",
-  "ms-settings-workplace",
-  "ms-spd",
-  "ms-stickers",
-  "ms-sttoverlay",
-  "ms-transit-to",
-  "ms-useractivityset",
-  "ms-virtualtouchpad",
-  "ms-visio",
-  "ms-walk-to",
-  "ms-whiteboard",
-  "ms-whiteboard-cmd",
-  "ms-word",
-  "msnim",
-  "msrp",
-  "msrps",
-  "mss",
-  "mt",
-  "mtqp",
-  "mumble",
-  "mupdate",
-  "mvn",
-  "news",
-  "nfs",
-  "ni",
-  "nih",
-  "nntp",
-  "notes",
-  "num",
-  "ocf",
-  "oid",
-  "onenote",
-  "onenote-cmd",
-  "opaquelocktoken",
-  "openpgp4fpr",
-  "otpauth",
-  "palm",
-  "paparazzi",
-  "payment",
-  "payto",
-  "pkcs11",
-  "platform",
-  "pop",
-  "pres",
-  "proxy",
-  "psyc",
-  "pttp",
-  "pwid",
-  "qb",
-  "query",
-  "quic-transport",
-  "redis",
-  "rediss",
-  "reload",
-  "res",
-  "resource",
-  "rmi",
-  "rsync",
-  "rtmfp",
-  "rtmp",
-  "rtsp",
-  "rtsps",
-  "rtspu",
-  "sarif",
-  "secondlife",
-  "secret-token",
-  "service",
-  "session",
-  "sftp",
-  "sgn",
-  "shc",
-  "sieve",
-  "simpleledger",
-  "simplex",
-  "sip",
-  "sips",
-  "skype",
-  "smb",
-  "smp",
-  "sms",
-  "smtp",
-  "snmp",
-  "soap.beep",
-  "soap.beeps",
-  "soldat",
-  "spiffe",
-  "spotify",
-  "ssb",
-  "ssh",
-  "starknet",
-  "steam",
-  "stun",
-  "stuns",
-  "submit",
-  "svn",
-  "swh",
-  "swid",
-  "swidpath",
-  "tag",
-  "taler",
-  "teamspeak",
-  "tel",
-  "teliaeid",
-  "telnet",
-  "tftp",
-  "things",
-  "thismessage",
-  "tip",
-  "tn3270",
-  "tool",
-  "turn",
-  "turns",
-  "tv",
-  "udp",
-  "unreal",
-  "urn",
-  "ut2004",
-  "uuid-in-package",
-  "v-event",
-  "vemmi",
-  "ventrilo",
-  "ves",
-  "view-source",
-  "vnc",
-  "vscode",
-  "vscode-insiders",
-  "vsls",
-  "w3",
-  "wcr",
-  "web3",
-  "webcal",
-  "wifi",
-  "ws",
-  "wss",
-  "wtai",
-  "wyciwyg",
-  "xcon",
-  "xcon-userid",
-  "xfire",
-  "xmlrpc.beep",
-  "xmlrpc.beeps",
-  "xmpp",
-  "xri",
-  "ymsgr",
-  "z39.50r",
-  "z39.50s"
-];
-
 // bundle_wo_dompurify/mjs/dompurify.js
 var { DOMPurify } = window;
 
@@ -592,22 +7,19 @@ var TYPE_TO = -1;
 var getType = (o) => Object.prototype.toString.call(o).slice(TYPE_FROM, TYPE_TO);
 var isString = (o) => typeof o === "string" || o instanceof String;
 
+// bundle_wo_dompurify/lib/file/text-chars.json
+var text_chars_default = [7, 8, 9, 10, 11, 12, 13, 27, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91, 92, 93, 94, 95, 96, 97, 98, 99, 100, 101, 102, 103, 104, 105, 106, 107, 108, 109, 110, 111, 112, 113, 114, 115, 116, 117, 118, 119, 120, 121, 122, 123, 124, 125, 126, 128, 129, 130, 131, 132, 133, 134, 135, 136, 137, 138, 139, 140, 141, 142, 143, 144, 145, 146, 147, 148, 149, 150, 151, 152, 153, 154, 155, 156, 157, 158, 159, 160, 161, 162, 163, 164, 165, 166, 167, 168, 169, 170, 171, 172, 173, 174, 175, 176, 177, 178, 179, 180, 181, 182, 183, 184, 185, 186, 187, 188, 189, 190, 191, 192, 193, 194, 195, 196, 197, 198, 199, 200, 201, 202, 203, 204, 205, 206, 207, 208, 209, 210, 211, 212, 213, 214, 215, 216, 217, 218, 219, 220, 221, 222, 223, 224, 225, 226, 227, 228, 229, 230, 231, 232, 233, 234, 235, 236, 237, 238, 239, 240, 241, 242, 243, 244, 245, 246, 247, 248, 249, 250, 251, 252, 253, 254, 255];
+
+// bundle_wo_dompurify/lib/iana/uri-schemes.json
+var uri_schemes_default = ["aaa", "aaas", "about", "acap", "acct", "acd", "acr", "adiumxtra", "adt", "afp", "afs", "aim", "amss", "android", "appdata", "apt", "ar", "ark", "attachment", "aw", "barion", "beshare", "bitcoin", "bitcoincash", "blob", "bolo", "browserext", "cabal", "calculator", "callto", "cap", "cast", "casts", "chrome", "chrome-extension", "cid", "coap", "coaps", "com-eventbrite-attendee", "content", "content-type", "crid", "cstr", "cvs", "dab", "dat", "data", "dav", "diaspora", "dict", "did", "dis", "dlna-playcontainer", "dlna-playsingle", "dns", "dntp", "doi", "dpp", "drm", "dtmi", "dtn", "dvb", "dvx", "dweb", "ed2k", "eid", "elsi", "embedded", "ens", "ethereum", "example", "facetime", "feed", "feedready", "fido", "file", "finger", "first-run-pen-experience", "fish", "fm", "ftp", "fuchsia-pkg", "geo", "gg", "git", "gitoid", "gizmoproject", "go", "gopher", "graph", "gtalk", "h323", "ham", "hcap", "hcp", "http", "https", "hxxp", "hxxps", "hydrazone", "hyper", "iax", "icap", "icon", "im", "imap", "info", "iotdisco", "ipfs", "ipn", "ipns", "ipp", "ipps", "irc", "irc6", "ircs", "iris", "iris.beep", "iris.lwz", "iris.xpc", "iris.xpcs", "isostore", "itms", "jabber", "jar", "jms", "keyparc", "lastfm", "lbry", "ldap", "ldaps", "leaptofrogans", "lorawan", "lpa", "lvlt", "magnet", "mailto", "maps", "market", "matrix", "message", "microsoft.windows.camera", "microsoft.windows.camera.multipicker", "microsoft.windows.camera.picker", "mid", "mms", "mongodb", "moz", "moz-extension", "ms-access", "ms-appinstaller", "ms-browser-extension", "ms-calculator", "ms-drive-to", "ms-enrollment", "ms-excel", "ms-eyecontrolspeech", "ms-gamebarservices", "ms-gamingoverlay", "ms-getoffice", "ms-help", "ms-infopath", "ms-inputapp", "ms-lockscreencomponent-config", "ms-media-stream-id", "ms-meetnow", "ms-mixedrealitycapture", "ms-mobileplans", "ms-newsandinterests", "ms-officeapp", "ms-people", "ms-powerpoint", "ms-project", "ms-publisher", "ms-remotedesktop-launch", "ms-restoretabcompanion", "ms-screenclip", "ms-screensketch", "ms-search", "ms-search-repair", "ms-secondary-screen-controller", "ms-secondary-screen-setup", "ms-settings", "ms-settings-airplanemode", "ms-settings-bluetooth", "ms-settings-camera", "ms-settings-cellular", "ms-settings-cloudstorage", "ms-settings-connectabledevices", "ms-settings-displays-topology", "ms-settings-emailandaccounts", "ms-settings-language", "ms-settings-location", "ms-settings-lock", "ms-settings-nfctransactions", "ms-settings-notifications", "ms-settings-power", "ms-settings-privacy", "ms-settings-proximity", "ms-settings-screenrotation", "ms-settings-wifi", "ms-settings-workplace", "ms-spd", "ms-stickers", "ms-sttoverlay", "ms-transit-to", "ms-useractivityset", "ms-virtualtouchpad", "ms-visio", "ms-walk-to", "ms-whiteboard", "ms-whiteboard-cmd", "ms-word", "msnim", "msrp", "msrps", "mss", "mt", "mtqp", "mumble", "mupdate", "mvn", "news", "nfs", "ni", "nih", "nntp", "notes", "num", "ocf", "oid", "onenote", "onenote-cmd", "opaquelocktoken", "openpgp4fpr", "otpauth", "palm", "paparazzi", "payment", "payto", "pkcs11", "platform", "pop", "pres", "proxy", "psyc", "pttp", "pwid", "qb", "query", "quic-transport", "redis", "rediss", "reload", "res", "resource", "rmi", "rsync", "rtmfp", "rtmp", "rtsp", "rtsps", "rtspu", "sarif", "secondlife", "secret-token", "service", "session", "sftp", "sgn", "shc", "sieve", "simpleledger", "simplex", "sip", "sips", "skype", "smb", "smp", "sms", "smtp", "snmp", "soap.beep", "soap.beeps", "soldat", "spiffe", "spotify", "ssb", "ssh", "starknet", "steam", "stun", "stuns", "submit", "svn", "swh", "swid", "swidpath", "tag", "taler", "teamspeak", "tel", "teliaeid", "telnet", "tftp", "things", "thismessage", "tip", "tn3270", "tool", "turn", "turns", "tv", "udp", "unreal", "urn", "ut2004", "uuid-in-package", "v-event", "vemmi", "ventrilo", "ves", "view-source", "vnc", "vscode", "vscode-insiders", "vsls", "w3", "wcr", "web3", "webcal", "wifi", "ws", "wss", "wtai", "wyciwyg", "xcon", "xcon-userid", "xfire", "xmlrpc.beep", "xmlrpc.beeps", "xmpp", "xri", "ymsgr", "z39.50r", "z39.50s"];
+
 // bundle_wo_dompurify/mjs/file-reader.js
 var { FileReader } = window;
 
 // bundle_wo_dompurify/mjs/uri-util.js
 var HEX = 16;
 var REG_BASE64 = /^[\da-z+/\-_=]+$/i;
-var REG_DATA_URL = /data:[^,]*,/;
-var REG_DATA_URL_BASE64 = /data:[^,]*;?base64,[\da-z+/\-_=]+/i;
-var REG_DATA_URL_G = /data:[^,]*,[^"]+/g;
 var REG_END_COLON = /:$/;
-var REG_END_NUM = /(?:#|%23)$/;
-var REG_END_QUEST = /(?<!(?:#|%23).*)(?:\?|%3F)$/;
-var REG_HTML_SP = /[<>"'\s]/g;
-var REG_HTML_URL_ENC = /%(?:2(?:2|7)|3(?:C|E))/g;
-var REG_HTML_URL_ENC_SHORT = /%(?:2(?:2|7)|3(?:C|E))+?/;
-var REG_MIME_DOM = /^(?:text\/(?:ht|x)ml|application\/(?:xhtml\+)?xml|image\/svg\+xml)/;
 var REG_NUM_DECI = /^\d+/;
 var REG_NUM_HEAD = /#x?$/;
 var REG_NUM_HEAD_ASCII = /^#(?:x(?:00)?[2-7]|\d)/;
@@ -616,9 +28,7 @@ var REG_NUM_REF = /&#(x(?:00)?[\dA-F]{2}|0?\d{1,3});?/ig;
 var REG_SCHEME = /^[a-z][\da-z+\-.]*$/;
 var REG_SCHEME_CUSTOM = /^(?:ext|web)\+[a-z]+$/;
 var REG_SCRIPT = /(?:java|vb)script/;
-var REG_SCRIPT_BLOB = /(?:java|vb)script|blob/;
 var REG_URL_ENC = /^%[\dA-F]{2}$/i;
-var REG_URL_ENC_AMP = /%26/g;
 var getURLEncodedString = (str) => {
   if (!isString(str)) {
     throw new TypeError(`Expected String but got ${getType(str)}.`);
@@ -789,6 +199,21 @@ var URISchemes = class {
     return !!res;
   }
 };
+
+// bundle_wo_dompurify/mjs/sanitizer.js
+var HEX2 = 16;
+var REG_DATA_URL = /data:[^,]*,/;
+var REG_DATA_URL_BASE64 = /data:[^,]*;?base64,[\da-z+/\-_=]+/i;
+var REG_DATA_URL_G = /data:[^,]*,[^"]+/g;
+var REG_END_COLON2 = /:$/;
+var REG_END_NUM = /(?:#|%23)$/;
+var REG_END_QUEST = /(?<!(?:#|%23).*)(?:\?|%3F)$/;
+var REG_HTML_SP = /[<>"'\s]/g;
+var REG_HTML_URL_ENC = /%(?:2(?:2|7)|3(?:C|E))/g;
+var REG_HTML_URL_ENC_QUOT = /(?:%(?:2(?:2|7)|3(?:C|E))+?|["'])/;
+var REG_MIME_DOM = /^(?:text\/(?:ht|x)ml|application\/(?:xhtml\+)?xml|image\/svg\+xml)/;
+var REG_SCRIPT_BLOB = /(?:java|vb)script|blob/;
+var REG_URL_ENC_AMP = /%26/g;
 var URLSanitizer = class extends URISchemes {
   /* private fields */
   #nest;
@@ -870,8 +295,8 @@ var URLSanitizer = class extends URISchemes {
    * @param {boolean} [opt.remove] - remove tag and/or quote and the rest
    * @returns {?string} - sanitized URL
    */
-  sanitize(url, opt = { allow: [], deny: [], only: [] }) {
-    if (this.#nest > HEX) {
+  sanitize(url, opt) {
+    if (this.#nest > HEX2) {
       this.#nest = 0;
       throw new Error("Data URLs nested too deeply.");
     }
@@ -948,7 +373,7 @@ var URLSanitizer = class extends URISchemes {
     let sanitizedUrl;
     if (super.verify(url)) {
       const { hash, href, pathname, protocol, search } = new URL(url);
-      const scheme = protocol.replace(REG_END_COLON, "");
+      const scheme = protocol.replace(REG_END_COLON2, "");
       const schemeParts = scheme.split("+");
       let bool;
       if (restrictScheme) {
@@ -977,7 +402,7 @@ var URLSanitizer = class extends URISchemes {
           try {
             const decodedData = parseURLEncodedNumCharRef(parsedData).trim();
             const { protocol: dataScheme } = new URL(decodedData);
-            const dataSchemeParts = dataScheme.replace(REG_END_COLON, "").split("+");
+            const dataSchemeParts = dataScheme.replace(REG_END_COLON2, "").split("+");
             if (dataSchemeParts.some((s) => REG_SCRIPT_BLOB.test(s))) {
               urlToSanitize = "";
             }
@@ -1011,8 +436,8 @@ var URLSanitizer = class extends URISchemes {
         } else {
           finalize = true;
         }
-        if (!isDataUrl && remove && REG_HTML_URL_ENC_SHORT.test(urlToSanitize)) {
-          const item = REG_HTML_URL_ENC_SHORT.exec(urlToSanitize);
+        if (!isDataUrl && remove && REG_HTML_URL_ENC_QUOT.test(urlToSanitize)) {
+          const item = REG_HTML_URL_ENC_QUOT.exec(urlToSanitize);
           const { index } = item;
           urlToSanitize = urlToSanitize.substring(0, index);
         }
@@ -1063,7 +488,7 @@ var URLSanitizer = class extends URISchemes {
     if (sanitizedUrl) {
       const urlObj = new URL(sanitizedUrl);
       const { pathname, protocol } = urlObj;
-      const schemeParts = protocol.replace(REG_END_COLON, "").split("+");
+      const schemeParts = protocol.replace(REG_END_COLON2, "").split("+");
       const isDataUrl = schemeParts.includes("data");
       parsedUrl.set("valid", true);
       if (isDataUrl) {
@@ -1095,32 +520,6 @@ var URLSanitizer = class extends URISchemes {
   }
 };
 var urlSanitizer = new URLSanitizer();
-var isURISync = (uri) => urlSanitizer.verify(uri);
-var isURI = async (uri) => {
-  const res = urlSanitizer.verify(uri);
-  return res;
-};
-var parseURLSync = (url) => urlSanitizer.parse(url);
-var parseURL = async (url) => {
-  const res = urlSanitizer.parse(url);
-  return res;
-};
-var sanitizeURLSync = (url, opt) => {
-  let res;
-  if (urlSanitizer.verify(url)) {
-    const { protocol } = new URL(url);
-    if (protocol === "blob:") {
-      URL.revokeObjectURL(url);
-    } else {
-      res = urlSanitizer.sanitize(url, opt ?? {
-        allow: [],
-        deny: [],
-        only: []
-      });
-    }
-  }
-  return res || null;
-};
 var sanitizeURL = async (url, opt = {
   allow: [],
   deny: [],
@@ -1161,6 +560,28 @@ var sanitizeURL = async (url, opt = {
   }
   return res || null;
 };
+var sanitizeURLSync = (url, opt) => {
+  let res;
+  if (urlSanitizer.verify(url)) {
+    const { protocol } = new URL(url);
+    if (protocol === "blob:") {
+      URL.revokeObjectURL(url);
+    } else {
+      res = urlSanitizer.sanitize(url, opt);
+    }
+  }
+  return res || null;
+};
+var parseURL = async (url) => {
+  const res = urlSanitizer.parse(url);
+  return res;
+};
+var parseURLSync = (url) => urlSanitizer.parse(url);
+var isURI = async (uri) => {
+  const res = urlSanitizer.verify(uri);
+  return res;
+};
+var isURISync = (uri) => urlSanitizer.verify(uri);
 export {
   urlSanitizer as default,
   isURI,