@hasna/logs 0.3.31 → 0.3.32

package/dist/server/index.js

@@ -2148,12 +2148,12 @@ function isLocalOpenModeEnabled() {
 }
 function isTrustedLocalRequest(c) {
   const url = new URL(c.req.url);
-  const host = forwardedHost(c.req.header("x-forwarded-host")) ?? hostWithoutPort(c.req.header("host")) ?? url.hostname;
-  return isLocalHost(host) && isLocalOrigin(c.req.header("origin"));
-}
-function forwardedHost(value) {
-  const first = value?.split(",")[0]?.trim();
-  return first ? hostWithoutPort(first) : null;
+  const hosts = [
+    hostWithoutPort(c.req.header("host")),
+    url.hostname,
+    ...forwardedHosts(c.req.header("x-forwarded-host"))
+  ].filter((host) => Boolean(host));
+  return hosts.length > 0 && hosts.every((host) => isLocalHost(host)) && isLocalOrigin(c.req.header("origin"));
 }
 function hostWithoutPort(value) {
   if (!value)
@@ -2162,6 +2162,9 @@ function hostWithoutPort(value) {
     return value.slice(1, value.indexOf("]"));
   return value.split(":")[0] || null;
 }
+function forwardedHosts(value) {
+  return value?.split(",").map((host) => hostWithoutPort(host.trim())).filter((host) => Boolean(host)) ?? [];
+}
 function isLocalOrigin(origin) {
   if (!origin)
     return true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/logs",
-  "version": "0.3.31",
+  "version": "0.3.32",
   "description": "Log aggregation + browser script + headless page scanner + performance monitoring for AI agents",
   "type": "module",
   "main": "./dist/index.js",