local-traffic 0.0.44 → 0.0.46

package/README.md

@@ -21,29 +21,31 @@ npx local-traffic
 
 ## how to use it
 
-1. Change that mapping in the `.local-traffic.json` file: 
+1. Change that mapping in the `.local-traffic.json` file:
 
 ```json
 {
-    "mapping": {
-      "/npm": "https://www.npmjs.com/",
-      "/my-static-webapp": "file:///home/user/projects/my-static-webapp",
-      "": "https://github.com/"
-  },
+  "mapping": {
+    "/npm": "https://www.npmjs.com/",
+    "/my-static-webapp": "file:///home/user/projects/my-static-webapp",
+    "": "https://github.com/"
+  }
 }
 ```
+
 > "" mapping must always come last
+
 2. Go to [https://localhost/prettier](https://localhost/prettier) with your browser
 3. Go to [https://localhost/npm](https://localhost/npm) with your browser
-3. Go to [https://localhost/my-static-webapp](https://localhost/my-static-webapp/index.html) with your browser
-   (given your project name is my-static-webapp, but I am not 100% sure)
-4. Your server now proxies the mapping that you have configured
+4. Go to [https://localhost/my-static-webapp](https://localhost/my-static-webapp/index.html) with your browser (given your project name is my-static-webapp, but I am not 100% sure)
+5. Your server now proxies the mapping that you have configured
 
 ## usage
 
 ```bash
 npx local-traffic [location-of-the-local-traffic-config-file]
 ```
+
 > When not specified, the location of the config file will be `$HOME/.local-traffic.json`
 
 ## how to change mappings to local / non-local
@@ -56,10 +58,11 @@ npx local-traffic [location-of-the-local-traffic-config-file]
 
 - "mapping": ({[path: string]: string}) routing rules (required)
 - "ssl" : SSL options
-  * "ssl.cert" : (string) Certificate (PEM format)
-  * "ssl.key" : (string) Private Key (PEM format)
+  - "ssl.cert" : (string) Certificate (PEM format)
+  - "ssl.key" : (string) Private Key (PEM format)
 - "port" : (number) port number
 - "replaceResponseBodyUrls": (boolean) replace every matching string from the mapping in the response body.
 - "dontUseHttp2Downstream": (boolean) force calling downstream services in http1.1 only (to save some time)
 - "simpleLogs": (boolean) disable colored logs for text terminals
 - "websocket": (boolean) true to activate websocket connections proxying via sockets
+- "disableWebSecurity": (boolean) true for easygoing values in cross origin requests or content security policy headers

