@fedify/relay 2.3.12 → 2.3.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,7 +1,7 @@
1
1
  import "@js-temporal/polyfill";
2
2
  import "urlpattern-polyfill";
3
3
  globalThis.addEventListener = () => {};
4
- import { n as exportSpki, r as getDocumentLoader, t as isRelayFollowerData } from "./types-BsZWwAaO.js";
4
+ import { n as exportSpki, r as getDocumentLoader, t as isRelayFollowerData } from "./types-B0fjZ1hm.js";
5
5
  import { MemoryKvStore, signRequest } from "@fedify/fedify";
6
6
  import { createRelay } from "@fedify/relay";
7
7
  import { Accept, Announce, Create, Delete, Follow, Move, Note, Person, Undo, Update } from "@fedify/vocab";
@@ -1,7 +1,7 @@
1
1
  import "@js-temporal/polyfill";
2
2
  import "urlpattern-polyfill";
3
3
  globalThis.addEventListener = () => {};
4
- import { n as exportSpki, r as getDocumentLoader, t as isRelayFollowerData } from "./types-BsZWwAaO.js";
4
+ import { n as exportSpki, r as getDocumentLoader, t as isRelayFollowerData } from "./types-B0fjZ1hm.js";
5
5
  import { MemoryKvStore, signRequest } from "@fedify/fedify";
6
6
  import { createRelay } from "@fedify/relay";
7
7
  import { Create, Delete, Follow, Move, Note, Person, Undo, Update } from "@fedify/vocab";
@@ -25843,7 +25843,7 @@ const preloadedContexts = {
25843
25843
  } }
25844
25844
  };
25845
25845
  var name = "@fedify/vocab-runtime";
25846
- var version = "2.3.12";
25846
+ var version = "2.3.14";
25847
25847
  /**
25848
25848
  * Error thrown when fetching a JSON-LD document failed.
25849
25849
  */
@@ -26494,7 +26494,10 @@ function getDocumentLoader({ allowPrivateAddress, maxRedirection, skipPreloadedC
26494
26494
  const maximumRedirection = maxRedirection ?? DEFAULT_MAX_REDIRECTION;
26495
26495
  async function load(url, options, redirected = 0, visited = /* @__PURE__ */ new Set()) {
26496
26496
  options?.signal?.throwIfAborted();
26497
- const currentUrl = new URL(url).href;
26497
+ const parsedUrl = new URL(url);
26498
+ if (parsedUrl.protocol !== "http:" && parsedUrl.protocol !== "https:") throw new UrlError(`Unsupported protocol: ${parsedUrl.protocol}`);
26499
+ if (parsedUrl.username !== "" || parsedUrl.password !== "") throw new UrlError("URLs with credentials are not allowed");
26500
+ const currentUrl = parsedUrl.href;
26498
26501
  if (!skipPreloadedContexts && currentUrl in preloadedContexts) {
26499
26502
  logger.debug("Using preloaded context: {url}.", { url: currentUrl });
26500
26503
  return {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@fedify/relay",
3
- "version": "2.3.12",
3
+ "version": "2.3.14",
4
4
  "description": "ActivityPub relay support for Fedify",
5
5
  "keywords": [
6
6
  "Fedify",
@@ -50,14 +50,14 @@
50
50
  "dependencies": {
51
51
  "@js-temporal/polyfill": "^0.5.1",
52
52
  "@logtape/logtape": "^2.2.0",
53
- "@fedify/fedify": "^2.3.12",
54
- "@fedify/vocab": "2.3.12"
53
+ "@fedify/vocab": "2.3.14",
54
+ "@fedify/fedify": "^2.3.14"
55
55
  },
56
56
  "devDependencies": {
57
57
  "tsdown": "^0.22.0",
58
58
  "typescript": "^6.0.0",
59
59
  "urlpattern-polyfill": "^10.1.0",
60
- "@fedify/vocab-runtime": "^2.3.12"
60
+ "@fedify/vocab-runtime": "^2.3.14"
61
61
  },
62
62
  "scripts": {
63
63
  "build:self": "tsdown",