engine.io-client - npm Package Compare versions

Comparing version 0.7.9 to 0.7.10

History.md

 
+0.7.10 / 2013-10-28
+===================
+
+ * fixed issue which prevented IE9 and under to pass Cookies to server during handshake
+ * package: update "ws" to v0.4.31
+ * fixed - there is no host property only hostname
+ * fixed - flash socket creation
+ * fixed - emit errors thrown by xhr.send()
+
 0.7.9 / 2013-08-30
@@ -3,0 +12,0 @@ ==================

lib/transports/flashsocket.js

@@ -93,3 +93,4 @@ /**
       WebSocket.__addTask(function () {
-        WS.prototype.doOpen.call(self);
+        self.socket = new WebSocket(self.uri());
+        self.addEventListeners();
       });
@@ -148,3 +149,3 @@ });
       if (843 != self.policyPort) {
-        WebSocket.loadFlashPolicyFile('xmlsocket://' + self.host + ':' + self.policyPort);
+        WebSocket.loadFlashPolicyFile('xmlsocket://' + self.hostname + ':' + self.policyPort);
       }
@@ -151,0 +152,0 @@

lib/transports/index.js

@@ -43,3 +43,3 @@
     // some user agents have empty `location.port`
-    if (Number(port) !== port) {
+    if (!port) {
       port = isSSL ? 443 : 80;
@@ -46,0 +46,0 @@ }

lib/transports/polling-xhr.js

@@ -50,3 +50,3 @@ /**
     // some user agents have empty `location.port`
-    if (Number(port) !== port) {
+    if (!port) {
       port = isSSL ? 443 : 80;
@@ -213,3 +213,13 @@ }
   debug('sending xhr with url %s | data %s', this.uri, this.data);
-  xhr.send(this.data);
+  try {
+    xhr.send(this.data);
+  } catch (e) {
+    // Need to defer since .create() is called directly from the constructor
+    // and thus the 'error' event can only be only bound *after* this exception
+    // occurs.  Therefore, also, we cannot throw here at all.
+    setTimeout(function() {
+      self.onError(e);
+    }, 0);
+    return;
+  }
 
@@ -216,0 +226,0 @@ if (xobject) {

lib/transports/websocket.js

@@ -66,2 +66,14 @@ /**
   this.socket = new WebSocket(uri, protocols, opts);
+  this.addEventListeners();
+};
+
+/**
+ * Adds event listeners to the socket
+ *
+ * @api private
+ */
+
+WS.prototype.addEventListeners = function() {
+  var self = this;
+
   this.socket.onopen = function(){
@@ -68,0 +80,0 @@ self.onOpen();

package.json

 {
   "name": "engine.io-client",
   "description": "Client for the realtime Engine",
-  "version": "0.7.9",
+  "version": "0.7.10",
   "homepage": "https://github.com/LearnBoost/engine.io-client",
@@ -23,3 +23,3 @@ "contributors": [
     "has-cors": "https://github.com/component/has-cors/archive/v1.0.2.tar.gz",
-    "ws": "https://github.com/TooTallNate/ws/archive/0cb9fe7a21a7a7c200f68b57916d1d62b66082a1.tar.gz",
+    "ws": "0.4.31",
     "xmlhttprequest": "https://github.com/LearnBoost/node-XMLHttpRequest/archive/0f36d0b5ebc03d85f860d42a64ae9791e1daa433.tar.gz",
@@ -26,0 +26,0 @@ "emitter": "http://github.com/component/emitter/archive/1.0.1.tar.gz",

Fixed alerts

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

391419

increased by0.18%

Lines of code

12447

increased by0.16%

Number of high supply chain risk alerts

4

decreased by-20%

Dependency changes

• + Addedcommander@0.6.1(transitive)

• + Addednan@0.3.2(transitive)

• + Addedoptions@0.0.6(transitive)

• + Addedtinycolor@0.0.1(transitive)

• + Addedws@0.4.31(transitive)

• Updatedws@0.4.31