Socket
Socket
Sign inDemoInstall

engine.io

Package Overview
Dependencies
19
Maintainers
2
Versions
147
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

Comparing version 3.3.2 to 3.4.0

23

lib/server.js

@@ -151,2 +151,3 @@

req.headers.origin = null;
debug('origin header invalid');
return fn(Server.errors.BAD_REQUEST, false);

@@ -159,2 +160,3 @@ }

if (!this.clients.hasOwnProperty(sid)) {
debug('unknown sid "%s"', sid);
return fn(Server.errors.UNKNOWN_SID, false);

@@ -314,2 +316,3 @@ }

} catch (e) {
debug('error handshaking to transport "%s"', transportName);
sendErrorMessage(req, req.res, Server.errors.BAD_REQUEST);

@@ -558,21 +561,31 @@ return;

return false;
if (!validHdrChars[val.charCodeAt(0)])
if (!validHdrChars[val.charCodeAt(0)]) {
debug('invalid header, index 0, char "%s"', val.charCodeAt(0));
return true;
}
if (val.length < 2)
return false;
if (!validHdrChars[val.charCodeAt(1)])
if (!validHdrChars[val.charCodeAt(1)]) {
debug('invalid header, index 1, char "%s"', val.charCodeAt(1));
return true;
}
if (val.length < 3)
return false;
if (!validHdrChars[val.charCodeAt(2)])
if (!validHdrChars[val.charCodeAt(2)]) {
debug('invalid header, index 2, char "%s"', val.charCodeAt(2));
return true;
}
if (val.length < 4)
return false;
if (!validHdrChars[val.charCodeAt(3)])
if (!validHdrChars[val.charCodeAt(3)]) {
debug('invalid header, index 3, char "%s"', val.charCodeAt(3));
return true;
}
for (var i = 4; i < val.length; ++i) {
if (!validHdrChars[val.charCodeAt(i)])
if (!validHdrChars[val.charCodeAt(i)]) {
debug('invalid header, index "%i", char "%s"', i, val.charCodeAt(i));
return true;
}
}
return false;
}
{
"name": "engine.io",
"version": "3.3.2",
"version": "3.4.0",
"description": "The realtime engine behind Socket.IO. Provides the foundation of a bidirectional connection between client and server",

@@ -29,7 +29,7 @@ "main": "lib/engine.io",

"accepts": "~1.3.4",
"base64id": "1.0.0",
"debug": "~3.1.0",
"engine.io-parser": "~2.1.0",
"ws": "~6.1.0",
"cookie": "0.3.1"
"base64id": "2.0.0",
"cookie": "0.3.1",
"debug": "~4.1.0",
"engine.io-parser": "~2.2.0",
"ws": "^7.1.2"
},

@@ -39,3 +39,3 @@ "devDependencies": {

"babel-preset-es2015": "^6.24.0",
"engine.io-client": "3.3.1",
"engine.io-client": "3.4.0",
"eslint": "^4.5.0",

@@ -42,0 +42,0 @@ "eslint-config-standard": "^10.2.1",

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc