node native https gz promise with gzbomb protection

https-get-gzbomb-safe.js

const https = require('https');
const zlib = require('zlib');
return new Promise((resolve, reject) => {
  const options = {
    hostname: 'fullstory.com',
    port: 443,
    path: '/s/fs.js',
    method: 'GET'
  };
  const req = https.request(options, async (res) => {
    const maxbuffer = 41943040; //5mb
    let totalLength = 0;
    let buffer = [];
    const unzip = zlib.createGunzip();
    res.pipe(unzip);
    try {
      for await (const chunk of unzip) {
        totalLength += chunk.length;
        if (totalLength > maxbuffer)
          throw 'max buffer size reached';
        buffer.push(chunk);
      }
    } catch(e) { reject(e); }
    resolve(buffer);
  });
  req.on('error', (e) => {
    console.error(e);
    reject(e);
  });
  req.end();
});