Function isSessionEndpoint

packages/server/src/utils/XSS.ts:54–57

(url: string)

]

function isSessionEndpoint(url: string): boolean {
    const path = url.split('?')[0].toLowerCase()
    return SESSION_ENDPOINTS.some((ep) => path === ep || path.startsWith(ep + '/'))
}

function parseAllowedOrigins(allowedOrigins: string): string[] {
    if (!allowedOrigins) {