@nohost/server - npm Package Compare versions

Comparing version 1.5.14 to 1.5.15

public/admin.ee8177858936e5e13d43a8c396269dce.js.LICENSE.txt

+/*
+object-assign
+(c) Sindre Sorhus
+@license MIT
+*/
+
+/*!
+  * Sizzle CSS Selector Engine v2.3.3
+  * https://sizzlejs.com/
+  *
+  * Copyright jQuery Foundation and other contributors
+  * Released under the MIT license
+  * http://jquery.org/license
+  *
+  * Date: 2016-08-08
+  */
+
+/*!
+  Copyright (c) 2017 Jed Watson.
+  Licensed under the MIT License (MIT), see
+  http://jedwatson.github.io/classnames
+*/
+
+/*!
+ * jQuery JavaScript Library v3.3.1
+ * https://jquery.com/
+ *
+ * Includes Sizzle.js
+ * https://sizzlejs.com/
+ *
+ * Copyright JS Foundation and other contributors
+ * Released under the MIT license
+ * https://jquery.org/license
+ *
+ * Date: 2018-01-20T17:24Z
+ */
+
+/** @license React v0.19.1
+ * scheduler.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+/** @license React v16.13.1
+ * react-is.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+/** @license React v16.14.0
+ * react-dom.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+/** @license React v16.14.0
+ * react.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+//! moment.js
+
+//! moment.js locale configuration

public/capture.c8d...636cf4f39f57607f23201456.js.LICENSE.txt

+/*
+object-assign
+(c) Sindre Sorhus
+@license MIT
+*/
+
+/*!
+  * Sizzle CSS Selector Engine v2.3.3
+  * https://sizzlejs.com/
+  *
+  * Copyright jQuery Foundation and other contributors
+  * Released under the MIT license
+  * http://jquery.org/license
+  *
+  * Date: 2016-08-08
+  */
+
+/*!
+  Copyright (c) 2017 Jed Watson.
+  Licensed under the MIT License (MIT), see
+  http://jedwatson.github.io/classnames
+*/
+
+/*!
+ * clipboard.js v2.0.10
+ * https://clipboardjs.com/
+ *
+ * Licensed MIT © Zeno Rocha
+ */
+
+/*!
+ * jQuery JavaScript Library v3.3.1
+ * https://jquery.com/
+ *
+ * Includes Sizzle.js
+ * https://sizzlejs.com/
+ *
+ * Copyright JS Foundation and other contributors
+ * Released under the MIT license
+ * https://jquery.org/license
+ *
+ * Date: 2018-01-20T17:24Z
+ */
+
+/** @license React v0.19.1
+ * scheduler.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+/** @license React v16.13.1
+ * react-is.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+/** @license React v16.14.0
+ * react-dom.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+/** @license React v16.14.0
+ * react.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+//! moment.js
+
+//! moment.js locale configuration

public/network.6d1...cdf956f646a9fbe521230133.js.LICENSE.txt

+/*
+object-assign
+(c) Sindre Sorhus
+@license MIT
+*/
+
+/*!
+  * Sizzle CSS Selector Engine v2.3.3
+  * https://sizzlejs.com/
+  *
+  * Copyright jQuery Foundation and other contributors
+  * Released under the MIT license
+  * http://jquery.org/license
+  *
+  * Date: 2016-08-08
+  */
+
+/*!
+  Copyright (c) 2017 Jed Watson.
+  Licensed under the MIT License (MIT), see
+  http://jedwatson.github.io/classnames
+*/
+
+/*!
+ * jQuery JavaScript Library v3.3.1
+ * https://jquery.com/
+ *
+ * Includes Sizzle.js
+ * https://sizzlejs.com/
+ *
+ * Copyright JS Foundation and other contributors
+ * Released under the MIT license
+ * https://jquery.org/license
+ *
+ * Date: 2018-01-20T17:24Z
+ */
+
+/** @license React v0.19.1
+ * scheduler.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+/** @license React v16.13.1
+ * react-is.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+/** @license React v16.14.0
+ * react-dom.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+/** @license React v16.14.0
+ * react.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+//! moment.js
+
+//! moment.js locale configuration

public/select.8583...336665953f262028de34e2bd.js.LICENSE.txt

+/*!
+  * Sizzle CSS Selector Engine v2.3.3
+  * https://sizzlejs.com/
+  *
+  * Copyright jQuery Foundation and other contributors
+  * Released under the MIT license
+  * http://jquery.org/license
+  *
+  * Date: 2016-08-08
+  */
+
+/*!
+ * jQuery JavaScript Library v3.3.1
+ * https://jquery.com/
+ *
+ * Includes Sizzle.js
+ * https://sizzlejs.com/
+ *
+ * Copyright JS Foundation and other contributors
+ * Released under the MIT license
+ * https://jquery.org/license
+ *
+ * Date: 2018-01-20T17:24Z
+ */

lib/main/router.js

@@ -42,4 +42,4 @@ const bodyParser = require('koa-bodyparser');
   router.get('/status', status);
-  router.all('/cgi-bin/**', getPassHandler('/cgi-bin/'));
-  router.all('/network/**', getPassHandler('/network/'));
+  router.all('/cgi-bin/(.*)', getPassHandler('/cgi-bin/'));
+  router.all('/network/(.*)', getPassHandler('/network/'));
   router.all(/^\/account\/\$(\d+)\//, async (ctx) => {
@@ -50,3 +50,3 @@ const index = ctx.params[0];
   });
-  router.all('/account/**', getPassHandler('/account/'));
+  router.all('/account/(.*)', getPassHandler('/account/'));
   router.all('/user/:name', (ctx) => {
@@ -56,3 +56,3 @@ const name = ctx.params.name.replace(/\..*$/, '');
   });
-  router.all('/open-api/**', getPassHandler('/open-api/'));
+  router.all('/open-api/(.*)', getPassHandler('/open-api/'));
   router.all('/follow', getPassHandler('/follow'));
@@ -62,3 +62,3 @@ router.all('/unfollow', getPassHandler('/unfollow'));
 
-  router.all('/p/:name/**', async (ctx) => {
+  router.all('/p/:name/(.*)', async (ctx) => {
     let { name } = ctx.params;
@@ -73,8 +73,8 @@ const segPath = `/p/${name}`;
   });
-  router.all('/whistle/**', passDirect);
-  router.all('/whistle.**', passDirect);
-  router.all('/plugin.**', passDirect);
+  router.all('/whistle/(.*)', passDirect);
+  router.all('/whistle.(.*)', passDirect);
+  router.all('/plugin.(.*)', passDirect);
   router.get('/get-version', getVersion);
   router.all('/admin.html', login);
-  router.all('/main/cgi-bin/**', login, bodyParser({ formLimit: '1mb' }));
+  router.all('/main/cgi-bin/(.*)', login, bodyParser({ formLimit: '1mb' }));
   router.post('/main/cgi-bin/restart', restart);
@@ -81,0 +81,0 @@ router.get('/main/cgi-bin/get-settings', getSettings);

lib/plugins/whistle.nohost/_rules.txt

@@ -13,5 +13,14 @@
     var script = document.createElement('script');
+    var prefixPath = window.__WHISTLE_PATH_PREFIX__;
+    if (/^\/[\w./-]+$/.test(prefixPath) && prefixPath.length <= 128) {
+      var len = prefixPath.length - 1;
+      if (prefixPath[len] === '/') {
+        prefixPath = prefixPath.substring(0, len);
+      }
+    } else {
+      prefixPath = '';
+    }
     script.defer = true;
     script.charset = 'utf8';
-    script.src = '/.whistle-path.5b6af7b9884e1165/whistle.nohost/button.js';
+    script.src = prefixPath + '/.whistle-path.5b6af7b9884e1165/whistle.nohost/button.js';
     if (head.firstChild) {
@@ -18,0 +27,0 @@ head.insertBefore(script, head.firstChild);

lib/plugins/whistle.nohost/lib/uiServer/router.js

@@ -44,4 +44,4 @@ const bodyParser = require('koa-bodyparser');
   router.get('/admin.html', checkAdminLogin);
-  router.all('/cgi-bin/admin/**', checkAdminLogin);
-  router.all('/cgi-bin/**', defaultBodyParser);
+  router.all('/cgi-bin/admin/(.*)', checkAdminLogin);
+  router.all('/cgi-bin/(.*)', defaultBodyParser);
   router.get('/open-api/select', defaultBodyParser, selectEnv);
@@ -58,3 +58,3 @@ router.get('/open-api/cur-env', defaultBodyParser, getEnv);
   router.get('/cgi-bin/plugin-rules', getPluginRules);
-  router.all('/network/**', proxyNetwork);
+  router.all('/network/(.*)', proxyNetwork);
   router.get('/data.html', forwardCapture);
@@ -82,3 +82,3 @@ router.get('/cgi-bin/select', selectEnv);
   router.get('/cgi-bin/allowlist', allowlist);
-  router.all('/account/:name/**', proxy);
+  router.all('/account/:name/(.*)', proxy);
   router.post('/cgi-bin/account/change-password', changePassword);
@@ -85,0 +85,0 @@ router.get('/follow', follow);

