kungen/Test
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Test/node_modules/@braintree/sanitize-url
History
Ken 966d8c3a41 Initial commit
2026-04-09 22:54:00 +07:00
..
.github Initial commit 2026-04-09 22:54:00 +07:00
dist Initial commit 2026-04-09 22:54:00 +07:00
src Initial commit 2026-04-09 22:54:00 +07:00
.eslintignore Initial commit 2026-04-09 22:54:00 +07:00
.eslintrc Initial commit 2026-04-09 22:54:00 +07:00
.nvmrc Initial commit 2026-04-09 22:54:00 +07:00
.prettierignore Initial commit 2026-04-09 22:54:00 +07:00
CHANGELOG.md Initial commit 2026-04-09 22:54:00 +07:00
LICENSE Initial commit 2026-04-09 22:54:00 +07:00
package.json Initial commit 2026-04-09 22:54:00 +07:00
README.md Initial commit 2026-04-09 22:54:00 +07:00
tsconfig.json Initial commit 2026-04-09 22:54:00 +07:00

README.md

sanitize-url

Installation

npm install -S @braintree/sanitize-url

Usage

var sanitizeUrl = require("@braintree/sanitize-url").sanitizeUrl;

sanitizeUrl("https://example.com"); // 'https://example.com'
sanitizeUrl("http://example.com"); // 'http://example.com'
sanitizeUrl("www.example.com"); // 'www.example.com'
sanitizeUrl("mailto:hello@example.com"); // 'mailto:hello@example.com'
sanitizeUrl(
  "https&#0000058//example.com"
); // https://example.com

sanitizeUrl("javascript:alert(document.domain)"); // 'about:blank'
sanitizeUrl("jAvasCrIPT:alert(document.domain)"); // 'about:blank'
sanitizeUrl(decodeURIComponent("JaVaScRiP%0at:alert(document.domain)")); // 'about:blank'
// HTML encoded javascript:alert('XSS')
sanitizeUrl(
  "&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041"
); // 'about:blank'