Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ws/build/config.gypi file contains envinroment variables including proxy authentication credentials #400

Closed
animedbz16 opened this issue Nov 19, 2014 · 2 comments

Comments

@animedbz16
Copy link

I'm using nvm to manage multiple versions of node and to install them under my user directory and I have installed module that has several dependencies that lead to this module being installed:

socket.io -> socket.io-client -> ws

Reviewing my ~/.nvm/ directory, I have noticed that my proxy authentication credentials have been stored into a config.gypi file under the ws module:

~/.nvm/<node version>/.../node_modules/socket.io/node_modules/socket.io-client/node_modules/ws/build/config.gypi

Entries exist for http_proxy, which are likely pulled out of the bash environment I set up to configure my proxy settings (e.g. http://<user>:<password>@proxy.<domain>.com:<port>) in order to connect to the internet to install modules via npm. This file appears to contain some other information regarding system environment settings, etc...

Just wondering why this file is getting created. Is it something to do specifically with this module? If it is necessary or not and it seems unwise to pull out some of these settings to store since it could contain sensitive information.

@animedbz16 animedbz16 changed the title ws/build/config.gypi file contains proxy authentication credentials ws/build/config.gypi file contains envinroment variables including proxy authentication credentials Nov 19, 2014
@3rd-Eden
Copy link
Member

It's probably generated by node-gyp during compilation of the binary add-ons. It's beyond our control. If you want to know more about it I suggest raising an issue at https://github.com/TooTallNate/node-gyp

@animedbz16
Copy link
Author

@3rd-Eden Thanks for the clarification. I'll open an issue there.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants