"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); const FORBIDDEN_HEADER_NAMES = [ 'accept-charset', 'accept-encoding', 'access-control-request-headers', 'access-control-request-method', 'connection', 'content-length', 'cookie', 'cookie2', 'date', 'dnt', 'expect', 'host', 'keep-alive', 'origin', 'referer', 'te', 'trailer', 'transfer-encoding', 'upgrade', 'via' ]; /** * Fetch request header utility. */ class FetchRequestHeaderUtility { /** * Validates request headers. * * @param headers Headers. */ static removeForbiddenHeaders(headers) { for (const key of Object.keys(headers._entries)) { if (FORBIDDEN_HEADER_NAMES.includes(key) || key.startsWith('proxy-') || key.startsWith('sec-')) { delete headers._entries[key]; } } } } exports.default = FetchRequestHeaderUtility; //# sourceMappingURL=FetchRequestHeaderUtility.cjs.map