
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@eggjs/jsonp
Advanced tools
An egg plugin for jsonp support.
egg built-in plugin jsonp is enabled by default.
// {app_root}/config/plugin.ts
export default {
jsonp: {
enable: true,
},
};
[ '_callback', 'callback' ]50if whiteList's type is RegExp, referrer must match whiteList, pay attention to the first ^ and last /.
export default {
jsonp: {
whiteList: /^https?:\/\/test.com\//,
},
};
// matchs referrer:
// https://test.com/hello
// http://test.com/
if whiteList's type is String and starts with .:
export default {
jsonp: {
whiteList: '.test.com',
},
};
// matchs domain test.com:
// https://test.com/hello
// http://test.com/
// matchs subdomain
// https://sub.test.com/hello
// http://sub.sub.test.com/
if whiteList's type is String and not starts with .:
export default {
jsonp: {
whiteList: 'sub.test.com',
},
};
// only matchs domain sub.test.com:
// https://sub.test.com/hello
// http://sub.test.com/
whiteList also can be an array:
export default {
jsonp: {
whiteList: ['.foo.com', '.bar.com'],
},
};
see config/config.default.ts for more detail.
In app/router.ts
// Create once and use in any router you want to support jsonp.
const jsonp = app.jsonp();
app.get('/default', jsonp, 'jsonp.index');
app.get('/another', jsonp, 'jsonp.another');
// Customize by create another jsonp middleware with specific configurations.
app.get('/customize', app.jsonp({ callback: 'fn' }), 'jsonp.customize');
TODO: TBD
Please open an issue here.
Made with contributors-img.
FAQs
jsonp support for egg
The npm package @eggjs/jsonp receives a total of 657 weekly downloads. As such, @eggjs/jsonp popularity was classified as not popular.
We found that @eggjs/jsonp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.