feat: Do not proxy urls with loopback

Author: lopezjurip

__tests__/index.test.ts

@@ -13,7 +13,7 @@ describe("proxy", () => {
     const proxied = proxy("/image.png");
     expect(proxied).toEqual("/image.png");
   });
-  test.each(["localhost", "LOCALhost", "0.0.0.0", "127.0.0.1", "0:0:0:0:0:0:0:1"])(
+  test.each(["localhost", "LOCALhost", "0.0.0.0", "127.0.0.1", "0:0:0:0:0:0:0:1", "http://localhost:3000/image.png"])(
     "doesn't wrap loopback addresses: %s",
     (loopback) => {
       const proxied = proxy(loopback);

src/index.ts

@@ -32,11 +32,6 @@ export const LOOPBACK_REGEX = new RegExp("^localhost$|^127(?:.[0-9]+){0,2}.[0-9]
 export function proxy(src: string): string {
   if (!src) return src;
   try {
-    const isLoopback = LOOPBACK_REGEX.test(src);
-    if (isLoopback) {
-      return src;
-    }
-
     const isAbsolute = EXTERNAL_URL_REGEX.test(src);
     if (isAbsolute) {
       // Ensure protocol
@@ -45,6 +40,11 @@ export function proxy(src: string): string {
 
     const url = new URL(src);
 
+    const isLoopback = LOOPBACK_REGEX.test(url.hostname);
+    if (isLoopback) {
+      return src;
+    }
+
     const isFlyyer = url.hostname === "cdn.flyyer.io";
 
     // TODO: add list of CORS enabled services so proxy is not necessary.