@scalar/helpers 0.0.10 → 0.0.11

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @scalar/helpers
 
+## 0.0.11
+
+### Patch Changes
+
+- bff46e5: feat: don’t use proxy for reserved tlds
+
 ## 0.0.10
 
 ### Patch Changes

package/dist/url/is-local-url.d.ts

@@ -1,5 +1,5 @@
 /**
- * Detect requests to localhost
+ * Detect requests to localhost or reserved TLDs
  */
 export declare function isLocalUrl(url: string): boolean;
 //# sourceMappingURL=is-local-url.d.ts.map

package/dist/url/is-local-url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"is-local-url.d.ts","sourceRoot":"","sources":["../../src/url/is-local-url.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,WAUrC"}
+{"version":3,"file":"is-local-url.d.ts","sourceRoot":"","sources":["../../src/url/is-local-url.ts"],"names":[],"mappings":"AAMA;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,WAqBrC"}

package/dist/url/is-local-url.js

@@ -1,8 +1,16 @@
 const LOCAL_HOSTNAMES = ["localhost", "127.0.0.1", "[::1]", "0.0.0.0"];
+const RESERVED_TLDS = ["test", "example", "invalid", "localhost"];
 function isLocalUrl(url) {
   try {
     const { hostname } = new URL(url);
-    return LOCAL_HOSTNAMES.includes(hostname);
+    if (LOCAL_HOSTNAMES.includes(hostname)) {
+      return true;
+    }
+    const tld = hostname.split(".").pop();
+    if (tld && RESERVED_TLDS.includes(tld)) {
+      return true;
+    }
+    return false;
   } catch {
     return true;
   }

package/dist/url/is-local-url.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/url/is-local-url.ts"],
-  "sourcesContent": ["/** Obviously local hostnames */\nconst LOCAL_HOSTNAMES = ['localhost', '127.0.0.1', '[::1]', '0.0.0.0']\n\n/**\n * Detect requests to localhost\n */\nexport function isLocalUrl(url: string) {\n  try {\n    const { hostname } = new URL(url)\n\n    return LOCAL_HOSTNAMES.includes(hostname)\n  } catch {\n    // If it's not a valid URL, we can't use the proxy anyway,\n    // but it also covers cases like relative URLs (e.g. `openapi.json`).\n    return true\n  }\n}\n"],
-  "mappings": "AACA,MAAM,kBAAkB,CAAC,aAAa,aAAa,SAAS,SAAS;AAK9D,SAAS,WAAW,KAAa;AACtC,MAAI;AACF,UAAM,EAAE,SAAS,IAAI,IAAI,IAAI,GAAG;AAEhC,WAAO,gBAAgB,SAAS,QAAQ;AAAA,EAC1C,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;",
+  "sourcesContent": ["/** Obviously local hostnames */\nconst LOCAL_HOSTNAMES = ['localhost', '127.0.0.1', '[::1]', '0.0.0.0']\n\n/** Reserved TLDs that are guaranteed to never be assigned */\nconst RESERVED_TLDS = ['test', 'example', 'invalid', 'localhost']\n\n/**\n * Detect requests to localhost or reserved TLDs\n */\nexport function isLocalUrl(url: string) {\n  try {\n    const { hostname } = new URL(url)\n\n    // Check if hostname is in the local hostnames list\n    if (LOCAL_HOSTNAMES.includes(hostname)) {\n      return true\n    }\n\n    // Check if hostname ends with a reserved TLD\n    const tld = hostname.split('.').pop()\n    if (tld && RESERVED_TLDS.includes(tld)) {\n      return true\n    }\n\n    return false\n  } catch {\n    // If it's not a valid URL, we can't use the proxy anyway,\n    // but it also covers cases like relative URLs (e.g. `openapi.json`).\n    return true\n  }\n}\n"],
+  "mappings": "AACA,MAAM,kBAAkB,CAAC,aAAa,aAAa,SAAS,SAAS;AAGrE,MAAM,gBAAgB,CAAC,QAAQ,WAAW,WAAW,WAAW;AAKzD,SAAS,WAAW,KAAa;AACtC,MAAI;AACF,UAAM,EAAE,SAAS,IAAI,IAAI,IAAI,GAAG;AAGhC,QAAI,gBAAgB,SAAS,QAAQ,GAAG;AACtC,aAAO;AAAA,IACT;AAGA,UAAM,MAAM,SAAS,MAAM,GAAG,EAAE,IAAI;AACpC,QAAI,OAAO,cAAc,SAAS,GAAG,GAAG;AACtC,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;",
   "names": []
 }

package/package.json

@@ -14,7 +14,7 @@
     "helpers",
     "js"
   ],
-  "version": "0.0.10",
+  "version": "0.0.11",
   "engines": {
     "node": ">=20"
   },
@@ -78,8 +78,8 @@
   ],
   "module": "dist/index.js",
   "devDependencies": {
-    "vite": "6.1.6",
-    "vitest": "^3.2.4",
+    "vite": "7.1.5",
+    "vitest": "3.2.4",
     "@scalar/build-tooling": "0.2.7"
   },
   "scripts": {