nitropack-nightly 2.11.1-20250305-104627.47febf5c → 2.11.1-20250305-120252.94a73b50

package/dist/core/index.mjs

@@ -40,7 +40,7 @@ import { gzipSize } from 'gzip-size';
 import prettyBytes from 'pretty-bytes';
 import zlib from 'node:zlib';
 import { walk, parse } from 'ultrahtml';
-import { createError, setResponseHeaders, getRequestURL, sendRedirect, setResponseStatus, getResponseHeader, setResponseHeader, send, getRequestHeader, getRequestHeaders, eventHandler, toNodeListener, createApp, fromNodeMiddleware } from 'h3';
+import { createError, setResponseHeaders, getRequestURL, sendRedirect, setResponseStatus, getResponseHeader, setResponseHeader, send, getRequestHeader, getRequestHeaders, eventHandler, getRequestIP, toNodeListener, createApp, fromNodeMiddleware } from 'h3';
 import { Worker } from 'node:worker_threads';
 import { createProxyServer } from 'httpxy';
 import { resolve as resolve$1, dirname as dirname$1 } from 'node:path';
@@ -2436,6 +2436,14 @@ function fmtFrame(frame) {
 
 function createVFSHandler(nitro) {
   return eventHandler(async (event) => {
+    const ip = getRequestIP(event, { xForwardedFor: false });
+    const isLocalRequest = ip && /^::1$|^127\.\d+\.\d+\.\d+$/.test(ip);
+    if (!isLocalRequest) {
+      throw createError({
+        message: `Forbidden IP: "${ip || "?"}"`,
+        statusCode: 403
+      });
+    }
     const vfsEntries = {
       ...nitro.vfs,
       ...nitro.options.virtual

package/dist/meta/index.d.mts

@@ -1,3 +1,3 @@
-const version = "2.11.1-20250305-104627.47febf5c";
+const version = "2.11.1-20250305-120252.94a73b50";
 
 export { version };

package/dist/meta/index.d.ts

@@ -1,3 +1,3 @@
-const version = "2.11.1-20250305-104627.47febf5c";
+const version = "2.11.1-20250305-120252.94a73b50";
 
 export { version };

package/dist/meta/index.mjs

@@ -1,3 +1,3 @@
-const version = "2.11.1-20250305-104627.47febf5c";
+const version = "2.11.1-20250305-120252.94a73b50";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nitropack-nightly",
-  "version": "2.11.1-20250305-104627.47febf5c",
+  "version": "2.11.1-20250305-120252.94a73b50",
   "description": "Build and Deploy Universal JavaScript Servers",
   "repository": "nitrojs/nitro",
   "license": "MIT",