Function safeBrowsing

api/threats.js:7–32

(url)

import { requireEnv, upstreamError } from './_common/upstream.js';

const safeBrowsing = async (url) => {
  const auth = requireEnv('GOOGLE_CLOUD_API_KEY', 'Google Safe Browsing');
  if (auth.skipped) return auth;
  try {
    const res = await httpPost(
      `https://safebrowsing.googleapis.com/v4/threatMatches:find?key=${auth.value}`,
      {
        threatInfo: {
          threatTypes: [
            'MALWARE',
            'SOCIAL_ENGINEERING',
            'UNWANTED_SOFTWARE',
            'POTENTIALLY_HARMFUL_APPLICATION',
            'API_ABUSE',
          ],
          platformTypes: ['ANY_PLATFORM'],
          threatEntryTypes: ['URL'],
          threatEntries: [{ url }],
        },
      },
    );
    return res.data?.matches ? { unsafe: true, details: res.data.matches } : { unsafe: false };
  } catch (error) {
    return upstreamError(error, 'Google Safe Browsing');
  }
};

const urlHaus = async (url) => {
  const { hostname } = parseTarget(url);