[Snyk] Upgrade http-proxy from 1.17.0 to 1.18.1

[qwu16]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade http-proxy from 1.17.0 to 1.18.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 3 years ago, on 2020-05-17.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-HTTPPROXY-569139	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: http-proxy

• 1.18.1 - 2020-05-17
  

  1.18.1

• 1.18.0 - 2019-09-18
  

  Version 1.18.0

• 1.17.0 - 2018-04-20
  

  Due to some great contributions I'm happy to announce a new release of http-proxy containing numerous bug fixes, feature additions and documentation improvements. Thanks to all who contributed for their patience and willingness to contribute despite perceived stagnation in activity in the project. I welcome all contributions and those who are interested in getting more involved with the project. Below I will highlight the changes that landed in the latest version but you can find the full diff of the changes in #1251

  • Add option to rewrite path of set-cookie headers. @ swillis12
  • Add option for overriding http METHOD when proxying request @ AydinChavez
  • Feature: selfHandleResponse for taking responsibility in returning your own response when listening on the proxyRes event. @ cpd0101 @ guoxiangyang
  • Add followRedirects option @ n30n0v
  • Document timeout option @ jlaamanen
  • Fix documentation typos @ carpsareokiguess
  • Document buffer option @ jonhunter1977
  • Include websocket non-upgrade response instead of just closing the socket. Allows auth schemes to be possible with websocket proxying. @ Tigge
  • Stop using the writeHead method explicitly and let node handle it internally to prevent thrown errors @ jakefurler
  • Be more defensive in handling of detecting response state when proxying @ thiagobustamante

from http-proxy GitHub release notes

Commit messages

Package name: http-proxy

• 9b96cd7 1.18.1
• 335aeeb Skip sending the proxyReq event when the expect header is present (#1447)
• dba3966 Remove node6 support, add node12 to build (Bump cookie and socket.io in /source/agent/quic open-webrtc-toolkit/owt-server#1397)
• 9bbe486 [dist] Version bump. 1.18.0
• 6e4bef4 Added in auto-changelog module set to keepachangelog format (Bump follow-redirects from 1.15.4 to 1.15.6 in /source/agent/quic open-webrtc-toolkit/owt-server#1373)
• d056241 fix 'Modify Response' readme section to avoid unnecessary array copying (Fix video packetizer close issue open-webrtc-toolkit/owt-server#1300)
• 244303b Fix incorrect target name for reverse proxy example (issue with cookies open-webrtc-toolkit/owt-server#1135)
• b4028ba Fix modify response middleware example (Automatically run REST startStreamingOut after publishing a stream open-webrtc-toolkit/owt-server#1139)
• 77a9815 [dist] Update dependency async to v3 (Initialize config.cascading in cluster_manager open-webrtc-toolkit/owt-server#1359)
• c662f9e Fix path to local http-proxy in examples. (auto select python2 for Ubuntu20.04 open-webrtc-toolkit/owt-server#1072)
• 806e492 fix reverse-proxy example require path (Fix resolution comparsion when width or height is 0 open-webrtc-toolkit/owt-server#1067)
• c8fa599 Update README.md (Exit shell when errors occur during dependency installation open-webrtc-toolkit/owt-server#970)
• 0d9ed36 [dist] Update dependency request to ~2.88.0 [SECURITY] (WHIP Protocol? open-webrtc-toolkit/owt-server#1357)
• 9d75b98 [dist] Update dependency eventemitter3 to v4 (Error: Expired at owt.js:7 open-webrtc-toolkit/owt-server#1365)
• 192b2b9 [dist] Update dependency colors to v1 (WebRTC library version used in owt-server (owt-deps-webrtc) open-webrtc-toolkit/owt-server#1360)
• 4a657a7 [dist] Update all non-major dependencies (Bump browserify-sign from 4.2.1 to 4.2.2 in /source/agent/quic open-webrtc-toolkit/owt-server#1356)
• 7a154f8 [dist] Update dependency agentkeepalive to v4 (STUN or TURN setup need ? open-webrtc-toolkit/owt-server#1358)
• 749eec6 [dist] Update dependency nyc to v14 (build gst-analytics.Dockerfile error open-webrtc-toolkit/owt-server#1367)
• e588213 [dist] Update dependency concat-stream to v2 (Bump follow-redirects from 1.15.2 to 1.15.4 in /source/agent/quic open-webrtc-toolkit/owt-server#1363)
• 59c4403 [fix] Latest versions.
• dd1d08b [fix test] Update tests.
• 16d4f8a [dist] Regenerate package-lock.json.
• fc93520 [dist] .gitattributes all the things.
• 7e4a0e5 [dist] New test fixtures.

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs