@strapi/admin 5.0.0-beta.8 → 5.0.0-rc.0

package/dist/package.json.d.ts

@@ -1,6 +1,6 @@
 declare const _default: {
   "name": "@strapi/admin",
-  "version": "5.0.0-beta.7",
+  "version": "5.0.0-beta.17",
   "description": "Strapi Admin",
   "repository": {
     "type": "git",
@@ -75,16 +75,16 @@ declare const _default: {
   },
   "dependencies": {
     "@casl/ability": "6.5.0",
+    "@internationalized/date": "3.5.4",
     "@radix-ui/react-context": "1.0.1",
     "@radix-ui/react-toolbar": "1.0.4",
     "@reduxjs/toolkit": "1.9.7",
-    "@strapi/design-system": "2.0.0-beta.4",
-    "@strapi/icons": "2.0.0-beta.4",
-    "@strapi/permissions": "5.0.0-beta.7",
-    "@strapi/provider-audit-logs-local": "5.0.0-beta.7",
-    "@strapi/types": "5.0.0-beta.7",
-    "@strapi/typescript-utils": "5.0.0-beta.7",
-    "@strapi/utils": "5.0.0-beta.7",
+    "@strapi/design-system": "2.0.0-beta.6",
+    "@strapi/icons": "2.0.0-beta.6",
+    "@strapi/permissions": "5.0.0-beta.17",
+    "@strapi/types": "5.0.0-beta.17",
+    "@strapi/typescript-utils": "5.0.0-beta.17",
+    "@strapi/utils": "5.0.0-beta.17",
     "@testing-library/dom": "10.1.0",
     "@testing-library/react": "15.0.7",
     "@testing-library/user-event": "14.5.2",
@@ -104,6 +104,7 @@ declare const _default: {
     "immer": "9.0.21",
     "inquirer": "8.2.5",
     "invariant": "^2.2.4",
+    "is-localhost-ip": "2.0.0",
     "jsonwebtoken": "9.0.0",
     "koa": "2.15.2",
     "koa-compose": "4.1.0",
@@ -117,6 +118,7 @@ declare const _default: {
     "p-map": "4.0.0",
     "passport-local": "1.0.0",
     "pluralize": "8.0.0",
+    "punycode": "2.3.1",
     "qs": "6.11.1",
     "react-dnd": "16.0.1",
     "react-dnd-html5-backend": "16.0.1",
@@ -137,8 +139,8 @@ declare const _default: {
     "zod": "^3.22.4"
   },
   "devDependencies": {
-    "@strapi/admin-test-utils": "5.0.0-beta.7",
-    "@strapi/data-transfer": "5.0.0-beta.7",
+    "@strapi/admin-test-utils": "5.0.0-beta.17",
+    "@strapi/data-transfer": "5.0.0-beta.17",
     "@strapi/pack-up": "5.0.0",
     "@types/codemirror5": "npm:@types/codemirror@^5.60.15",
     "@types/fs-extra": "11.0.4",
@@ -152,6 +154,7 @@ declare const _default: {
     "@types/markdown-it-footnote": "3.0.3",
     "@types/passport-local": "1.0.36",
     "@types/pluralize": "0.0.32",
+    "@types/punycode": "2.1.4",
     "@types/react-window": "1.8.8",
     "@types/sanitize-html": "2.11.0",
     "@vitejs/plugin-react-swc": "3.6.0",

