@airgap/coinlib-core 0.13.46 → 0.13.47

package/dependencies/src/follow-redirects-1.16.0/package.json

@@ -0,0 +1,58 @@
+{
+    "name": "follow-redirects",
+    "version": "1.16.0",
+    "description": "HTTP and HTTPS modules that follow redirects.",
+    "license": "MIT",
+    "main": "index.js",
+    "files": [
+        "*.js"
+    ],
+    "engines": {
+        "node": ">=4.0"
+    },
+    "scripts": {
+        "lint": "eslint *.js test",
+        "test": "nyc mocha"
+    },
+    "repository": {
+        "type": "git",
+        "url": "git+ssh://git@github.com/follow-redirects/follow-redirects.git"
+    },
+    "homepage": "https://github.com/follow-redirects/follow-redirects",
+    "bugs": {
+        "url": "https://github.com/follow-redirects/follow-redirects/issues"
+    },
+    "keywords": [
+        "http",
+        "https",
+        "url",
+        "redirect",
+        "client",
+        "location",
+        "utility"
+    ],
+    "author": "Ruben Verborgh <ruben@verborgh.org> (https://ruben.verborgh.org/)",
+    "contributors": [
+        "Olivier Lalonde <olalonde@gmail.com> (http://www.syskall.com)",
+        "James Talmage <james@talmage.io>"
+    ],
+    "funding": [
+        {
+            "type": "individual",
+            "url": "https://github.com/sponsors/RubenVerborgh"
+        }
+    ],
+    "peerDependenciesMeta": {
+        "debug": {
+            "optional": true
+        }
+    },
+    "devDependencies": {
+        "concat-stream": "^2.0.0",
+        "eslint": "^5.16.0",
+        "express": "^4.16.4",
+        "lolex": "^3.1.0",
+        "mocha": "^6.0.2",
+        "nyc": "^14.1.1"
+    }
+}

package/dependencies/src/proxy-from-env-1.1.0/index.js

@@ -0,0 +1,108 @@
+'use strict';
+
+var parseUrl = require('url').parse;
+
+var DEFAULT_PORTS = {
+  ftp: 21,
+  gopher: 70,
+  http: 80,
+  https: 443,
+  ws: 80,
+  wss: 443,
+};
+
+var stringEndsWith = String.prototype.endsWith || function(s) {
+  return s.length <= this.length &&
+    this.indexOf(s, this.length - s.length) !== -1;
+};
+
+/**
+ * @param {string|object} url - The URL, or the result from url.parse.
+ * @return {string} The URL of the proxy that should handle the request to the
+ *  given URL. If no proxy is set, this will be an empty string.
+ */
+function getProxyForUrl(url) {
+  var parsedUrl = typeof url === 'string' ? parseUrl(url) : url || {};
+  var proto = parsedUrl.protocol;
+  var hostname = parsedUrl.host;
+  var port = parsedUrl.port;
+  if (typeof hostname !== 'string' || !hostname || typeof proto !== 'string') {
+    return '';  // Don't proxy URLs without a valid scheme or host.
+  }
+
+  proto = proto.split(':', 1)[0];
+  // Stripping ports in this way instead of using parsedUrl.hostname to make
+  // sure that the brackets around IPv6 addresses are kept.
+  hostname = hostname.replace(/:\d*$/, '');
+  port = parseInt(port) || DEFAULT_PORTS[proto] || 0;
+  if (!shouldProxy(hostname, port)) {
+    return '';  // Don't proxy URLs that match NO_PROXY.
+  }
+
+  var proxy =
+    getEnv('npm_config_' + proto + '_proxy') ||
+    getEnv(proto + '_proxy') ||
+    getEnv('npm_config_proxy') ||
+    getEnv('all_proxy');
+  if (proxy && proxy.indexOf('://') === -1) {
+    // Missing scheme in proxy, default to the requested URL's scheme.
+    proxy = proto + '://' + proxy;
+  }
+  return proxy;
+}
+
+/**
+ * Determines whether a given URL should be proxied.
+ *
+ * @param {string} hostname - The host name of the URL.
+ * @param {number} port - The effective port of the URL.
+ * @returns {boolean} Whether the given URL should be proxied.
+ * @private
+ */
+function shouldProxy(hostname, port) {
+  var NO_PROXY =
+    (getEnv('npm_config_no_proxy') || getEnv('no_proxy')).toLowerCase();
+  if (!NO_PROXY) {
+    return true;  // Always proxy if NO_PROXY is not set.
+  }
+  if (NO_PROXY === '*') {
+    return false;  // Never proxy if wildcard is set.
+  }
+
+  return NO_PROXY.split(/[,\s]/).every(function(proxy) {
+    if (!proxy) {
+      return true;  // Skip zero-length hosts.
+    }
+    var parsedProxy = proxy.match(/^(.+):(\d+)$/);
+    var parsedProxyHostname = parsedProxy ? parsedProxy[1] : proxy;
+    var parsedProxyPort = parsedProxy ? parseInt(parsedProxy[2]) : 0;
+    if (parsedProxyPort && parsedProxyPort !== port) {
+      return true;  // Skip if ports don't match.
+    }
+
+    if (!/^[.*]/.test(parsedProxyHostname)) {
+      // No wildcards, so stop proxying if there is an exact match.
+      return hostname !== parsedProxyHostname;
+    }
+
+    if (parsedProxyHostname.charAt(0) === '*') {
+      // Remove leading wildcard.
+      parsedProxyHostname = parsedProxyHostname.slice(1);
+    }
+    // Stop proxying if the hostname ends with the no_proxy host.
+    return !stringEndsWith.call(hostname, parsedProxyHostname);
+  });
+}
+
+/**
+ * Get the value for an environment variable.
+ *
+ * @param {string} key - The name of the environment variable.
+ * @return {string} The value of the environment variable.
+ * @private
+ */
+function getEnv(key) {
+  return process.env[key.toLowerCase()] || process.env[key.toUpperCase()] || '';
+}
+
+exports.getProxyForUrl = getProxyForUrl;

