Merge branch 'main' of https://github.com/sagemathinc/http-proxy-3 into http2-incoming

Author: vhess

README.md

@@ -27,15 +27,16 @@ Contributors:
 
 **Status:**
 
-August 21, 2025 STATUS compared to [http-proxy](https://www.npmjs.com/package/http-proxy) and [httpxy](https://www.npmjs.com/package/httpxy):
+October 8, 2025 STATUS compared to [http-proxy](https://www.npmjs.com/package/http-proxy) and [httpxy](https://www.npmjs.com/package/httpxy):
 
 - Library entirely rewritten in Typescript in a modern style, with many typings added internally and strict mode enabled.
 - **HTTP/2 Support**: Full HTTP/2 support via fetch API with callback-based request/response lifecycle hooks.
 - All dependent packages updated to latest versions, addressing all security vulnerabilities according to `pnpm audit`.
 - Code rewritten to not use deprecated/insecure API's, e.g., using `URL` instead of `parse`.
-- Fixed socket leaks in the Websocket proxy code, going beyond [http-proxy-node16](https://www.npmjs.com/package/http-proxy-node16) to also instrument and logging socket counts. Also fixed an issue with uncatchable errors when using websockets.
+- Fixed multiple socket leaks in the Websocket proxy code, going beyond [http-proxy-node16](https://www.npmjs.com/package/http-proxy-node16) to also instrument and logging socket counts. Also fixed an issue with uncatchable errors when using websockets.
 - Switch to pnpm for development.
 - More jest unit tests than both http-proxy and httpxy: converted all the http-proxy examples into working unit tests that they actually work (http-proxy's unit tests just setup the examples in many cases, but didn't test that they actually work). Also httpxy seems to have almost no tests. These tests should make contributing PR's much easier.
+- [Partial HTTP2 support](https://github.com/sagemathinc/http-proxy-3/pull/33).
 - Addressed [this vulnerability](https://github.com/http-party/node-http-proxy/issues/1647).
 
 **Motivation:** http-proxy is one of the oldest and most famous nodejs modules, and it gets downloaded around 15 million times a week, and I've loved using it for years. Unfortunately, it is [unmaintained](https://github.com/http-party/node-http-proxy/issues/1687), it has significant leaks that [regularly crash production servers](https://github.com/jupyterhub/configurable-http-proxy/issues/434), and is written in ancient untyped Javascript. The maintainers have long since stopped responding, so there is no choice but to fork and start over. I wanted to do my part to help maintain the open source ecosystem, hence this library. I hope you find it useful.

lib/http-proxy/common.ts

@@ -335,10 +335,10 @@ export function toURL(
   if (url.startsWith("//")) {
     // special case -- this would be viewed as a this is a "network-path reference",
     // so we explicitly prefix with our http schema.  See
-    url = `http://dummy.org${url}`;
+    url = `http://base.invalid${url}`;
   }
   // urllib.Url is deprecated but we support it by converting to URL
-  return new URL(url, "http://dummy.org");
+  return new URL(url, "http://base.invalid");
 }
 
 // vendor simplified version of https://www.npmjs.com/package/requires-port to

lib/test/http/reverse-proxy.test.ts

@@ -26,7 +26,7 @@ describe("Reverse proxying -- create a server that...", () => {
     server = http
       .createServer((req, res) => {
         log("Receiving reverse proxy request for:", req.url);
-        const urlObj = new URL(req.url ?? "", "http://dummy.org");
+        const urlObj = new URL(req.url ?? "", "http://base.invalid");
         const target = urlObj.origin;
         proxy.web(req, res, { target, secure: false });
       })

lib/test/lib/http-proxy-common.test.ts

@@ -298,7 +298,7 @@ describe("#setupOutgoing", () => {
     setupOutgoing(
       outgoing,
       {
-        target: new URL("http://dummy.org/some-path?a=1&b=2"),
+        target: new URL("http://base.invalid/some-path?a=1&b=2"),
       },
       { url: "/src?s=1" },
     );
@@ -311,7 +311,7 @@ describe("#setupOutgoing", () => {
     setupOutgoing(
       outgoing,
       {
-        target: new URL("http://dummy.org/some-path?a=1&b=2"),
+        target: new URL("http://base.invalid/some-path?a=1&b=2"),
         ignorePath: true,
       },
       { url: "/src?s=1" },
@@ -329,7 +329,7 @@ describe("#setupOutgoing", () => {
     setupOutgoing(
       outgoing,
       {
-        target: new URL("http://sometarget.com:80", "http://dummy.org"),
+        target: new URL("http://sometarget.com:80", "http://base.invalid"),
         toProxy: true,
       },
       { url: google },
@@ -344,7 +344,7 @@ describe("#setupOutgoing", () => {
     setupOutgoing(
       outgoing,
       {
-        target: new URL("http://sometarget.com:80", "http://dummy.org"),
+        target: new URL("http://sometarget.com:80", "http://base.invalid"),
         toProxy: true,
       },
       { url: google },
@@ -359,7 +359,7 @@ describe("#setupOutgoing", () => {
     setupOutgoing(
       outgoing,
       {
-        target: new URL("http://sometarget.com:80", "http://dummy.org"),
+        target: new URL("http://sometarget.com:80", "http://base.invalid"),
         toProxy: true,
       },
       { url: google },
@@ -375,7 +375,7 @@ describe("#setupOutgoing", () => {
       setupOutgoing(
         outgoing,
         {
-          target: new URL(myEndpoint, "http://dummy.org"),
+          target: new URL(myEndpoint, "http://base.invalid"),
           ignorePath: true,
         },
         { url: "/more/crazy/pathness" },
@@ -390,7 +390,7 @@ describe("#setupOutgoing", () => {
       setupOutgoing(
         outgoing,
         {
-          target: new URL(myEndpoint, "http://dummy.org"),
+          target: new URL(myEndpoint, "http://base.invalid"),
           ignorePath: true,
           prependPath: false,
         },
@@ -408,7 +408,7 @@ describe("#setupOutgoing", () => {
       setupOutgoing(
         outgoing,
         {
-          target: new URL(myEndpoint, "http://dummy.org"),
+          target: new URL(myEndpoint, "http://base.invalid"),
           changeOrigin: true,
         },
         { url: "/" },
@@ -475,7 +475,7 @@ describe("#setupOutgoing", () => {
     setupOutgoing(
       outgoing,
       {
-        target: new URL("https://whooooo.com", "http://dummy.org"),
+        target: new URL("https://whooooo.com", "http://base.invalid"),
         method: "POST",
       },
       { method: "GET", url: "" },

lib/test/lib/http-proxy-passes-web-incoming.test.ts

@@ -691,7 +691,8 @@ describe("#followRedirects", () => {
       const source = http
         .createServer((req, res) => {
           if (
-            new URL(req.url ?? "", "http://dummy.org").pathname === "/redirect"
+            new URL(req.url ?? "", "http://base.invalid").pathname ===
+            "/redirect"
           ) {
             res.writeHead(200, { "Content-Type": "text/plain" });
             res.end("ok");

package.json

@@ -1,6 +1,6 @@
 {
   "name": "http-proxy-3",
-  "version": "1.21.1",
+  "version": "1.22.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/sagemathinc/http-proxy-3.git"