engine.io
Advanced tools
Comparing version 3.3.2 to 3.4.0
@@ -151,2 +151,3 @@ | ||
req.headers.origin = null; | ||
debug('origin header invalid'); | ||
return fn(Server.errors.BAD_REQUEST, false); | ||
@@ -159,2 +160,3 @@ } | ||
if (!this.clients.hasOwnProperty(sid)) { | ||
debug('unknown sid "%s"', sid); | ||
return fn(Server.errors.UNKNOWN_SID, false); | ||
@@ -314,2 +316,3 @@ } | ||
} catch (e) { | ||
debug('error handshaking to transport "%s"', transportName); | ||
sendErrorMessage(req, req.res, Server.errors.BAD_REQUEST); | ||
@@ -558,21 +561,31 @@ return; | ||
return false; | ||
if (!validHdrChars[val.charCodeAt(0)]) | ||
if (!validHdrChars[val.charCodeAt(0)]) { | ||
debug('invalid header, index 0, char "%s"', val.charCodeAt(0)); | ||
return true; | ||
} | ||
if (val.length < 2) | ||
return false; | ||
if (!validHdrChars[val.charCodeAt(1)]) | ||
if (!validHdrChars[val.charCodeAt(1)]) { | ||
debug('invalid header, index 1, char "%s"', val.charCodeAt(1)); | ||
return true; | ||
} | ||
if (val.length < 3) | ||
return false; | ||
if (!validHdrChars[val.charCodeAt(2)]) | ||
if (!validHdrChars[val.charCodeAt(2)]) { | ||
debug('invalid header, index 2, char "%s"', val.charCodeAt(2)); | ||
return true; | ||
} | ||
if (val.length < 4) | ||
return false; | ||
if (!validHdrChars[val.charCodeAt(3)]) | ||
if (!validHdrChars[val.charCodeAt(3)]) { | ||
debug('invalid header, index 3, char "%s"', val.charCodeAt(3)); | ||
return true; | ||
} | ||
for (var i = 4; i < val.length; ++i) { | ||
if (!validHdrChars[val.charCodeAt(i)]) | ||
if (!validHdrChars[val.charCodeAt(i)]) { | ||
debug('invalid header, index "%i", char "%s"', i, val.charCodeAt(i)); | ||
return true; | ||
} | ||
} | ||
return false; | ||
} |
{ | ||
"name": "engine.io", | ||
"version": "3.3.2", | ||
"version": "3.4.0", | ||
"description": "The realtime engine behind Socket.IO. Provides the foundation of a bidirectional connection between client and server", | ||
@@ -29,7 +29,7 @@ "main": "lib/engine.io", | ||
"accepts": "~1.3.4", | ||
"base64id": "1.0.0", | ||
"debug": "~3.1.0", | ||
"engine.io-parser": "~2.1.0", | ||
"ws": "~6.1.0", | ||
"cookie": "0.3.1" | ||
"base64id": "2.0.0", | ||
"cookie": "0.3.1", | ||
"debug": "~4.1.0", | ||
"engine.io-parser": "~2.2.0", | ||
"ws": "^7.1.2" | ||
}, | ||
@@ -39,3 +39,3 @@ "devDependencies": { | ||
"babel-preset-es2015": "^6.24.0", | ||
"engine.io-client": "3.3.1", | ||
"engine.io-client": "3.4.0", | ||
"eslint": "^4.5.0", | ||
@@ -42,0 +42,0 @@ "eslint-config-standard": "^10.2.1", |
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
69615
1700
+ Addedbase64-arraybuffer@0.1.4(transitive)
+ Addedbase64id@2.0.0(transitive)
+ Addeddebug@4.1.1(transitive)
+ Addedengine.io-parser@2.2.1(transitive)
+ Addedms@2.1.3(transitive)
+ Addedws@7.5.10(transitive)
- Removedasync-limiter@1.0.1(transitive)
- Removedbase64-arraybuffer@0.1.5(transitive)
- Removedbase64id@1.0.0(transitive)
- Removeddebug@3.1.0(transitive)
- Removedengine.io-parser@2.1.3(transitive)
- Removedms@2.0.0(transitive)
- Removedws@6.1.4(transitive)
Updatedbase64id@2.0.0
Updateddebug@~4.1.0
Updatedengine.io-parser@~2.2.0
Updatedws@^7.1.2