18 lines
739 B
TypeScript
18 lines
739 B
TypeScript
/**
|
|
* A fetch implementation that routes asset requests through the same-origin
|
|
* /api/proxy-media endpoint, bypassing cross-origin CORS restrictions that block
|
|
* direct browser fetches to CDNs like cdn.tailwindcss.com or CORS-locked image hosts.
|
|
* The proxy validates the URL server-side (SSRF guard) and returns the bytes.
|
|
*/
|
|
export function createProxiedFetch(): typeof fetch {
|
|
return (async (input: RequestInfo | URL) => {
|
|
const url =
|
|
typeof input === 'string' ? input : input instanceof URL ? input.href : String(input);
|
|
return fetch('/api/proxy-media', {
|
|
method: 'POST',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
body: JSON.stringify({ url }),
|
|
});
|
|
}) as unknown as typeof fetch;
|
|
}
|