@farm.js/create-app 0.1.0-beta.91 → 0.1.0-beta.93

package/dist/index.js

@@ -2671,18 +2671,21 @@ function isInteractive() {
 	return process.stdin.isTTY === true && process.stdout.isTTY === true;
 }
 function getEndpoint() {
-	const candidate = process.env.FARM_TELEMETRY_ENDPOINT || DEFAULT_TELEMETRY_ENDPOINT;
+	return process.env.FARM_TELEMETRY_ENDPOINT || DEFAULT_TELEMETRY_ENDPOINT;
+}
+function resolveTelemetryEndpoint(candidate) {
 	try {
 		const url = new URL(candidate);
+		const hostname = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
 		const isLocal = [
 			"localhost",
 			"127.0.0.1",
 			"::1"
-		].includes(url.hostname);
-		if (url.protocol !== "https:" && !(url.protocol === "http:" && isLocal)) return DEFAULT_TELEMETRY_ENDPOINT;
-		return url.toString();
+		].includes(hostname);
+		if (url.protocol !== "https:" && !(url.protocol === "http:" && isLocal)) return;
+		return url;
 	} catch {
-		return DEFAULT_TELEMETRY_ENDPOINT;
+		return;
 	}
 }
 async function resolveState() {
@@ -2810,18 +2813,12 @@ async function send(payload) {
 	debug("delivery failed after retries");
 }
 async function sendOnce(payload) {
-	let endpoint;
-	try {
-		endpoint = new URL(getEndpoint());
-	} catch {
-		debug("invalid endpoint URL");
+	const endpoint = resolveTelemetryEndpoint(getEndpoint());
+	if (!endpoint) {
+		debug("invalid or insecure telemetry endpoint; event skipped");
 		return "rejected";
 	}
 	const requestTransport = endpoint.protocol === "http:" ? node_http.request : node_https.request;
-	if (endpoint.protocol !== "http:" && endpoint.protocol !== "https:") {
-		debug(`unsupported endpoint protocol ${endpoint.protocol}`);
-		return "rejected";
-	}
 	const body = JSON.stringify(payload);
 	return new Promise((resolve) => {
 		let settled = false;