[Snyk] Upgrade http-proxy from 1.16.2 to 1.18.1 #5

snyk-bot · 2020-10-21T04:17:57Z

Snyk has created this PR to upgrade http-proxy from 1.16.2 to 1.18.1.

✨ Snyk has automatically assigned this pull request, set who gets assigned.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 3 versions ahead of your current version.
The recommended version was released 5 months ago, on 2020-05-17.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-HTTPPROXY-569139	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: http-proxy

1.18.1 - 2020-05-17
1.18.1
1.18.0 - 2019-09-18
Version 1.18.0
1.17.0 - 2018-04-20
Due to some great contributions I'm happy to announce a new release of http-proxy containing numerous bug fixes, feature additions and documentation improvements. Thanks to all who contributed for their patience and willingness to contribute despite perceived stagnation in activity in the project. I welcome all contributions and those who are interested in getting more involved with the project. Below I will highlight the changes that landed in the latest version but you can find the full diff of the changes in #1251
- Add option to rewrite path of set-cookie headers. @swillis12
- Add option for overriding http METHOD when proxying request @AydinChavez
- Feature: selfHandleResponse for taking responsibility in returning your own response when listening on the proxyRes event. @cpd0101 @guoxiangyang
- Add followRedirects option @n30n0v
- Document timeout option @jlaamanen
- Fix documentation typos @carpsareokiguess
- Document buffer option @jonhunter1977
- Include websocket non-upgrade response instead of just closing the socket. Allows auth schemes to be possible with websocket proxying. @Tigge
- Stop using the writeHead method explicitly and let node handle it internally to prevent thrown errors @jakefurler
- Be more defensive in handling of detecting response state when proxying @thiagobustamante
1.16.2 - 2016-12-06
1.16.2

from http-proxy GitHub release notes

Commit messages

Package name: http-proxy

9b96cd7 1.18.1
335aeeb Skip sending the proxyReq event when the expect header is present (#1447)
dba3966 Remove node6 support, add node12 to build (#1397)
9bbe486 [dist] Version bump. 1.18.0
6e4bef4 Added in auto-changelog module set to keepachangelog format (#1373)
d056241 fix 'Modify Response' readme section to avoid unnecessary array copying (#1300)
244303b Fix incorrect target name for reverse proxy example (#1135)
b4028ba Fix modify response middleware example (#1139)
77a9815 [dist] Update dependency async to v3 (#1359)
c662f9e Fix path to local http-proxy in examples. (#1072)
806e492 fix reverse-proxy example require path (#1067)
c8fa599 Update README.md (#970)
0d9ed36 [dist] Update dependency request to ~2.88.0 [SECURITY] (#1357)
9d75b98 [dist] Update dependency eventemitter3 to v4 (#1365)
192b2b9 [dist] Update dependency colors to v1 (#1360)
4a657a7 [dist] Update all non-major dependencies (#1356)
7a154f8 [dist] Update dependency agentkeepalive to v4 (#1358)
749eec6 [dist] Update dependency nyc to v14 (#1367)
e588213 [dist] Update dependency concat-stream to v2 (#1363)
59c4403 [fix] Latest versions.
dd1d08b [fix test] Update tests.
16d4f8a [dist] Regenerate package-lock.json.
fc93520 [dist] .gitattributes all the things.
7e4a0e5 [dist] New test fixtures.