@ai-ecoverse/slicc-kernel 1.177.0 → 1.178.1

package/dist/index.js

@@ -1181,6 +1181,9 @@ function systemTimeZone(given, fallback) {
 }
 var MAX_SHIFT_MS = 3 * HOUR_MS;
 
+// src/kernel/net/transport.ts
+var FORBIDDEN_HEADER = "forbidden-header";
+
 // src/kernel/net/ws-queue.ts
 var INBOUND_LIMIT = 16 * 1024 * 1024;
 var MESSAGE_LIMIT = 64 * 1024 * 1024;
@@ -1377,6 +1380,44 @@ function sentHeaders(headers, inPage) {
   if (inPage) out.delete("user-agent");
   return out;
 }
+var TRANSPORT_OWN = /* @__PURE__ */ new Set([
+  "accept-encoding",
+  "connection",
+  "content-length",
+  "expect",
+  "host",
+  "keep-alive",
+  "te",
+  "trailer",
+  "transfer-encoding",
+  "upgrade"
+]);
+var PROBE = "http://forbidden-headers.invalid/";
+var filters;
+function platformFilters() {
+  filters ??= !new Request(PROBE, { headers: [["cookie", "probe=1"]] }).headers.has("cookie");
+  return filters;
+}
+function unsendableHeaders(url, names, hint) {
+  const which = names.length > 1 ? "headers" : "header";
+  return Object.assign(
+    new Error(
+      `fetch ${url} refused: the page's fetch can't send the request ${which} ${names.join(", ")}, so it was not sent${hint ? `: ${hint}` : ""}`
+    ),
+    { status: 502, code: "ENOTSUP", detail: FORBIDDEN_HEADER, headers: [...names] }
+  );
+}
+function refuseUnsendable(url, out, hint) {
+  if (!platformFilters()) return;
+  const kept = new Request(PROBE, { headers: out }).headers;
+  const refused2 = [];
+  for (const name of new Set(out.keys())) {
+    if (kept.has(name)) continue;
+    if (TRANSPORT_OWN.has(name)) out.delete(name);
+    else refused2.push(name);
+  }
+  if (refused2.length > 0) throw unsendableHeaders(url, refused2, hint);
+}
 function streamOf(body) {
   const it = body[Symbol.asyncIterator]();
   return new ReadableStream(
@@ -1405,6 +1446,7 @@ function fetchTransport(options = {}) {
   const headers = options.webSocketHeaders === true;
   const instance = options.redirect ?? "follow";
   const inPage = !options.fetch && "location" in globalThis;
+  const refuse = (options.forbiddenHeaders ?? (options.fetch ? "send" : "refuse")) === "refuse";
   return {
     traits: {
       manualRedirects: instance === "manual",
@@ -1417,11 +1459,13 @@ function fetchTransport(options = {}) {
     },
     ...Socket ? { websocket: (request) => openWebSocket(Socket, request, headers) } : {},
     async fetch(request) {
+      const sent = sentHeaders(request.headers, inPage);
+      if (refuse) refuseUnsendable(request.url, sent, options.hint);
       let response;
       try {
         response = await send(request.url, {
           method: request.method,
-          headers: sentHeaders(request.headers, inPage),
+          headers: sent,
           ...requestBody(request),
           signal: request.signal,
           redirect: request.redirect ?? instance,
@@ -1522,7 +1566,7 @@ function serveTransport(peer, transport, {
       message: e instanceof Error ? e.message : String(e),
       ...typeof status === "number" ? { status } : {},
       ...typeof code === "string" ? { code } : {},
-      ...detail === "transport" ? { detail } : {}
+      ...detail === "transport" || detail === FORBIDDEN_HEADER ? { detail } : {}
     });
   };
   const uploads = uploadsFor(peer);
@@ -1692,7 +1736,7 @@ var TransportError = class extends Error {
     super(message);
     this.status = status;
     this.code = code;
-    this.detail = detail === "transport" ? detail : void 0;
+    this.detail = detail === "transport" || detail === FORBIDDEN_HEADER ? detail : void 0;
   }
 };
 function unfollowed(redirect) {