d0zingcat/cors-anywhere
1
0
Fork 0
mirror of https://github.com/d0zingcat/cors-anywhere.git synced 2026-05-13 15:09:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Pass --max-http-header-size in supported versions only

Browse Source
This commit is contained in:
Rob Wu
2020-05-02 19:52:05 +02:00
parent 2579fb6c0d
commit 0a3b8e965f
1 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
test/test-memory.js
View File

@@ -32,8 +32,19 @@ describe('memory usage', function() {
// Uncomment this if you want to compare the performance of CORS Anywhere
// with the standard no-op http module.
// args.push('use-http-instead-of-cors-anywhere');
var nodeOptionsArgs = ['--expose-gc'];
var nodeMajorV = parseInt(process.versions.node, 10);
// Node 11.3.0+, 10.14.0+, 8.14.0+, 6.15.0+ restrict header sizes
// (CVE-2018-12121), and need to be passed the --max-http-header-size flag
// to not reject large headers.
if (nodeMajorV >= 11 ||
nodeMajorV === 10 ||
nodeMajorV === 8 ||
nodeMajorV === 6) {
nodeOptionsArgs.push('--max-http-header-size=60000');
}
cors_anywhere_child = fork(cors_module_path, args, {
execArgv: ['--expose-gc', '--max-http-header-size=60000'],
execArgv: nodeOptionsArgs,
});
cors_anywhere_child.once('message', function(cors_url) {
cors_api_url = cors_url;