chimurai / http-proxy-middleware

98%

master: 95%

LAST BUILD ON BRANCH backport

branch: backport

CHANGE BRANCH

x

Reset

• backport
• 0.19.x
• 2.x
• 3.0.1-beta.1
• 3.x
• 3.x-fix-router
• 4.0.0-beta.0
• 4.0.0-beta.1
• 4.0.0-beta.2
• 4.0.0-beta.3
• 4.0.0-beta.6
• ERR_HTTP_TRAILER_INVALID
• actions-cache-v4
• actions-checkout-v5
• actions-setup-node-v4
• add-websocket-tests-docs
• badges-link-fix
• beta-badge
• bum-deps
• bump-dependencies
• bump-deps
• changelog
• chore-3.0.6
• chore-3.0.7
• chore-4.1.0
• chore-4.1.0-beta.0
• chore-4.1.0-beta.1
• chore-4.1.0-beta.2
• chore-dev-deps
• chore-v4.1.1
• ci-improvements
• ci-node22
• ci-publish-pin-triggering_actor
• ci-unpin-node24
• cleanup-third-party-config
• conditional-ipv6-testing
• context7.json
• cspell
• cspell-action_v8
• cspell-v6
• define-plugin
• dep-deps
• dependabot/npm_and_yarn/babel/traverse-7.23.2
• dependabot/npm_and_yarn/cookiejar-2.1.4
• dependabot/npm_and_yarn/engine.io-6.2.1
• dependabot/npm_and_yarn/engine.io-6.4.2
• dependabot/npm_and_yarn/follow-redirects-1.15.4
• dependabot/npm_and_yarn/json5-2.2.3
• dependabot/npm_and_yarn/semver-5.7.2
• dependabot/npm_and_yarn/socket.io-parser-4.2.3
• dependabot/npm_and_yarn/vm2-3.9.11
• dependabot/npm_and_yarn/vm2-3.9.15
• dependabot/npm_and_yarn/vm2-3.9.18
• dependabot/npm_and_yarn/vm2-3.9.19
• dependabot/npm_and_yarn/word-wrap-1.2.4
• dependabot/npm_and_yarn/yaml-2.2.2
• deps
• deps-update
• dev-deps
• dev-deps-remove-patch-package
• dev-deps-update
• devcontainer
• devdeps
• devdeps-ip
• docs-examples
• docs-fix-proxy-events
• docs-generics-request-response
• docs-http-server
• docs-httpxy
• docs-nextjs-bodyparser
• docs-nextjs-improve-example
• drop-node-16-18
• drop-node-20
• drop-node12
• drop-node14
• e2e-invalid-multipart-error-log
• error-response-plugin
• eslint-v10
• eslint.config.mjs
• eslint9
• esm
• esm-deps
• example-deps
• example-hono-express
• example-nextjs
• example-nextjs-16
• example-sse
• examples-fastify-fix
• examples-lock-file
• examples-lockfile-update
• extend-router
• fastify-example
• feat-zstd
• fix-RequestHandler-type
• fix-circular-dependencies
• fix-github-actions-badge
• fix-hono-deps
• fix-logger
• fix-logger-target-port
• fix-logger-type
• fix-pathFilter
• fix-request-body
• fix-request-body-cannot_set_headers
• fix-request-body-form-data-fix
• fix-request-body-handle-invalid-requests
• fix-request-body/content-encoding
• fix-responseInterceptor-bodyless-decompression-error
• fix-router
• fix-snyk-badge
• fix-sse-server-restart
• fix-websocket-example
• fix-websocket-server-undefined
• fix-websocket-test
• fix-ws-multi-server-upgrade
• fix/filter-return-type
• fix/fixRequestBody
• fix/rewrite-path-doc
• fixes/1156
• gh-actions-checkout-v4
• github-action-ci
• github-actions-improvement
• github-actions-node12
• gitpod
• gitpod-remove-deprecated-config
• handle-websocket-errors
• hono-proxy
• hono-req-res-types
• http2-tests
• httpxy-0.5.0
• httpxy-0.5.2
• httpxy_0.5.1
• improve-jsdoc
• improve-logger-plugin
• improve-pathFilter-error-message
