8f80d7761c
* Bump tough-cookie and @azure/ms-rest-js Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) and [@azure/ms-rest-js](https://github.com/Azure/ms-rest-js). These dependencies needed to be updated together. Updates `tough-cookie` from 4.0.0 to 4.1.3 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](https://github.com/salesforce/tough-cookie/compare/v4.0.0...v4.1.3) Updates `@azure/ms-rest-js` from 2.6.2 to 2.7.0 - [Changelog](https://github.com/Azure/ms-rest-js/blob/master/Changelog.md) - [Commits](https://github.com/Azure/ms-rest-js/commits) --- updated-dependencies: - dependency-name: tough-cookie dependency-type: indirect - dependency-name: "@azure/ms-rest-js" dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Update checked-in dependencies --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
73 lines
3 KiB
JavaScript
73 lines
3 KiB
JavaScript
/*!
|
|
* Copyright (c) 2018, Salesforce.com, Inc.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright notice,
|
|
* this list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright notice,
|
|
* this list of conditions and the following disclaimer in the documentation
|
|
* and/or other materials provided with the distribution.
|
|
*
|
|
* 3. Neither the name of Salesforce.com nor the names of its contributors may
|
|
* be used to endorse or promote products derived from this software without
|
|
* specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
|
|
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
|
* POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
"use strict";
|
|
const psl = require("psl");
|
|
|
|
// RFC 6761
|
|
const SPECIAL_USE_DOMAINS = [
|
|
"local",
|
|
"example",
|
|
"invalid",
|
|
"localhost",
|
|
"test"
|
|
];
|
|
|
|
const SPECIAL_TREATMENT_DOMAINS = ["localhost", "invalid"];
|
|
|
|
function getPublicSuffix(domain, options = {}) {
|
|
const domainParts = domain.split(".");
|
|
const topLevelDomain = domainParts[domainParts.length - 1];
|
|
const allowSpecialUseDomain = !!options.allowSpecialUseDomain;
|
|
const ignoreError = !!options.ignoreError;
|
|
|
|
if (allowSpecialUseDomain && SPECIAL_USE_DOMAINS.includes(topLevelDomain)) {
|
|
if (domainParts.length > 1) {
|
|
const secondLevelDomain = domainParts[domainParts.length - 2];
|
|
// In aforementioned example, the eTLD/pubSuf will be apple.localhost
|
|
return `${secondLevelDomain}.${topLevelDomain}`;
|
|
} else if (SPECIAL_TREATMENT_DOMAINS.includes(topLevelDomain)) {
|
|
// For a single word special use domain, e.g. 'localhost' or 'invalid', per RFC 6761,
|
|
// "Application software MAY recognize {localhost/invalid} names as special, or
|
|
// MAY pass them to name resolution APIs as they would for other domain names."
|
|
return `${topLevelDomain}`;
|
|
}
|
|
}
|
|
|
|
if (!ignoreError && SPECIAL_USE_DOMAINS.includes(topLevelDomain)) {
|
|
throw new Error(
|
|
`Cookie has domain set to the public suffix "${topLevelDomain}" which is a special use domain. To allow this, configure your CookieJar with {allowSpecialUseDomain:true, rejectPublicSuffixes: false}.`
|
|
);
|
|
}
|
|
|
|
return psl.get(domain);
|
|
}
|
|
|
|
exports.getPublicSuffix = getPublicSuffix;
|