Function sanitizeUrl

website/src/scripts/utils.ts:378–390

(url: string | null | undefined)

 * Only allows http/https protocols, returns '#' for invalid URLs
 */
export function sanitizeUrl(url: string | null | undefined): string {
  if (!url) return "#";
  try {
    const parsed = new URL(url);
    // Only allow http and https protocols
    if (parsed.protocol === "http:" || parsed.protocol === "https:") {
      return url;
    }
  } catch {
    // Invalid URL
  }
  return "#";
}

/**
 * Derive a GitHub @handle from a profile URL