We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 2dcc677 commit 63d5c86Copy full SHA for 63d5c86
src/runtime/server/util/eventHandlers.ts
@@ -24,8 +24,12 @@ export async function imageEventHandler(e: H3Event) {
24
if (!import.meta.prerender && !import.meta.dev && security?.restrictRuntimeImagesToOrigin) {
25
const siteHost = new URL(getSiteConfig(e).url).host
26
const allowedHosts = [siteHost, ...security.restrictRuntimeImagesToOrigin.map((o) => {
27
- try { return new URL(o).host }
28
- catch { return o }
+ try {
+ return new URL(o).host
29
+ }
30
+ catch {
31
+ return o
32
33
})]
34
const requestHost = getRequestHost(e, { xForwardedHost: true })
35
if (!requestHost || !allowedHosts.includes(requestHost)) {
0 commit comments