Function sanitizeMarkdownUrl

packages/react/src/components/markdown.tsx:7–17

(url: string | undefined)

const SAFE_LINK_PROTOCOLS = new Set(["http:", "https:", "mailto:"]);

export function sanitizeMarkdownUrl(url: string | undefined): string | null {
  const trimmed = url?.trim();
  if (!trimmed || trimmed.startsWith("//")) return null;

  try {
    const parsed = new URL(trimmed);
    return SAFE_LINK_PROTOCOLS.has(parsed.protocol) ? parsed.href : null;
  } catch {
    return null;
  }
}

function extractText(node: ReactNode): string {
  if (typeof node === "string") return node;