pawkey-sk/packages/backend/src/misc/verify-field-link.ts

/*
* SPDX-FileCopyrightText: piuvas and other Sharkey contributors
* SPDX-License-Identifier: AGPL-3.0-only
*/

import { load as cheerio } from 'cheerio/slim';
import type { HttpRequestService } from '@/core/HttpRequestService.js';

type Field = { name: string, value: string };

export async function verifyFieldLinks(fields: Field[], profile_url: string, httpRequestService: HttpRequestService): Promise<string[]> {
	const verified_links = [];
	for (const field_url of fields) {
		try {
			// getHtml validates the input URL, so we can safely pass in untrusted values
			const html = await httpRequestService.getHtml(field_url.value);

			const doc = cheerio(html);

			const links = doc('a[rel~="me"][href], link[rel~="me"][href]').toArray();

			const includesProfileLinks = links.some(link => link.attribs.href === profile_url);
			if (includesProfileLinks) {
				verified_links.push(field_url.value);
			}
		} catch {
			// don't do anything.
		}
	}

	return verified_links;
}