Function validateThemeOrigin

packages/base/src/validateThemeRoot.ts:10–27

(origin: string, isSameOrigin: boolean = false)

};

const validateThemeOrigin = (origin: string, isSameOrigin: boolean = false) => {
	const allowedOrigins = getMetaTagValue("sap-allowed-theme-origins") ?? getMetaTagValue("sap-allowedThemeOrigins"); // Prioritize the new meta tag name

	// If no allowed origins are specified, block.
	if (!allowedOrigins) {
		return false;
	}

	// If it's same-origin (relative URL resolved to current page), allow it when there's any meta tag present
	// The presence of the meta tag indicates the user wants to use theme roots
	if (isSameOrigin) {
		return true;
	}

	return allowedOrigins.split(",").some(allowedOrigin => {
		return allowedOrigin === "*" || origin === allowedOrigin.trim();
	});
};

const validateThemeRoot = (themeRoot: string) => {
	let resultUrl;