package/dist/localTraffic.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0});const e=require("http2"),t=require("http"),r=require("https"),o=require("url"),n=require("fs"),s=require("zlib"),a=require("path");var i,l;!function(e){e[e.ERROR=124]="ERROR",e[e.INFO=93]="INFO",e[e.WARNING=172]="WARNING"}(i||(i={})),function(e){e.INBOUND="↘️ ",e.PORT="☎️ ",e.OUTBOUND="↗️ ",e.RULES="🔗",e.BODY_REPLACEMENT="✒️ ",e.WEBSOCKET="☄️ ",e.COLORED="✨",e.NO="⛔",e.ERROR_1="❌",e.ERROR_2="⛈️ ",e.ERROR_3="☢️ ",e.ERROR_4="⁉️ ",e.ERROR_5="⚡",e.ERROR_6="☠️ "}(l||(l={}));const p=(0,a.resolve)(process.env.HOME,".local-traffic.json"),c=(0,a.resolve)(process.cwd(),process.argv.slice(-1)[0].endsWith(".json")?process.argv.slice(-1)[0]:p),d={mapping:{},port:8080,replaceResponseBodyUrls:!1,dontUseHttp2Downstream:!1,simpleLogs:!1,websocket:!1};let h,m;const u=(e,t,r)=>{console.log(`${(e=>{const t=new Date;return`${e?"":""}${`${t.getHours()}`.padStart(2,"0")}${e?":":":"}${`${t.getMinutes()}`.padStart(2,"0")}${e?":":":"}${`${t.getSeconds()}`.padStart(2,"0")}${e?"":""}`})(h?.simpleLogs)} ${h?.simpleLogs?e.replace(/⎸/g,"|").replace(/⎹/g,"|").replace(/\u001b\[[^m]*m/g,"").replace(new RegExp(l.INBOUND,"g"),"inbound:").replace(new RegExp(l.PORT,"g"),"port:").replace(new RegExp(l.OUTBOUND,"g"),"outbound:").replace(new RegExp(l.RULES,"g"),"rules:").replace(new RegExp(l.NO,"g"),"").replace(new RegExp(l.BODY_REPLACEMENT,"g"),"body replacement").replace(new RegExp(l.WEBSOCKET,"g"),"websocket").replace(/\|+/g,"|"):t?`[48;5;${t}m⎸    ${process.stdout.isTTY&&r||""}  ${e.padEnd(36)} ⎹`:e}`)},g=e=>{u(`⎸${l.PORT} ${e.port.toString().padStart(5)} ⎸${l.INBOUND} ${e.ssl?"H/2 ":"H1.1"} ⎸${l.OUTBOUND} ${e.dontUseHttp2Downstream?"H1.1":"H/2 "}⎹⎸${l.RULES}${Object.keys(h.mapping).length.toString().padStart(3)}⎹⎸${h.replaceResponseBodyUrls?l.BODY_REPLACEMENT:l.NO}⎹⎸${h.websocket?l.WEBSOCKET:l.NO}⎹⎸${h.simpleLogs?l.NO:l.COLORED}⎹`)},R=async(e=!0)=>new Promise((t=>(0,n.readFile)(c,((r,o)=>{r&&!e&&u("config error. Using default value",i.ERROR,l.ERROR_1);try{h=Object.assign({},d,JSON.parse((o||"{}").toString()))}catch(e){return u("config syntax incorrect, aborting",i.ERROR,l.ERROR_2),h=h||{...d},void t(h)}h.mapping[""]||u('default mapping "" not provided.',i.WARNING,l.ERROR_3),r&&"ENOENT"===r.code&&e&&c===p?(0,n.writeFile)(c,JSON.stringify(d),(e=>{e?u("config file NOT created",i.ERROR,l.ERROR_4):u("config file created",i.INFO,l.COLORED),t(h)})):t(h)})))).then((()=>{e&&(0,n.watchFile)(c,f)})),f=async()=>{const e={...h};return await R(!1),isNaN(h.port)||h.port>65535||h.port<0?(h=e,void u("port number invalid. Not refreshing",i.ERROR,l.PORT)):"object"!=typeof h.mapping?(h=e,void u("mapping should be an object. Aborting",i.ERROR,l.ERROR_5)):(h.replaceResponseBodyUrls!==e.replaceResponseBodyUrls&&u(`response body url ${h.replaceResponseBodyUrls?"":"NO "}replacement`,i.INFO,l.BODY_REPLACEMENT),h.dontUseHttp2Downstream!==e.dontUseHttp2Downstream&&u(`http/2 ${h.dontUseHttp2Downstream?"de":""}activated downstream`,i.INFO,l.OUTBOUND),h.websocket!==e.websocket&&u(`websocket ${h.websocket?"":"de"}activated`,i.INFO,l.WEBSOCKET),h.simpleLogs!==e.simpleLogs&&u("simple logs "+(h.simpleLogs?"on":"off"),i.INFO,l.COLORED),Object.keys(h.mapping).join("\n")!==Object.keys(e.mapping).join("\n")&&u(`${Object.keys(h.mapping).length.toString().padStart(5)} loaded mapping rules`,i.INFO,l.RULES),h.port!==e.port&&u(`port changed from ${e.port} to ${h.port}`,i.INFO,l.PORT),h.ssl&&!e.ssl&&u("ssl configuration added",i.INFO,l.INBOUND),!h.ssl&&e.ssl&&u("ssl configuration removed",i.INFO,l.INBOUND),void(h.port!==e.port||JSON.stringify(h.ssl)!==JSON.stringify(e.ssl)?(await new Promise((e=>m?m.close(e):e(void 0))),v()):g(h)))},$=e=>""==e?"":(0,a.normalize)(e).replace(/\\/g,"/"),O=e=>{const t=(0,a.resolve)("/",e.hostname,...e.pathname.replace(/[?#].*$/,"").replace(/^\/+/,"").split("/"));return{error:null,data:null,hasRun:!1,run:function(){return this.hasRun?Promise.resolve():new Promise((r=>(0,n.readFile)(t,((o,s)=>{if(this.hasRun=!0,!o||"EISDIR"!==o.code)return this.error=o,this.data=s,void r(void 0);(0,n.readdir)(t,((t,o)=>{this.error=t,this.data=o,t?r(void 0):Promise.all(o.map((t=>new Promise((r=>(0,n.lstat)((0,a.resolve)(e.pathname,t),((e,o)=>r([t,o,e])))))))).then((t=>{const o=t.filter((e=>!e[2]&&e[1].isDirectory())).concat(t.filter((e=>!e[2]&&e[1].isFile())));this.data=`${w(128194,"directory",e.href)}<p>Directory content of <i>${e.href.replace(/\//g,"&#x002F;")}</i></p><ul class="list-group"><li class="list-group-item">&#x1F4C1;<a href="${e.pathname.endsWith("/")?"..":"."}">&lt;parent&gt;</a></li>${o.filter((e=>!e[2])).map((t=>`<li class="list-group-item">&#x${(t[1].isDirectory()?128193:128196).toString(16)};<a href="${e.pathname.endsWith("/")?"":`${e.pathname.split("/").slice(-1)[0]}/`}${t[0]}">${t[0]}</a></li>`)).join("\n")}</li></ul></body></html>`,r(void 0)}))}))}))))},events:{},on:function(e,r){return this.events[e]=r,this.run().then((()=>{"response"===e&&this.events.response(t.endsWith(".svg")?{Server:"local","Content-Type":"image/svg+xml"}:{Server:"local"},0),"data"===e&&this.data&&(this.events.data(this.data),this.events.end()),"error"===e&&this.error&&this.events.error(this.error)})),this},end:function(){return this},request:function(){return this}}},w=(e,t,r)=>`<!doctype html>\n<html lang="en">\n<head>\n<title>&#x${e.toString(16)}; local-traffic ${t} | ${r}</title>\n<link href="https://cdn.jsdelivr.net/npm/bootstrap@latest/dist/css/bootstrap.min.css" rel="stylesheet"/>\n<script src="https://cdn.jsdelivr.net/npm/jquery@latest/dist/jquery.min.js"><\/script>\n<script src="https://cdn.jsdelivr.net/npm/bootstrap@latest/dist/js/bootstrap.bundle.min.js"><\/script>\n</head>\n<body><div class="container"><h1>&#x${e.toString(16)}; local-traffic ${t}</h1>\n<br/>`,E=(e,t,r,o)=>`${w(128163,"error",e.message)}\n<p>An error happened while trying to proxy a remote exchange</p>\n<div class="alert alert-warning" role="alert">\n  &#x24D8;&nbsp;This is not an error from the downstream service.\n</div>\n<div class="alert alert-danger" role="alert">\n<pre><code>${e.stack||`<i>${e.name} : ${e.message}</i>`}${e.errno?`<br/>(code : ${e.errno})`:""}</code></pre>\n</div>\nMore information about the request :\n<table class="table">\n  <tbody>\n    <tr>\n      <td>phase</td>\n      <td>${t}</td>\n    </tr>\n    <tr>\n      <td>requested URL</td>\n      <td>${r}</td>\n    </tr>\n    <tr>\n      <td>downstream URL</td>\n      <td>${o||"&lt;no-target-url&gt;"}</td>\n    </tr>\n  </tbody>\n</table>\n</div></body></html>`,b=(e,t,r)=>{t.writeHead(e,void 0,{"content-type":"text/html","content-length":r.length}),t.end(r)},y=e=>{const t=(e.headers[":authority"]?.toString()??e.headers.host??"localhost").replace(/:.*/,""),r=e.headers[":authority"]||`${e.headers.host}${e.headers.host.match(/:[0-9]+$/)?"":80!==h.port||h.ssl?443===h.port&&h.ssl?"":`:${h.port}`:""}`,n=new o.URL(`http${h.ssl?"s":""}://${r}${e.url}`),s=n.href.substring(n.origin.length),[a,i]=Object.entries({...Object.assign({},...Object.entries(h.mapping).map((([e,t])=>({[e]:new o.URL($(t))}))))}).find((([e])=>s.match(RegExp(e.replace(/^\//,"^/")))))||[];return{proxyHostname:t,proxyHostnameAndPort:r,url:n,path:s,key:a,target:i}},v=()=>{m=(h.ssl?e.createSecureServer.bind(null,{...h.ssl,allowHTTP1:!0}):t.createServer)((async(n,a)=>{if(!n.headers.host&&!n.headers[":authority"])return void b(400,a,Buffer.from(E(new Error("client must supply a 'host' header"),"proxy",new o.URL(`http${h.ssl?"s":""}://unknowndomain${n.url}`))));const{proxyHostname:i,proxyHostnameAndPort:l,url:p,path:d,key:m,target:u}=y(n);if(!u)return void b(502,a,Buffer.from(E(new Error(`No mapping found in config file ${c}`),"proxy",p)));const g=u.host.replace(RegExp(/\/+$/),""),R=`${u.href.substring("https://".length+u.host.length)}${$(d.replace(RegExp($(m)),""))}`.replace(/^\/*/,"/"),f=new o.URL(`${u.protocol}//${g}${R}`);let w=null,v=!h.dontUseHttp2Downstream;const N="file:"===u.protocol?O(f):v?await Promise.race([new Promise((t=>{const r=(0,e.connect)(f,{rejectUnauthorized:!1,protocol:u.protocol},((e,o)=>{v=v&&!!o.alpnProtocol,t(v?r:null)}));r.on("error",(e=>{w=v&&Buffer.from(E(e,"connection",p,f))}))})),new Promise((e=>setTimeout((()=>{v=!1,e(null)}),3e3)))]):null;w instanceof Buffer||(w=null);const U={...[...Object.entries(n.headers)].filter((([e])=>!["host","connection","keep-alive"].includes(e.toLowerCase()))).reduce(((e,[t,r])=>(e[t]=(e[t]||"")+(Array.isArray(r)?r:[r]).map((e=>e.replace(p.hostname,g))).join(", "),e)),{}),origin:u.href,referer:f.toString(),":authority":g,":method":n.method,":path":R,":scheme":u.protocol.replace(":","")},S=N&&!w&&N.request(U,{endStream:h.ssl?!(n?.stream?.readableLength??1):!n.readableLength});S?.on("error",(e=>{const t=-505===e.errno;w=Buffer.from(E(e,"stream"+(t?" (error -505 usually means that the downstream service does not support this http version)":""),p,f))}));const B={hostname:u.hostname,path:R,port:u.port,protocol:u.protocol,rejectUnauthorized:!1,method:n.method,headers:{...Object.assign({},...Object.entries(U).filter((([e])=>!e.startsWith(":")&&"transfer-encoding"!==e.toLowerCase())).map((([e,t])=>({[e]:t})))),host:u.hostname}},L=!w&&!v&&"file:"!==u.protocol&&await new Promise((e=>{const o="https:"===u.protocol?