pusher-js 8.4.2 → 8.4.3

package/integration_tests_server/package.json

@@ -9,7 +9,7 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "express": "^4.18.2",
+    "express": "^4.22.1",
     "pusher": "^5.1.1-beta"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pusher-js",
-  "version": "8.4.2",
+  "version": "8.4.3",
   "description": "Pusher Channels JavaScript library for browsers, React Native, NodeJS and web workers",
   "main": "dist/node/pusher.js",
   "browser": "dist/web/pusher.js",
@@ -68,12 +68,18 @@
     "tweetnacl": "^1.0.3"
   },
   "overrides": {
+    "body-parser": "^1.20.3",
+    "browserstack-local": "^1.5.12",
     "cipher-base": "^1.0.6",
     "compression": "^1.8.1",
+    "express": "^4.22.1",
     "js-yaml": "^3.14.2",
+    "lodash": "^4.17.23",
+    "minimatch": "^3.1.5",
     "node-forge": "^1.3.2",
     "on-headers": "^1.1.0",
     "pbkdf2": "^3.1.5",
+    "qs": "^6.14.0",
     "sha.js": "^2.4.12",
     "tmp": "^0.2.4"
   }

package/spec/config/karma/config.ci.js

@@ -1,25 +1,25 @@
 var config = {
-  browserStack: {
-    startTunnel: true,
-    timeout: 1800,
-  },
-  browsers: ['ChromeHeadless', 'FirefoxHeadless'],
+  browsers: ['ChromeHeadlessNoHttpsUpgrade', 'FirefoxHeadlessNoHttpsUpgrade'],
   customLaunchers: {
-    bs_safari_12: {
-      base: 'BrowserStack',
-      os_version: "Mojave",
-      browser: "Safari",
-      browser_version: "12",
-      os: "OS X"
+    // When forceTLS=true XHR tests run first, browsers store an HSTS entry for
+    // sockjs-*.pusher.com (Pusher servers send Strict-Transport-Security headers).
+    // Subsequent forceTLS=false XHR tests request HTTP URLs which are then
+    // silently upgraded to HTTPS via HSTS. The resulting CORS preflight for the
+    // upgraded URL fails, blocking the connection. Disabling web security (Chrome)
+    // or HTTPS-only mode (Firefox) bypasses this so the HSTS-upgraded HTTPS
+    // response is returned to the Pusher client and the connection can establish.
+    ChromeHeadlessNoHttpsUpgrade: {
+      base: 'ChromeHeadless',
+      flags: ['--disable-web-security']
+    },
+    FirefoxHeadlessNoHttpsUpgrade: {
+      base: 'FirefoxHeadless',
+      prefs: {
+        'dom.security.https_only_mode': false,
+        'network.stricttransportsecurity.preloadlist': false
+      }
     }
   }
 };
-if (process.env.CI === 'full' && browserStackCredsAvailable()) {
-  config.browsers.push('bs_safari_12');
-}
-
-function browserStackCredsAvailable() {
-  return process.env.BROWSER_STACK_USERNAME && process.env.BROWSER_STACK_ACCESS_KEY
-}
 
 module.exports = config;