@evo/fetch-io - npm Package Compare versions

Comparing version 2.1.2 to 2.1.4

dist/utils.js

@@ -232,8 +232,15 @@ 'use strict';
                             options = applyOpts(getDefaultOptions(method), opts);
-                            _context2.next = 6;
+
+                            if (CSRF_TOKEN_HEADER in options.headers) {
+                                _context2.next = 8;
+                                break;
+                            }
+
+                            _context2.next = 7;
                             return (0, _userInfo.getMyCSRF)();
 
-                        case 6:
+                        case 7:
                             options.headers[CSRF_TOKEN_HEADER] = _context2.sent;
 
+                        case 8:
                             options.headers[PROMUSER_HEADER] = user.id;
@@ -243,3 +250,3 @@ options.body = formatBody(params, opts);
 
-                        case 10:
+                        case 11:
                         case 'end':
@@ -246,0 +253,0 @@ return _context2.stop();

package.json

 {
   "name": "@evo/fetch-io",
-  "version": "2.1.2",
+  "version": "2.1.4",
   "description": "",
@@ -5,0 +5,0 @@ "repository": {

src/utils.js

@@ -150,3 +150,5 @@ import { isAbsolute } from '@evo/prom-utils/lib/url';
         const options = applyOpts(getDefaultOptions(method), opts);
-        options.headers[CSRF_TOKEN_HEADER] = await getMyCSRF();
+        if (!(CSRF_TOKEN_HEADER in options.headers)) {
+            options.headers[CSRF_TOKEN_HEADER] = await getMyCSRF();
+        }
         options.headers[PROMUSER_HEADER] = user.id;
@@ -153,0 +155,0 @@ options.body = formatBody(params, opts);

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

73679

0.4%

Lines of code

1652

0.43%

No dependency changes