@strapi/admin 5.0.0-beta.9 → 5.0.0-rc.1

package/dist/package.json.d.ts

@@ -1,6 +1,6 @@
 declare const _default: {
   "name": "@strapi/admin",
-  "version": "5.0.0-beta.8",
+  "version": "5.0.0-rc.0",
   "description": "Strapi Admin",
   "repository": {
     "type": "git",
@@ -75,16 +75,16 @@ declare const _default: {
   },
   "dependencies": {
     "@casl/ability": "6.5.0",
+    "@internationalized/date": "3.5.4",
     "@radix-ui/react-context": "1.0.1",
     "@radix-ui/react-toolbar": "1.0.4",
     "@reduxjs/toolkit": "1.9.7",
-    "@strapi/design-system": "2.0.0-beta.4",
-    "@strapi/icons": "2.0.0-beta.4",
-    "@strapi/permissions": "5.0.0-beta.8",
-    "@strapi/provider-audit-logs-local": "5.0.0-beta.8",
-    "@strapi/types": "5.0.0-beta.8",
-    "@strapi/typescript-utils": "5.0.0-beta.8",
-    "@strapi/utils": "5.0.0-beta.8",
+    "@strapi/design-system": "2.0.0-beta.6",
+    "@strapi/icons": "2.0.0-beta.6",
+    "@strapi/permissions": "5.0.0-rc.0",
+    "@strapi/types": "5.0.0-rc.0",
+    "@strapi/typescript-utils": "5.0.0-rc.0",
+    "@strapi/utils": "5.0.0-rc.0",
     "@testing-library/dom": "10.1.0",
     "@testing-library/react": "15.0.7",
     "@testing-library/user-event": "14.5.2",
@@ -104,6 +104,7 @@ declare const _default: {
     "immer": "9.0.21",
     "inquirer": "8.2.5",
     "invariant": "^2.2.4",
+    "is-localhost-ip": "2.0.0",
     "jsonwebtoken": "9.0.0",
     "koa": "2.15.2",
     "koa-compose": "4.1.0",
@@ -117,6 +118,7 @@ declare const _default: {
     "p-map": "4.0.0",
     "passport-local": "1.0.0",
     "pluralize": "8.0.0",
+    "punycode": "2.3.1",
     "qs": "6.11.1",
     "react-dnd": "16.0.1",
     "react-dnd-html5-backend": "16.0.1",
@@ -137,8 +139,8 @@ declare const _default: {
     "zod": "^3.22.4"
   },
   "devDependencies": {
-    "@strapi/admin-test-utils": "5.0.0-beta.8",
-    "@strapi/data-transfer": "5.0.0-beta.8",
+    "@strapi/admin-test-utils": "5.0.0-rc.0",
+    "@strapi/data-transfer": "5.0.0-rc.0",
     "@strapi/pack-up": "5.0.0",
     "@types/codemirror5": "npm:@types/codemirror@^5.60.15",
     "@types/fs-extra": "11.0.4",
@@ -152,6 +154,7 @@ declare const _default: {
     "@types/markdown-it-footnote": "3.0.3",
     "@types/passport-local": "1.0.36",
     "@types/pluralize": "0.0.32",
+    "@types/punycode": "2.1.4",
     "@types/react-window": "1.8.8",
     "@types/sanitize-html": "2.11.0",
     "@vitejs/plugin-react-swc": "3.6.0",

package/dist/server/index.js

@@ -23,6 +23,8 @@ const tsUtils = require("@strapi/typescript-utils");
 const zod = require("zod");
 const compose = require("koa-compose");
 const dataTransfer$1 = require("@strapi/data-transfer");
+const isLocalhostIp = require("is-localhost-ip");
+const punycode = require("punycode/");
 const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
 function _interopNamespace(e) {
   if (e && e.__esModule)
@@ -57,6 +59,8 @@ const assert__default = /* @__PURE__ */ _interopDefault(assert);
 const fs__default = /* @__PURE__ */ _interopDefault(fs);
 const tsUtils__default = /* @__PURE__ */ _interopDefault(tsUtils);
 const compose__default = /* @__PURE__ */ _interopDefault(compose);
+const isLocalhostIp__default = /* @__PURE__ */ _interopDefault(isLocalhostIp);
+const punycode__default = /* @__PURE__ */ _interopDefault(punycode);
 const getService = (name2) => {
   return strapi.service(`admin::${name2}`);
 };
@@ -4991,7 +4995,22 @@ const user = {
 const urlRegex = /^(?:([a-z0-9+.-]+):\/\/)(?:\S+(?::\S*)?@)?(?:(?:[1-9]\d?|1\d\d|2[01]\d|22[0-3])(?:\.(?:1?\d{1,2}|2[0-4]\d|25[0-5])){2}(?:\.(?:[1-9]\d?|1\d\d|2[0-4]\d|25[0-4]))|(?:(?:[a-z\u00a1-\uffff0-9_]-*)*[a-z\u00a1-\uffff0-9_]+)(?:\.(?:[a-z\u00a1-\uffff0-9_]-*)*[a-z\u00a1-\uffff0-9_]+)*\.?)(?::\d{2,5})?(?:[/?#]\S*)?$/;
 const webhookValidator = utils$1.yup.object({
   name: utils$1.yup.string().required(),
-  url: utils$1.yup.string().matches(urlRegex, "url must be a valid URL").required(),
+  url: utils$1.yup.string().matches(urlRegex, "url must be a valid URL").required().test(
+    "is-public-url",
+    "Url is not supported because it isn't reachable over the public internet",
+    async (url) => {
+      if (process.env.NODE_ENV !== "production") {
+        return true;
+      }
+      try {
+        const parsedUrl = new URL(punycode__default.default.toASCII(url));
+        const isLocalUrl = await isLocalhostIp__default.default(parsedUrl.hostname);
+        return !isLocalUrl;
+      } catch {
+        return false;
+      }
+    }
+  ),
   headers: utils$1.yup.lazy((data) => {
     if (typeof data !== "object") {
       return utils$1.yup.object().required();