worktile / request

记录HTTP请求，并把结果展现出来 - https://request.worktile.com

Request for Worktile

Request 提供一个地址可以接收任何HTTP请求，并把结果展现出来，用于审查HTTP客户端发送的内容或Webhook调试。

访问地址：http://request.worktile.com

使用技术

Node.js 0.12.x + Angular.js 1.4.x + sequelize(默认数据库 sqlite)

安装步骤

1. 安装 Node.js、Git 客户端；

2. 执行 git clone https://github.com/worktile/request 获取代码到本地

3. 执行 npm install gulp -g 和 npm install bower -g 安装 gulp 和 bower 工具；

4. 切换到代码根路径下，执行 npm install 和 bower install 安装服务端模块和前端模块；

5. 执行 gulp 生成 js，打开 http://localhost:8800 即可；

6. 执行 gulp build 压缩合并js 和 css；

7. 生产环境直接使用 bin/prod-web.sh 脚本启动，默认使用 pm2启动。

目录结构

1. server 文件夹主要存放服务端相关代码
2. www 存放前端相关代码文件
3. app.js 是启动文件

.
|-- bin
|-- data
|-- server
|   |-- config
|   |-- controller
|   |-- core
|   `-- data
|-- test
|-- www
|   |-- static
|   |   |-- css
|   |   |   `-- lib
|   |   |-- dist
|   |   |-- fonts
|   |   |-- img
|  |   `-- js
|  `-- view
|      `-- shared
|-- app.js

request's Issues

Is there a security risk in setting httponly to false?

The function initCookie sets "httpOnly" to false, allowing client-side JavaScript to access cookies that may contain sensitive data. This introduces potential security risks and vulnerabilities.
res.cookie("sid", sid, { expires : new Date(253402300000000), httpOnly: false, path : '/' });

Setting "httpOnly" to false may be due to specific design needs or use cases. In some cases, applications may need to access cookie data via JavaScript to implement specific functionality or to interact with other components. However, to be clear, setting "httpOnly" to false may increase potential security risks. Allowing client-side JavaScript to access cookies containing sensitive data can lead to security issues such as XSS attacks. An attacker could exploit the vulnerability to steal a user's credentials or perform malicious actions.

It is recommended to set "httpOnly" to true to enhance the platform's security and prevent cross-site scripting (XSS) attacks and other security vulnerabilities.

如果能够设置每个URL的返回值就好了

现在每个URL在发起请求时，如果请求成功都会返回OK，有些测试服务需要返回固定的值，所以如果能够为每个URL设置返回值，就完美了。

现在点击生成URL，怎么不能用了

502 Bad Gateway

http://request.lesschat.com/

Unknow request method

This is really awesome! Really useful tool for me , guess also for other developers.

Just one small problem , I try request with method "HEAD","OPTION","PATH".. and there show "Unknown" .
Here is the URL: http://request.lesschat.com/EyWIWMLa/inspect
Not effect for use, but better fix this .
Thanks!