Function fetchWithTimeout

server/src/services/brand-logo-service.ts:59–67

(method: 'HEAD' | 'GET')

  const FETCH_TIMEOUT_MS = 5000;

  async function fetchWithTimeout(method: 'HEAD' | 'GET'): Promise<Response> {
    const controller = new AbortController();
    const timer = setTimeout(() => controller.abort(new Error('Logo URL check timed out')), FETCH_TIMEOUT_MS);
    try {
      return await safeFetch(rawUrl, { method, maxRedirects: 3, signal: controller.signal });
    } finally {
      clearTimeout(timer);
    }
  }

  // Cancel response bodies we never read so a malicious slow-body server
  // can't tie up a connection for the full timeout window.