package/dist/server/index.js

@@ -23,6 +23,8 @@ const tsUtils = require("@strapi/typescript-utils");
 const zod = require("zod");
 const compose = require("koa-compose");
 const dataTransfer$1 = require("@strapi/data-transfer");
+const isLocalhostIp = require("is-localhost-ip");
+const punycode = require("punycode/");
 const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
 function _interopNamespace(e) {
   if (e && e.__esModule)
@@ -57,6 +59,8 @@ const assert__default = /* @__PURE__ */ _interopDefault(assert);
 const fs__default = /* @__PURE__ */ _interopDefault(fs);
 const tsUtils__default = /* @__PURE__ */ _interopDefault(tsUtils);
 const compose__default = /* @__PURE__ */ _interopDefault(compose);
+const isLocalhostIp__default = /* @__PURE__ */ _interopDefault(isLocalhostIp);
+const punycode__default = /* @__PURE__ */ _interopDefault(punycode);
 const getService = (name2) => {
   return strapi.service(`admin::${name2}`);
 };
@@ -366,7 +370,7 @@ const bootstrap = async ({ strapi: strapi2 }) => {
   await userService.displayWarningIfUsersDontHaveRole();
   await syncAuthSettings();
   await syncAPITokensPermissions();
-  getService("metrics").sendUpdateProjectInformation(strapi2);
+  await getService("metrics").sendUpdateProjectInformation(strapi2);
   getService("metrics").startCron(strapi2);
   apiTokenService.checkSaltIsDefined();
   transferService.token.checkSaltIsDefined();
@@ -2264,6 +2268,39 @@ const init = () => {
   return passport__default.default.initialize();
 };
 const passport = { init, getPassportStrategies, authEventsMapper };
+const sendDidInviteUser = async () => {
+  const numberOfUsers = await getService("user").count();
+  const numberOfRoles = await getService("role").count();
+  strapi.telemetry.send("didInviteUser", {
+    groupProperties: { numberOfRoles, numberOfUsers }
+  });
+};
+const sendDidUpdateRolePermissions = async () => {
+  strapi.telemetry.send("didUpdateRolePermissions");
+};
+const sendDidChangeInterfaceLanguage = async () => {
+  const languagesInUse = await getService("user").getLanguagesInUse();
+  strapi.telemetry.send("didChangeInterfaceLanguage", { userProperties: { languagesInUse } });
+};
+const sendUpdateProjectInformation = async (strapi2) => {
+  const numberOfActiveAdminUsers = await getService("user").count({ isActive: true });
+  const numberOfAdminUsers = await getService("user").count();
+  strapi2.telemetry.send("didUpdateProjectInformation", {
+    groupProperties: { numberOfActiveAdminUsers, numberOfAdminUsers }
+  });
+};
+const startCron = (strapi2) => {
+  strapi2.cron.add({
+    "0 0 0 * * *": () => sendUpdateProjectInformation(strapi2)
+  });
+};
+const metrics = {
+  sendDidInviteUser,
+  sendDidUpdateRolePermissions,
+  sendDidChangeInterfaceLanguage,
+  sendUpdateProjectInformation,
+  startCron
+};
 const defaultJwtOptions = { expiresIn: "30d" };
 const getTokenOptions = () => {
   const { options, secret } = strapi.config.get(
@@ -3283,40 +3320,6 @@ const permission$2 = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.define
   sanitizePermission,
   sectionsBuilder
 }, Symbol.toStringTag, { value: "Module" }));
-const sendDidInviteUser = async () => {
-  const numberOfUsers = await getService("user").count();
-  const numberOfRoles = await getService("role").count();
-  strapi.telemetry.send("didInviteUser", {
-    groupProperties: { numberOfRoles, numberOfUsers }
-  });
-};
-const sendDidUpdateRolePermissions = async () => {
-  strapi.telemetry.send("didUpdateRolePermissions");
-};
-const sendDidChangeInterfaceLanguage = async () => {
-  const languagesInUse = await getService("user").getLanguagesInUse();
-  strapi.telemetry.send("didChangeInterfaceLanguage", { userProperties: { languagesInUse } });
-};
-const sendUpdateProjectInformation = async (strapi2) => {
-  const numberOfActiveAdminUsers = await getService("user").count({ isActive: true });
-  const numberOfAdminUsers = await getService("user").count();
-  strapi2.telemetry.send("didUpdateProjectInformation", {
-    groupProperties: { numberOfActiveAdminUsers, numberOfAdminUsers }
-  });
-};
-const startCron = (strapi2) => {
-  strapi2.cron.add({
-    "0 0 0 * * *": () => sendUpdateProjectInformation(strapi2)
-  });
-};
-const metrics = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
-  __proto__: null,
-  sendDidChangeInterfaceLanguage,
-  sendDidInviteUser,
-  sendDidUpdateRolePermissions,
-  sendUpdateProjectInformation,
-  startCron
-}, Symbol.toStringTag, { value: "Module" }));
 const getNestedFields = (model, {
   prefix = "",
   nestingLevel = 15,
@@ -4992,7 +4995,22 @@ const user = {
 const urlRegex = /^(?:([a-z0-9+.-]+):\/\/)(?:\S+(?::\S*)?@)?(?:(?:[1-9]\d?|1\d\d|2[01]\d|22[0-3])(?:\.(?:1?\d{1,2}|2[0-4]\d|25[0-5])){2}(?:\.(?:[1-9]\d?|1\d\d|2[0-4]\d|25[0-4]))|(?:(?:[a-z\u00a1-\uffff0-9_]-*)*[a-z\u00a1-\uffff0-9_]+)(?:\.(?:[a-z\u00a1-\uffff0-9_]-*)*[a-z\u00a1-\uffff0-9_]+)*\.?)(?::\d{2,5})?(?:[/?#]\S*)?$/;
 const webhookValidator = utils$1.yup.object({
   name: utils$1.yup.string().required(),
-  url: utils$1.yup.string().matches(urlRegex, "url must be a valid URL").required(),
+  url: utils$1.yup.string().matches(urlRegex, "url must be a valid URL").required().test(
+    "is-public-url",
+    "Url is not supported because it isn't reachable over the public internet",
+    async (url) => {
+      if (process.env.NODE_ENV !== "production") {
+        return true;
+      }
+      try {
+        const parsedUrl = new URL(punycode__default.default.toASCII(url));
+        const isLocalUrl = await isLocalhostIp__default.default(parsedUrl.hostname);
+        return !isLocalUrl;
+      } catch {
+        return false;
+      }
+    }
+  ),
   headers: utils$1.yup.lazy((data) => {
     if (typeof data !== "object") {
       return utils$1.yup.object().required();