(0,r.request)(B,e):(0,t.request)(B,e);o.on("error",(t=>{w=Buffer.from(E(t,"request",p,f)),e(null)})),n.on("data",(e=>o.write(e))),n.on("end",(()=>o.end()))}));if(w)return void b(502,a,w);w=null,h.ssl&&n.stream&&n.stream.readableLength&&S&&(n.stream.on("data",(e=>S.write(e))),n.stream.on("end",(()=>S.end()))),!h.ssl&&n.readableLength&&S&&(n.on("data",(e=>S.write(e))),n.on("end",(()=>S.end())));const{outboundResponseHeaders:j}=await new Promise((e=>S?S.on("response",(t=>{e({outboundResponseHeaders:t})})):e(!S&&L?{outboundResponseHeaders:L.headers}:{outboundResponseHeaders:{}}))),x=j.location?new o.URL(j.location.startsWith("/")?`${u.href}${j.location.replace(/^\/+/,"")}`:j.location):null,D=x?x.href.substring(x.origin.length):null,T=p.origin,P=x?`${T}${D}`:null,C=S||L,H=w??await new Promise((e=>{let t=Buffer.alloc(0);C?(C.on("data",(e=>t=Buffer.concat([t,"string"==typeof e?Buffer.from(e):e]))),C.on("end",(()=>{e(t)}))):e(t)})).then((e=>h.replaceResponseBodyUrls&&e.length?(j["content-encoding"]||"").split(",").reduce((async(e,t)=>{const r=t.trim().toLowerCase(),o="gzip"===r||"x-gzip"===r?s.gunzip:"deflate"===r?s.inflate:"br"===r?s.brotliDecompress:"identity"===r||""===r?(e,t)=>{t(null,e)}:null;if(null===o)return void b(502,a,Buffer.from(E(new Error(`${r} compression not supported by the proxy`),"stream",p,f)));const n=await e;return await new Promise((e=>o(n,((t,r)=>{if(t)return b(502,a,Buffer.from(E(t,"stream",p,f))),void e(Buffer.from(""));e(r)}))))}),Promise.resolve(e)).then((e=>{const t=e.length>1e7,r=["text/html","application/javascript","application/json"].some((e=>(j["content-type"]??"").includes(e)));return!t&&(r||!/[^\x00-\x7F]/.test(e.toString()))?h.replaceResponseBodyUrls?Object.entries(h.mapping).reduce(((e,[t,r])=>""===t||t.match(/^[-a-zA-Z0-9()@:%_\+.~#?&//=]*$/)?e.replace(new RegExp(r.replace(/^file:\/\//,"").replace(/[*+?^${}()|[\]\\]/g,"").replace(/^https/,"https?")+"/*","ig"),`https://${l}${t.replace(/\/+$/,"")}/`):e),e.toString()).split(`${l}/:`).join(`${l}:`).replace(/\?protocol=wss?%3A&hostname=[^&]+&port=[0-9]+&pathname=/g,`?protocol=ws${h.ssl?"s":""}%3A&hostname=${i}&port=${h.port}&pathname=${encodeURIComponent(m.replace(/\/+$/,""))}`):e.toString():e})).then((e=>(j["content-encoding"]||"").split(",").reduce(((e,t)=>{const r=t.trim().toLowerCase(),o="gzip"===r||"x-gzip"===r?s.gzip:"deflate"===r?s.deflate:"br"===r?s.brotliCompress:"identity"===r||""===r?(e,t)=>{t(null,e)}:null;if(null===o)throw new Error(`${r} compression not supported by the proxy`);return e.then((e=>new Promise((t=>o(e,((e,r)=>{if(e)throw e;t(r)}))))))}),Promise.resolve(Buffer.from(e))))):e)),I={...Object.entries({...j,...h.replaceResponseBodyUrls?{"content-length":`${H.byteLength}`}:{}}).filter((([e])=>!e.startsWith(":")&&"transfer-encoding"!==e.toLowerCase()&&"connection"!==e.toLowerCase()&&"keep-alive"!==e.toLowerCase())).reduce(((e,[t,r])=>{const o=g.split("").map(((e,t)=>g.substring(t).startsWith(".")&&g.substring(t))).filter((e=>e)),n=[g].concat(o).reduce(((e,t)=>(Array.isArray(e)?e:[e]).map((e=>"string"==typeof e?e.replace(`Domain=${t}`,`Domain=${p.hostname}`):e))),r);return e[t]=(e[t]||[]).concat(n),e}),{}),...P?{location:[P]}:{}};try{Object.entries(I).forEach((([e,t])=>t&&a.setHeader(e,t)))}catch(e){}a.writeHead(j[":status"]||L.statusCode||200,h.ssl?void 0:L.statusMessage||"Status read from http/2",I),H?a.end(H):a.end()})).addListener("error",(e=>{"EACCES"===e.code&&u("permission denied for this port",i.ERROR,l.NO),"EADDRINUSE"===e.code&&u("port is already used. NOT started",i.ERROR,l.ERROR_6)})).addListener("listening",(()=>{g(h)})).on("upgrade",((e,n)=>{if(!h.websocket)return void n.end("HTTP/1.1 503 Service Unavailable\r\n\r\n");const{key:s,target:a}=y(e),p=new o.URL(`${a.protocol}//${a.host}${e.url.endsWith("/_next/webpack-hmr")?e.url:e.url.replace(new RegExp(`^${s}`,"g"),"").replace(/^\/*/,"/")}`),c={hostname:p.hostname,path:p.pathname,port:p.port,protocol:p.protocol,rejectUnauthorized:!1,method:e.method,headers:e.headers,host:p.hostname},d="https:"===p.protocol?(0,r.request)(c):(0,t.request)(c);d.end(),d.on("error",(e=>{u("websocket request has errored "+(e.errno?`(${e.errno})`:""),i.WARNING,l.WEBSOCKET)})),d.on("upgrade",((e,t)=>{const r=`HTTP/${e.httpVersion} ${e.statusCode} ${e.statusMessage}\r\n${Object.entries(e.headers).flatMap((([e,t])=>(Array.isArray(t)?t:[t]).map((t=>[e,t])))).map((([e,t])=>`${e}: ${t}\r\n`)).join("")}\r\n`;n.write(r),n.allowHalfOpen=!0,t.allowHalfOpen=!0,t.on("data",(e=>n.write(e))),n.on("data",(e=>t.write(e))),t.on("error",(e=>{u("downstream socket has errored "+(e.errno?`(${e.errno})`:""),i.WARNING,l.WEBSOCKET)})),n.on("error",(e=>{u("upstream socket has errored "+(e.errno?`(${e.errno})`:""),i.WARNING,l.WEBSOCKET)}))}))})).listen(h.port)};R().then(v);
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0});const e=require("http2"),t=require("http"),r=require("https"),o=require("url"),n=require("fs"),s=require("zlib"),a=require("path");var i,l;!function(e){e[e.ERROR=124]="ERROR",e[e.INFO=93]="INFO",e[e.WARNING=172]="WARNING"}(i||(i={})),function(e){e.INBOUND="↘️ ",e.PORT="☎️ ",e.OUTBOUND="↗️ ",e.RULES="🔗",e.BODY_REPLACEMENT="✒️ ",e.WEBSOCKET="☄️ ",e.COLORED="✨",e.SHIELD="🛡️ ",e.NO="⛔",e.ERROR_1="❌",e.ERROR_2="⛈️ ",e.ERROR_3="☢️ ",e.ERROR_4="⁉️ ",e.ERROR_5="⚡",e.ERROR_6="☠️ "}(l||(l={}));const p=(0,a.resolve)(process.env.HOME,".local-traffic.json"),c=(0,a.resolve)(process.cwd(),process.argv.slice(-1)[0].endsWith(".json")?process.argv.slice(-1)[0]:p),d={mapping:{},port:8080,replaceResponseBodyUrls:!1,dontUseHttp2Downstream:!1,simpleLogs:!1,websocket:!1,disableWebSecurity:!1};let h,u;const m=(e,t,r)=>{console.log(`${(e=>{const t=new Date;return`${e?"":""}${`${t.getHours()}`.padStart(2,"0")}${e?":":":"}${`${t.getMinutes()}`.padStart(2,"0")}${e?":":":"}${`${t.getSeconds()}`.padStart(2,"0")}${e?"":""}`})(h?.simpleLogs)} ${h?.simpleLogs?e.replace(/⎸/g,"|").replace(/⎹/g,"|").replace(/\u001b\[[^m]*m/g,"").replace(new RegExp(l.INBOUND,"g"),"inbound:").replace(new RegExp(l.PORT,"g"),"port:").replace(new RegExp(l.OUTBOUND,"g"),"outbound:").replace(new RegExp(l.RULES,"g"),"rules:").replace(new RegExp(l.NO,"g"),"").replace(new RegExp(l.BODY_REPLACEMENT,"g"),"body replacement").replace(new RegExp(l.WEBSOCKET,"g"),"websocket").replace(new RegExp(l.SHIELD,"g"),"web-security").replace(/\|+/g,"|"):t?`[48;5;${t}m⎸    ${process.stdout.isTTY&&r||""}  ${e.padEnd(40)} ⎹`:e}`)},g=e=>{m(`⎸${l.PORT} ${e.port.toString().padStart(5)} ⎸${l.INBOUND} ${e.ssl?"H/2 ":"H1.1"} ⎸${l.OUTBOUND} ${e.dontUseHttp2Downstream?"H1.1":"H/2 "}⎹⎸${l.RULES}${Object.keys(h.mapping).length.toString().padStart(3)}⎹⎸${h.replaceResponseBodyUrls?l.BODY_REPLACEMENT:l.NO}⎹⎸${h.websocket?l.WEBSOCKET:l.NO}⎹⎸${h.simpleLogs?l.NO:l.COLORED}⎹⎸${h.disableWebSecurity?l.NO:l.SHIELD}⎹`)},R=async(e=!0)=>new Promise((t=>(0,n.readFile)(c,((r,o)=>{r&&!e&&m("config error. Using default value",i.ERROR,l.ERROR_1);try{h=Object.assign({},d,JSON.parse((o||"{}").toString()))}catch(e){return m("config syntax incorrect, aborting",i.ERROR,l.ERROR_2),h=h||{...d},void t(h)}h.mapping[""]||m('default mapping "" not provided.',i.WARNING,l.ERROR_3),r&&"ENOENT"===r.code&&e&&c===p?(0,n.writeFile)(c,JSON.stringify(d),(e=>{e?m("config file NOT created",i.ERROR,l.ERROR_4):m("config file created",i.INFO,l.COLORED),t(h)})):t(h)})))).then((()=>{e&&(0,n.watchFile)(c,f)})),f=async()=>{const e={...h};return await R(!1),isNaN(h.port)||h.port>65535||h.port<0?(h=e,void m("port number invalid. Not refreshing",i.ERROR,l.PORT)):"object"!=typeof h.mapping?(h=e,void m("mapping should be an object. Aborting",i.ERROR,l.ERROR_5)):(h.replaceResponseBodyUrls!==e.replaceResponseBodyUrls&&m(`response body url ${h.replaceResponseBodyUrls?"":"NO "}replacement`,i.INFO,l.BODY_REPLACEMENT),h.dontUseHttp2Downstream!==e.dontUseHttp2Downstream&&m(`http/2 ${h.dontUseHttp2Downstream?"de":""}activated downstream`,i.INFO,l.OUTBOUND),h.disableWebSecurity!==e.disableWebSecurity&&m(`web security ${h.disableWebSecurity?"de":""}activated`,i.INFO,l.SHIELD),h.websocket!==e.websocket&&m(`websocket ${h.websocket?"":"de"}activated`,i.INFO,l.WEBSOCKET),h.simpleLogs!==e.simpleLogs&&m("simple logs "+(h.simpleLogs?"on":"off"),i.INFO,l.COLORED),Object.keys(h.mapping).join("\n")!==Object.keys(e.mapping).join("\n")&&m(`${Object.keys(h.mapping).length.toString().padStart(5)} loaded mapping rules`,i.INFO,l.RULES),h.port!==e.port&&m(`port changed from ${e.port} to ${h.port}`,i.INFO,l.PORT),h.ssl&&!e.ssl&&m("ssl configuration added",i.INFO,l.INBOUND),!h.ssl&&e.ssl&&m("ssl configuration removed",i.INFO,l.INBOUND),void(h.port!==e.port||JSON.stringify(h.ssl)!==JSON.stringify(e.ssl)?(await new Promise((e=>u?u.close(e):e(void 0))),v()):g(h)))},$=e=>""==e?"":(0,a.normalize)(e).replace(/\\/g,"/"),O=e=>{const t=(0,a.resolve)("/",e.hostname,...e.pathname.replace(/[?#].*$/,"").replace(/^\/+/,"").split("/"));return{error:null,data:null,hasRun:!1,run:function(){return this.hasRun?Promise.resolve():new Promise((r=>(0,n.readFile)(t,((o,s)=>{if(this.hasRun=!0,!o||"EISDIR"!==o.code)return this.error=o,this.data=s,void r(void 0);(0,n.readdir)(t,((t,o)=>{this.error=t,this.data=o,t?r(void 0):Promise.all(o.map((t=>new Promise((r=>(0,n.lstat)((0,a.resolve)(e.pathname,t),((e,o)=>r([t,o,e])))))))).then((t=>{const o=t.filter((e=>!e[2]&&e[1].isDirectory())).concat(t.filter((e=>!e[2]&&e[1].isFile())));this.data=`${w(128194,"directory",e.href)}<p>Directory content of <i>${e.href.replace(/\//g,"&#x002F;")}</i></p><ul class="list-group"><li class="list-group-item">&#x1F4C1;<a href="${e.pathname.endsWith("/")?"..":"."