package.json

 {
   "name": "@nohost/server",
-  "version": "1.5.14",
+  "version": "1.5.15",
   "description": "Multi-user & multi-env web debugging proxy based on whistle",
@@ -120,3 +120,3 @@ "main": "index.js",
     "koa-onerror": "^4.1.0",
-    "koa-router": "^7.4.0",
+    "koa-router": "^12.0.1",
     "koa-static": "^5.0.0",
@@ -126,10 +126,10 @@ "lodash.get": "^4.4.2",
     "parseurl": "^1.3.3",
-    "pfork": "^0.5.3",
+    "pfork": "^0.6.2",
     "simpleproto": "^1.1.0",
     "socketx": "^1.1.0",
     "starting": "^8.0.1",
-    "whistle": "^2.9.62",
+    "whistle": "^2.9.77",
     "whistle.inspect": "^2.2.4",
-    "whistle.script": "^1.2.9"
+    "whistle.script": "^1.2.10"
   }
 }

public/admin.html

@@ -10,3 +10,3 @@ <!DOCTYPE html>
 <div id="root" class="vbox"></div>
-<script type="text/javascript" src="admin.e81f8a11077836f0424ce09c702af95d.js"></script></body>
+<script type="text/javascript" src="admin.ee8177858936e5e13d43a8c396269dce.js"></script></body>
 </html>

public/button.js.LICENSE.txt

@@ -13,3 +13,3 @@ /*!
 /*!
- * clipboard.js v2.0.11
+ * clipboard.js v2.0.10
  * https://clipboardjs.com/
@@ -16,0 +16,0 @@ *

public/capture.html

@@ -10,3 +10,3 @@ <!DOCTYPE html>
 <div id="root" class=""></div>
-<script type="text/javascript" src="capture.c09fbda74fcb40f25573247c2562ef97.js"></script></body>
+<script type="text/javascript" src="capture.c8d589d0636cf4f39f57607f23201456.js"></script></body>
 </html>

public/network.html

@@ -10,3 +10,3 @@ <!DOCTYPE html>
 <div id="root" class=""></div>
-<script type="text/javascript" src="network.a7a35f1a7c7c551884df0bfb301f0a29.js"></script></body>
+<script type="text/javascript" src="network.6d1794fecdf956f646a9fbe521230133.js"></script></body>
 </html>

public/select.html

@@ -25,3 +25,3 @@ <!DOCTYPE html>
   </div>
-<script type="text/javascript" src="select.73528a41c39273759a11c568c2a046c7.js"></script></body>
+<script type="text/javascript" src="select.8583d6ad336665953f262028de34e2bd.js"></script></body>
 </html>

public/admin.e81f8a11077836f0424ce09c702af95d.js.LICENSE.txt

-/*
-object-assign
-(c) Sindre Sorhus
-@license MIT
-*/
-
-/*!
-  * Sizzle CSS Selector Engine v2.3.3
-  * https://sizzlejs.com/
-  *
-  * Copyright jQuery Foundation and other contributors
-  * Released under the MIT license
-  * http://jquery.org/license
-  *
-  * Date: 2016-08-08
-  */
-
-/*!
-  Copyright (c) 2017 Jed Watson.
-  Licensed under the MIT License (MIT), see
-  http://jedwatson.github.io/classnames
-*/
-
-/*!
- * jQuery JavaScript Library v3.3.1
- * https://jquery.com/
- *
- * Includes Sizzle.js
- * https://sizzlejs.com/
- *
- * Copyright JS Foundation and other contributors
- * Released under the MIT license
- * https://jquery.org/license
- *
- * Date: 2018-01-20T17:24Z
- */
-
-/** @license React v0.19.1
- * scheduler.production.min.js
- *
- * Copyright (c) Facebook, Inc. and its affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- */
-
-/** @license React v16.13.1
- * react-is.production.min.js
- *
- * Copyright (c) Facebook, Inc. and its affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- */
-
-/** @license React v16.14.0
- * react-dom.production.min.js
- *
- * Copyright (c) Facebook, Inc. and its affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- */
-
-/** @license React v16.14.0
- * react.production.min.js
- *
- * Copyright (c) Facebook, Inc. and its affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- */
-
-//! moment.js
-
-//! moment.js locale configuration

