safeImageUrlfunction
A picture's address, or null when it is anything else. A picture is a data:image/ address (png, jpeg, gif, webp,
avif or svg), an https: or http: address, an address on the same site (/logo.svg, ./logo.svg, ../logo.svg)
or a plain file name. A javascript: address, any other data: address, and anything with a quote or an angle
bracket in it, is not one.
Import it
import { safeImageUrl } from "@johnmorrisdotca/toranpu/card-faces";Definition
function safeImageUrl(url: unknown): string | nullParameters
| Name | Type | Description |
|---|---|---|
url | unknown | An untrusted image URL. |
Returns
string | null
A picture's address, or null when it is anything else. A picture is a data:image/ address (png, jpeg, gif, webp, avif or svg), an https: or http: address, an address on the same site (/logo.svg, ./logo.svg, ../logo.svg) or a plain file name. A javascript: address, any other data: address, and anything with a quote or an angle bracket in it, is not one.
Examples
import { safeImageUrl } from "@johnmorrisdotca/toranpu/card-faces";
console.log(safeImageUrl("javascript:alert(1)"));nullWhat it prints (run when this page was built)