Function rejectUpgradeIfNotLoopback

packages/cli/src/commands/ui-proxy.ts:76–92

(req: IncomingMessage, clientSocket: Duplex)

const DEFAULT_REQUEST_TIMEOUT_MS = 30_000;

export function rejectUpgradeIfNotLoopback(req: IncomingMessage, clientSocket: Duplex): boolean {
  const peerAddress = req.socket?.remoteAddress;
  if (peerAddress !== undefined && !isLoopbackAddress(peerAddress)) {
    clientSocket.destroy();
    return true;
  }
  if (!isAllowedWorkspaceHostHeader(req.headers.host)) {
    clientSocket.destroy();
    return true;
  }
  const origin = req.headers.origin;
  if (typeof origin === 'string' && !isAllowedApiOrigin(origin)) {
    clientSocket.destroy();
    return true;
  }
  return false;
}

export function proxyUpgrade(
  req: IncomingMessage,