In domain-task/fetch, only apply HTTPS cert validation workaround for HTTPS requests (not HTTP)

Author: SteveSandersonMS

src/Microsoft.AspNetCore.SpaServices/npm/domain-task/package.json

@@ -1,6 +1,6 @@
 {
 "name": "domain-task",
-"version": "3.0.2",
+"version": "3.0.3",
 "description": "Tracks outstanding operations for a logical thread of execution",
 "main": "index.js",
 "scripts":{

src/Microsoft.AspNetCore.SpaServices/npm/domain-task/src/fetch.ts

@@ -6,6 +6,7 @@ import{baseUrl } from './main'
 constisomorphicFetch=require('isomorphic-fetch');
 constisNode=typeofprocess==='object'&&process.versions&&!!process.versions.node;
 constnodeHttps=isNode&&require('https');
+constisHttpsRegex=/^https\:/;
 
 functionissueRequest(baseUrl: string,req: string|Request,init?: RequestInit): Promise<any>{
 constreqUrl=(reqinstanceofRequest) ? req.url : req;
@@ -30,11 +31,11 @@ function issueRequest(baseUrl: string, req: string | Request, init?: RequestInit
  `);
 }
 
-init=applyHttpsAgentPolicy(init,isRelativeUrl);
+init=applyHttpsAgentPolicy(init,isRelativeUrl,baseUrl);
 returnisomorphicFetch(req,init);
 }
 
-functionapplyHttpsAgentPolicy(init: RequestInit,isRelativeUrl: boolean): RequestInit{
+functionapplyHttpsAgentPolicy(init: RequestInit,isRelativeUrl: boolean,baseUrl: string): RequestInit{
 // HTTPS is awkward in Node because it uses a built-in list of CAs, rather than recognizing
 // the OS's system-level CA list. There are dozens of issues filed against Node about this,
 // but still (as of v8.0.0) no resolution besides manually duplicating your CA config.
@@ -54,12 +55,15 @@ function applyHttpsAgentPolicy(init: RequestInit, isRelativeUrl: boolean): Reque
 // for 'agent' (which would let you set up other HTTPS-handling policies), then we automatically
 // disable cert verification for that request.
 if(isNode&&isRelativeUrl){
-consthasAgentConfig=init&&('agent'ininit);
-if(!hasAgentConfig){
-constagentForRequest=new(nodeHttps.Agent)({rejectUnauthorized: false});
+constisHttps=baseUrl&&isHttpsRegex.test(baseUrl);
+if(isHttps){
+consthasAgentConfig=init&&('agent'ininit);
+if(!hasAgentConfig){
+constagentForRequest=new(nodeHttps.Agent)({rejectUnauthorized: false});
 
-init=init||{};
-(initasany).agent=agentForRequest;
+init=init||{};
+(initasany).agent=agentForRequest;
+}
 }
 }