Function validateAllowedHosts

packages/platform-server/src/utils.ts:382–398

(url: string | undefined, allowedHosts: string[] | undefined)

}

function validateAllowedHosts(url: string | undefined, allowedHosts: string[] | undefined) {
  if (typeof url === 'string') {
    const parsedUrl = resolveUrl(url);
    if (parsedUrl !== null) {
      const hostname = parsedUrl.hostname;
      const allowedHostsSet: ReadonlySet<string> = new Set(allowedHosts);
      if (!isHostAllowed(hostname, allowedHostsSet)) {
        throw new RuntimeError(
          RuntimeErrorCode.HOST_NOT_ALLOWED,
          typeof ngDevMode === 'undefined' || ngDevMode
            ? `Host ${url} is not allowed. You can configure \`allowedHosts\` option.`
            : url,
        );
      }
    }
  }
}

/**
 * Checks if the hostname is allowed.