}">&lt;parent&gt;</a></li>${o.filter((e=>!e[2])).map((t=>`<li class="list-group-item">&#x${(t[1].isDirectory()?128193:128196).toString(16)};<a href="${e.pathname.endsWith("/")?"":`${e.pathname.split("/").slice(-1)[0]}/`}${t[0]}">${t[0]}</a></li>`)).join("\n")}</li></ul></body></html>`,r(void 0)}))}))}))))},events:{},on:function(e,r){return this.events[e]=r,this.run().then((()=>{"response"===e&&this.events.response(t.endsWith(".svg")?{Server:"local","Content-Type":"image/svg+xml"}:{Server:"local"},0),"data"===e&&this.data&&(this.events.data(this.data),this.events.end()),"error"===e&&this.error&&this.events.error(this.error)})),this},end:function(){return this},request:function(){return this}}},w=(e,t,r)=>`<!doctype html>\n<html lang="en">\n<head>\n<title>&#x${e.toString(16)}; local-traffic ${t} | ${r}</title>\n<link href="https://cdn.jsdelivr.net/npm/bootstrap@latest/dist/css/bootstrap.min.css" rel="stylesheet"/>\n<script src="https://cdn.jsdelivr.net/npm/jquery@latest/dist/jquery.min.js"><\/script>\n<script src="https://cdn.jsdelivr.net/npm/bootstrap@latest/dist/js/bootstrap.bundle.min.js"><\/script>\n</head>\n<body><div class="container"><h1>&#x${e.toString(16)}; local-traffic ${t}</h1>\n<br/>`,b=(e,t,r,o)=>`${w(128163,"error",e.message)}\n<p>An error happened while trying to proxy a remote exchange</p>\n<div class="alert alert-warning" role="alert">\n  &#x24D8;&nbsp;This is not an error from the downstream service.\n</div>\n<div class="alert alert-danger" role="alert">\n<pre><code>${e.stack||`<i>${e.name} : ${e.message}</i>`}${e.errno?`<br/>(code : ${e.errno})`:""}</code></pre>\n</div>\nMore information about the request :\n<table class="table">\n  <tbody>\n    <tr>\n      <td>phase</td>\n      <td>${t}</td>\n    </tr>\n    <tr>\n      <td>requested URL</td>\n      <td>${r}</td>\n    </tr>\n    <tr>\n      <td>downstream URL</td>\n      <td>${o||"&lt;no-target-url&gt;"}</td>\n    </tr>\n  </tbody>\n</table>\n</div></body></html>`,y=(e,t,r)=>{t.writeHead(e,void 0,{"content-type":"text/html","content-length":r.length}),t.end(r)},E=e=>{const t=(e.headers[":authority"]?.toString()??e.headers.host??"localhost").replace(/:.*/,""),r=e.headers[":authority"]||`${e.headers.host}${e.headers.host.match(/:[0-9]+$/)?"":80!==h.port||h.ssl?443===h.port&&h.ssl?"":`:${h.port}`:""}`,n=new o.URL(`http${h.ssl?"s":""}://${r}${e.url}`),s=n.href.substring(n.origin.length),[a,i]=Object.entries({...Object.assign({},...Object.entries(h.mapping).map((([e,t])=>({[e]:new o.URL($(t))}))))}).find((([e])=>s.match(RegExp(e.replace(/^\//,"^/")))))||[];return{proxyHostname:t,proxyHostnameAndPort:r,url:n,path:s,key:a,target:i}},v=()=>{u=(h.ssl?e.createSecureServer.bind(null,{...h.ssl,allowHTTP1:!0}):t.createServer)((async(n,a)=>{if(!n.headers.host&&!n.headers[":authority"])return void y(400,a,Buffer.from(b(new Error("client must supply a 'host' header"),"proxy",new o.URL(`http${h.ssl?"s":""}://unknowndomain${n.url}`))));const{proxyHostname:i,proxyHostnameAndPort:l,url:p,path:d,key:u,target:m}=E(n);if(!m)return void y(502,a,Buffer.from(b(new Error(`No mapping found in config file ${c}`),"proxy",p)));const g=m.host.replace(RegExp(/\/+$/),""),R=`${m.href.substring("https://".length+m.host.length)}${$(d.replace(RegExp($(u)),""))}`.replace(/^\/*/,"/"),f=new o.URL(`${m.protocol}//${g}${R}`);let w=null,v=!h.dontUseHttp2Downstream;const N="file:"===m.protocol?O(f):v?await Promise.race([new Promise((t=>{const r=(0,e.connect)(f,{rejectUnauthorized:!1,protocol:m.protocol},((e,o)=>{v=v&&!!o.alpnProtocol,t(v?r:null)}));r.on("error",(e=>{w=v&&Buffer.from(b(e,"connection",p,f))}))})),new Promise((e=>setTimeout((()=>{v=!1,e(null)}),3e3)))]):null;w instanceof Buffer||(w=null);const S={...[...Object.entries(n.headers)].filter((([e])=>!["host","connection","keep-alive"].includes(e.toLowerCase()))).reduce(((e,[t,r])=>(e[t]=(e[t]||"")+(Array.isArray(r)?r:[r]).map((e=>e.replace(p.hostname,g))).join(", "),e)),{}),origin:m.href,referer:f.toString(),":authority":g,":method":n.method,":path":R,":scheme":m.protocol.replace(":","")},U=N&&!w&&N.request(S,{endStream:h.ssl?!(n?.stream?.readableLength??1):!n.readableLength});U?.on("error",(e=>{const t=-505===e.errno;w=Buffer.from(b(e,"stream"+(t?" (error -505 usually means that the downstream service does not support this http version)":""),p,f))}));const L={hostname:m.hostname,path:R,port:m.port,protocol:m.protocol,rejectUnauthorized:!1,method:n.method,headers:{...Object.assign({},...Object.entries(S).filter((([e])=>!e.startsWith(":")&&"transfer-encoding"!==e.toLowerCase())).map((([e,t])=>({[e]:t})))),host:m.hostname}},B=!w&&!v&&"file:"!==m.protocol&&await new Promise((e=>{const o="https:"===m.protocol?(0,r.request)(L,e):(0,t.request)(L,e);o.on("error",(t=>{w=Buffer.from(b(t,"request",p,f)),e(null)})),n.on("data",(e=>o.write(e))),n.on("end",(()=>o.end()))}));if(w)return void y(502,a,w);w=null,h.ssl&&n.stream&&n.stream.readableLength&&U&&(n.stream.on("data",(e=>U.write(e))),n.stream.on("end",(()=>U.end()))),!h.ssl&&n.readableLength&&U&&(n.on("data",(e=>U.write(e))),n.on("end",(()=>U.end())));const{outboundResponseHeaders:j}=await new Promise((e=>U?U.on("response",(t=>{e({outboundResponseHeaders:t})})):e(!U&&B?{outboundResponseHeaders:B.headers}:{outboundResponseHeaders:{}}))),x=j.location?new o.URL(j.location.startsWith("/")?`${m.href}${j.location.replace(/^\/+/,"")}`:j.location):null,D=x?x.href.substring(x.origin.length):null,T=p.origin,H=x?`${T}${D}`:null,P=U||B,I=w??await new Promise((e=>{let t=Buffer.alloc(0);P?(P.on("data",(e=>t=Buffer.concat([t,"string"==typeof e?Buffer.from(e):e]))),P.on("end",(()=>{e(t)}))):e(t)})).then((e=>h.replaceResponseBodyUrls&&e.length?(j["content-encoding"]||"").split(",").reduce((async(e,t)=>{const r=t.trim().toLowerCase(),o="gzip"===r||"x-gzip"===r?s.gunzip:"deflate"===r?s.inflate:"br"===r?s.brotliDecompress:"identity"===r||""===r?(e,t)=>{t(null,e)}:null;if(null===o)return void y(502,a,Buffer.from(b(new Error(`${r} compression not supported by the proxy`),"stream",p,f)));const n=await e;return await new Promise((e=>o(n,((t,r)=>{if(t)return y(502,a,Buffer.from(b(t,"stream",p,f))),void e(Buffer.from(""));e(r)}))))}),Promise.resolve(e)).then((e=>{const t=e.length>1e7,r=["text/html","application/javascript","application/json"].some((e=>(j["content-type"]??"").includes(e)));return!t&&(r||!/[^\x00-\x7F]/.test(e.toString()))?h.replaceResponseBodyUrls?Object.entries(h.mapping).reduce(((e,[t,r])=>""===t||t.match(/^[-a-zA-Z0-9()@:%_\+.~#?&//=]*$/)?e.replace(new RegExp(r.replace(/^file:\/\//,"").replace(/[*+?^${}()|[\]\\]/g,"").replace(/^https/,"https?")+"/*","ig"),`https://${l}${t.replace(/\/+$/,"")}/`):e),e.toString()).split(`${l}/:`).join(`${l}:`).replace(/\?protocol=wss?%3A&hostname=[^&]+&port=[0-9]+&pathname=/g,`?protocol=ws${h.ssl?"s":""}%3A&hostname=${i}&port=${h.port}&pathname=${encodeURIComponent(u.replace(/\/+$/,""))}`):e.toString():e})).then((e=>(j["content-encoding"]||"").split(",").reduce(((e,t)=>{const r=t.trim().toLowerCase(),o="gzip"===r||"x-gzip"===r?s.gzip:"deflate"===r?s.deflate:"br"===r?s.brotliCompress:"identity"===r||""===r?(e,t)=>{t(null,e)}:null;if(null===o)throw new Error(`${r} compression not supported by the proxy`);return e.then((e=>new Promise((t=>o(e,((e,r)=>{if(e)throw e;t(r)}))))))}),Promise.resolve(Buffer.from(e))))):e)),C={...Object.entries({...j,...h.replaceResponseBodyUrls?{"content-length":`${I.byteLength}`}:{},...h.disableWebSecurity?{"content-security-policy":"report only","access-control-allow-headers":"*","access-control-allow-method":"*","access-control-allow-origin":"*"}:{}}).filter((([e])=>!e.startsWith(":")&&"transfer-encoding"!==e.toLowerCase()&&"connection"!==e.toLowerCase()&&"keep-alive"!==e.toLowerCase())).reduce(((e,[t,r])=>{const o=g.split("").map(((e,t)=>g.substring(t).startsWith(".")&&g.substring(t))).filter((e=>e)),n=[g].concat(o).reduce(((e,t)=>(Array.isArray(e)?e:[e]).map((e=>"string"==typeof e?e.replace(`Domain=${t}`,`Domain=${p.hostname}`):e))),r);return e[t]=(e[t]||[]).concat(n),e}),{}),...H?{location:[H]}:{}};try{Object.entries(C).forEach((([e,t])=>t&&a.setHeader(e,t)))}catch(e){}a.writeHead(j[":status"]||B.statusCode||200,h.ssl?void 0:B.statusMessage||"Status read from http/2",C),I?a.end(I):a.end()})).addListener("error",(e=>{"EACCES"===e.code&&m("permission denied for this port",i.ERROR,l.NO),"EADDRINUSE"===e.code&&m("port is already used. NOT started",i.ERROR,l.ERROR_6)})).addListener("listening",(()=>{g(h)})).on("upgrade",((e,n)=>{if(!h.websocket)return void n.end("HTTP/1.1 503 Service Unavailable\r\n\r\n");const{key:s,target:a}=E(e),p=new o.URL(`${a.protocol}//${a.host}${e.url.endsWith("/_next/webpack-hmr")?e.url:e.url.replace(new RegExp(`^${s}`,"g"),"").replace(/^\/*/,"/")}`),c={hostname:p.hostname,path:p.pathname,port:p.port,protocol:p.protocol,rejectUnauthorized:!1,method:e.method,headers:e.headers,host:p.hostname},d="https:"===p.protocol?(0,r.request)(c):(0,t.request)(c);d.end(),d.on("error",(e=>{m("websocket request has errored "+(e.errno?`(${e.errno})`:""),i.WARNING,l.WEBSOCKET)})),d.on("upgrade",((e,t)=>{const r=`HTTP/${e.httpVersion} ${e.statusCode} ${e.statusMessage}\r\n${Object.entries(e.headers).flatMap((([e,t])=>(Array.isArray(t)?t:[t]).map((t=>[e,t])))).map((([e,t])=>`${e}: ${t}\r\n`)).join("")}\r\n`;n.write(r),n.allowHalfOpen=!0,t.allowHalfOpen=!0,t.on("data",(e=>n.write(e))),n.on("data",(e=>t.write(e))),t.on("error",(e=>{m("downstream socket has errored "+(e.errno?`(${e.errno})`:""),i.WARNING,l.WEBSOCKET)})),n.on("error",(e=>{m("upstream socket has errored "+(e.errno?`(${e.errno})`:""),i.WARNING,l.WEBSOCKET)}))}))})).listen(h.port)};R().then(v);

package/index.ts

@@ -5,7 +5,6 @@ import {
   Http2Session,
   Http2ServerRequest,
   Http2ServerResponse,
-  Http2Stream,
   OutgoingHttpHeaders,
   SecureClientSessionOptions,
   SecureServerOptions,
@@ -51,6 +50,7 @@ enum EMOJIS {
   BODY_REPLACEMENT = "✒️ ",
   WEBSOCKET = "☄️ ",
   COLORED = "✨",
+  SHIELD = "🛡️ ",
   NO = "⛔",
   ERROR_1 = "❌",
   ERROR_2 = "⛈️ ",
@@ -68,6 +68,7 @@ interface LocalConfiguration {
   dontUseHttp2Downstream?: boolean;
   simpleLogs?: boolean;
   websocket?: boolean;
+  disableWebSecurity?: boolean;
 }
 
 const userHomeConfigFile = resolve(process.env.HOME, ".local-traffic.json");
@@ -84,6 +85,7 @@ const defaultConfig: LocalConfiguration = {
   dontUseHttp2Downstream: false,
   simpleLogs: false,
   websocket: false,
+  disableWebSecurity: false,
 };
 
 let config: LocalConfiguration;
@@ -117,11 +119,12 @@ const log = (text: string, level?: LogLevel, emoji?: string) => {
               "body replacement",
             )
             .replace(new RegExp(EMOJIS.WEBSOCKET, "g"), "websocket")
+            .replace(new RegExp(EMOJIS.SHIELD, "g"), "web-security")
             .replace(/\|+/g, "|")
         : level
         ? `\u001b[48;5;${level}m⎸    ${
             !process.stdout.isTTY ? "" : emoji || ""
-          }  ${text.padEnd(36)} ⎹\u001b[0m`
+          }  ${text.padEnd(40)} ⎹\u001b[0m`
         : text
     }`,
   );
@@ -143,6 +146,8 @@ const quickStatus = (thisConfig: LocalConfiguration) => {
       config.websocket ? EMOJIS.WEBSOCKET : EMOJIS.NO
     }⎹\u001b[48;5;93m⎸${
       !config.simpleLogs ? EMOJIS.COLORED : EMOJIS.NO
+    }⎹\u001b[48;5;98m⎸${
+      config.disableWebSecurity ? EMOJIS.NO : EMOJIS.SHIELD
     }⎹\u001b[0m`,
   );
 };
@@ -233,6 +238,13 @@ const onWatch = async () => {
       EMOJIS.OUTBOUND,
     );
   }
+  if (config.disableWebSecurity !== previousConfig.disableWebSecurity) {
+    log(
+      `web security ${config.disableWebSecurity ? "de" : ""}activated`,
+      LogLevel.INFO,
+      EMOJIS.SHIELD,
+    );
+  }
   if (config.websocket !== previousConfig.websocket) {
     log(
       `websocket ${!config.websocket ? "de" : ""}activated`,
@@ -303,7 +315,7 @@ const fileRequest = (url: URL): ClientHttp2Session => {
       .replace(/^\/+/, "")
       .split("/"),
   );
-  return ({
+  return {
     error: null as Error,
     data: null as string | Buffer,
     hasRun: false,
@@ -401,7 +413,7 @@ const fileRequest = (url: URL): ClientHttp2Session => {
     request: function () {
       return this;
     },
-  } as unknown) as ClientHttp2Session;
+  } as unknown as ClientHttp2Session;
 };
 
 const header = (
@@ -513,413 +525,308 @@ const determineMapping = (
 };
 
 const start = () => {
-  server = ((config.ssl
-    ? createSecureServer.bind(null, { ...config.ssl, allowHTTP1: true })
-    : createServer)(
-    async (
-      inboundRequest: Http2ServerRequest | IncomingMessage,
-      inboundResponse: Http2ServerResponse | ServerResponse,
-    ) => {
-      // phase: mapping
-      if (
-        !inboundRequest.headers.host &&
-        !inboundRequest.headers[":authority"]
-      ) {
-        send(
-          400,
-          inboundResponse,
-          Buffer.from(
-            errorPage(
-              new Error(`client must supply a 'host' header`),
-              "proxy",
-              new URL(
-                `http${config.ssl ? "s" : ""}://unknowndomain${
-                  inboundRequest.url
-                }`,
+  server = (
+    (config.ssl
+      ? createSecureServer.bind(null, { ...config.ssl, allowHTTP1: true })
+      : createServer)(
+      async (
+        inboundRequest: Http2ServerRequest | IncomingMessage,
+        inboundResponse: Http2ServerResponse | ServerResponse,
+      ) => {
+        // phase: mapping
+        if (
+          !inboundRequest.headers.host &&
+          !inboundRequest.headers[":authority"]
+        ) {
+          send(
+            400,
+            inboundResponse,
+            Buffer.from(
+              errorPage(
+                new Error(`client must supply a 'host' header`),
+                "proxy",
+                new URL(
+                  `http${config.ssl ? "s" : ""}://unknowndomain${
+                    inboundRequest.url
+                  }`,
+                ),
               ),
             ),
-          ),
-        );
-        return;
-      }
-      const {
-        proxyHostname,
-        proxyHostnameAndPort,
-        url,
-        path,
-        key,
-        target,
-      } = determineMapping(inboundRequest);
-      if (!target) {
-        send(
-          502,
-          inboundResponse,
-          Buffer.from(
-            errorPage(
-              new Error(`No mapping found in config file ${filename}`),
-              "proxy",
-              url,
+          );
+          return;
+        }
+        const { proxyHostname, proxyHostnameAndPort, url, path, key, target } =
+          determineMapping(inboundRequest);
+        if (!target) {
+          send(
+            502,
+            inboundResponse,
+            Buffer.from(
+              errorPage(
+                new Error(`No mapping found in config file ${filename}`),
+                "proxy",
+                url,
+              ),
             ),
-          ),
+          );
+          return;
+        }
+        const targetHost = target.host.replace(RegExp(/\/+$/), "");
+        const targetPrefix = target.href.substring(
+          "https://".length + target.host.length,
         );
-        return;
-      }
-      const targetHost = target.host.replace(RegExp(/\/+$/), "");
-      const targetPrefix = target.href.substring(
-        "https://".length + target.host.length,
-      );
-      const fullPath = `${targetPrefix}${unixNorm(
-        path.replace(RegExp(unixNorm(key)), ""),
-      )}`.replace(/^\/*/, "/");
-      const targetUrl = new URL(`${target.protocol}//${targetHost}${fullPath}`);
-
-      // phase: connection
-      let error: Buffer = null;
-      let http2IsSupported = !config.dontUseHttp2Downstream;
-      const outboundRequest: ClientHttp2Session =
-        target.protocol === "file:"
-          ? fileRequest(targetUrl)
-          : !http2IsSupported
-          ? null
-          : await Promise.race([
-              new Promise<ClientHttp2Session>(resolve => {
-                const result = connect(
-                  targetUrl,
-                  {
-                    rejectUnauthorized: false,
-                    protocol: target.protocol,
-                  } as SecureClientSessionOptions,
-                  (_, socketPath) => {
-                    http2IsSupported =
-                      http2IsSupported && !!(socketPath as any).alpnProtocol;
-                    resolve(!http2IsSupported ? null : result);
-                  },
-                );
-                ((result as unknown) as Http2Session).on(
-                  "error",
-                  (thrown: Error) => {
-                    error =
-                      http2IsSupported &&
-                      Buffer.from(
-                        errorPage(thrown, "connection", url, targetUrl),
-                      );
-                  },
-                );
-              }),
-              new Promise<ClientHttp2Session>(resolve =>
-                setTimeout(() => {
-                  http2IsSupported = false;
-                  resolve(null);
-                }, 3000),
-              ),
-            ]);
-      if (!(error instanceof Buffer)) error = null;
-
-      const outboundHeaders: OutgoingHttpHeaders = {
-        ...[...Object.entries(inboundRequest.headers)]
-          // host, connection and keep-alive are forbidden in http/2
-          .filter(
-            ([key]) => !["host", "connection", "keep-alive"].includes(key.toLowerCase()),
-          )
-          .reduce((acc: any, [key, value]) => {
-            acc[key] =
-              (acc[key] || "") +
-              (!Array.isArray(value) ? [value] : value)
-                .map(oneValue => oneValue.replace(url.hostname, targetHost))
-                .join(", ");
-            return acc;
-          }, {}),
-        origin: target.href,
-        referer: targetUrl.toString(),
-        ":authority": targetHost,
-        ":method": inboundRequest.method,
-        ":path": fullPath,
-        ":scheme": target.protocol.replace(":", ""),
-      };
-
-      const outboundExchange =
-        outboundRequest &&
-        !error &&
-        outboundRequest.request(outboundHeaders, {
-          endStream: config.ssl
-            ? !(
-                (inboundRequest as Http2ServerRequest)?.stream
-                  ?.readableLength ?? true
-              )
-            : !(inboundRequest as IncomingMessage).readableLength,
-        });
-
-      outboundExchange?.on("error", (thrown: Error) => {
-        const httpVersionSupported = (thrown as ErrorWithErrno).errno === -505;
-        error = Buffer.from(
-          errorPage(
-            thrown,
-            "stream" +
-              (httpVersionSupported
-                ? " (error -505 usually means that the downstream service " +
-                  "does not support this http version)"
-                : ""),
-            url,
-            targetUrl,
-          ),
+        const fullPath = `${targetPrefix}${unixNorm(
+          path.replace(RegExp(unixNorm(key)), ""),
+        )}`.replace(/^\/*/, "/");
+        const targetUrl = new URL(
+          `${target.protocol}//${targetHost}${fullPath}`,
         );
-      });
 
