Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
chrome-https
Advanced tools
This is a fork of https://www.npmjs.com/package/stream-http
There are two reasons for the fork
A call to https.request
with an options parameter without a scheme but with a port throws an error in chrome-apps
The default https-browserify inherits
the all the calls from which ever http
is required but with the scheme change.
This breaks in chromiumify asthe full http stack guards against using the incorrect protocol.
So to use the https module from node.js in chrome apps the stream-http module has been taken, the scheme update applied, and published as chome-https.
When you require('https')
in a
chromiumify app, this module will be loaded.
var https = require('https');
var options = {
hostname: 'encrypted.google.com',
port: 443,
path: '/',
method: 'GET'
};
var req = https.request(options, function(res) {
console.log("statusCode: ", res.statusCode);
console.log("headers: ", res.headers);
res.on('data', function(d) {
process.stdout.write(d);
});
});
req.end();
req.on('error', function(e) {
console.error(e);
});
var https = require('https');
where opts
are:
opts.method='GET'
- http method verbopts.path
- path string, example: '/foo/bar?baz=555'
opts.headers={}
- as an object mapping key names to string or Array valuesopts.host=window.location.host
- http hostopts.port=window.location.port
- http portopts.responseType
- response type to set on the underlying xhr objectThe callback will be called with the response object.
A shortcut for
options.method = 'GET';
var req = https.request(options, cb);
req.end();
Set an http header.
Get an http header.
Remove an http header.
Write some data to the request body.
If only 1 piece of data is written, data
can be a FormData, Blob, or
ArrayBuffer instance. Otherwise, data
should be a string or a buffer.
Close and send the request body, optionally with additional data
to append.
Return an http header, if set. key
is case-insensitive.
in order to map "chrome-https" over require('https')
in your browserified
source.
With npm do:
npm install chrome-https
MIT
FAQs
https module compatability for chrome apps
The npm package chrome-https receives a total of 4 weekly downloads. As such, chrome-https popularity was classified as not popular.
We found that chrome-https demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.