@adobe/helix-html-pipeline 6.32.1 → 6.32.3

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [6.32.3](https://github.com/adobe/helix-html-pipeline/compare/v6.32.2...v6.32.3) (2026-09-22)
+
+
+### Bug Fixes
+
+* resolve custom og:image/twitter:image metadata to absolute urls ([f9624e5](https://github.com/adobe/helix-html-pipeline/commit/f9624e5dc5b0588ac620ac6ed77fad8eb7c95268)), closes [#768](https://github.com/adobe/helix-html-pipeline/issues/768)
+
+## [6.32.2](https://github.com/adobe/helix-html-pipeline/compare/v6.32.1...v6.32.2) (2026-09-17)
+
+
+### Bug Fixes
+
+* **urls:** use http protocol for localhost origins ([#1140](https://github.com/adobe/helix-html-pipeline/issues/1140)) ([d6c329a](https://github.com/adobe/helix-html-pipeline/commit/d6c329a4fb2985fc30b0b8146bf07a0aae5f8510))
+
 ## [6.32.1](https://github.com/adobe/helix-html-pipeline/compare/v6.32.0...v6.32.1) (2026-09-15)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobe/helix-html-pipeline",
-  "version": "6.32.1",
+  "version": "6.32.3",
   "description": "Helix HTML Pipeline",
   "main": "src/index.js",
   "types": "src/index.d.ts",

package/src/robots-pipe.js

@@ -15,6 +15,7 @@ import { computeCodePathKey } from './steps/set-x-surrogate-key-header.js';
 import setCustomResponseHeaders from './steps/set-custom-response-headers.js';
 import { PipelineResponse } from './PipelineResponse.js';
 import initConfig from './steps/init-config.js';
+import { getOrigin } from './steps/utils.js';
 
 /**
  * Default robots.txt contents returned on inner/outer CDN.
@@ -89,7 +90,7 @@ function generateRobots(state) {
     'User-Agent: *',
     'Allow: /',
     '',
-    `Sitemap: https://${prodHost}/sitemap.xml`,
+    `Sitemap: ${getOrigin(prodHost)}/sitemap.xml`,
     '',
   ].join('\n');
   return new PipelineResponse(txt, {

package/src/sitemap-index-pipe.js

@@ -19,6 +19,7 @@ import { PipelineStatusError } from './PipelineStatusError.js';
 import { PipelineResponse } from './PipelineResponse.js';
 import initConfig from './steps/init-config.js';
 import { extractLastModified, recordLastModified, setLastModified } from './utils/last-modified.js';
+import { getOrigin } from './steps/utils.js';
 
 async function generateSitemapIndex(state) {
   const {
@@ -38,7 +39,7 @@ async function generateSitemapIndex(state) {
   const host = partition === 'preview'
     ? (previewHost || `${ref}--${repo}--${owner}.aem.page`)
     : (prodHost || liveHost || `${ref}--${repo}--${owner}.aem.live`);
-  const loc = (path) => (path.startsWith('/') ? `https://${host}${escape(path)}` : path);
+  const loc = (path) => (path.startsWith('/') ? `${getOrigin(host)}${escape(path)}` : path);
   const xml = [
     '<?xml version="1.0" encoding="utf-8"?>',
     '<sitemapindex xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">',

package/src/sitemap-pipe.js

@@ -19,6 +19,7 @@ import { PipelineStatusError } from './PipelineStatusError.js';
 import { PipelineResponse } from './PipelineResponse.js';
 import initConfig from './steps/init-config.js';
 import { extractLastModified, recordLastModified, setLastModified } from './utils/last-modified.js';
+import { getOrigin } from './steps/utils.js';
 
 async function generateSitemap(state) {
   const {
@@ -45,7 +46,7 @@ async function generateSitemap(state) {
     : (prodHost || liveHost || `${ref}--${repo}--${owner}.aem.live`);
   const safeNumber = (num) => parseInt(num, 10) || 0;
   const loc = ({ path, lastModified }) => `  <url>
-    <loc>https://${host}${escape(path)}</loc>
+    <loc>${getOrigin(host)}${escape(path)}</loc>
     <lastmod>${new Date(safeNumber(lastModified) * 1000).toISOString().substring(0, 10)}</lastmod>
   </url>`;
   const xml = [

package/src/steps/extract-metadata.js

@@ -348,6 +348,22 @@ export default function extractMetaData(state, req) {
 
   meta.imageAlt = meta['image-alt'] ?? content.imageAlt;
 
+  // custom og:image/twitter:image overrides authored directly in the metadata block or sheet
+  // should be resolved to an absolute, optimized url, just like the default image, but only
+  // if they actually look like a url or path. plain text values are passed through as-is.
+  ['og:image', 'og:image:secure_url', 'twitter:image'].forEach((name) => {
+    const value = metaConfig[name];
+    if (value && /^(https?:\/\/|\.?\/)/.test(value)) {
+      try {
+        let img = rewriteUrl(state, value);
+        img = optimizeMetaImage(state.info.path, img);
+        metaConfig[name] = getAbsoluteUrl(state, img);
+      } catch (e) {
+        // ignore url errors
+      }
+    }
+  });
+
   // compute the final page metadata
   const metadata = {
     description: meta.description,

package/src/steps/utils.js

@@ -198,6 +198,18 @@ export function resolveUrl(from, to) {
   return resolvedUrl.toString();
 }
 
+const LOCALHOST_REGEXP = /^(localhost|127\.0\.0\.1)(:\d+)?$/;
+
+/**
+ * Returns the origin for the given host, using `http` for loopback hosts
+ * (e.g. when developing locally against `localhost:3000`) and `https` otherwise.
+ * @param {string} host the host, optionally including a port
+ * @returns {string} the origin
+ */
+export function getOrigin(host) {
+  return `${LOCALHOST_REGEXP.test(host) ? 'http' : 'https'}://${host}`;
+}
+
 /**
  * Turns a relative into an absolute URL.
  * @param {PipelineState} state the request state
@@ -209,7 +221,7 @@ export function getAbsoluteUrl(state, url) {
   if (typeof url !== 'string') {
     return null;
   }
-  return resolveUrl(`https://${state.prodHost}${state.info?.path || '/'}`, url);
+  return resolveUrl(`${getOrigin(state.prodHost)}${state.info?.path || '/'}`, url);
 }
 
 /**