-      const http1RequestOptions: RequestOptions = {
-        hostname: target.hostname,
-        path: fullPath,
-        port: target.port,
-        protocol: target.protocol,
-        rejectUnauthorized: false,
-        method: inboundRequest.method,
-        headers: {
-          ...Object.assign(
-            {},
-            ...Object.entries(outboundHeaders)
-              .filter(
-                ([h]) =>
-                  !h.startsWith(":") && h.toLowerCase() !== "transfer-encoding",
-              )
-              .map(([key, value]) => ({ [key]: value })),
-          ),
-          host: target.hostname,
-        },
-      };
-      const outboundHttp1Response: IncomingMessage =
-        !error &&
-        !http2IsSupported &&
-        target.protocol !== "file:" &&
-        (await new Promise(resolve => {
-          const outboundHttp1Request: ClientRequest =
-            target.protocol === "https:"
-              ? httpsRequest(http1RequestOptions, resolve)
-              : httpRequest(http1RequestOptions, resolve);
+        // phase: connection
+        let error: Buffer = null;
+        let http2IsSupported = !config.dontUseHttp2Downstream;
+        const outboundRequest: ClientHttp2Session =
+          target.protocol === "file:"
+            ? fileRequest(targetUrl)
+            : !http2IsSupported
+            ? null
+            : await Promise.race([
+                new Promise<ClientHttp2Session>(resolve => {
+                  const result = connect(
+                    targetUrl,
+                    {
+                      rejectUnauthorized: false,
+                      protocol: target.protocol,
+                    } as SecureClientSessionOptions,
+                    (_, socketPath) => {
+                      http2IsSupported =
+                        http2IsSupported && !!(socketPath as any).alpnProtocol;
+                      resolve(!http2IsSupported ? null : result);
+                    },
+                  );
+                  (result as unknown as Http2Session).on(
+                    "error",
+                    (thrown: Error) => {
+                      error =
+                        http2IsSupported &&
+                        Buffer.from(
+                          errorPage(thrown, "connection", url, targetUrl),
+                        );
+                    },
+                  );
+                }),
+                new Promise<ClientHttp2Session>(resolve =>
+                  setTimeout(() => {
+                    http2IsSupported = false;
+                    resolve(null);
+                  }, 3000),
+                ),
+              ]);
+        if (!(error instanceof Buffer)) error = null;
 
-          outboundHttp1Request.on("error", thrown => {
-            error = Buffer.from(errorPage(thrown, "request", url, targetUrl));
-            resolve(null as IncomingMessage);
+        const outboundHeaders: OutgoingHttpHeaders = {
+          ...[...Object.entries(inboundRequest.headers)]
+            // host, connection and keep-alive are forbidden in http/2
+            .filter(
+              ([key]) =>
+                !["host", "connection", "keep-alive"].includes(
+                  key.toLowerCase(),
+                ),
+            )
+            .reduce((acc: any, [key, value]) => {
+              acc[key] =
+                (acc[key] || "") +
+                (!Array.isArray(value) ? [value] : value)
+                  .map(oneValue => oneValue.replace(url.hostname, targetHost))
+                  .join(", ");
+              return acc;
+            }, {}),
+          origin: target.href,
+          referer: targetUrl.toString(),
+          ":authority": targetHost,
+          ":method": inboundRequest.method,
+          ":path": fullPath,
+          ":scheme": target.protocol.replace(":", ""),
+        };
+
+        const outboundExchange =
+          outboundRequest &&
+          !error &&
+          outboundRequest.request(outboundHeaders, {
+            endStream: config.ssl
+              ? !(
+                  (inboundRequest as Http2ServerRequest)?.stream
+                    ?.readableLength ?? true
+                )
+              : !(inboundRequest as IncomingMessage).readableLength,
           });
-          inboundRequest.on("data", chunk => outboundHttp1Request.write(chunk));
-          inboundRequest.on("end", () => outboundHttp1Request.end());
-        }));
-      // intriguingly, error is reset to "false" at this point, even if it was null
-      if (error) {
-        send(502, inboundResponse, error);
-        return;
-      } else error = null;
 
-      // phase : request body
-      if (
-        config.ssl && // http/2
-        (inboundRequest as Http2ServerRequest).stream &&
-        (inboundRequest as Http2ServerRequest).stream.readableLength &&
-        outboundExchange
-      ) {
-        (inboundRequest as Http2ServerRequest).stream.on("data", chunk =>
-          outboundExchange.write(chunk),
-        );
-        (inboundRequest as Http2ServerRequest).stream.on("end", () =>
-          outboundExchange.end(),
-        );
-      }
+        outboundExchange?.on("error", (thrown: Error) => {
+          const httpVersionSupported =
+            (thrown as ErrorWithErrno).errno === -505;
+          error = Buffer.from(
+            errorPage(
+              thrown,
+              "stream" +
+                (httpVersionSupported
+                  ? " (error -505 usually means that the downstream service " +
+                    "does not support this http version)"
+                  : ""),
+              url,
+              targetUrl,
+            ),
+          );
+        });
 
-      if (
-        !config.ssl && // http1.1
-        (inboundRequest as IncomingMessage).readableLength &&
-        outboundExchange
-      ) {
-        (inboundRequest as IncomingMessage).on("data", chunk =>
-          outboundExchange.write(chunk),
-        );
-        (inboundRequest as IncomingMessage).on("end", () =>
-          outboundExchange.end(),
-        );
-      }
+        const http1RequestOptions: RequestOptions = {
+          hostname: target.hostname,
+          path: fullPath,
+          port: target.port,
+          protocol: target.protocol,
+          rejectUnauthorized: false,
+          method: inboundRequest.method,
+          headers: {
+            ...Object.assign(
+              {},
+              ...Object.entries(outboundHeaders)
+                .filter(
+                  ([h]) =>
+                    !h.startsWith(":") &&
+                    h.toLowerCase() !== "transfer-encoding",
+                )
+                .map(([key, value]) => ({ [key]: value })),
+            ),
+            host: target.hostname,
+          },
+        };
+        const outboundHttp1Response: IncomingMessage =
+          !error &&
+          !http2IsSupported &&
+          target.protocol !== "file:" &&
+          (await new Promise(resolve => {
+            const outboundHttp1Request: ClientRequest =
+              target.protocol === "https:"
+                ? httpsRequest(http1RequestOptions, resolve)
+                : httpRequest(http1RequestOptions, resolve);
 
-      // phase : response headers
-      const { outboundResponseHeaders } = await new Promise<{
-        outboundResponseHeaders: IncomingHttpHeaders & IncomingHttpStatusHeader;
-      }>(resolve =>
-        outboundExchange
-          ? outboundExchange.on("response", headers => {
-              resolve({
-                outboundResponseHeaders: headers,
-              });
-            })
-          : !outboundExchange && outboundHttp1Response
-          ? resolve({
-              outboundResponseHeaders: outboundHttp1Response.headers,
-            })
-          : resolve({
-              outboundResponseHeaders: {},
-            }),
-      );
+            outboundHttp1Request.on("error", thrown => {
+              error = Buffer.from(errorPage(thrown, "request", url, targetUrl));
+              resolve(null as IncomingMessage);
+            });
+            inboundRequest.on("data", chunk =>
+              outboundHttp1Request.write(chunk),
+            );
+            inboundRequest.on("end", () => outboundHttp1Request.end());
+          }));
+        // intriguingly, error is reset to "false" at this point, even if it was null
+        if (error) {
+          send(502, inboundResponse, error);
+          return;
+        } else error = null;
 
