Issue

In https://vuejs.org/guide/best-practices/security.html#url-injection there's a reference to sanitize-url which doesn't support import (esm)

Solution:

Create a fork and updated it to use import
https://www.npmjs.com/package/@sofuxro/sanitize-url