added functionality to stop request even if socket is closed

[jamesbyrne113]

Why is this useful?

• This prevents a url redirection attack where a malicious user redirects to a localhost port and identifies which ports are open or not

What happened before this?

• Response would be ECONNREFUSED which lets a malicious user know that the port is closed.

An optional parameter has been created so that the feature can be turned on, default is that the feature is turned off

[azu]

Thanks for PR!

Can you create a test for this option?
(if possible)

stopUrlRedirectionAttack

I do not faimilar with this attack.
This behavior aim to stop port scan using URL redirection, so Its name will be like stopPortScanningByUrlRedirection?

[azu]

if(host && net.isIP(host)) { ... }

I prefer to use &&

[jamesbyrne113]

I've updated that, thanks!

[jamesbyrne113]

Thanks for PR!

Can you create a test for this option? (if possible)

stopUrlRedirectionAttack

I do not faimilar with this attack. This behavior aim to stop port scan using URL redirection, so Its name will be like stopPortScanningByUrlRedirection?

No problem! I've created the test for it and renamed the option field.

[azu]

Thanks!

Sorry to delay. I've released https://github.com/azu/request-filtering-agent/releases/tag/v1.1.0