url-sanitizer 4.2.1 → 4.2.2

package/package.json

@@ -39,12 +39,12 @@
     "esbuild": "^0.28.1",
     "eslint": "^9.39.5",
     "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-jsdoc": "^63.2.2",
+    "eslint-plugin-jsdoc": "^63.3.0",
     "eslint-plugin-prettier": "^5.5.6",
     "eslint-plugin-regexp": "^3.1.1",
     "eslint-plugin-unicorn": "^64.0.0",
     "fast-check": "^4.9.0",
-    "globals": "^17.7.0",
+    "globals": "^17.8.0",
     "http-server": "^14.1.1",
     "mitata": "^1.0.34",
     "mocha": "^11.7.6",
@@ -93,5 +93,5 @@
   "engines": {
     "node": ">=22.13"
   },
-  "version": "4.2.1"
+  "version": "4.2.2"
 }

package/src/mjs/sanitizer.js

@@ -654,7 +654,10 @@ class URLSanitizer extends URISchemes {
    * @returns {boolean} True if the scheme is registered.
    */
   has(scheme) {
-    return this.#allowedSchemes.has(scheme);
+    if (!isString(scheme)) {
+      return false;
+    }
+    return this.#allowedSchemes.has(scheme.trim().toLowerCase());
   }
 
   /**
@@ -663,17 +666,18 @@ class URLSanitizer extends URISchemes {
    * @returns {string[]} The updated array of registered schemes.
    */
   add(scheme) {
+    let loweredScheme;
     if (isString(scheme)) {
-      scheme = scheme.trim();
+      loweredScheme = scheme.trim().toLowerCase();
     } else {
       throw new TypeError(`Expected String but got ${getType(scheme)}.`);
     }
-    const schemeParts = scheme.split('+');
+    const schemeParts = loweredScheme.split('+');
     const isScript = schemeParts.some(s => REG_SCRIPT.test(s));
-    if (isScript || !REG_SCHEME.test(scheme)) {
+    if (isScript || !REG_SCHEME.test(loweredScheme)) {
       throw new Error(`Invalid scheme: ${scheme}`);
     }
-    this.#allowedSchemes.add(scheme);
+    this.#allowedSchemes.add(loweredScheme);
     return [...this.#allowedSchemes];
   }
 
@@ -683,7 +687,10 @@ class URLSanitizer extends URISchemes {
    * @returns {boolean} True if the scheme was successfully removed.
    */
   remove(scheme) {
-    return this.#allowedSchemes.delete(scheme);
+    if (!isString(scheme)) {
+      return false;
+    }
+    return this.#allowedSchemes.delete(scheme.trim().toLowerCase());
   }
 
   /**

package/src/mjs/uri-util.js

@@ -76,7 +76,10 @@ export class URISchemes {
    * @returns {boolean} True if the scheme is registered.
    */
   has(scheme) {
-    return this.#schemes.has(scheme);
+    if (!isString(scheme)) {
+      return false;
+    }
+    return this.#schemes.has(scheme.trim().toLowerCase());
   }
 
   /**