ipx 0.9.7 → 0.9.8

package/dist/chunks/middleware.cjs

@@ -120,18 +120,18 @@ function isValidPath(fp) {
 const createHTTPSource = (options) => {
   const httpsAgent = new https__default.Agent({ keepAlive: true });
   const httpAgent = new http__default.Agent({ keepAlive: true });
-  let domains = options.domains || [];
-  if (typeof domains === "string") {
-    domains = domains.split(",").map((s) => s.trim());
+  let _domains = options.domains || [];
+  if (typeof _domains === "string") {
+    _domains = _domains.split(",").map((s) => s.trim());
   }
-  const hosts = domains.map((domain) => ufo.parseURL(domain, "https://").host);
+  const domains = _domains.map((d) => new URL(d).hostname || new URL("http://" + d).hostname).filter(Boolean);
   return async (id, reqOptions) => {
-    const url = new URL(id);
-    if (!url.hostname) {
+    const hostname = new URL(id).hostname;
+    if (!hostname) {
       throw createError("Hostname is missing", 403, id);
     }
-    if (!reqOptions?.bypassDomain && !hosts.find((host) => url.hostname === host)) {
-      throw createError("Forbidden host", 403, url.hostname);
+    if (!reqOptions?.bypassDomain && !domains.find((domain) => hostname === domain)) {
+      throw createError("Forbidden host", 403, hostname);
     }
     const response = await ohmyfetch.fetch(id, {
       agent: id.startsWith("https") ? httpsAgent : httpAgent,

package/dist/chunks/middleware.mjs

@@ -1,6 +1,6 @@
 import defu from 'defu';
 import { imageMeta } from 'image-meta';
-import { parseURL, withLeadingSlash, hasProtocol, joinURL, decode } from 'ufo';
+import { withLeadingSlash, hasProtocol, joinURL, decode } from 'ufo';
 import { promises } from 'fs';
 import { resolve, join, parse } from 'pathe';
 import http from 'http';
@@ -109,18 +109,18 @@ function isValidPath(fp) {
 const createHTTPSource = (options) => {
   const httpsAgent = new https.Agent({ keepAlive: true });
   const httpAgent = new http.Agent({ keepAlive: true });
-  let domains = options.domains || [];
-  if (typeof domains === "string") {
-    domains = domains.split(",").map((s) => s.trim());
+  let _domains = options.domains || [];
+  if (typeof _domains === "string") {
+    _domains = _domains.split(",").map((s) => s.trim());
   }
-  const hosts = domains.map((domain) => parseURL(domain, "https://").host);
+  const domains = _domains.map((d) => new URL(d).hostname || new URL("http://" + d).hostname).filter(Boolean);
   return async (id, reqOptions) => {
-    const url = new URL(id);
-    if (!url.hostname) {
+    const hostname = new URL(id).hostname;
+    if (!hostname) {
       throw createError("Hostname is missing", 403, id);
     }
-    if (!reqOptions?.bypassDomain && !hosts.find((host) => url.hostname === host)) {
-      throw createError("Forbidden host", 403, url.hostname);
+    if (!reqOptions?.bypassDomain && !domains.find((domain) => hostname === domain)) {
+      throw createError("Forbidden host", 403, hostname);
     }
     const response = await fetch(id, {
       agent: id.startsWith("https") ? httpsAgent : httpAgent,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ipx",
-  "version": "0.9.7",
+  "version": "0.9.8",
   "repository": "unjs/ipx",
   "license": "MIT",
   "exports": {