wireweave 0.3.9 → 0.3.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wireweave",
-  "version": "0.3.9",
+  "version": "0.3.11",
   "description": "nostr + webrtc voice + data SDK. networking layer for 247420 projects.",
   "type": "module",
   "main": "./src/index.js",

package/src/bans.js

@@ -55,13 +55,16 @@ export class Bans extends EventTarget {
     if (!creator) return;
     this.sub = 'bans-' + serverId;
     this.pool.subscribe(this.sub,
-      [{ kinds: [30078], authors: [creator], '#d': ['zellous-ban:' + serverId, 'zellous-timeout:' + serverId] }],
+      [{ kinds: [30078], authors: [creator], '#server': [serverId] }],
       (event) => {
         if (event.pubkey !== creator) return;
         try {
           const dTag = event.tags.find(t => t[0] === 'd');
           if (!dTag?.[1]) return;
-          const [prefix, , pubkey] = dTag[1].split(':');
+          const parts = dTag[1].split(':');
+          const prefix = parts[0];
+          const pubkey = parts[parts.length - 1];
+          if (prefix !== 'zellous-ban' && prefix !== 'zellous-timeout') return;
           const data = this.store.get(serverId) || { banned: [], timeouts: {} };
           if (prefix === 'zellous-ban' && pubkey && !data.banned.includes(pubkey)) data.banned.push(pubkey);
           else if (prefix === 'zellous-timeout' && pubkey) {

package/src/debug.js

@@ -3,15 +3,15 @@ const registry = new Map();
 export const register = (key, obj) => {
   registry.set(key, obj);
   if (typeof window !== 'undefined') {
-    window.__magicwand = window.__magicwand || {};
-    window.__magicwand[key] = obj;
+    window.__wireweave = window.__wireweave || {};
+    window.__wireweave[key] = obj;
   }
 };
 
 export const deregister = (key) => {
   registry.delete(key);
-  if (typeof window !== 'undefined' && window.__magicwand) {
-    delete window.__magicwand[key];
+  if (typeof window !== 'undefined' && window.__wireweave) {
+    delete window.__wireweave[key];
   }
 };
 

package/src/pages.js

@@ -1,7 +1,17 @@
+const stripTags = (html) => html
+  .replace(/<\s*(script|iframe|object|embed|form|input|button)\b[^>]*>[\s\S]*?<\s*\/\s*\1\s*>/gi, '')
+  .replace(/<\s*(script|iframe|object|embed|form|input|button)\b[^>]*\/?\s*>/gi, '')
+  .replace(/\son[a-z]+\s*=\s*"[^"]*"/gi, '')
+  .replace(/\son[a-z]+\s*=\s*'[^']*'/gi, '')
+  .replace(/\son[a-z]+\s*=\s*[^\s>]+/gi, '')
+  .replace(/(href|src)\s*=\s*"\s*javascript:[^"]*"/gi, '$1="#"')
+  .replace(/(href|src)\s*=\s*'\s*javascript:[^']*'/gi, "$1='#'");
+
 const sanitize = (html) => {
-  if (typeof document === 'undefined') return html;
+  const stripped = stripTags(html);
+  if (typeof document === 'undefined') return stripped;
   const el = document.createElement('div');
-  el.innerHTML = html;
+  el.innerHTML = stripped;
   el.querySelectorAll('script,iframe,object,embed,form,input,button').forEach(n => n.remove());
   el.querySelectorAll('*').forEach(n => {
     [...n.attributes].forEach(a => {