Function fetchImage

apps/api/src/controllers/misc.controller.ts:70–117

(
  url: URL,
)

// Fetch image with timeout and size limits
async function fetchImage(
  url: URL,
): Promise<{ buffer: Buffer; contentType: string; status: number }> {
  const controller = new AbortController();
  const timeout = setTimeout(() => controller.abort(), 1000); // 10s timeout

  try {
    const response = await fetch(url.toString(), {
      redirect: 'follow',
      signal: controller.signal,
      headers: {
        'user-agent': USER_AGENT,
        accept: 'image/*,*/*;q=0.8',
      },
    });

    clearTimeout(timeout);

    if (!response.ok) {
      return {
        buffer: Buffer.alloc(0),
        contentType: 'text/plain',
        status: response.status,
      };
    }

    // Size guard
    const contentLength = Number(response.headers.get('content-length') ?? '0');
    if (contentLength > MAX_BYTES) {
      throw new Error(`Remote file too large: ${contentLength} bytes`);
    }

    const arrayBuffer = await response.arrayBuffer();
    const buffer = Buffer.from(arrayBuffer);

    // Additional size check for actual content
    if (buffer.length > MAX_BYTES) {
      throw new Error('Remote file exceeded size limit');
    }

    const contentType =
      response.headers.get('content-type') || 'application/octet-stream';
    return { buffer, contentType, status: 200 };
  } catch (error) {
    clearTimeout(timeout);
    return { buffer: Buffer.alloc(0), contentType: 'text/plain', status: 500 };
  }
}

// Check if URL is an ICO file
function isIcoFile(url: string, contentType?: string): boolean {