Function fetchCrossOriginCSS

server/services/sourceExtractor.ts:39–74

(urls: string[])

 * Fetch cross-origin stylesheets that the browser couldn't read due to CORS.
 */
export async function fetchCrossOriginCSS(urls: string[]): Promise<string[]> {
  const results: string[] = [];
  const uniqueUrls = [...new Set(urls)];

  for (const url of uniqueUrls) {
    try {
      const safety = await validateUrlSafety(url);
      if (!safety.valid) continue;

      const controller = new AbortController();
      const timeout = setTimeout(() => controller.abort(), 5000);

      const res = await fetch(url, {
        signal: controller.signal,
        redirect: 'manual',
        headers: {
          'User-Agent': 'Mozilla/5.0 (compatible; DesignClaw/1.0)',
        },
      });

      clearTimeout(timeout);

      if (res.ok) {
        const contentType = res.headers.get('content-type')?.toLowerCase() || '';
        if (contentType && !contentType.includes('text/css')) continue;

        const text = await res.text();
        results.push(text);
      }
    } catch {
      // Skip unreachable sheets
    }
  }

  return results;
}