Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
corsify-proxy
Advanced tools
This is a node.js HTTP proxy that adds Cross-Origin Resource Sharing (CORS) headers to incoming HTTP requests, for use with XMLHttpRequest level 2.
The server was designed to be deployed to Heroku using free resources, so it fits in a single dyno. The code has great test coverage using mocha.
Click the ''Deploy to Heroku'' button at the top of this page to create your own W3gram server running on Heroku. Don't worry, the project only uses free add-ons!
Make sure to add both your development server (e.g., http://localhost:3000
)
and your production sever (e.g., https://www.yourapp.com
) to the list of
allowed origins.
Make requests to the CORS-disabled server, including the protocol and path.
curl -i https://corsify-test.herokuapp.com/https://google.com
Install all dependencies.
npm install
Run the server in development mode.
npm start
This project is Copyright (c) 2014 Victor Costan, and distributed under the MIT License.
FAQs
HTTP proxy that adds CORS headers
We found that corsify-proxy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.