milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix proxy for npm 10.0.0 -> 10.4.0

Browse source
This commit is contained in:
Sander Declerck 2025-10-01 08:10:49 +02:00
parent 3b145a4695
commit 95663dc5f4
No known key found for this signature in database
1 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

11
packages/safe-chain/src/registryProxy/mitmRequestHandler.js
View file

@ -17,7 +17,8 @@ function createHttpsServer(hostname, isAllowed) {
const cert = generateCertForHost(hostname);
async function handleRequest(req, res) {
const targetUrl = `https://${hostname}${req.url}`;
const pathAndQuery = getRequestPathAndQuery(req.url);
const targetUrl = `https://${hostname}${pathAndQuery}`;
if (!(await isAllowed(targetUrl))) {
res.writeHead(403, "Forbidden - blocked by safe-chain");
@ -38,6 +39,14 @@ function createHttpsServer(hostname, isAllowed) {
);
}
function getRequestPathAndQuery(url) {
if (url.startsWith("http://") || url.startsWith("https://")) {
const parsedUrl = new URL(url);
return parsedUrl.pathname + parsedUrl.search + parsedUrl.hash;
}
return url;
}
function forwardRequest(req, hostname, res) {
const proxyReq = createProxyRequest(hostname, req, res);