Function isSafeOriginChange

packages/platform-server/src/url.ts:146–163

* Checks if the origin has changed in a safe way. * * @param resolved The resolved URL. * @param origin The origin URL. * @param urlStr The URL string. * @param allowOriginChange Whether to allow origin changes. * @returns True if the origin has changed in a safe way, false otherwise.

(
  resolved: URL,
  origin: URL,
  urlStr: string,
  allowOriginChange: boolean,
)

 * @returns True if the origin has changed in a safe way, false otherwise.
 */
function isSafeOriginChange(
  resolved: URL,
  origin: URL,
  urlStr: string,
  allowOriginChange: boolean,
): boolean {
  if (origin.origin === resolved.origin) {
    return true;
  }

  if (!allowOriginChange) {
    return false;
  }

  return (
    HTTP_OR_HTTPS_PROTOCOL_REGEXP.test(urlStr) && !HTTP_OR_HTTPS_NO_AUTHORITY_REGEXP.test(urlStr)
  );
}