follow-redirects 1.15.5 → 1.15.7

package/index.js

@@ -5,6 +5,14 @@ var https = require("https");
 var Writable = require("stream").Writable;
 var assert = require("assert");
 var debug = require("./debug");
+var nope = require("./nope");
+
+// Disaster prevention
+/* istanbul ignore next */
+if (nope.isBrowser()) {
+  module.exports = nope;
+  return;
+}
 
 // Whether to use the native URL object or the legacy url module
 var useNativeURL = false;
@@ -461,7 +469,7 @@ RedirectableRequest.prototype._processResponse = function (response) {
      redirectUrl.protocol !== "https:" ||
      redirectUrl.host !== currentHost &&
      !isSubdomain(redirectUrl.host, currentHost)) {
-    removeMatchingHeaders(/^(?:authorization|cookie)$/i, this._options.headers);
+    removeMatchingHeaders(/^(?:(?:proxy-)?authorization|cookie)$/i, this._options.headers);
   }
 
   // Evaluate the beforeRedirect callback

package/nope.js

@@ -0,0 +1,20 @@
+// follow-redirects absolutely must not be used in the browser.
+// Neither should the `http` and `http` modules it replaces, yet here we are.
+var http = require("http");
+var https = require("https");
+
+/* istanbul ignore next */ // eslint-disable-next-line no-undef
+var browser = typeof window !== "undefined" && typeof window.document !== "undefined";
+
+module.exports = {
+  http: http,
+  https: https,
+  wrap: function () {
+    // Honestly looking forward to this bug report
+    throw new Error("Best viewed in Internet Explorer");
+  },
+  isBrowser() {
+    /* istanbul ignore next */ // eslint-disable-next-line
+    return browser && !!console.warn("Exclude follow-redirects from browser builds.");
+  },
+};

package/package.json

@@ -1,9 +1,10 @@
 {
   "name": "follow-redirects",
-  "version": "1.15.5",
+  "version": "1.15.7",
   "description": "HTTP and HTTPS modules that follow redirects.",
   "license": "MIT",
   "main": "index.js",
+  "browser": "nope.js",
   "files": [
     "*.js"
   ],