public/capture.c09...4fcb40f25573247c2562ef97.js.LICENSE.txt

-/*
-object-assign
-(c) Sindre Sorhus
-@license MIT
-*/
-
-/*!
-  * Sizzle CSS Selector Engine v2.3.3
-  * https://sizzlejs.com/
-  *
-  * Copyright jQuery Foundation and other contributors
-  * Released under the MIT license
-  * http://jquery.org/license
-  *
-  * Date: 2016-08-08
-  */
-
-/*!
-  Copyright (c) 2017 Jed Watson.
-  Licensed under the MIT License (MIT), see
-  http://jedwatson.github.io/classnames
-*/
-
-/*!
- * clipboard.js v2.0.11
- * https://clipboardjs.com/
- *
- * Licensed MIT © Zeno Rocha
- */
-
-/*!
- * jQuery JavaScript Library v3.3.1
- * https://jquery.com/
- *
- * Includes Sizzle.js
- * https://sizzlejs.com/
- *
- * Copyright JS Foundation and other contributors
- * Released under the MIT license
- * https://jquery.org/license
- *
- * Date: 2018-01-20T17:24Z
- */
-
-/** @license React v0.19.1
- * scheduler.production.min.js
- *
- * Copyright (c) Facebook, Inc. and its affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- */
-
-/** @license React v16.13.1
- * react-is.production.min.js
- *
- * Copyright (c) Facebook, Inc. and its affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- */
-
-/** @license React v16.14.0
- * react-dom.production.min.js
- *
- * Copyright (c) Facebook, Inc. and its affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- */
-
-/** @license React v16.14.0
- * react.production.min.js
- *
- * Copyright (c) Facebook, Inc. and its affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- */
-
-//! moment.js
-
-//! moment.js locale configuration

public/network.a7a...7c7c551884df0bfb301f0a29.js.LICENSE.txt

-/*
-object-assign
-(c) Sindre Sorhus
-@license MIT
-*/
-
-/*!
-  * Sizzle CSS Selector Engine v2.3.3
-  * https://sizzlejs.com/
-  *
-  * Copyright jQuery Foundation and other contributors
-  * Released under the MIT license
-  * http://jquery.org/license
-  *
-  * Date: 2016-08-08
-  */
-
-/*!
-  Copyright (c) 2017 Jed Watson.
-  Licensed under the MIT License (MIT), see
-  http://jedwatson.github.io/classnames
-*/
-
-/*!
- * jQuery JavaScript Library v3.3.1
- * https://jquery.com/
- *
- * Includes Sizzle.js
- * https://sizzlejs.com/
- *
- * Copyright JS Foundation and other contributors
- * Released under the MIT license
- * https://jquery.org/license
- *
- * Date: 2018-01-20T17:24Z
- */
-
-/** @license React v0.19.1
- * scheduler.production.min.js
- *
- * Copyright (c) Facebook, Inc. and its affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- */
-
-/** @license React v16.13.1
- * react-is.production.min.js
- *
- * Copyright (c) Facebook, Inc. and its affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- */
-
-/** @license React v16.14.0
- * react-dom.production.min.js
- *
- * Copyright (c) Facebook, Inc. and its affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- */
-
-/** @license React v16.14.0
- * react.production.min.js
- *
- * Copyright (c) Facebook, Inc. and its affiliates.
- *
- * This source code is licensed under the MIT license found in the
- * LICENSE file in the root directory of this source tree.
- */
-
-//! moment.js
-
-//! moment.js locale configuration

public/select.7352...c39273759a11c568c2a046c7.js.LICENSE.txt

-/*!
-  * Sizzle CSS Selector Engine v2.3.3
-  * https://sizzlejs.com/
-  *
-  * Copyright jQuery Foundation and other contributors
-  * Released under the MIT license
-  * http://jquery.org/license
-  *
-  * Date: 2016-08-08
-  */
-
-/*!
- * jQuery JavaScript Library v3.3.1
- * https://jquery.com/
- *
- * Includes Sizzle.js
- * https://sizzlejs.com/
- *
- * Copyright JS Foundation and other contributors
- * Released under the MIT license
- * https://jquery.org/license
- *
- * Date: 2018-01-20T17:24Z
- */

New alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 4 instances

Minified code

Quality

This package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 4 instances

Minified code

Quality

This package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Worsened metrics

Total package byte prevSize

7749997

-0.02%

Dependency changes

• - Removed

  any-promise@1.3.0
  (transitive)

• - Removed

  koa-compose@3.2.1
  (transitive)

• - Removed

  koa-router@7.4.0
  (transitive)

• - Removed

  path-to-regexp@1.9.0
  (transitive)

• - Removed

  pfork@0.5.3
  (transitive)

• - Removed

  q@1.5.1
  (transitive)

• - Removed

  urijs@1.19.11
  (transitive)

• Updated

  koa-router@^12.0.1

• Updated

  pfork@^0.6.2

• Updated

  whistle@^2.9.77

• Updated

  whistle.script@^1.2.10