Function hostnameFromOrigin

apps/local/src/serve-shared.ts:38–45

(origin: string)

};

const hostnameFromOrigin = (origin: string): string | null => {
  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: parsing an untrusted Origin header that may be malformed
  try {
    return new URL(origin).hostname;
  } catch {
    return null;
  }
};

/**
 * Whether a cross-origin request's `Origin` is allowed CORS access. Only the