New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket
Book a DemoSign in

middlefiddle

Package Overview
Dependencies
Maintainers
1
Versions
8
Alerts
File Explorer

Advanced tools

License
Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

middlefiddle - npm Package Compare versions

Comparing version
0.3.0
 to
0.3.1
+2
-1
.middlefiddle/fiddles/add_csp.coffee
addCSP = (urlRegex) ->
(req, res, next) ->
if req.href.match(urlRegex)
res.addHeader 'x-content-security-policy', "allow 'self'"
res.on 'headers', (headers) ->
headers['x-content-security-policy'] = "allow 'self'"
next()

@@ -6,0 +7,0 @@ 

+2
-1
.middlefiddle/sites/google.com.coffee
module.exports = (Mf) ->
ua = (req, res, next) ->
req.headers['user-agent'] = "GoogleBotZ"
res.addHeader("server", "Apachame")
res.on 'headers', (headers) ->
headers['server'] = "Apache"
next()

@@ -6,0 +7,0 @@ 

+1
-1
package.json
{
"name": "middlefiddle",
"version": "0.3.0",
"version": "0.3.1",
"description": "Middleware as a proxy for HTTP/HTTPS traffic",

@@ -5,0 +5,0 @@ "keywords": ["proxy", "middleware", "connect"],

+44
-15
README.md

@@ -9,3 +9,3 @@ # MiddleFiddle

npm install -g middlefiddle
$ npm install -g middlefiddle

@@ -15,6 +15,6 @@ ## Installation via Github

# Depends on Node 0.6.x
git clone git://github.com/mdp/middlefiddle.git
cd middlefiddle
npm install
npm link #If you want to use it globally
$ git clone git://github.com/mdp/middlefiddle.git
$ cd middlefiddle
$ npm install
$ npm link #If you want to use it globally

@@ -32,3 +32,3 @@ ## Usage

# Start middlefiddle with default options
middlefiddle
$ middlefiddle
# Proxy will be at port 8080

@@ -39,17 +39,17 @@ # and the web logger will be open at port 8411

middlefiddle logger
$ middlefiddle logger
# Now open http://localhost:8411
# Only log for a certain URL
middlefiddle logger --url google.com
$ middlefiddle logger --url google.com
# Only log certain statuses
middlefiddle logger --status 404
$ middlefiddle logger --status 404
# Only log responses containing text
middlefiddle logger --grep "setTimeout"
$ middlefiddle logger --grep "setTimeout"
# Also work with regex
middlefiddle logger -r --grep "Mark(Percival)?"
$ middlefiddle logger -r --grep "Mark(Percival)?"
# And case insensitive
middlefiddle logger -ri --grep "m@mdp\.im"
$ middlefiddle logger -ri --grep "m@mdp\.im"

@@ -147,10 +147,39 @@ ## Site specific middleware

Connect typically doesn't have a simple way to hijack downstream responses, so
Connect typically doesn't have a simple way to hijack downstream responses since it's streaming, so
middlefiddle emits events on the response along with writing to the stream.
res.on 'data', (chunk) ->
console.log chunk.toString()
res.on 'end', (chunk) ->
console.log chunk.toString()
res.on 'close', (chunk) ->
console.log "Closed response"
You've also got a couple helper properties:
- req.fullUrl #=> The full requested URL, including the schema
- req.isSecure #=> Did it come via SSL?
- req.href #=> String: The full requested URL, including the scheme,
host, path, and query params
- req.ssl #=> Boolean: Did it come via SSL?
- req.startTime #=> Datetime: When the request was started
- res.endTime #=> Datetime: I'll let you guess
## Modify responses
### Modifying the headers
Response headers can be modified before they are sent to the browser.
Just wait till they're available:
*Example in [add_csp.coffee](https://github.com/mdp/middlefiddle/tree/master/.middlefiddle/fiddles/add_csp.coffee)*
### Replace the response body
Modifying the a response body means buffering the stream,
waiting for it to finish, then making the replacement and sending it
back downstream. The 'replace' middleware provides this.
* Usage example in [github.com.coffee](https://github.com/mdp/middlefiddle/tree/master/.middlefiddle/sites/github.com.coffee)*
## Testing

@@ -157,0 +186,0 @@ 

+3
-21
src/http_proxy.coffee

@@ -80,5 +80,2 @@ util = require 'util'

res.addHeader = addHeader
res.removeHeader = removeHeader
res.modifyHeaders = modifyHeaders
bodyLogger req, 'request'

@@ -94,3 +91,2 @@ next()

res.headers = upstream_res.headers
res.modifyHeaders()

@@ -102,6 +98,8 @@ if res.headers && res.headers['content-type'] && res.headers['content-type'].search(/(text)|(application)/) >= 0

res.emit 'headers', res.headers
# Store body data with the response
bodyLogger(res, 'response')
res.writeHead(upstream_res.statusCode, upstream_res.headers)
res.writeHead(res.statusCode, res.headers)
upstream_res.on 'data', (chunk) ->

@@ -133,18 +131,2 @@ res.write(chunk, 'binary')

addHeader = (header, value) ->
@addedHeaders ||= []
@addedHeaders.push([header, value])
removeHeader = (header) ->
@removedHeaders ||= []
@removedHeaders.push(header)
modifyHeaders = () ->
if @addedHeaders
for header in @addedHeaders
@headers[header[0]] = header[1]
if @removedHeaders
for header in @removedHeaders
delete @headers[header]
bodyLogger = (stream, type, callback) ->

@@ -151,0 +133,0 @@ data = []