@slicedearth/whoisleuth-cli 1.34.0 → 1.39.1

package/lib/favicon.mjs

@@ -14,14 +14,9 @@
 //            adds coverage without weakening the exact tier.
 import * as crypto from 'node:crypto';
 import { safeFetch, readBytesCapped } from "./safe-fetch.mjs";
+import { whoisleuthRequestHeaders } from "./outbound-identity.mjs";
 import { faviconPerceptualHash } from "./perceptual-hash.mjs";
-const MAX_FAVICON_BYTES = 200000; // generous for a favicon, small enough to bound memory
-const FAVICON_FETCH_TIMEOUT_MS = 5000;
-// Bounds worst-case work when a (possibly hostile) page declares many icon
-// links - we try candidates in priority order and stop at the first that
-// yields hashable bytes, so this only bites on pages where every earlier
-// candidate fails.
-const MAX_FAVICON_CANDIDATES = 4;
+import { FAVICON_FETCH_TIMEOUT_MS, MAX_FAVICON_BYTES, MAX_FAVICON_CANDIDATES, } from "./outbound-request-bounds.mjs";
 // Extracts favicon URLs declared in the page's own <link rel="...icon..."> tags
 // (resolved to absolute URLs against the page origin), in preference order:
 // standard "icon"/"shortcut icon" first, then "apple-touch-icon". Many modern
@@ -129,7 +124,7 @@ function buildFaviconCandidates(domain, html = '') {
     return candidates.slice(0, MAX_FAVICON_CANDIDATES);
 }
 async function fetchFaviconHash(domain, { html = '' } = {}) {
-    const headers = { 'User-Agent': 'Mozilla/5.0 (compatible; DomainStatusChecker/1.0)' };
+    const headers = whoisleuthRequestHeaders();
     const candidates = buildFaviconCandidates(domain, html);
     for (const url of candidates) {
         // eslint-disable-next-line no-await-in-loop