-      const newUrl = !outboundResponseHeaders["location"]
-        ? null
-        : new URL(
-            outboundResponseHeaders["location"].startsWith("/")
-              ? `${target.href}${outboundResponseHeaders["location"].replace(
-                  /^\/+/,
-                  ``,
-                )}`
-              : outboundResponseHeaders["location"],
+        // phase : request body
+        if (
+          config.ssl && // http/2
+          (inboundRequest as Http2ServerRequest).stream &&
+          (inboundRequest as Http2ServerRequest).stream.readableLength &&
+          outboundExchange
+        ) {
+          (inboundRequest as Http2ServerRequest).stream.on("data", chunk =>
+            outboundExchange.write(chunk),
+          );
+          (inboundRequest as Http2ServerRequest).stream.on("end", () =>
+            outboundExchange.end(),
           );
-      const newPath = !newUrl
-        ? null
-        : newUrl.href.substring(newUrl.origin.length);
-      const newTarget = url.origin;
-      const newTargetUrl = !newUrl ? null : `${newTarget}${newPath}`;
+        }
 
-      // phase : response body
-      const payloadSource = outboundExchange || outboundHttp1Response;
-      const payload: Buffer =
-        error ??
-        (await new Promise(resolve => {
-          let partialBody = Buffer.alloc(0);
-          if (!payloadSource) {
-            resolve(partialBody);
-            return;
-          }
-          (payloadSource as ClientHttp2Stream | Duplex).on(
-            "data",
-            (chunk: Buffer | string) =>
-              (partialBody = Buffer.concat([
-                partialBody,
-                typeof chunk === "string"
-                  ? Buffer.from(chunk as string)
-                  : (chunk as Buffer),
-              ])),
+        if (
+          !config.ssl && // http1.1
+          (inboundRequest as IncomingMessage).readableLength &&
+          outboundExchange
+        ) {
+          (inboundRequest as IncomingMessage).on("data", chunk =>
+            outboundExchange.write(chunk),
           );
-          (payloadSource as any).on("end", () => {
-            resolve(partialBody);
-          });
-        }).then((payloadBuffer: Buffer) => {
-          if (!config.replaceResponseBodyUrls) return payloadBuffer;
-          if (!payloadBuffer.length) return payloadBuffer;
+          (inboundRequest as IncomingMessage).on("end", () =>
+            outboundExchange.end(),
+          );
+        }
 
-          return (outboundResponseHeaders["content-encoding"] || "")
-            .split(",")
-            .reduce(
-              async (buffer: Promise<Buffer>, formatNotTrimed: string) => {
-                const format = formatNotTrimed.trim().toLowerCase();
-                const method =
-                  format === "gzip" || format === "x-gzip"
-                    ? gunzip
-                    : format === "deflate"
-                    ? inflate
-                    : format === "br"
-                    ? brotliDecompress
-                    : format === "identity" || format === ""
-                    ? (
-                        input: Buffer,
-                        callback: (err?: Error, data?: Buffer) => void,
-                      ) => {
-                        callback(null, input);
-                      }
-                    : null;
-                if (method === null) {
-                  send(
-                    502,
-                    inboundResponse,
-                    Buffer.from(
-                      errorPage(
-                        new Error(
-                          `${format} compression not supported by the proxy`,
-                        ),
-                        "stream",
-                        url,
-                        targetUrl,
-                      ),
-                    ),
-                  );
-                  return;
-                }
+        // phase : response headers
+        const { outboundResponseHeaders } = await new Promise<{
+          outboundResponseHeaders: IncomingHttpHeaders &
+            IncomingHttpStatusHeader;
+        }>(resolve =>
+          outboundExchange
+            ? outboundExchange.on("response", headers => {
+                resolve({
+                  outboundResponseHeaders: headers,
+                });
+              })
+            : !outboundExchange && outboundHttp1Response
+            ? resolve({
+                outboundResponseHeaders: outboundHttp1Response.headers,
+              })
+            : resolve({
+                outboundResponseHeaders: {},
+              }),
+        );
 
-                const openedBuffer = await buffer;
-                return await new Promise<Buffer>(resolve =>
-                  method(openedBuffer, (err_1, data_1) => {
-                    if (err_1) {
-                      send(
-                        502,
-                        inboundResponse,
-                        Buffer.from(errorPage(err_1, "stream", url, targetUrl)),
-                      );
-                      resolve(Buffer.from(""));
-                      return;
-                    }
-                    resolve(data_1);
-                  }),
-                );
-              },
-              Promise.resolve(payloadBuffer),
-            )
-            .then((uncompressedBuffer: Buffer) => {
-              const fileTooBig = uncompressedBuffer.length > 1e7;
-              const fileHasSpecialChars = () =>
-                /[^\x00-\x7F]/.test(uncompressedBuffer.toString());
-              const contentTypeCanBeProcessed = [
-                "text/html",
-                "application/javascript",
-                "application/json",
-              ].some(allowedContentType =>
-                (outboundResponseHeaders["content-type"] ?? "").includes(
-                  allowedContentType,
-                ),
-              );
-              const willReplace =
-                !fileTooBig &&
-                (contentTypeCanBeProcessed || !fileHasSpecialChars());
-              return !willReplace
-                ? uncompressedBuffer
-                : !config.replaceResponseBodyUrls
-                ? uncompressedBuffer.toString()
-                : Object.entries(config.mapping)
-                    .reduce(
-                      (inProgress, [path, mapping]) =>
-                        path !== "" &&
-                        !path.match(/^[-a-zA-Z0-9()@:%_\+.~#?&//=]*$/)
-                          ? inProgress
-                          : inProgress.replace(
-                              new RegExp(
-                                mapping
-                                  .replace(/^file:\/\//, "")
-                                  .replace(/[*+?^${}()|[\]\\]/g, "")
-                                  .replace(/^https/, "https?") + "/*",
-                                "ig",
-                              ),
-                              `https://${proxyHostnameAndPort}${path.replace(
-                                /\/+$/,
-                                "",
-                              )}/`,
-                            ),
-                      uncompressedBuffer.toString(),
-                    )
-                    .split(`${proxyHostnameAndPort}/:`)
-                    .join(`${proxyHostnameAndPort}:`)
-                    .replace(
-                      /\?protocol=wss?%3A&hostname=[^&]+&port=[0-9]+&pathname=/g,
-                      `?protocol=ws${
-                        config.ssl ? "s" : ""
-                      }%3A&hostname=${proxyHostname}&port=${
-                        config.port
-                      }&pathname=${encodeURIComponent(
-                        key.replace(/\/+$/, ""),
-                      )}`,
-                    );
-            })
-            .then((updatedBody: Buffer | string) =>
-              (outboundResponseHeaders["content-encoding"] || "")
-                .split(",")
-                .reduce((buffer: Promise<Buffer>, formatNotTrimed: string) => {
+        const newUrl = !outboundResponseHeaders["location"]
+          ? null
+          : new URL(
+              outboundResponseHeaders["location"].startsWith("/")
+                ? `${target.href}${outboundResponseHeaders["location"].replace(
+                    /^\/+/,
+                    ``,
+                  )}`
+                : outboundResponseHeaders["location"],
+            );
+        const newPath = !newUrl
+          ? null
+          : newUrl.href.substring(newUrl.origin.length);
+        const newTarget = url.origin;
+        const newTargetUrl = !newUrl ? null : `${newTarget}${newPath}`;
+
+        // phase : response body
+        const payloadSource = outboundExchange || outboundHttp1Response;
+        const payload: Buffer =
+          error ??
+          (await new Promise(resolve => {
+            let partialBody = Buffer.alloc(0);
+            if (!payloadSource) {
+              resolve(partialBody);
+              return;
+            }
+            (payloadSource as ClientHttp2Stream | Duplex).on(
+              "data",
+              (chunk: Buffer | string) =>
+                (partialBody = Buffer.concat([
+                  partialBody,
+                  typeof chunk === "string"
+                    ? Buffer.from(chunk as string)
+                    : (chunk as Buffer),
+                ])),
+            );
+            (payloadSource as any).on("end", () => {
+              resolve(partialBody);
+            });
+          }).then((payloadBuffer: Buffer) => {
+            if (!config.replaceResponseBodyUrls) return payloadBuffer;
+            if (!payloadBuffer.length) return payloadBuffer;
+
+            return (outboundResponseHeaders["content-encoding"] || "")
+              .split(",")
+              .reduce(
+                async (buffer: Promise<Buffer>, formatNotTrimed: string) => {
                   const format = formatNotTrimed.trim().toLowerCase();
                   const method =
                     format === "gzip" || format === "x-gzip"
-                      ? gzip
+                      ? gunzip
                       : format === "deflate"
-                      ? deflate
+                      ? inflate
                       : format === "br"
-                      ? brotliCompress
+                      ? brotliDecompress
                       : format === "identity" || format === ""
                       ? (
                           input: Buffer,
@@ -928,90 +835,216 @@ const start = () => {
                           callback(null, input);
                         }
                       : null;
-                  if (method === null)
-                    throw new Error(
-                      `${format} compression not supported by the proxy`,
+                  if (method === null) {
+                    send(
+                      502,
+                      inboundResponse,
+                      Buffer.from(
+                        errorPage(
+                          new Error(
+                            `${format} compression not supported by the proxy`,
+                          ),
+                          "stream",
+                          url,
+                          targetUrl,
+                        ),
+                      ),
                     );
+                    return;
+                  }
 
