
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Http::Exceptions provides an easy way to rescue exceptions that might be thrown by your Http library. This was developed at Rainforest QA - you can read more in Introducing Http::Exceptions over on our blog.
If you're using a library such as the excellent HTTParty, you still have to deal with various types of exceptions. In an ideal world, the return code of the HTTP request would be the sole indicator of failures, but HTTP libraries can raise a large number of exceptions (such as SocketError
or Net::ReadTimeout
) that you need to handle.
Http::Exceptions converts any error that might be raised by your HTTP library and wrap it in a Http::Exceptions::HttpException
.
Add this line to your application's Gemfile:
gem 'http-exceptions'
And then execute:
$ bundle
Or install it yourself as:
$ gem install http-exceptions
Only rescue raised exceptions.
response = Http::Exceptions.wrap_exception do
HTTParty.get "http://www.google.com"
end
Raise an exception if the return code of the API call is not 2XX
.
response = Http::Exceptions.wrap_and_check do
HTTParty.get "http://www.google.com"
end
You can then rescue the exception in the following way:
begin
response = Http::Exceptions.wrap_and_check do
HTTParty.get "http://www.google.com"
end
rescue Http::Exceptions::HttpException => e
# ...
end
Currently, this only has been tested with HTTParty. It should however work with any library that delegates to the ruby http library.
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that http-exceptions demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.