
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
superstatic-proxy
Advanced tools
The Superstatic AJAX proxy lets you make requests to other domians without
violating the Same-Origin Policy. For instance, you could mount a proxy
called api that pointed to https://api.your-app.com. Once you've done
so, a request to e.g. /__/proxy/api/users.json would be proxied through to
https://api.your-app.com/users.json.
The configuration for superstatic-proxy is an object where the keys are
reference names for the service to which you're proxying and configuration
details. An example (comments for clarity despite JSON syntax):
{
"api": {
// the origin of the server to which you want to make requests
"origin": "https://api.your-app.com",
// set default headers present on every request. these can be
// overridden on individual AJAX requests
"headers": {
"Accept": "application/json"
},
// if true, send the cookies from the static app along to the server
"cookies": false,
// set a timeout for requests sent to the proxy (defaults to 30 seconds)
"timeout": 30
}
}
FAQs
A Superstatic service for HTTP proxying of AJAX requests
The npm package superstatic-proxy receives a total of 0 weekly downloads. As such, superstatic-proxy popularity was classified as not popular.
We found that superstatic-proxy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.