allow localhost

Author: arcoraven

src/server/utils/validator.ts

@@ -93,7 +93,12 @@ export const checkAndReturnNFTSignaturePayload = <
 export const isValidWebhookUrl = (input: string): boolean => {
   try {
     const url = new URL(input);
-    return url.protocol === "https:";
+    return (
+      url.protocol === "https:" ||
+      // Allow http for localhost only.
+      (url.protocol === "http:" &&
+        ["localhost", "0.0.0.0", "127.0.0.1"].includes(url.hostname))
+    );
   } catch {
     return false;
   }

src/tests/validator.test.ts

@@ -25,4 +25,10 @@ describe("isValidWebhookUrl", () => {
   it("should return false for an empty string", () => {
     expect(isValidWebhookUrl("")).toBe(false);
   });
+
+  it("should return true for a http localhost", () => {
+    expect(isValidWebhookUrl("http://localhost:3000")).toBe(true);
+    expect(isValidWebhookUrl("http://0.0.0.0:3000")).toBe(true);
+    expect(isValidWebhookUrl("http://user:[email protected]:3000")).toBe(true);
+  });
 });