Upgrade http-proxy dependency >= 1.18.1 ?

Rob--W / cors-anywhere

CORS Anywhere is a NodeJS reverse proxy which adds CORS headers to the proxied request.

MIT License

8.69k stars 6.13k forks source link

Upgrade http-proxy dependency >= 1.18.1 ? #253

Open mr-m0u5e opened 4 years ago

mr-m0u5e commented 4 years ago

Hi @Rob--W,

Are there any plans to upgrade http-proxy dependency? Unfortunately the current http-proxy version 1.11.1 does not pass npm audit, and that in turn crashes our CI pipe. My understanding is that there are some undocumented http-proxy features that prevent the upgrade?

Thank you for your work, really enjoy this package.

Rob--W commented 4 years ago

There was an attempt in bug #247, but it was closed because of the efforts and unknown benefits. This issue sounds like a good driver to resume the work.

Rob--W commented 4 years ago

Note: as mentioned in https://github.com/Rob--W/cors-anywhere/issues/254#issuecomment-659037020, the security advisory is not applicable to CORS Anywhere.