package/dependencies/src/proxy-from-env-1.1.0/package.json

@@ -0,0 +1,34 @@
+{
+    "name": "proxy-from-env",
+    "version": "1.1.0",
+    "description": "Offers getProxyForUrl to get the proxy URL for a URL, respecting the *_PROXY (e.g. HTTP_PROXY) and NO_PROXY environment variables.",
+    "main": "index.js",
+    "scripts": {
+        "lint": "eslint *.js",
+        "test": "mocha ./test.js --reporter spec",
+        "test-coverage": "istanbul cover ./node_modules/.bin/_mocha -- --reporter spec"
+    },
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/Rob--W/proxy-from-env.git"
+    },
+    "keywords": [
+        "proxy",
+        "http_proxy",
+        "https_proxy",
+        "no_proxy",
+        "environment"
+    ],
+    "author": "Rob Wu <rob@robwu.nl> (https://robwu.nl/)",
+    "license": "MIT",
+    "bugs": {
+        "url": "https://github.com/Rob--W/proxy-from-env/issues"
+    },
+    "homepage": "https://github.com/Rob--W/proxy-from-env#readme",
+    "devDependencies": {
+        "coveralls": "^3.0.9",
+        "eslint": "^6.8.0",
+        "istanbul": "^0.4.5",
+        "mocha": "^7.1.0"
+    }
+}

package/dependencies/src/secp256k1-3.7.1/lib/elliptic/index.js

@@ -1,8 +1,8 @@
 'use strict'
 var Buffer = require('../../../safe-buffer-5.2.0/index').Buffer
 var createHash = require('../../../create-hash-1.2.0/browser')
-var BN = require('../../../bn.js-4.11.8/lib/bn')
-var EC = require('../../../elliptic-6.5.3/lib/elliptic').ec
+var BN = require('../../../bn.js-4.11.9/lib/bn')
+var EC = require('../../../elliptic-6.6.1/lib/elliptic').ec
 
 var messages = require('../messages.json')
 

package/dependencies/src/secp256k1-4.0.2/lib/elliptic.js

@@ -1,4 +1,4 @@
-const EC = require('../../elliptic-6.5.3/lib/elliptic').ec
+const EC = require('../../elliptic-6.6.1/lib/elliptic').ec
 
 const ec = new EC('secp256k1')
 const ecparams = ec.curve

package/dependencies/src/tiny-secp256k1-1.1.3/js.js

@@ -1,5 +1,5 @@
-const BN = require('../bn.js-4.11.8/lib/bn')
-const EC = require('../elliptic-6.5.3/lib/elliptic').ec
+const BN = require('../bn.js-4.11.9/lib/bn')
+const EC = require('../elliptic-6.6.1/lib/elliptic').ec
 const secp256k1 = new EC('secp256k1')
 const deterministicGenerateK = require('./rfc6979')
 

package/errors/index.d.ts

@@ -1,4 +1,4 @@
-import { AxiosError } from '../dependencies/src/axios-0.19.0';
+import { AxiosError } from '../dependencies/src/axios-0.33.0';
 import { CoinlibError, Domain } from './coinlib-error';
 export declare enum SerializerErrorType {
     SERIALIZER_VERSION_MISMATCH = "SERIALIZER_VERSION_MISMATCH",
@@ -43,7 +43,7 @@ export declare class NetworkError extends CoinlibError {
     url: string | undefined;
     method: string | undefined;
     requestBody?: unknown;
-    constructor(domain: Domain, error: Partial<AxiosError>, description?: string);
+    constructor(domain: Domain, error: Partial<AxiosError<any>>, description?: string);
 }
 /**
  * Gets thrown if a value ist expected to fulfill a certain condition such as having a certain length, but the condition is not satisfied