• improve-req-typing
• improve-response-interceptor
• improve-tests
• improve-type-test
• improve-ws-example
• is-plain-obj
• is-plain-object
• jest28
• jest29
• jest30
• jsdoc-createProxyMiddleware
• jsdocs
• knudtty/text-plain-fix-request-body
• legacy-deeplink
• lint-examples
• literal_ipv6_address
• lockfile-update
• make
• master
• micromatch-4.0.8
• migration.md
• minor-doc-fixes
• minor-improvements
• minor-test-improvements
• minor-type-improvements
• mockttp3
• more-tests
• node-22.15.0
• node-localhost
• node-protocol
• node20
• node24
• node26
• npm-provenance
• npm-stage-publish
• oidc
• oxfmt
• package-repository-url
• patch-1
• patch-http-proxy
• patch-package
• patch-punycode
• pathRewrite-support-res-and-option
• pkg-pr-new
• prepare-v3
• prettier
• prettier-ci
• prettier3
• publint
• publish-unpin-npm-version
• refactor-errors
• refactor-strict-type
• refs/tags/v2.0.7
• refs/tags/v2.0.7-beta.0
• refs/tags/v2.0.7-beta.1
• refs/tags/v2.0.8
• refs/tags/v2.0.9
• refs/tags/v3.0.0
• refs/tags/v3.0.0-beta.1
• refs/tags/v3.0.1
• refs/tags/v3.0.1-beta.0
• refs/tags/v3.0.1-beta.1
• refs/tags/v3.0.2
• refs/tags/v3.0.3
• refs/tags/v3.0.4
• refs/tags/v3.0.5
• refs/tags/v3.0.6
• refs/tags/v3.0.7
• refs/tags/v4.0.0
• refs/tags/v4.0.0-beta.0
• refs/tags/v4.0.0-beta.1
• refs/tags/v4.0.0-beta.2
• refs/tags/v4.0.0-beta.3
• refs/tags/v4.0.0-beta.4
• refs/tags/v4.0.0-beta.5
• refs/tags/v4.0.0-beta.6
• refs/tags/v4.1.0
• refs/tags/v4.1.0-beta.0
• refs/tags/v4.1.0-beta.1
• refs/tags/v4.1.0-beta.2
• refs/tags/v4.1.1
• release-2.0.8
• release-2.0.9
• release-3.0.1
• release-3.0.2
• release-3.0.4
• release-3.0.5
• release-4.0.0
• release-v3.0.3
• remove-deprecated-url-parse
• remove-legacyCreateProxyMiddleware
• replace-http-proxy
• shield-icons
• spellcheck
• stryker
• subpath-imports-examples
• test-cases-target-error
• test-contextual-types
• test-http2-improvement
• test-keepalive-agent
• test-logger-e2e-ENOTFOUND
• test-permission
• test-router-dynamic-agent
• test-sse
• test-unix-domain-socket
• test-unreachable-websocket-target
• ts-check-examples
• type-improvements
• typescript-7
• typescript-eslint_consistent-type-imports
• typescript5
• update-ci-publish
• update-deps
• update-docs
• update-documentation-drift
• update-example
• update-examples-deps
• update-yarn-lock
• v2-fix-request-body
• v2-fix-request-body-handle-invalid-requests
• v2-fix-request-body-prevent-multiple-write
• v3-fix-request-body-form-data-fix
• v3.0.0-beta.1
• vitest
• vscode-settings
• vscode-workspace-typescript
• wireit
• workaround-ci-mockttp-node24-tls-issue
• workflow-permissions
• yarn-lock-update

Build # 27794610656

Build Type

Pull #1268

github

Committed by web-flow

Commit Message

Merge 1a63dc875 into 617a7c9da

Pull Request Pull Request #1268: fix: harden proxy-table matching to prevent routing bypass

Coverage Stats

155 of 170 branches covered (91.18%)

15 of 15 new or added lines in 1 file covered. (100.0%)

364 of 371 relevant lines covered (98.11%)

34.23 hits per line