shelf_host_validation 1.1.2 
shelf_host_validation: ^1.1.2 copied to clipboard
jxstxn.devValidates the 'Host' and 'Referer' Header so that DNS Rebinding Attacks wont work.
We analyzed this package 3 days ago, and awarded it 160 pub points (of a possible 160):
10/10 points: Provide a valid pubspec.yaml
Homepage URL doesn't exist.
At the time of the analysis https://jxstxn.de was unreachable. Make sure that the website is reachable via HEAD requests.
Issue tracker URL doesn't exist.
At the time of the analysis https://github.com/jxstxn1/shelf_host_validation/issues was unreachable. Make sure that the website is reachable via HEAD requests.
5/5 points: Provide a valid README.md
5/5 points: Provide a valid CHANGELOG.md
10/10 points: Use an OSI-approved license
Detected license: Apache-2.0.
10/10 points: 20% or more of the public API has dartdoc comments
4 out of 5 API elements (80.0 %) have documentation comments.
Some symbols that are missing documentation: shelf_host_validation.isAllowed.
10/10 points: Package has an example
20/20 points: Supports 6 of 6 possible platforms (iOS, Android, Web, Windows, macOS, Linux)
-
✓ Android
-
✓ iOS
-
✓ Windows
-
✓ Linux
-
✓ macOS
-
✓ Web
0/0 points: WASM compatibility
This package is compatible with runtime wasm, and will be rewarded additional points in a future version of the scoring model.
See https://dart.dev/web/wasm for details.
50/50 points: code has no errors, warnings, lints, or formatting issues
10/10 points: All of the package dependencies are supported in the latest version
| Package | Constraint | Compatible | Latest |
|---|---|---|---|
shelf |
^1.3.0 |
1.4.2 | 1.4.2 |
Transitive dependencies
| Package | Constraint | Compatible | Latest |
|---|---|---|---|
async |
- | 2.12.0 | 2.12.0 |
collection |
- | 1.19.1 | 1.19.1 |
http_parser |
- | 4.1.1 | 4.1.1 |
meta |
- | 1.16.0 | 1.16.0 |
path |
- | 1.9.1 | 1.9.1 |
source_span |
- | 1.10.1 | 1.10.1 |
stack_trace |
- | 1.12.1 | 1.12.1 |
stream_channel |
- | 2.1.3 | 2.1.3 |
string_scanner |
- | 1.4.1 | 1.4.1 |
term_glyph |
- | 1.2.2 | 1.2.2 |
typed_data |
- | 1.4.0 | 1.4.0 |
To reproduce run dart pub outdated --no-dev-dependencies --up-to-date --no-dependency-overrides.
10/10 points: Package supports latest stable Dart and Flutter SDKs
20/20 points: Compatible with dependency constraint lower bounds
pub downgrade does not expose any static analysis error.
Analyzed with Pana 0.22.17, Dart 3.6.0.
Check the analysis log for details.
Metadata
Publisher
Weekly Downloads
Metadata
Validates the 'Host' and 'Referer' Header so that DNS Rebinding Attacks wont work.
Homepage
Repository (GitHub)
View/report issues
Topics
#shelf #dart-frog #middleware #security #dns-rebinding
Documentation
License
Apache-2.0 (license)
