Updated previews.

js/utils/url.js

@@ -100,6 +100,62 @@ function buildAvatarUrl(avatar) {
     return `/api/proxy-image?url=${encodeURIComponent(`https://avatars.devrant.com/${avatar.i}`)}`;
 }
 
+function categorizeLinks(links) {
+    if (!links || !Array.isArray(links)) {
+        return { images: [], youtube: [], other: [] };
+    }
+    const images = [];
+    const youtube = [];
+    const other = [];
+    for (const link of links) {
+        if (!link.url) continue;
+        if (isImageUrl(link.url)) {
+            images.push(link);
+        } else if (isYoutubeUrl(link.url)) {
+            youtube.push(link);
+        } else {
+            other.push(link);
+        }
+    }
+    return { images, youtube, other };
+}
+
+function processTextWithLinks(text, links) {
+    if (!text) return '';
+    if (!links || !Array.isArray(links) || links.length === 0) {
+        return escapeHtml(text);
+    }
+    const sortedLinks = [...links].sort((a, b) => b.start - a.start);
+    let result = text;
+    for (const link of sortedLinks) {
+        if (typeof link.start !== 'number' || typeof link.end !== 'number') continue;
+        if (link.start < 0 || link.end > result.length) continue;
+        const before = result.substring(0, link.start);
+        const linkText = result.substring(link.start, link.end);
+        const after = result.substring(link.end);
+        const safeUrl = sanitizeUrl(link.url);
+        if (safeUrl) {
+            const escapedText = escapeHtml(linkText);
+            result = before + `<a href="${safeUrl}" target="_blank" rel="noopener noreferrer" class="inline-link">${escapedText}</a>` + after;
+        }
+    }
+    const parts = result.split(/(<a[^>]*>.*?<\/a>)/g);
+    return parts.map(part => {
+        if (part.startsWith('<a ')) return part;
+        return escapeHtml(part);
+    }).join('');
+}
+
+function escapeHtml(str) {
+    if (!str) return '';
+    return str
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+
 export {
     extractUrls,
     isYoutubeUrl,
@@ -116,5 +172,8 @@ export {
     makeAbsoluteUrl,
     isDevrantImageUrl,
     buildDevrantImageUrl,
-    buildAvatarUrl
+    buildAvatarUrl,
+    categorizeLinks,
+    processTextWithLinks,
+    escapeHtml
 };