Potential fix for code scanning alert no. 28: Incomplete URL substring sanitization (#136)

* Potential fix for code scanning alert no. 28: Incomplete URL substring sanitization

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

* Update packages/uniswap/src/utils/datadog.web.ts

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>

---------

Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

Author: 3 people

packages/uniswap/src/utils/datadog.web.ts

@@ -67,25 +67,34 @@ function beforeSend(event: RumEvent, context: RumEventDomainContext): boolean {
   }
 
   if (event.type === 'resource' && event.resource.url.includes('gateway.uniswap.org')) {
-    const requestHeaders = (context as RumFetchResourceEventDomainContext).requestInit?.headers
-    if (requestHeaders) {
-      const headersRecord =
-        requestHeaders instanceof Headers
-          ? Object.fromEntries(requestHeaders.entries())
-          : Array.isArray(requestHeaders)
-            ? Object.fromEntries(requestHeaders)
-            : requestHeaders
-      const tradingApiHeaderValues = new Set<string>(Object.values(TradingApiHeaders))
-      const featureFlagHeaders: Record<string, string> = {}
-      for (const [key, value] of Object.entries(headersRecord)) {
-        if (tradingApiHeaderValues.has(key)) {
-          featureFlagHeaders[key] = String(value)
+    let isGatewayUniswapRequest = false
+    try {
+      isGatewayUniswapRequest = new URL(event.resource.url).hostname === 'gateway.uniswap.org'
+    } catch {
+      // ignore invalid URLs
+    }
+
+    if (isGatewayUniswapRequest) {
+      const requestHeaders = (context as RumFetchResourceEventDomainContext).requestInit?.headers
+      if (requestHeaders) {
+        const headersRecord =
+          requestHeaders instanceof Headers
+            ? Object.fromEntries(requestHeaders.entries())
+            : Array.isArray(requestHeaders)
+              ? Object.fromEntries(requestHeaders)
+              : requestHeaders
+        const tradingApiHeaderValues = new Set<string>(Object.values(TradingApiHeaders))
+        const featureFlagHeaders: Record<string, string> = {}
+        for (const [key, value] of Object.entries(headersRecord)) {
+          if (tradingApiHeaderValues.has(key)) {
+            featureFlagHeaders[key] = String(value)
+          }
         }
-      }
-      if (Object.keys(featureFlagHeaders).length > 0) {
-        event.context = {
-          ...event.context,
-          tradingApiHeaders: featureFlagHeaders,
+        if (Object.keys(featureFlagHeaders).length > 0) {
+          event.context = {
+            ...event.context,
+            tradingApiHeaders: featureFlagHeaders,
+          }
         }
       }
     }