@strapi/admin 5.0.0-beta.8 → 5.0.0-rc.0

package/dist/server/index.mjs

@@ -22,6 +22,8 @@ import tsUtils from "@strapi/typescript-utils";
 import { z } from "zod";
 import compose from "koa-compose";
 import { strapi as strapi$1 } from "@strapi/data-transfer";
+import isLocalhostIp from "is-localhost-ip";
+import punycode from "punycode/";
 const getService = (name2) => {
   return strapi.service(`admin::${name2}`);
 };
@@ -331,7 +333,7 @@ const bootstrap = async ({ strapi: strapi2 }) => {
   await userService.displayWarningIfUsersDontHaveRole();
   await syncAuthSettings();
   await syncAPITokensPermissions();
-  getService("metrics").sendUpdateProjectInformation(strapi2);
+  await getService("metrics").sendUpdateProjectInformation(strapi2);
   getService("metrics").startCron(strapi2);
   apiTokenService.checkSaltIsDefined();
   transferService.token.checkSaltIsDefined();
@@ -2229,6 +2231,39 @@ const init = () => {
   return passport$1.initialize();
 };
 const passport = { init, getPassportStrategies, authEventsMapper };
+const sendDidInviteUser = async () => {
+  const numberOfUsers = await getService("user").count();
+  const numberOfRoles = await getService("role").count();
+  strapi.telemetry.send("didInviteUser", {
+    groupProperties: { numberOfRoles, numberOfUsers }
+  });
+};
+const sendDidUpdateRolePermissions = async () => {
+  strapi.telemetry.send("didUpdateRolePermissions");
+};
+const sendDidChangeInterfaceLanguage = async () => {
+  const languagesInUse = await getService("user").getLanguagesInUse();
+  strapi.telemetry.send("didChangeInterfaceLanguage", { userProperties: { languagesInUse } });
+};
+const sendUpdateProjectInformation = async (strapi2) => {
+  const numberOfActiveAdminUsers = await getService("user").count({ isActive: true });
+  const numberOfAdminUsers = await getService("user").count();
+  strapi2.telemetry.send("didUpdateProjectInformation", {
+    groupProperties: { numberOfActiveAdminUsers, numberOfAdminUsers }
+  });
+};
+const startCron = (strapi2) => {
+  strapi2.cron.add({
+    "0 0 0 * * *": () => sendUpdateProjectInformation(strapi2)
+  });
+};
+const metrics = {
+  sendDidInviteUser,
+  sendDidUpdateRolePermissions,
+  sendDidChangeInterfaceLanguage,
+  sendUpdateProjectInformation,
+  startCron
+};
 const defaultJwtOptions = { expiresIn: "30d" };
 const getTokenOptions = () => {
   const { options, secret } = strapi.config.get(
@@ -3248,40 +3283,6 @@ const permission$2 = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.define
   sanitizePermission,
   sectionsBuilder
 }, Symbol.toStringTag, { value: "Module" }));
-const sendDidInviteUser = async () => {
-  const numberOfUsers = await getService("user").count();
-  const numberOfRoles = await getService("role").count();
-  strapi.telemetry.send("didInviteUser", {
-    groupProperties: { numberOfRoles, numberOfUsers }
-  });
-};
-const sendDidUpdateRolePermissions = async () => {
-  strapi.telemetry.send("didUpdateRolePermissions");
-};
-const sendDidChangeInterfaceLanguage = async () => {
-  const languagesInUse = await getService("user").getLanguagesInUse();
-  strapi.telemetry.send("didChangeInterfaceLanguage", { userProperties: { languagesInUse } });
-};
-const sendUpdateProjectInformation = async (strapi2) => {
-  const numberOfActiveAdminUsers = await getService("user").count({ isActive: true });
-  const numberOfAdminUsers = await getService("user").count();
-  strapi2.telemetry.send("didUpdateProjectInformation", {
-    groupProperties: { numberOfActiveAdminUsers, numberOfAdminUsers }
-  });
-};
-const startCron = (strapi2) => {
-  strapi2.cron.add({
-    "0 0 0 * * *": () => sendUpdateProjectInformation(strapi2)
-  });
-};
-const metrics = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
-  __proto__: null,
-  sendDidChangeInterfaceLanguage,
-  sendDidInviteUser,
-  sendDidUpdateRolePermissions,
-  sendUpdateProjectInformation,
-  startCron
-}, Symbol.toStringTag, { value: "Module" }));
 const getNestedFields = (model, {
   prefix = "",
   nestingLevel = 15,
@@ -4957,7 +4958,22 @@ const user = {
 const urlRegex = /^(?:([a-z0-9+.-]+):\/\/)(?:\S+(?::\S*)?@)?(?:(?:[1-9]\d?|1\d\d|2[01]\d|22[0-3])(?:\.(?:1?\d{1,2}|2[0-4]\d|25[0-5])){2}(?:\.(?:[1-9]\d?|1\d\d|2[0-4]\d|25[0-4]))|(?:(?:[a-z\u00a1-\uffff0-9_]-*)*[a-z\u00a1-\uffff0-9_]+)(?:\.(?:[a-z\u00a1-\uffff0-9_]-*)*[a-z\u00a1-\uffff0-9_]+)*\.?)(?::\d{2,5})?(?:[/?#]\S*)?$/;
 const webhookValidator = yup.object({
   name: yup.string().required(),
-  url: yup.string().matches(urlRegex, "url must be a valid URL").required(),
+  url: yup.string().matches(urlRegex, "url must be a valid URL").required().test(
+    "is-public-url",
+    "Url is not supported because it isn't reachable over the public internet",
+    async (url) => {
+      if (process.env.NODE_ENV !== "production") {
+        return true;
+      }
+      try {
+        const parsedUrl = new URL(punycode.toASCII(url));
+        const isLocalUrl = await isLocalhostIp(parsedUrl.hostname);
+        return !isLocalUrl;
+      } catch {
+        return false;
+      }
+    }
+  ),
   headers: yup.lazy((data) => {
     if (typeof data !== "object") {
       return yup.object().required();