wireweave 0.3.8 → 0.3.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wireweave",
-  "version": "0.3.8",
+  "version": "0.3.10",
   "description": "nostr + webrtc voice + data SDK. networking layer for 247420 projects.",
   "type": "module",
   "main": "./src/index.js",

package/src/bans.js

@@ -55,13 +55,16 @@ export class Bans extends EventTarget {
     if (!creator) return;
     this.sub = 'bans-' + serverId;
     this.pool.subscribe(this.sub,
-      [{ kinds: [30078], authors: [creator], '#d': ['zellous-ban:' + serverId, 'zellous-timeout:' + serverId] }],
+      [{ kinds: [30078], authors: [creator], '#server': [serverId] }],
       (event) => {
         if (event.pubkey !== creator) return;
         try {
           const dTag = event.tags.find(t => t[0] === 'd');
           if (!dTag?.[1]) return;
-          const [prefix, , pubkey] = dTag[1].split(':');
+          const parts = dTag[1].split(':');
+          const prefix = parts[0];
+          const pubkey = parts[parts.length - 1];
+          if (prefix !== 'zellous-ban' && prefix !== 'zellous-timeout') return;
           const data = this.store.get(serverId) || { banned: [], timeouts: {} };
           if (prefix === 'zellous-ban' && pubkey && !data.banned.includes(pubkey)) data.banned.push(pubkey);
           else if (prefix === 'zellous-timeout' && pubkey) {

package/src/debug.js

@@ -3,15 +3,15 @@ const registry = new Map();
 export const register = (key, obj) => {
   registry.set(key, obj);
   if (typeof window !== 'undefined') {
-    window.__magicwand = window.__magicwand || {};
-    window.__magicwand[key] = obj;
+    window.__wireweave = window.__wireweave || {};
+    window.__wireweave[key] = obj;
   }
 };
 
 export const deregister = (key) => {
   registry.delete(key);
-  if (typeof window !== 'undefined' && window.__magicwand) {
-    delete window.__magicwand[key];
+  if (typeof window !== 'undefined' && window.__wireweave) {
+    delete window.__wireweave[key];
   }
 };
 

package/src/media.js

@@ -94,8 +94,8 @@ export class Media {
 
   isMedia(url) {
     if (typeof url !== 'string') return null;
-    if (/\.(png|jpe?g|gif|webp|svg|avif)(\?|$)/i.test(url)) return 'image';
-    if (/\.(mp4|webm|mov|ogg)(\?|$)/i.test(url)) return 'video';
+    if (/\.(png|jpe?g|gif|webp|svg|avif|heic|heif|tiff?|bmp)(\?|$)/i.test(url)) return 'image';
+    if (/\.(mp4|webm|mov|ogg|ogv|mkv|m4v|avi)(\?|$)/i.test(url)) return 'video';
     return null;
   }
 

package/src/pages.js

@@ -1,7 +1,17 @@
+const stripTags = (html) => html
+  .replace(/<\s*(script|iframe|object|embed|form|input|button)\b[^>]*>[\s\S]*?<\s*\/\s*\1\s*>/gi, '')
+  .replace(/<\s*(script|iframe|object|embed|form|input|button)\b[^>]*\/?\s*>/gi, '')
+  .replace(/\son[a-z]+\s*=\s*"[^"]*"/gi, '')
+  .replace(/\son[a-z]+\s*=\s*'[^']*'/gi, '')
+  .replace(/\son[a-z]+\s*=\s*[^\s>]+/gi, '')
+  .replace(/(href|src)\s*=\s*"\s*javascript:[^"]*"/gi, '$1="#"')
+  .replace(/(href|src)\s*=\s*'\s*javascript:[^']*'/gi, "$1='#'");
+
 const sanitize = (html) => {
-  if (typeof document === 'undefined') return html;
+  const stripped = stripTags(html);
+  if (typeof document === 'undefined') return stripped;
   const el = document.createElement('div');
-  el.innerHTML = html;
+  el.innerHTML = stripped;
   el.querySelectorAll('script,iframe,object,embed,form,input,button').forEach(n => n.remove());
   el.querySelectorAll('*').forEach(n => {
     [...n.attributes].forEach(a => {

package/src/relay-pool.js

@@ -36,7 +36,12 @@ export class RelayPool extends EventTarget {
 
   disconnect() {
     for (const [, r] of this.relays) {
-      if (r.ws) { r.ws.onclose = null; r.ws.onerror = null; try { r.ws.close(); } catch {} }
+      if (r.ws) {
+        r.ws.onclose = null; r.ws.onerror = null; r.ws.onopen = null; r.ws.onmessage = null;
+        if (typeof r.ws.removeAllListeners === 'function') r.ws.removeAllListeners();
+        if (typeof r.ws.on === 'function') r.ws.on('error', () => {});
+        try { r.ws.close(); } catch {}
+      }
     }
     this.relays.clear();
   }

package/src/wireweave.js

@@ -24,6 +24,7 @@ export const createWireweave = ({
 } = {}) => {
   if (!nostrTools) throw new Error('wireweave: nostrTools required');
   if (!xstate) throw new Error('wireweave: xstate required');
+  if (!storage) throw new Error('wireweave: storage required (no localStorage in this env — pass a {getItem,setItem,removeItem} adapter)');
 
   const fsm = createFSM(xstate);
   const pool = createRelayPool({ relays, verifyEvent: nostrTools.verifyEvent, WebSocketImpl });