fix: parse more data-type protocols

unjs · Aug 24, 2023 · 2cd4647 · 2cd4647
1 parent b1699e2
commit 2cd4647
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 2 deletions.
diff --git a/src/parse.ts b/src/parse.ts
@@ -28,9 +28,9 @@ export interface ParsedHost {
  * @returns A parsed URL object.
  */
 export function parseURL(input = "", defaultProto?: string): ParsedURL {
-  const dataMatch = input.match(/^(data:|blob:)/);
+  const dataMatch = input.match(/^(blob|data|javascript|vbscript):/);
   if (dataMatch) {
-    const proto = dataMatch[1];
+    const proto = dataMatch[0];
     return {
       protocol: proto,
       pathname: input.slice(proto.length),

diff --git a/test/parse.test.ts b/test/parse.test.ts
@@ -70,6 +70,18 @@ describe("parseURL", () => {
         search: "?url=http://0.0.0.0/2.svg",
       },
     },
+    {
+      input: "javascript:alert('hello')",
+      out: {
+        protocol: "javascript:",
+        auth: "",
+        host: "",
+        href: "javascript:alert('hello')",
+        pathname: "alert('hello')",
+        search: "",
+        hash: "",
+      },
+    },
     {
       input: "https://domain.test:3000#owo",
       out: {