Merge pull request #32 from Johnaverse/copilot/sub-pr-31

Source API version from package.json and validate infoURL protocol

Author: Johnaverse

index.js

@@ -4,6 +4,7 @@ import rateLimit from '@fastify/rate-limit';
 import helmet from '@fastify/helmet';
 import { readFile } from 'node:fs/promises';
 import { basename, resolve } from 'node:path';
+import pkg from './package.json' with { type: 'json' };
 import { loadData, initializeDataOnStartup, getCachedData, searchChains, getChainById, getAllChains, getAllRelations, getRelationsById, getEndpointsById, getAllEndpoints, getAllKeywords, validateChainData, traverseRelations } from './dataService.js';
 import { getMonitoringResults, getMonitoringStatus, startRpcHealthCheck } from './rpcMonitor.js';
 import {
@@ -447,7 +448,7 @@ export async function buildApp(options = {}) {
   fastify.get('/', async (request, reply) => {
     return {
       name: 'Chains API',
-      version: '1.0.0',
+      version: pkg.version,
       description: 'API query service for blockchain chain data from multiple sources',
       endpoints: {
         '/health': 'Health check and data status',

package-lock.json

@@ -588,14 +588,23 @@ function showWebsite(data) {
         return;
     }
     try {
-        const a = document.createElement('a');
-        a.href = data.infoURL;
-        a.target = "_blank";
-        a.rel = "noopener";
-        a.textContent = new URL(data.infoURL).hostname;
-        webElem.textContent = '';
-        webElem.appendChild(a);
+        const url = new URL(data.infoURL);
+        const protocol = url.protocol;
+
+        if (protocol === 'http:' || protocol === 'https:') {
+            const a = document.createElement('a');
+            a.href = url.toString();
+            a.target = "_blank";
+            a.rel = "noopener";
+            a.textContent = url.hostname;
+            webElem.textContent = '';
+            webElem.appendChild(a);
+        } else {
+            // Unsafe or unsupported protocol: show as plain text without a link
+            webElem.textContent = data.infoURL;
+        }
     } catch {
+        // Invalid URL: show as plain text without a link
         webElem.textContent = data.infoURL;
     }
 }

public/app.js

@@ -295,7 +295,7 @@ describe('API Endpoints', () => {
       expect(response.statusCode).toBe(200);
       const data = JSON.parse(response.payload);
       expect(data).toHaveProperty('name', 'Chains API');
-      expect(data).toHaveProperty('version', '1.0.0');
+      expect(data).toHaveProperty('version', '1.1.0');
       expect(data).toHaveProperty('description');
       expect(data).toHaveProperty('endpoints');
       expect(data).toHaveProperty('dataSources');