ansxor.ca
forked from
jollywhoppers.com/witchsky.app
Bluesky app fork with some witchin' additions 💫
update: allow anything excpet javascript, even ip addresses
authored by
PGXD/HatLink
and committed by
+1
-1
src/components/RichText.tsx
+1
-1
src/components/RichText.tsx
···
13
13
const WORD_WRAP = {wordWrap: 1}
14
14
// lifted from facet detection in `RichText` impl, _without_ `gm` flags
15
15
const URL_REGEX =
16
-
/(^|\s|\()((https?:\/\/[\S]+)|(steam:\/\/[\S]+)|((?<domain>[a-z][a-z0-9]*(\.[a-z0-9]+)+)[\S]*))/i
16
+
/(^|\s|\()(?!javascript:)([a-z][a-z0-9+.-]*:\/\/[\S]+|(?:[a-z0-9]+\.)+[a-z0-9]+(:[0-9]+)?[\S]*|[a-z][a-z0-9+.-]*:[^\s()]+)/i
17
17
18
18
export type RichTextProps = TextStyleProp &
19
19
Pick<TextProps, 'selectable' | 'onLayout' | 'onTextLayout'> & {
+2
-2
src/lib/strings/website.ts
+2
-2
src/lib/strings/website.ts
···
4
4
5
5
export function sanitizeWebsiteForLink(website: string): string {
6
6
const normalized = website.toLowerCase()
7
-
return normalized.startsWith('https') || normalized.startsWith('steam')
7
+
return !normalized.startsWith('javascript')
8
8
? normalized
9
-
: `https://${website.toLowerCase()}`
9
+
: `unsafe-${website}`
10
10
}
11
11
12
12
export function isValidWebsiteFormat(website: string): boolean {