Socket
Socket
Sign inDemoInstall

code-server

Package Overview
Dependencies
Maintainers
0
Versions
318
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

code-server - npm Package Versions

1
32

4.10.1

Diff

Changelog

Source

4.10.1 - 2023-03-04

Code v1.75.1

Security

Added an origin check to web sockets to prevent cross-site hijacking attacks on users using older or niche browser that do not support SameSite cookies and attacks across sub-domains that share the same root domain.

The check requires the host header to be set so if you use a reverse proxy ensure it forwards that information otherwise web sockets will be blocked.

kylecarbs
published 4.10.0 •

Changelog

Source

4.10.0 - 2023-02-15

Code v1.75.1

Changed

  • Updated to Code 1.75.1

Removed

  • Removed --link (was deprecated over thirteen months ago in 4.0.1).
kylecarbs
published 4.9.1 •

Changelog

Source

4.9.1 - 2022-12-15

Code v1.73.1

Changed

  • Updated a couple steps in the build and release process to ensure we're using npm and yarn consistently depending on the step.

Fixed

  • Fixed an issue with code-server version not displaying in the Help > About window.
  • Fixed terminal not loading on macOS clients.
kylecarbs
published 4.9.0 •

Changelog

Source

4.9.0 - 2022-12-06

Code v1.73.1

Changed

  • Upgraded to Code 1.73.1

Added

  • /security.txt added as a route with info on our security policy information thanks to @ghuntley

Fixed

  • Installing on majaro images should now work thanks to @MrPeacockNLB for adding the --noconfirm flag in install.sh

Known Issues

  • --cert on Ubuntu 22.04: OpenSSL v3 is used which breaks pem meaning the --cert feature will not work. Reference
kylecarbs
published 4.8.3-beta-5a8bb2b8e84808ef5c2e0171c70f7e9d31399234 •

kylecarbs
published 4.8.3 •

Changelog

Source

4.8.3 - 2022-11-07

Code v1.72.1

Added

  • install script now supports arch-like (i.e. manjaro, endeavourous, etc.) architectures

Changed

  • Updated text in the Getting Started page.
kylecarbs
published 4.8.2-beta-77c3cd3aa1a895fd0aec3b5350671b43e5c3945b •

kylecarbs
published 4.8.2-beta-ff8ea36b27cb62b2da29ecb137561691a45f47aa •

kylecarbs
published 4.8.2-beta-f56ce5b66d9985d1062d14cd317e9ab05607b2e1 •

kylecarbs
published 4.8.2 •

Changelog

Source

4.8.2 - 2022-11-02

Code v1.72.1

Added

  • New text in the Getting Started page with info about coder/coder. This is enabled by default but can be disabled by passing the CLI flag --disable-getting-started-override or setting CS_DISABLE_GETTING_STARTED_OVERRIDE=1 or CS_DISABLE_GETTING_STARTED_OVERRIDE=true.
SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc