Function getMirrorUrls

scripts/install.js:108–112

(env)

// Resolve the mirror URL chain and admit each host. Called from install() so
// derived hosts only become trusted when actually needed.
function getMirrorUrls(env) {
  const urls = resolveMirrorUrls(env, archiveName, VERSION);
  for (const u of urls) ALLOWED_HOSTS.add(new URL(u).hostname);
  return urls;
}

/**
 * Decide from a `curl --version` output whether curl is >= 7.70.0 — the