Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
org.webedded.cors:cors-proxy
Advanced tools
Servlet to proxy access where normally is need of CORS where has issues about legacy browser without full implementation, like control of session.
Servlet to proxy requests involving Cross-Origin Resource Sharing (CORS) due to cross-domain problem. Some browsers do not implemented completely the CORS creating a problem of access to resources, events that require sending cookies to identification of the session. This servlet will make a proxy for the true service.
The installation consist in export the authentication key target address certificate, configure your access data in the servlet configuration property, add the jar to the classpath and configure it in the application web.xml.
####Classpath Simply put the jar in classpath of your web application or use maven:
<dependency>
<groupId>org.webedded.cors</groupId>
<artifactId>cors-proxy</artifactId>
<version>1.0.4</version>
</dependency>
Now in central maven starting with version 1.0.4, see tags for old releases.
####Generate KeyStore/TrustStore Server certificates signed with well known public Certificate Authority dont need this config.
TODO Document how
####Config Properties You can configure in three ways:
The keys to configure:
ssl
to debug the ssl connection interactionsserver.cont1=https://sample.com/programX
server.cont2=https://sample2.org/programY
content-type
of request header in the response header. This configuration need pair config by setting the resource.to. In this first you need to declare the url with the /<mapped_origin_context>/<second_part_original_url>
.file://
.resource.from.cont1-index=/cont1/index.html
resource.to.cont1-index=file:///path/to/file.html
####Config Web.xml
<servlet>
<servlet-name>pxcors</servlet-name>
<servlet-class>org.webedded.cors.CorsProxyServlet</servlet-class>
<init-param>
<param-name>org.webedded.cors.conf_path</param-name>
<param-value>${jboss.server.home.dir}/conf/cors-proxy-conf.properties</param-value>
</init-param>
</servlet>
<servlet-mapping>
<servlet-name>pxcors</servlet-name>
<url-pattern>/pxcors/*</url-pattern>
</servlet-mapping>
Just use as follows in links/requests:
http://localhost/context/<mapped_origin_context>/<second_part_original_url>
Sample:
http://localhost/appExemplo/cont1/#/sample/doSomething
http://localhost/appExemplo/cont2/page.do?dispatchMethod=ACTION_SOMETHING
FAQs
Servlet to proxy access where normally is need of CORS where has issues about legacy browser without full implementation, like control of session.
We found that org.webedded.cors:cors-proxy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.