@fedify/vocab-runtime 2.3.0-dev.1190 → 2.3.0-dev.1212

package/dist/tests/url-BzGwIxB4.mjs

@@ -1,68 +0,0 @@
-import { lookup } from "node:dns/promises";
-import { isIP } from "node:net";
-//#region src/url.ts
-var UrlError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "UrlError";
-	}
-};
-/**
-* Validates a URL to prevent SSRF attacks.
-*/
-async function validatePublicUrl(url) {
-	const parsed = new URL(url);
-	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw new UrlError(`Unsupported protocol: ${parsed.protocol}`);
-	let hostname = parsed.hostname;
-	if (hostname.startsWith("[") && hostname.endsWith("]")) hostname = hostname.slice(1, -1);
-	if (hostname === "localhost") throw new UrlError("Localhost is not allowed");
-	const hostnameFamily = isIP(hostname);
-	if (hostnameFamily !== 0) {
-		validatePublicIpAddress(hostname, hostnameFamily);
-		return;
-	}
-	if ("Deno" in globalThis && !isIP(hostname)) {
-		if ((await Deno.permissions.query({ name: "net" })).state !== "granted") return;
-	}
-	if ("Bun" in globalThis) {
-		if (hostname === "example.com" || hostname.endsWith(".example.com")) return;
-		else if (hostname === "fedify-test.internal") throw new UrlError("Invalid or private address: fedify-test.internal");
-	}
-	let addresses;
-	try {
-		addresses = await lookup(hostname, { all: true });
-	} catch {
-		addresses = [];
-	}
-	for (const { address, family } of addresses) validatePublicIpAddress(address, family);
-}
-function validatePublicIpAddress(address, family) {
-	if (family === 4 && isValidPublicIPv4Address(address) || family === 6 && isValidPublicIPv6Address(address)) return;
-	throw new UrlError(`Invalid or private address: ${address}`);
-}
-function isValidPublicIPv4Address(address) {
-	const parts = address.split(".");
-	const first = parseInt(parts[0]);
-	if (first === 0 || first === 10 || first === 127) return false;
-	const second = parseInt(parts[1]);
-	if (first === 169 && second === 254) return false;
-	if (first === 172 && second >= 16 && second <= 31) return false;
-	if (first === 192 && second === 168) return false;
-	return true;
-}
-function isValidPublicIPv6Address(address) {
-	address = expandIPv6Address(address);
-	if (address.at(4) !== ":") return false;
-	const firstWord = parseInt(address.substring(0, 4), 16);
-	return !(firstWord >= 64512 && firstWord <= 65023 || firstWord >= 65152 && firstWord <= 65215 || firstWord === 0 || firstWord >= 65280);
-}
-function expandIPv6Address(address) {
-	address = address.toLowerCase();
-	if (address === "::") return "0000:0000:0000:0000:0000:0000:0000:0000";
-	if (address.startsWith("::")) address = "0000" + address;
-	if (address.endsWith("::")) address = address + "0000";
-	address = address.replace("::", ":0000".repeat(8 - (address.match(/:/g) || []).length) + ":");
-	return address.split(":").map((part) => part.padStart(4, "0")).join(":");
-}
-//#endregion
-export { validatePublicUrl as a, isValidPublicIPv6Address as i, expandIPv6Address as n, isValidPublicIPv4Address as r, UrlError as t };

package/dist/tests/url-CEmGms8t.cjs

@@ -1,98 +0,0 @@
-require("./chunk-C2EiDwsr.cjs");
-let node_dns_promises = require("node:dns/promises");
-let node_net = require("node:net");
-//#region src/url.ts
-var UrlError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "UrlError";
-	}
-};
-/**
-* Validates a URL to prevent SSRF attacks.
-*/
-async function validatePublicUrl(url) {
-	const parsed = new URL(url);
-	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw new UrlError(`Unsupported protocol: ${parsed.protocol}`);
-	let hostname = parsed.hostname;
-	if (hostname.startsWith("[") && hostname.endsWith("]")) hostname = hostname.slice(1, -1);
-	if (hostname === "localhost") throw new UrlError("Localhost is not allowed");
-	const hostnameFamily = (0, node_net.isIP)(hostname);
-	if (hostnameFamily !== 0) {
-		validatePublicIpAddress(hostname, hostnameFamily);
-		return;
-	}
-	if ("Deno" in globalThis && !(0, node_net.isIP)(hostname)) {
-		if ((await Deno.permissions.query({ name: "net" })).state !== "granted") return;
-	}
-	if ("Bun" in globalThis) {
-		if (hostname === "example.com" || hostname.endsWith(".example.com")) return;
-		else if (hostname === "fedify-test.internal") throw new UrlError("Invalid or private address: fedify-test.internal");
-	}
-	let addresses;
-	try {
-		addresses = await (0, node_dns_promises.lookup)(hostname, { all: true });
-	} catch {
-		addresses = [];
-	}
-	for (const { address, family } of addresses) validatePublicIpAddress(address, family);
-}
-function validatePublicIpAddress(address, family) {
-	if (family === 4 && isValidPublicIPv4Address(address) || family === 6 && isValidPublicIPv6Address(address)) return;
-	throw new UrlError(`Invalid or private address: ${address}`);
-}
-function isValidPublicIPv4Address(address) {
-	const parts = address.split(".");
-	const first = parseInt(parts[0]);
-	if (first === 0 || first === 10 || first === 127) return false;
-	const second = parseInt(parts[1]);
-	if (first === 169 && second === 254) return false;
-	if (first === 172 && second >= 16 && second <= 31) return false;
-	if (first === 192 && second === 168) return false;
-	return true;
-}
-function isValidPublicIPv6Address(address) {
-	address = expandIPv6Address(address);
-	if (address.at(4) !== ":") return false;
-	const firstWord = parseInt(address.substring(0, 4), 16);
-	return !(firstWord >= 64512 && firstWord <= 65023 || firstWord >= 65152 && firstWord <= 65215 || firstWord === 0 || firstWord >= 65280);
-}
-function expandIPv6Address(address) {
-	address = address.toLowerCase();
-	if (address === "::") return "0000:0000:0000:0000:0000:0000:0000:0000";
-	if (address.startsWith("::")) address = "0000" + address;
-	if (address.endsWith("::")) address = address + "0000";
-	address = address.replace("::", ":0000".repeat(8 - (address.match(/:/g) || []).length) + ":");
-	return address.split(":").map((part) => part.padStart(4, "0")).join(":");
-}
-//#endregion
-Object.defineProperty(exports, "UrlError", {
-	enumerable: true,
-	get: function() {
-		return UrlError;
-	}
-});
-Object.defineProperty(exports, "expandIPv6Address", {
-	enumerable: true,
-	get: function() {
-		return expandIPv6Address;
-	}
-});
-Object.defineProperty(exports, "isValidPublicIPv4Address", {
-	enumerable: true,
-	get: function() {
-		return isValidPublicIPv4Address;
-	}
-});
-Object.defineProperty(exports, "isValidPublicIPv6Address", {
-	enumerable: true,
-	get: function() {
-		return isValidPublicIPv6Address;
-	}
-});
-Object.defineProperty(exports, "validatePublicUrl", {
-	enumerable: true,
-	get: function() {
-		return validatePublicUrl;
-	}
-});