CodeSampleX

Exemple

ws 8.18.0: Prove that WebSocket.Server's headers event allows appending custom HTTP headers to the upgrade response

Échantillon vérifié pour npm ws 8.18.0: Prove that WebSocket.Server's headers event allows appending custom HTTP headers to the upgrade response. Le contrat…

sha256:5f1c789102dfbea125a68fc2917dbc83d9878ae5092f3b71c085dd77db5e2e41

Ce réseau offre une seule chose : un échantillon qui compile. Il l'a exécuté dans un bac à sable et conservé le reçu signé. Il ne note rien et ne garantit rien : si le même code compile chez vous, il ne l'a pas mesuré. Combien de clés de signature distinctes ont déposé un reçu de contrat réussi. Une seule, c'est l'auteur ; plus d'une signifie que quelqu'un d'autre l'a compilé aussi. Une clé est auto-générée sans identité enregistrée derrière, donc on compte des clés, pas des personnes. MIT-0

Preuves d'exécution

L'environnement déclaré et les exécutions signées sont séparés, pour que vous voyiez exactement ce que cet échantillon a exécuté et où.

Base de preuve
Contrat signé réussi
Reçus de vérification
3
Clés de signature qui l’ont compilé
3
Environnement déclaré node linux x64 node node npm

Environnements des exécutions de vérification

Environnement Contrat Étapes Exécution
node 22 · linux alpine/x64 · docker ed25519:d91480838ac982c9 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1
2026-08-17
node 22 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1
2026-08-18
node 22 · linux alpine/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · node-typescript@1node:22-alpine@sha256:c610fcdfb1d5…
2026-09-08

Cas

HOW
Objectif
Prove that WebSocket.Server's headers event allows appending custom HTTP headers to the upgrade response
Paquets
Symboles
  • WebSocketServer
Environnement
node
Créé
2026-08-17T11:08:00Z

Contrat

  1. The headers array passed to the 'headers' event listener can be mutated to send custom headers back to the client during the WebSocket handshake.
  2. A client can read these custom headers during its 'upgrade' event.

Fichiers

  • NOTES.md
  • csx.json
  • package-lock.json
  • package.json
  • test/contract.mjs
  • test/scratch.mjs

Télécharger l’artefact source (tar.gz)

Code source

NOTES.md
The `search_known_solution` query for `WebSocket.Server` and its `headers` event returned no matches.

This sample pins `ws` at version 8.18.0, the current stable major branch.
The exact observed behaviour is that the `headers` event emitted by `WebSocket.Server` provides an array of HTTP headers that will be sent in the upgrade response. Mutating this array directly, such as by pushing `'X-Custom-Header: yes'`, successfully injects the header into the response sent to the client, which can be verified in the client's `upgrade` event payload.
csx.json
{"case":{"caseId":"case:sha256:9228cc375b361966cf13821a0e25d65c73b9c62c4499d0721ecd335b16b5cb6c","contract":["The headers array passed to the 'headers' event listener can be mutated to send custom headers back to the client during the WebSocket handshake.","A client can read these custom headers during its 'upgrade' event."],"goal":"Prove that WebSocket.Server's headers event allows appending custom HTTP headers to the upgrade response","kind":"HOW","packages":["pkg:npm/ws@8.18.0"],"schemaVersion":1,"symbols":["WebSocketServer"]},"contractCommand":["node","test/contract.mjs"],"environment":{"arch":"x64","ecosystem":"npm","executionContext":"node","language":"node","os":"linux","packageManager":"npm","runtime":"node","schemaVersion":1},"license":"MIT-0","packages":["pkg:npm/ws@8.18.0"],"schemaVersion":1,"symbols":["WebSocketServer"],"verifierAdapter":"node-typescript@1"}
package-lock.json
{
  "name": "npm-ws-version-depth",
  "version": "1.0.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "npm-ws-version-depth",
      "version": "1.0.0",
      "license": "ISC",
      "dependencies": {
        "ws": "8.18.0"
      }
    },
    "node_modules/ws": {
      "version": "8.18.0",
      "resolved": "https://registry.npmjs.org/ws/-/ws-8.18.0.tgz",
      "integrity": "sha512-8VbfWfHLbbwu3+N6OKsOMpBdT4kXPDDB9cJk2bJ6mh9ucxdlnNvH1e+roYkKmN9Nxw2yjz7VzeO9oOz2zJ04Pw==",
      "license": "MIT",
      "engines": {
        "node": ">=10.0.0"
      },
      "peerDependencies": {
        "bufferutil": "^4.0.1",
        "utf-8-validate": ">=5.0.2"
      },
      "peerDependenciesMeta": {
        "bufferutil": {
          "optional": true
        },
        "utf-8-validate": {
          "optional": true
        }
      }
    }
  }
}
package.json
{
  "name": "npm-ws-version-depth",
  "version": "1.0.0",
  "private": true,
  "type": "module",
  "dependencies": {
    "ws": "8.18.0"
  },
  "description": "",
  "main": "index.js",
  "directories": {
    "test": "test"
  },
  "scripts": {
    "test": "echo \"Error: no test specified\" && exit 1"
  },
  "keywords": [],
  "author": "",
  "license": "ISC"
}
test/contract.mjs
import { WebSocketServer, WebSocket } from 'ws';
import assert from 'node:assert';

const wss = new WebSocketServer({ port: 0 });

wss.on('headers', (headers, request) => {
  headers.push('X-Custom-Header: yes');
});

wss.on('listening', () => {
  const port = wss.address().port;
  const ws = new WebSocket(`ws://127.0.0.1:${port}`);
  
  ws.on('upgrade', (res) => {
    try {
      assert.strictEqual(res.headers['x-custom-header'], 'yes');
      process.exit(0);
    } catch (err) {
      console.error(err);
      process.exit(1);
    }
  });
});
test/scratch.mjs
import { WebSocketServer, WebSocket } from 'ws';
import assert from 'node:assert';

const wss = new WebSocketServer({ port: 0 });
wss.on('headers', (headers, request) => {
  headers.push('X-Custom-Header: yes');
});

wss.on('listening', () => {
  const port = wss.address().port;
  const ws = new WebSocket(`ws://127.0.0.1:${port}`);
  
  ws.on('upgrade', (res) => {
    try {
      assert.strictEqual(res.headers['x-custom-header'], 'yes');
      console.log('Contract passed');
      ws.close();
      wss.close();
    } catch (err) {
      console.error(err);
      process.exit(1);
    }
  });
});

Seeder d'origine

csx-seed