-                  return buffer.then(
-                    data =>
-                      new Promise<Buffer>(resolve =>
-                        method(data, (err, data) => {
-                          if (err) throw err;
-                          resolve(data);
-                        }),
-                      ),
+                  const openedBuffer = await buffer;
+                  return await new Promise<Buffer>(resolve =>
+                    method(openedBuffer, (err_1, data_1) => {
+                      if (err_1) {
+                        send(
+                          502,
+                          inboundResponse,
+                          Buffer.from(
+                            errorPage(err_1, "stream", url, targetUrl),
+                          ),
+                        );
+                        resolve(Buffer.from(""));
+                        return;
+                      }
+                      resolve(data_1);
+                    }),
                   );
-                }, Promise.resolve(Buffer.from(updatedBody))),
-            );
-        }));
-
-      // phase : inbound response
-      const responseHeaders = {
-        ...Object.entries({
-          ...outboundResponseHeaders,
-          ...(config.replaceResponseBodyUrls
-            ? { ["content-length"]: `${payload.byteLength}` }
-            : {}),
-        })
-          .filter(
-            ([h]) =>
-              !h.startsWith(":") &&
-              h.toLowerCase() !== "transfer-encoding" &&
-              h.toLowerCase() !== "connection" &&
-              h.toLowerCase() !== "keep-alive",
-          )
-          .reduce((acc: any, [key, value]: [string, string | string[]]) => {
-            const allSubdomains = targetHost
-              .split("")
-              .map(
-                (_, i) =>
-                  targetHost.substring(i).startsWith(".") &&
-                  targetHost.substring(i),
+                },
+                Promise.resolve(payloadBuffer),
               )
-              .filter(subdomain => subdomain) as string[];
-            const transformedValue = [targetHost].concat(allSubdomains).reduce(
-              (acc1, subDomain) =>
-                (!Array.isArray(acc1) ? [acc1] : (acc1 as string[])).map(
-                  oneElement => {
-                    return typeof oneElement === "string"
-                      ? oneElement.replace(
-                          `Domain=${subDomain}`,
-                          `Domain=${url.hostname}`,
-                        )
-                      : oneElement;
-                  },
-                ),
-              value,
-            );
+              .then((uncompressedBuffer: Buffer) => {
+                const fileTooBig = uncompressedBuffer.length > 1e7;
+                const fileHasSpecialChars = () =>
+                  /[^\x00-\x7F]/.test(uncompressedBuffer.toString());
+                const contentTypeCanBeProcessed = [
+                  "text/html",
+                  "application/javascript",
+                  "application/json",
+                ].some(allowedContentType =>
+                  (outboundResponseHeaders["content-type"] ?? "").includes(
+                    allowedContentType,
+                  ),
+                );
+                const willReplace =
+                  !fileTooBig &&
+                  (contentTypeCanBeProcessed || !fileHasSpecialChars());
+                return !willReplace
+                  ? uncompressedBuffer
+                  : !config.replaceResponseBodyUrls
+                  ? uncompressedBuffer.toString()
+                  : Object.entries(config.mapping)
+                      .reduce(
+                        (inProgress, [path, mapping]) =>
+                          path !== "" &&
+                          !path.match(/^[-a-zA-Z0-9()@:%_\+.~#?&//=]*$/)
+                            ? inProgress
+                            : inProgress.replace(
+                                new RegExp(
+                                  mapping
+                                    .replace(/^file:\/\//, "")
+                                    .replace(/[*+?^${}()|[\]\\]/g, "")
+                                    .replace(/^https/, "https?") + "/*",
+                                  "ig",
+                                ),
+                                `https://${proxyHostnameAndPort}${path.replace(
+                                  /\/+$/,
+                                  "",
+                                )}/`,
+                              ),
+                        uncompressedBuffer.toString(),
+                      )
+                      .split(`${proxyHostnameAndPort}/:`)
+                      .join(`${proxyHostnameAndPort}:`)
+                      .replace(
+                        /\?protocol=wss?%3A&hostname=[^&]+&port=[0-9]+&pathname=/g,
+                        `?protocol=ws${
+                          config.ssl ? "s" : ""
+                        }%3A&hostname=${proxyHostname}&port=${
+                          config.port
+                        }&pathname=${encodeURIComponent(
+                          key.replace(/\/+$/, ""),
+                        )}`,
+                      );
+              })
+              .then((updatedBody: Buffer | string) =>
+                (outboundResponseHeaders["content-encoding"] || "")
+                  .split(",")
+                  .reduce(
+                    (buffer: Promise<Buffer>, formatNotTrimed: string) => {
+                      const format = formatNotTrimed.trim().toLowerCase();
+                      const method =
+                        format === "gzip" || format === "x-gzip"
+                          ? gzip
+                          : format === "deflate"
+                          ? deflate
+                          : format === "br"
+                          ? brotliCompress
+                          : format === "identity" || format === ""
+                          ? (
+                              input: Buffer,
+                              callback: (err?: Error, data?: Buffer) => void,
+                            ) => {
+                              callback(null, input);
+                            }
+                          : null;
+                      if (method === null)
+                        throw new Error(
+                          `${format} compression not supported by the proxy`,
+                        );
 
-            acc[key] = (acc[key] || []).concat(transformedValue);
-            return acc;
-          }, {}),
-        ...(newTargetUrl ? { location: [newTargetUrl] } : {}),
-      };
-      try {
-        Object.entries(responseHeaders).forEach(
-          ([headerName, headerValue]) =>
-            headerValue &&
-            inboundResponse.setHeader(headerName, headerValue as string),
+                      return buffer.then(
+                        data =>
+                          new Promise<Buffer>(resolve =>
+                            method(data, (err, data) => {
+                              if (err) throw err;
+                              resolve(data);
+                            }),
+                          ),
+                      );
+                    },
+                    Promise.resolve(Buffer.from(updatedBody)),
+                  ),
+              );
+          }));
+
+        // phase : inbound response
+        const responseHeaders = {
+          ...Object.entries({
+            ...outboundResponseHeaders,
+            ...(config.replaceResponseBodyUrls
+              ? { ["content-length"]: `${payload.byteLength}` }
+              : {}),
+            ...(config.disableWebSecurity
+              ? {
+                  ["content-security-policy"]: "report only",
+                  ["access-control-allow-headers"]: "*",
+                  ["access-control-allow-method"]: "*",
+                  ["access-control-allow-origin"]: "*",
+                }
+              : {}),
+          })
+            .filter(
+              ([h]) =>
+                !h.startsWith(":") &&
+                h.toLowerCase() !== "transfer-encoding" &&
+                h.toLowerCase() !== "connection" &&
+                h.toLowerCase() !== "keep-alive",
+            )
+            .reduce((acc: any, [key, value]: [string, string | string[]]) => {
+              const allSubdomains = targetHost
+                .split("")
+                .map(
+                  (_, i) =>
+                    targetHost.substring(i).startsWith(".") &&
+                    targetHost.substring(i),
+                )
+                .filter(subdomain => subdomain) as string[];
+              const transformedValue = [targetHost]
+                .concat(allSubdomains)
+                .reduce(
+                  (acc1, subDomain) =>
+                    (!Array.isArray(acc1) ? [acc1] : (acc1 as string[])).map(
+                      oneElement => {
+                        return typeof oneElement === "string"
+                          ? oneElement.replace(
+                              `Domain=${subDomain}`,
+                              `Domain=${url.hostname}`,
+                            )
+                          : oneElement;
+                      },
+                    ),
+                  value,
+                );
+
+              acc[key] = (acc[key] || []).concat(transformedValue);
+              return acc;
+            }, {}),
+          ...(newTargetUrl ? { location: [newTargetUrl] } : {}),
+        };
+        try {
+          Object.entries(responseHeaders).forEach(
+            ([headerName, headerValue]) =>
+              headerValue &&
+              inboundResponse.setHeader(headerName, headerValue as string),
+          );
+        } catch (e) {
+          // ERR_HTTP2_HEADERS_SENT
+        }
+        inboundResponse.writeHead(
+          outboundResponseHeaders[":status"] ||
+            outboundHttp1Response.statusCode ||
+            200,
+          config.ssl
+            ? undefined // statusMessage is discarded in http/2
+            : outboundHttp1Response.statusMessage || "Status read from http/2",
+          responseHeaders,
         );
-      } catch (e) {
-        // ERR_HTTP2_HEADERS_SENT
-      }
-      inboundResponse.writeHead(
-        outboundResponseHeaders[":status"] ||
-          outboundHttp1Response.statusCode ||
-          200,
-        config.ssl
-          ? undefined // statusMessage is discarded in http/2
-          : outboundHttp1Response.statusMessage || "Status read from http/2",
-        responseHeaders,
-      );
-      if (payload) inboundResponse.end(payload);
-      else inboundResponse.end();
-    },
-  ) as Server)
+        if (payload) inboundResponse.end(payload);
+        else inboundResponse.end();
+      },
+    ) as Server
+  )
     .addListener("error", (err: Error) => {
       if ((err as ErrorWithErrno).code === "EACCES")
         log(`permission denied for this port`, LogLevel.ERROR, EMOJIS.NO);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "local-traffic",
-  "version": "0.0.44",
+  "version": "0.0.46",
   "main": "index.ts",
   "private": false,
   "keywords": [
@@ -24,7 +24,7 @@
     "build": "npm run clean && npm run typescript && npm run terser && npm run shebang && npm run chmod"
   },
   "devDependencies": {
-    "@types/node": "^18.15.3",
+    "@types/node": "^18.15.5",
     "terser": "^5.16.6",
     "typescript": "^5.0.2"
   },