Function isValidURL

packages/components/src/validator.ts:22–32

(url: string)

 * single quotes, backticks (template literals), backslashes, and newlines.
 */
export const isValidURL = (url: string): boolean => {
    try {
        const parsed = new URL(url)
        if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') return false
        if (parsed.hash) return false
        if (/["'`\\\n\r\t]/.test(url)) return false
        return true
    } catch {
        return false
    }
}

/**
 * Validates if a string contains path traversal attempts