discord-message-transcript 1.3.2 → 1.4.0-dev-next.1.57

package/dist/core/networkSecurity/urlSafety.js

@@ -2,6 +2,8 @@ import { CustomWarn } from "discord-message-transcript-base/internal";
 import { TRUSTED_DISCORD_HOSTS } from "./constants.js";
 import { isPrivateIp } from "./ip.js";
 import { resolveAllIps } from "./dns.js";
+const cache = new Map();
+const CACHELIMIT = 1000 * 5;
 export async function isSafeForHTML(url, options) {
     const { safeMode, disableWarnings } = options;
     if (!safeMode)
@@ -38,6 +40,25 @@ export async function isSafeForHTML(url, options) {
         CustomWarn(`Unsafe URL rejected: Blacklisted host "${host}"\nURL: ${url}`, disableWarnings);
         return { safe: false, safeIps: [], url: url };
     }
+    let checkPromise;
+    const cachedUrl = cache.get(u.origin);
+    if (cachedUrl && Date.now() - cachedUrl.expired < CACHELIMIT) {
+        const safeReturn = await cachedUrl.safeUrlReturn;
+        checkPromise = Promise.resolve({ safe: safeReturn.safe, safeIps: safeReturn.safeIps, url: url });
+    }
+    else {
+        checkPromise = checkList(url, u, host, disableWarnings);
+        cache.set(u.origin, { safeUrlReturn: checkPromise, expired: Date.now() });
+    }
+    const path = u.pathname.toLowerCase();
+    // External SVGs can execute scripts → allow only from Discord CDN
+    if (path.endsWith(".svg")) {
+        CustomWarn(`Unsafe URL rejected: External SVG not from Discord CDN\nURL: ${url}`, disableWarnings);
+        return { safe: false, safeIps: [], url: url };
+    }
+    return await checkPromise;
+}
+async function checkList(url, u, host, disableWarnings) {
     let ips;
     try {
         ips = await resolveAllIps(host);
@@ -55,12 +76,6 @@ export async function isSafeForHTML(url, options) {
         }
         safeIps.push(ip.address);
     }
-    const path = u.pathname.toLowerCase();
-    // External SVGs can execute scripts → allow only from Discord CDN
-    if (path.endsWith(".svg")) {
-        CustomWarn(`Unsafe URL rejected: External SVG not from Discord CDN\nURL: ${url}`, disableWarnings);
-        return { safe: false, safeIps: [], url: url };
-    }
     return { safe: true, safeIps: safeIps, url: url };
 }
 function isTrustedDiscordHost(host) {

package/dist/types/private/network.d.ts

@@ -10,3 +10,7 @@ export interface safeUrlReturn {
     safeIps: string[];
     url: string;
 }
+export interface cacheSafeUrlReturn {
+    safeUrlReturn: Promise<safeUrlReturn>;
+    expired: number;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "discord-message-transcript",
-  "version": "1.3.2",
+  "version": "1.4.0-dev-next.1.57",
   "description": "",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -45,7 +45,7 @@
   },
   "homepage": "https://github.com/HenriqueMairesse/discord-message-transcript#readme",
   "dependencies": {
-    "discord-message-transcript-base": "1.3.2"
+    "discord-message-transcript-base": "1.4.0-dev-next.1.57"
   },
   "peerDependencies": {
     "discord.js": ">=14.19.0 <15"