heroku-proxy - npm Package Compare versions

Comparing version 2.1.0 to 2.1.1

index.js

@@ -121,2 +121,6 @@ 'use strict';
 
+  var defaultHeaders = {
+    'x-forwarded-for': req.ip
+  };
+
   return Object.keys(req.headers).reduce(function(headers, header) {
@@ -131,3 +135,3 @@ var value = req.headers[header];
     return headers;
-  }, {});
+  }, defaultHeaders);
 }
@@ -134,0 +138,0 @@

package.json

 {
   "name": "heroku-proxy",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "a heroku proxy",
@@ -5,0 +5,0 @@ "main": "index.js",

test/proxy-test.js

@@ -133,2 +133,12 @@ 'use strict';
   });
+
+  it('sets the forwarded for ip header', function(done) {
+    request({
+      url: 'http://localhost:' + clientPort + '/api/apps'
+    }, function(err, res) {
+      if (err) throw err;
+      res.headers['x-forwarded-for'].should.eql('127.0.0.1');
+      done();
+    });
+  });
 });

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

22747

increased by9.12%

Lines of code

309

increased by4.04%

Number of medium supply chain risk alerts

2

decreased by-33.33%

No dependency changes