package/errors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AACA,iDAAsD;AAEtD,IAAY,mBAkBX;AAlBD,WAAY,mBAAmB;IAC7B,kFAA2D,CAAA;IAC3D,wEAAiD,CAAA;IACjD,8EAAuD,CAAA;IACvD,gEAAyC,CAAA;IACzC,wDAAiC,CAAA;IACjC,kEAA2C,CAAA;IAC3C,0DAAmC,CAAA;IACnC,gEAAyC,CAAA;IACzC,wDAAiC,CAAA;IACjC,sEAA+C,CAAA;IAC/C,wEAAiD,CAAA;IACjD,gEAAyC,CAAA;IACzC,oEAA6C,CAAA;IAC7C,sEAA+C,CAAA;IAC/C,gFAAyD,CAAA;IACzD,8DAAuC,CAAA;IACvC,4DAAqC,CAAA;AACvC,CAAC,EAlBW,mBAAmB,GAAnB,2BAAmB,KAAnB,2BAAmB,QAkB9B;AAED,IAAY,iBAWX;AAXD,WAAY,iBAAiB;IAC3B,wCAAmB,CAAA;IACnB,gEAA2C,CAAA;IAC3C,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,wCAAmB,CAAA;IACnB,8DAAyC,CAAA;IACzC,0DAAqC,CAAA;IACrC,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,8DAAyC,CAAA;AAC3C,CAAC,EAXW,iBAAiB,GAAjB,yBAAiB,KAAjB,yBAAiB,QAW5B;AAED;;;;;GAKG;AACH;IAAkC,gCAAY;IAM5C,sBAAY,MAAc,EAAE,KAA0B,EAAE,WAAoB;QAA5E,iBAOC;;gBANC,kBAAM,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC;QACxC,KAAI,CAAC,IAAI,GAAG,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,MAAA,KAAK,CAAC,QAAQ,0CAAE,IAAI,CAAA;QAC/C,KAAI,CAAC,MAAM,GAAG,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,0CAAE,MAAM,CAAA;QACrC,KAAI,CAAC,GAAG,GAAG,MAAA,KAAK,CAAC,MAAM,0CAAE,GAAG,CAAA;QAC5B,KAAI,CAAC,MAAM,GAAG,MAAA,KAAK,CAAC,MAAM,0CAAE,MAAM,CAAA;QAClC,KAAI,CAAC,WAAW,GAAG,MAAA,KAAK,CAAC,MAAM,0CAAE,IAAI,CAAA;;IACvC,CAAC;IACH,mBAAC;AAAD,CAAC,AAdD,CAAkC,4BAAY,GAc7C;AAdY,oCAAY;AAgBzB;;GAEG;AACH;IAA6C,2CAAY;IACvD,iCAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,WAAW,CAAC;IACnE,CAAC;IACH,8BAAC;AAAD,CAAC,AAJD,CAA6C,4BAAY,GAIxD;AAJY,0DAAuB;AAMpC;;GAEG;AACH;IAAsC,oCAAY;IAChD,0BAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC;IAC3D,CAAC;IACH,uBAAC;AAAD,CAAC,AAJD,CAAsC,4BAAY,GAIjD;AAJY,4CAAgB;AAM7B;;GAEG;AACH;IAAmC,iCAAY;IAC7C,uBAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC;IACzD,CAAC;IACH,oBAAC;AAAD,CAAC,AAJD,CAAmC,4BAAY,GAI9C;AAJY,sCAAa;AAM1B;;GAEG;AACH;IAAkC,gCAAY;IAC5C,sBAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC;IACvD,CAAC;IACH,mBAAC;AAAD,CAAC,AAJD,CAAkC,4BAAY,GAI7C;AAJY,oCAAY;AAMzB;IAAsC,oCAAY;IAChD,0BAAY,MAAc,EAAE,WAAoB,EAAS,IAAc;QAAvE,YACE,kBAAM,MAAM,EAAE,iBAAiB,CAAC,kBAAkB,EAAE,WAAW,CAAC,SACjE;QAFwD,UAAI,GAAJ,IAAI,CAAU;;IAEvE,CAAC;IACH,uBAAC;AAAD,CAAC,AAJD,CAAsC,4BAAY,GAIjD;AAJY,4CAAgB;AAM7B;;GAEG;AACH;IAA4C,0CAAY;IACtD,gCAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,kBAAkB,EAAE,WAAW,CAAC;IAClE,CAAC;IACH,6BAAC;AAAD,CAAC,AAJD,CAA4C,4BAAY,GAIvD;AAJY,wDAAsB;AAMnC;;GAEG;AACH;IAA0C,wCAAY;IACpD,8BAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,WAAW,CAAC;IAChE,CAAC;IACH,2BAAC;AAAD,CAAC,AAJD,CAA0C,4BAAY,GAIrD;AAJY,oDAAoB;AAMjC;;GAEG;AACH;IAAyC,uCAAY;IACnD,6BAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,eAAe,EAAE,WAAW,CAAC;IAC/D,CAAC;IACH,0BAAC;AAAD,CAAC,AAJD,CAAyC,4BAAY,GAIpD;AAJY,kDAAmB;AAMhC;;GAEG;AACH;IAAuC,qCAAY;IACjD,2BAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,aAAa,EAAE,WAAW,CAAC;IAC7D,CAAC;IACH,wBAAC;AAAD,CAAC,AAJD,CAAuC,4BAAY,GAIlD;AAJY,8CAAiB;AAM9B;IAAqC,mCAAY;IAC/C,yBAAY,IAAY,EAAE,WAAoB;eAC5C,kBAAM,sBAAM,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC;IAC7C,CAAC;IACH,sBAAC;AAAD,CAAC,AAJD,CAAqC,4BAAY,GAIhD;AAJY,0CAAe;AAM5B,sCAAsC;AAEtC;;GAEG;AACH;IAA+C,6CAAe;IAC5D,mCAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,2BAA2B,EAAE,WAAW,CAAC;IACrE,CAAC;IACH,gCAAC;AAAD,CAAC,AAJD,CAA+C,eAAe,GAI7D;AAJY,8DAAyB;AAMtC;;GAEG;AACH;IAA0C,wCAAe;IACvD,8BAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,sBAAsB,EAAE,WAAW,CAAC;IAChE,CAAC;IACH,2BAAC;AAAD,CAAC,AAJD,CAA0C,eAAe,GAIxD;AAJY,oDAAoB;AAMjC;;GAEG;AACH;IAA6C,2CAAe;IAC1D,iCAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,yBAAyB,EAAE,WAAW,CAAC;IACnE,CAAC;IACH,8BAAC;AAAD,CAAC,AAJD,CAA6C,eAAe,GAI3D;AAJY,0DAAuB;AAMpC;;GAEG;AACH;IAAsC,oCAAe;IACnD,0BAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,kBAAkB,EAAE,WAAW,CAAC;IAC5D,CAAC;IACH,uBAAC;AAAD,CAAC,AAJD,CAAsC,eAAe,GAIpD;AAJY,4CAAgB;AAM7B;;GAEG;AACH;IAAmC,iCAAe;IAChD,uBAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,cAAc,EAAE,WAAW,CAAC;IACxD,CAAC;IACH,oBAAC;AAAD,CAAC,AAJD,CAAmC,eAAe,GAIjD;AAJY,sCAAa;AAM1B;;GAEG;AACH;IAAuC,qCAAe;IACpD,2BAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,mBAAmB,EAAE,WAAW,CAAC;IAC7D,CAAC;IACH,wBAAC;AAAD,CAAC,AAJD,CAAuC,eAAe,GAIrD;AAJY,8CAAiB;AAM9B;;GAEG;AACH;IAAyC,uCAAe;IACtD,6BAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC;IACzD,CAAC;IACH,0BAAC;AAAD,CAAC,AAJD,CAAyC,eAAe,GAIvD;AAJY,kDAAmB;AAMhC;;GAEG;AACH;IAAsC,oCAAe;IACnD,0BAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,kBAAkB,EAAE,WAAW,CAAC;IAC5D,CAAC;IACH,uBAAC;AAAD,CAAC,AAJD,CAAsC,eAAe,GAIpD;AAJY,4CAAgB;AAM7B;;GAEG;AACH;IAAmC,iCAAe;IAChD,uBAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,cAAc,EAAE,WAAW,CAAC;IACxD,CAAC;IACH,oBAAC;AAAD,CAAC,AAJD,CAAmC,eAAe,GAIjD;AAJY,sCAAa"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AACA,iDAAsD;AAEtD,IAAY,mBAkBX;AAlBD,WAAY,mBAAmB;IAC7B,kFAA2D,CAAA;IAC3D,wEAAiD,CAAA;IACjD,8EAAuD,CAAA;IACvD,gEAAyC,CAAA;IACzC,wDAAiC,CAAA;IACjC,kEAA2C,CAAA;IAC3C,0DAAmC,CAAA;IACnC,gEAAyC,CAAA;IACzC,wDAAiC,CAAA;IACjC,sEAA+C,CAAA;IAC/C,wEAAiD,CAAA;IACjD,gEAAyC,CAAA;IACzC,oEAA6C,CAAA;IAC7C,sEAA+C,CAAA;IAC/C,gFAAyD,CAAA;IACzD,8DAAuC,CAAA;IACvC,4DAAqC,CAAA;AACvC,CAAC,EAlBW,mBAAmB,GAAnB,2BAAmB,KAAnB,2BAAmB,QAkB9B;AAED,IAAY,iBAWX;AAXD,WAAY,iBAAiB;IAC3B,wCAAmB,CAAA;IACnB,gEAA2C,CAAA;IAC3C,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,wCAAmB,CAAA;IACnB,8DAAyC,CAAA;IACzC,0DAAqC,CAAA;IACrC,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,8DAAyC,CAAA;AAC3C,CAAC,EAXW,iBAAiB,GAAjB,yBAAiB,KAAjB,yBAAiB,QAW5B;AAED;;;;;GAKG;AACH;IAAkC,gCAAY;IAM5C,sBAAY,MAAc,EAAE,KAA+B,EAAE,WAAoB;QAAjF,iBAOC;;gBANC,kBAAM,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC;QACxC,KAAI,CAAC,IAAI,GAAG,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,MAAA,KAAK,CAAC,QAAQ,0CAAE,IAAI,CAAA;QAC/C,KAAI,CAAC,MAAM,GAAG,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,0CAAE,MAAM,CAAA;QACrC,KAAI,CAAC,GAAG,GAAG,MAAA,KAAK,CAAC,MAAM,0CAAE,GAAG,CAAA;QAC5B,KAAI,CAAC,MAAM,GAAG,MAAA,KAAK,CAAC,MAAM,0CAAE,MAAM,CAAA;QAClC,KAAI,CAAC,WAAW,GAAG,MAAA,KAAK,CAAC,MAAM,0CAAE,IAAI,CAAA;;IACvC,CAAC;IACH,mBAAC;AAAD,CAAC,AAdD,CAAkC,4BAAY,GAc7C;AAdY,oCAAY;AAgBzB;;GAEG;AACH;IAA6C,2CAAY;IACvD,iCAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,WAAW,CAAC;IACnE,CAAC;IACH,8BAAC;AAAD,CAAC,AAJD,CAA6C,4BAAY,GAIxD;AAJY,0DAAuB;AAMpC;;GAEG;AACH;IAAsC,oCAAY;IAChD,0BAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC;IAC3D,CAAC;IACH,uBAAC;AAAD,CAAC,AAJD,CAAsC,4BAAY,GAIjD;AAJY,4CAAgB;AAM7B;;GAEG;AACH;IAAmC,iCAAY;IAC7C,uBAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC;IACzD,CAAC;IACH,oBAAC;AAAD,CAAC,AAJD,CAAmC,4BAAY,GAI9C;AAJY,sCAAa;AAM1B;;GAEG;AACH;IAAkC,gCAAY;IAC5C,sBAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC;IACvD,CAAC;IACH,mBAAC;AAAD,CAAC,AAJD,CAAkC,4BAAY,GAI7C;AAJY,oCAAY;AAMzB;IAAsC,oCAAY;IAChD,0BACE,MAAc,EACd,WAAoB,EACb,IAAc;QAHvB,YAKE,kBAAM,MAAM,EAAE,iBAAiB,CAAC,kBAAkB,EAAE,WAAW,CAAC,SACjE;QAHQ,UAAI,GAAJ,IAAI,CAAU;;IAGvB,CAAC;IACH,uBAAC;AAAD,CAAC,AARD,CAAsC,4BAAY,GAQjD;AARY,4CAAgB;AAU7B;;GAEG;AACH;IAA4C,0CAAY;IACtD,gCAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,kBAAkB,EAAE,WAAW,CAAC;IAClE,CAAC;IACH,6BAAC;AAAD,CAAC,AAJD,CAA4C,4BAAY,GAIvD;AAJY,wDAAsB;AAMnC;;GAEG;AACH;IAA0C,wCAAY;IACpD,8BAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,WAAW,CAAC;IAChE,CAAC;IACH,2BAAC;AAAD,CAAC,AAJD,CAA0C,4BAAY,GAIrD;AAJY,oDAAoB;AAMjC;;GAEG;AACH;IAAyC,uCAAY;IACnD,6BAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,eAAe,EAAE,WAAW,CAAC;IAC/D,CAAC;IACH,0BAAC;AAAD,CAAC,AAJD,CAAyC,4BAAY,GAIpD;AAJY,kDAAmB;AAMhC;;GAEG;AACH;IAAuC,qCAAY;IACjD,2BAAY,MAAc,EAAE,WAAoB;eAC9C,kBAAM,MAAM,EAAE,iBAAiB,CAAC,aAAa,EAAE,WAAW,CAAC;IAC7D,CAAC;IACH,wBAAC;AAAD,CAAC,AAJD,CAAuC,4BAAY,GAIlD;AAJY,8CAAiB;AAM9B;IAAqC,mCAAY;IAC/C,yBAAY,IAAY,EAAE,WAAoB;eAC5C,kBAAM,sBAAM,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC;IAC7C,CAAC;IACH,sBAAC;AAAD,CAAC,AAJD,CAAqC,4BAAY,GAIhD;AAJY,0CAAe;AAM5B,sCAAsC;AAEtC;;GAEG;AACH;IAA+C,6CAAe;IAC5D,mCAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,2BAA2B,EAAE,WAAW,CAAC;IACrE,CAAC;IACH,gCAAC;AAAD,CAAC,AAJD,CAA+C,eAAe,GAI7D;AAJY,8DAAyB;AAMtC;;GAEG;AACH;IAA0C,wCAAe;IACvD,8BAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,sBAAsB,EAAE,WAAW,CAAC;IAChE,CAAC;IACH,2BAAC;AAAD,CAAC,AAJD,CAA0C,eAAe,GAIxD;AAJY,oDAAoB;AAMjC;;GAEG;AACH;IAA6C,2CAAe;IAC1D,iCAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,yBAAyB,EAAE,WAAW,CAAC;IACnE,CAAC;IACH,8BAAC;AAAD,CAAC,AAJD,CAA6C,eAAe,GAI3D;AAJY,0DAAuB;AAMpC;;GAEG;AACH;IAAsC,oCAAe;IACnD,0BAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,kBAAkB,EAAE,WAAW,CAAC;IAC5D,CAAC;IACH,uBAAC;AAAD,CAAC,AAJD,CAAsC,eAAe,GAIpD;AAJY,4CAAgB;AAM7B;;GAEG;AACH;IAAmC,iCAAe;IAChD,uBAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,cAAc,EAAE,WAAW,CAAC;IACxD,CAAC;IACH,oBAAC;AAAD,CAAC,AAJD,CAAmC,eAAe,GAIjD;AAJY,sCAAa;AAM1B;;GAEG;AACH;IAAuC,qCAAe;IACpD,2BAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,mBAAmB,EAAE,WAAW,CAAC;IAC7D,CAAC;IACH,wBAAC;AAAD,CAAC,AAJD,CAAuC,eAAe,GAIrD;AAJY,8CAAiB;AAM9B;;GAEG;AACH;IAAyC,uCAAe;IACtD,6BAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC;IACzD,CAAC;IACH,0BAAC;AAAD,CAAC,AAJD,CAAyC,eAAe,GAIvD;AAJY,kDAAmB;AAMhC;;GAEG;AACH;IAAsC,oCAAe;IACnD,0BAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,kBAAkB,EAAE,WAAW,CAAC;IAC5D,CAAC;IACH,uBAAC;AAAD,CAAC,AAJD,CAAsC,eAAe,GAIpD;AAJY,4CAAgB;AAM7B;;GAEG;AACH;IAAmC,iCAAe;IAChD,uBAAY,WAAoB;eAC9B,kBAAM,mBAAmB,CAAC,cAAc,EAAE,WAAW,CAAC;IACxD,CAAC;IACH,oBAAC;AAAD,CAAC,AAJD,CAAmC,eAAe,GAIjD;AAJY,sCAAa"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@airgap/coinlib-core",
-  "version": "0.13.46",
+  "version": "0.13.47",
   "description": "The @airgap/coinlib-core is a protocol agnostic library to prepare, sign and broadcast cryptocurrency transactions.",
   "keywords": [
     "airgap",
@@ -48,7 +48,7 @@
   "localDependencies": {
     "@taquito/local-forging": "15.0.1",
     "hd-wallet-js": "b216450e56954a6e82ace0aade9474673de5d9d5",
-    "axios": "0.19.0",
+    "axios": "0.33.0",
     "bech32": "1.1.3",
     "big-integer": "1.6.45",
     "bignumber.js": "9.0.0",

package/utils/remote-data/HttpRemoteData.js

@@ -50,15 +50,10 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HttpRemoteData = void 0;
-var index_1 = __importDefault(require("../../dependencies/src/axios-0.19.0/index"));
 var RemoteData_1 = require("./RemoteData");
-var HTTP_SCHEME = 'http';
-var HTTPS_SCHEME = 'https';
+var remoteDataRequest_1 = require("./remoteDataRequest");
 var HttpRemoteData = /** @class */ (function (_super) {
     __extends(HttpRemoteData, _super);
     function HttpRemoteData() {
@@ -68,7 +63,7 @@ var HttpRemoteData = /** @class */ (function (_super) {
         return HttpRemoteData.validate(uri) ? new HttpRemoteData(uri) : undefined;
     };
     HttpRemoteData.validate = function (uri) {
-        return uri.startsWith(HTTP_SCHEME) || uri.startsWith(HTTPS_SCHEME);
+        return (0, remoteDataRequest_1.isPublicHttpUrl)(uri);
     };
     HttpRemoteData.prototype.get = function () {
         return __awaiter(this, void 0, void 0, function () {
@@ -105,7 +100,7 @@ var HttpRemoteData = /** @class */ (function (_super) {
                         if (!HttpRemoteData.validate(this.uri)) {
                             return [2 /*return*/, undefined];
                         }
-                        return [4 /*yield*/, index_1.default.get(this.uri, { responseType: responseType })];
+                        return [4 /*yield*/, (0, remoteDataRequest_1.remoteDataGet)(this.uri, responseType)];
                     case 1: return [2 /*return*/, _a.sent()];
                 }
             });

package/utils/remote-data/HttpRemoteData.js.map

@@ -1 +1 @@
-{"version":3,"file":"HttpRemoteData.js","sourceRoot":"","sources":["../../../src/utils/remote-data/HttpRemoteData.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oFAA8F;AAE9F,2CAAkD;AAElD,IAAM,WAAW,GAAG,MAAM,CAAA;AAC1B,IAAM,YAAY,GAAG,OAAO,CAAA;AAE5B;IAAuC,kCAAa;IAApD;;IA0BA,CAAC;IAzBe,mBAAI,GAAlB,UAAsB,GAAW;QAC/B,OAAO,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3E,CAAC;IAEa,uBAAQ,GAAtB,UAAuB,GAAW;QAChC,OAAO,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;IACpE,CAAC;IAEY,4BAAG,GAAhB;;;;;4BACiD,qBAAM,IAAI,CAAC,OAAO,EAAE,EAAA;;wBAA7D,QAAQ,GAAiC,SAAoB;wBACnE,sBAAO,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,EAAA;;;;KACtB;IAEY,+BAAM,GAAnB;;;;;4BAC2D,qBAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAA;;wBAApF,QAAQ,GAA2C,SAAiC;wBAC1F,sBAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAA;;;;KACnH;IAEa,gCAAO,GAArB,UAAyB,YAAmC;QAAnC,6BAAA,EAAA,qBAAmC;;;;;wBAC1D,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;4BACtC,sBAAO,SAAS,EAAA;yBACjB;wBAEM,qBAAM,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,YAAY,cAAA,EAAE,CAAC,EAAA;4BAAlD,sBAAO,SAA2C,EAAA;;;;KACnD;IACH,qBAAC;AAAD,CAAC,AA1BD,CAAuC,uBAAU,GA0BhD;AA1BY,wCAAc"}
+{"version":3,"file":"HttpRemoteData.js","sourceRoot":"","sources":["../../../src/utils/remote-data/HttpRemoteData.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,2CAAkD;AAClD,yDAAoE;AAEpE;IAAuC,kCAAa;IAApD;;IA0BA,CAAC;IAzBe,mBAAI,GAAlB,UAAsB,GAAW;QAC/B,OAAO,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3E,CAAC;IAEa,uBAAQ,GAAtB,UAAuB,GAAW;QAChC,OAAO,IAAA,mCAAe,EAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAEY,4BAAG,GAAhB;;;;;4BACiD,qBAAM,IAAI,CAAC,OAAO,EAAE,EAAA;;wBAA7D,QAAQ,GAAiC,SAAoB;wBACnE,sBAAO,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,EAAA;;;;KACtB;IAEY,+BAAM,GAAnB;;;;;4BAC2D,qBAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAA;;wBAApF,QAAQ,GAA2C,SAAiC;wBAC1F,sBAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAA;;;;KACnH;IAEa,gCAAO,GAArB,UAAyB,YAAmC;QAAnC,6BAAA,EAAA,qBAAmC;;;;;wBAC1D,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;4BACtC,sBAAO,SAAS,EAAA;yBACjB;wBAEM,qBAAM,IAAA,iCAAa,EAAI,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAA;4BAArD,sBAAO,SAA8C,EAAA;;;;KACtD;IACH,qBAAC;AAAD,CAAC,AA1BD,CAAuC,uBAAU,GA0BhD;AA1BY,wCAAc"}

package/utils/remote-data/IpfsRemoteData.js

@@ -51,13 +51,10 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IpfsRemoteData = void 0;
-var index_1 = __importDefault(require("../../dependencies/src/axios-0.19.0/index"));
 var RemoteData_1 = require("./RemoteData");
+var remoteDataRequest_1 = require("./remoteDataRequest");
 var IPFS_SCHEME = 'ipfs';
 var IPFS_HTTP_GATEWAY = 'https://dweb.link/ipfs';
 var IPNS_SCHEME = 'ipns';
@@ -73,11 +70,20 @@ function http(uri) {
         return undefined;
     }
 }
+// the CID and path come from an untrusted source, so they must not be able to escape the gateway
+// prefix (e.g. by injecting a query, fragment or `..` segment)
+function gatewayPath(uri, scheme) {
+    return uri
+        .replace("".concat(scheme, "://"), '')
+        .split('/')
+        .map(function (segment) { return encodeURIComponent(segment); })
+        .join('/');
+}
 function ipfs(uri) {
-    return "".concat(IPFS_HTTP_GATEWAY, "/").concat(uri.replace("".concat(IPFS_SCHEME, "://"), ''));
+    return "".concat(IPFS_HTTP_GATEWAY, "/").concat(gatewayPath(uri, IPFS_SCHEME));
 }
 function ipns(uri) {
-    return "".concat(IPNS_HTTP_GATEWAY, "/").concat(uri.replace("".concat(IPNS_SCHEME, "://"), ''));
+    return "".concat(IPNS_HTTP_GATEWAY, "/").concat(gatewayPath(uri, IPNS_SCHEME));
 }
 var IpfsRemoteData = /** @class */ (function (_super) {
     __extends(IpfsRemoteData, _super);
@@ -130,7 +136,7 @@ var IpfsRemoteData = /** @class */ (function (_super) {
                         if (!uri) {
                             return [2 /*return*/, undefined];
                         }
-                        return [4 /*yield*/, index_1.default.get(uri, { responseType: responseType })];
+                        return [4 /*yield*/, (0, remoteDataRequest_1.remoteDataGet)(uri, responseType)];
                     case 1: return [2 /*return*/, _a.sent()];
                 }
             });

package/utils/remote-data/IpfsRemoteData.js.map

@@ -1 +1 @@
-{"version":3,"file":"IpfsRemoteData.js","sourceRoot":"","sources":["../../../src/utils/remote-data/IpfsRemoteData.ts"],"names":[],"mappings":";AAAA,oEAAoE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEpE,oFAA8F;AAE9F,2CAAkD;AAElD,IAAM,WAAW,GAAG,MAAM,CAAA;AAC1B,IAAM,iBAAiB,GAAG,wBAAwB,CAAA;AAElD,IAAM,WAAW,GAAG,MAAM,CAAA;AAC1B,IAAM,iBAAiB,GAAG,wBAAwB,CAAA;AAElD,SAAS,IAAI,CAAC,GAAW;IACvB,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;KACjB;SAAM,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;QACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;KACjB;SAAM;QACL,OAAO,SAAS,CAAA;KACjB;AACH,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,UAAG,iBAAiB,cAAI,GAAG,CAAC,OAAO,CAAC,UAAG,WAAW,QAAK,EAAE,EAAE,CAAC,CAAE,CAAA;AACvE,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,UAAG,iBAAiB,cAAI,GAAG,CAAC,OAAO,CAAC,UAAG,WAAW,QAAK,EAAE,EAAE,CAAC,CAAE,CAAA;AACvE,CAAC;AAED;IAAuC,kCAAa;IAApD;;IA+BA,CAAC;IA9Be,mBAAI,GAAlB,UAAsB,GAAW;QAC/B,OAAO,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3E,CAAC;IAEa,uBAAQ,GAAtB,UAAuB,GAAW;QAChC,OAAO,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IACnE,CAAC;IAEY,4BAAG,GAAhB;;;;;4BACiD,qBAAM,IAAI,CAAC,OAAO,EAAE,EAAA;;wBAA7D,QAAQ,GAAiC,SAAoB;wBACnE,sBAAO,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,EAAA;;;;KACtB;IAEY,+BAAM,GAAnB;;;;;4BAC2D,qBAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAA;;wBAApF,QAAQ,GAA2C,SAAiC;wBAC1F,sBAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAA;;;;KACnH;IAEa,gCAAO,GAArB,UAAyB,YAAmC;QAAnC,6BAAA,EAAA,qBAAmC;;;;;;wBAC1D,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;4BACtC,sBAAO,SAAS,EAAA;yBACjB;wBAEK,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;wBAC1B,IAAI,CAAC,GAAG,EAAE;4BACR,sBAAO,SAAS,EAAA;yBACjB;wBAEM,qBAAM,eAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,YAAY,cAAA,EAAE,CAAC,EAAA;4BAA7C,sBAAO,SAAsC,EAAA;;;;KAC9C;IACH,qBAAC;AAAD,CAAC,AA/BD,CAAuC,uBAAU,GA+BhD;AA/BY,wCAAc"}
+{"version":3,"file":"IpfsRemoteData.js","sourceRoot":"","sources":["../../../src/utils/remote-data/IpfsRemoteData.ts"],"names":[],"mappings":";AAAA,oEAAoE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIpE,2CAAkD;AAClD,yDAAmD;AAEnD,IAAM,WAAW,GAAG,MAAM,CAAA;AAC1B,IAAM,iBAAiB,GAAG,wBAAwB,CAAA;AAElD,IAAM,WAAW,GAAG,MAAM,CAAA;AAC1B,IAAM,iBAAiB,GAAG,wBAAwB,CAAA;AAElD,SAAS,IAAI,CAAC,GAAW;IACvB,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;KACjB;SAAM,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;QACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;KACjB;SAAM;QACL,OAAO,SAAS,CAAA;KACjB;AACH,CAAC;AAED,iGAAiG;AACjG,+DAA+D;AAC/D,SAAS,WAAW,CAAC,GAAW,EAAE,MAAc;IAC9C,OAAO,GAAG;SACP,OAAO,CAAC,UAAG,MAAM,QAAK,EAAE,EAAE,CAAC;SAC3B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,UAAC,OAAO,IAAK,OAAA,kBAAkB,CAAC,OAAO,CAAC,EAA3B,CAA2B,CAAC;SAC7C,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,UAAG,iBAAiB,cAAI,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAE,CAAA;AAChE,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,UAAG,iBAAiB,cAAI,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAE,CAAA;AAChE,CAAC;AAED;IAAuC,kCAAa;IAApD;;IA+BA,CAAC;IA9Be,mBAAI,GAAlB,UAAsB,GAAW;QAC/B,OAAO,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3E,CAAC;IAEa,uBAAQ,GAAtB,UAAuB,GAAW;QAChC,OAAO,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IACnE,CAAC;IAEY,4BAAG,GAAhB;;;;;4BACiD,qBAAM,IAAI,CAAC,OAAO,EAAE,EAAA;;wBAA7D,QAAQ,GAAiC,SAAoB;wBACnE,sBAAO,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,EAAA;;;;KACtB;IAEY,+BAAM,GAAnB;;;;;4BAC2D,qBAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAA;;wBAApF,QAAQ,GAA2C,SAAiC;wBAC1F,sBAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAA;;;;KACnH;IAEa,gCAAO,GAArB,UAAyB,YAAmC;QAAnC,6BAAA,EAAA,qBAAmC;;;;;;wBAC1D,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;4BACtC,sBAAO,SAAS,EAAA;yBACjB;wBAEK,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;wBAC1B,IAAI,CAAC,GAAG,EAAE;4BACR,sBAAO,SAAS,EAAA;yBACjB;wBAEM,qBAAM,IAAA,iCAAa,EAAI,GAAG,EAAE,YAAY,CAAC,EAAA;4BAAhD,sBAAO,SAAyC,EAAA;;;;KACjD;IACH,qBAAC;AAAD,CAAC,AA/BD,CAAuC,uBAAU,GA+BhD;AA/BY,wCAAc"}

package/utils/remote-data/Sha256RemoteData.js

@@ -50,15 +50,12 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Sha256RemoteData = void 0;
-var index_1 = __importDefault(require("../../dependencies/src/axios-0.19.0/index"));
 var sha = require("../../dependencies/src/sha.js-2.4.11/index");
 var hex_1 = require("../hex");
 var RemoteData_1 = require("./RemoteData");
+var remoteDataRequest_1 = require("./remoteDataRequest");
 var SHA256_SCHEME = 'sha256';
 function parseUri(uri) {
     var _a = uri.replace("".concat(SHA256_SCHEME, "://"), '').split(/\/(.+)/, 2), hash = _a[0], path = _a[1];
@@ -88,7 +85,9 @@ var Sha256RemoteData = /** @class */ (function (_super) {
         }
         var _a = parseUri(uri), hash = _a.hash, path = _a.path;
         var validHash = !!hash && hash.startsWith('0x');
-        var validPath = !!path;
+        // the path is an arbitrary URL taken from an untrusted source, so it has to clear the same bar
+        // as any other remote data target
+        var validPath = !!path && (0, remoteDataRequest_1.isPublicHttpUrl)(decodeURIComponent(path));
         return validHash && validPath;
     };
     Sha256RemoteData.prototype.get = function () {
@@ -117,7 +116,7 @@ var Sha256RemoteData = /** @class */ (function (_super) {
                         if (!Sha256RemoteData.validate(this.uri)) {
                             return [2 /*return*/, undefined];
                         }
-                        return [4 /*yield*/, index_1.default.get(this.path, { responseType: 'arraybuffer' })];
+                        return [4 /*yield*/, (0, remoteDataRequest_1.remoteDataGet)(this.path, 'arraybuffer')];
                     case 1:
                         response = _a.sent();
                         data = response.data;

package/utils/remote-data/Sha256RemoteData.js.map

@@ -1 +1 @@
-{"version":3,"file":"Sha256RemoteData.js","sourceRoot":"","sources":["../../../src/utils/remote-data/Sha256RemoteData.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oFAAgF;AAChF,gEAAkE;AAClE,8BAAuC;AAEvC,2CAAkD;AAElD,IAAM,aAAa,GAAG,QAAQ,CAAA;AAE9B,SAAS,QAAQ,CAAC,GAAW;IACrB,IAAA,KAAe,GAAG,CAAC,OAAO,CAAC,UAAG,aAAa,QAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAvE,IAAI,QAAA,EAAE,IAAI,QAA6D,CAAA;IAE9E,OAAO,EAAE,IAAI,MAAA,EAAE,IAAI,MAAA,EAAE,CAAA;AACvB,CAAC;AAED;IAAyC,oCAAa;IACpD,0BAAsB,GAAW,EAAmB,IAAY,EAAmB,IAAY;QAA/F,YACE,kBAAM,GAAG,CAAC,SACX;QAFmD,UAAI,GAAJ,IAAI,CAAQ;QAAmB,UAAI,GAAJ,IAAI,CAAQ;;IAE/F,CAAC;IAEa,qBAAI,GAAlB,UAAsB,GAAW;QAC/B,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;YACnC,OAAO,SAAS,CAAA;SACjB;QAEK,IAAA,KAAiB,QAAQ,CAAC,GAAG,CAAC,EAA5B,IAAI,UAAA,EAAE,IAAI,UAAkB,CAAA;QACpC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE;YAClB,OAAO,SAAS,CAAA;SACjB;QAED,OAAO,IAAI,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAA,oBAAc,EAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAA;IACtG,CAAC;IAEa,yBAAQ,GAAtB,UAAuB,GAAW;QAChC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE;YAClC,OAAO,KAAK,CAAA;SACb;QAEK,IAAA,KAAiB,QAAQ,CAAC,GAAG,CAAC,EAA5B,IAAI,UAAA,EAAE,IAAI,UAAkB,CAAA;QAEpC,IAAM,SAAS,GAAG,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACjD,IAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAA;QAExB,OAAO,SAAS,IAAI,SAAS,CAAA;IAC/B,CAAC;IAEY,8BAAG,GAAhB;;;;;4BACoC,qBAAM,IAAI,CAAC,MAAM,EAAE,EAAA;;wBAA/C,IAAI,GAAwB,SAAmB;wBACrD,IAAI,IAAI,KAAK,SAAS,EAAE;4BACtB,sBAAO,SAAS,EAAA;yBACjB;wBAEK,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;wBACjC,sBAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAA;;;;KACrD;IAEY,iCAAM,GAAnB;;;;;;wBACE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;4BACxC,sBAAO,SAAS,EAAA;yBACjB;wBAE4C,qBAAM,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,EAAA;;wBAAlG,QAAQ,GAA+B,SAA2D;wBAClG,IAAI,GAAgB,QAAQ,CAAC,IAAI,CAAA;wBACjC,IAAI,GAAW,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;wBACxD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;4BAC3B,sBAAO,SAAS,EAAA;yBACjB;wBAED,sBAAO;gCACL,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gCACxB,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC;6BAC9C,EAAA;;;;KACF;IACH,uBAAC;AAAD,CAAC,AA1DD,CAAyC,uBAAU,GA0DlD;AA1DY,4CAAgB"}
+{"version":3,"file":"Sha256RemoteData.js","sourceRoot":"","sources":["../../../src/utils/remote-data/Sha256RemoteData.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,gEAAkE;AAClE,8BAAuC;AAEvC,2CAAkD;AAClD,yDAAoE;AAEpE,IAAM,aAAa,GAAG,QAAQ,CAAA;AAE9B,SAAS,QAAQ,CAAC,GAAW;IACrB,IAAA,KAAe,GAAG,CAAC,OAAO,CAAC,UAAG,aAAa,QAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAvE,IAAI,QAAA,EAAE,IAAI,QAA6D,CAAA;IAE9E,OAAO,EAAE,IAAI,MAAA,EAAE,IAAI,MAAA,EAAE,CAAA;AACvB,CAAC;AAED;IAAyC,oCAAa;IACpD,0BACE,GAAW,EACM,IAAY,EACZ,IAAY;QAH/B,YAKE,kBAAM,GAAG,CAAC,SACX;QAJkB,UAAI,GAAJ,IAAI,CAAQ;QACZ,UAAI,GAAJ,IAAI,CAAQ;;IAG/B,CAAC;IAEa,qBAAI,GAAlB,UAAsB,GAAW;QAC/B,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;YACnC,OAAO,SAAS,CAAA;SACjB;QAEK,IAAA,KAAiB,QAAQ,CAAC,GAAG,CAAC,EAA5B,IAAI,UAAA,EAAE,IAAI,UAAkB,CAAA;QACpC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE;YAClB,OAAO,SAAS,CAAA;SACjB;QAED,OAAO,IAAI,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAA,oBAAc,EAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAA;IACtG,CAAC;IAEa,yBAAQ,GAAtB,UAAuB,GAAW;QAChC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE;YAClC,OAAO,KAAK,CAAA;SACb;QAEK,IAAA,KAAiB,QAAQ,CAAC,GAAG,CAAC,EAA5B,IAAI,UAAA,EAAE,IAAI,UAAkB,CAAA;QAEpC,IAAM,SAAS,GAAG,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACjD,+FAA+F;QAC/F,kCAAkC;QAClC,IAAM,SAAS,GAAG,CAAC,CAAC,IAAI,IAAI,IAAA,mCAAe,EAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAA;QAErE,OAAO,SAAS,IAAI,SAAS,CAAA;IAC/B,CAAC;IAEY,8BAAG,GAAhB;;;;;4BACoC,qBAAM,IAAI,CAAC,MAAM,EAAE,EAAA;;wBAA/C,IAAI,GAAwB,SAAmB;wBACrD,IAAI,IAAI,KAAK,SAAS,EAAE;4BACtB,sBAAO,SAAS,EAAA;yBACjB;wBAEK,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;wBACjC,sBAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAA;;;;KACrD;IAEY,iCAAM,GAAnB;;;;;;wBACE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;4BACxC,sBAAO,SAAS,EAAA;yBACjB;wBAE4C,qBAAM,IAAA,iCAAa,EAAc,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAA;;wBAAjG,QAAQ,GAA+B,SAA0D;wBACjG,IAAI,GAAgB,QAAQ,CAAC,IAAI,CAAA;wBACjC,IAAI,GAAW,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;wBACxD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;4BAC3B,sBAAO,SAAS,EAAA;yBACjB;wBAED,sBAAO;gCACL,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gCACxB,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC;6BAC9C,EAAA;;;;KACF;IACH,uBAAC;AAAD,CAAC,AAhED,CAAyC,uBAAU,GAgElD;AAhEY,4CAAgB"}

package/utils/remote-data/remoteDataRequest.d.ts

@@ -0,0 +1,16 @@
+import { AxiosResponse, ResponseType } from '../../dependencies/src/axios-0.33.0/index';
+export declare const REMOTE_DATA_TIMEOUT = 30000;
+export declare const REMOTE_DATA_MAX_CONTENT_LENGTH: number;
+export declare const REMOTE_DATA_MAX_REDIRECTS = 3;
+/**
+ * Whether `uri` is an `http(s)` URL that does not obviously point back at the host or its private
+ * network. Anything unparseable, non-`http(s)`, credential-bearing or address-literal-private is
+ * rejected.
+ */
+export declare function isPublicHttpUrl(uri: string): boolean;
+/**
+ * The single entry point through which remote data is fetched. Validates the target, bounds the
+ * request, and re-validates every redirect hop, since a one-off check on the initial URL is
+ * trivially defeated by a redirect.
+ */
+export declare function remoteDataGet<T>(uri: string, responseType?: ResponseType): Promise<AxiosResponse<T>>;