Test if a URL uses Node.js
dotheyusenode.herokuapp.com
Test if a URL uses Node.js
1–10 of 34 posts
Re: Test if a URL uses Node.js
#2If you can't tell if airbnb uses node, I'm note sure it works at all.
Re: Test if a URL uses Node.js
#3If you can't tell if airbnb uses node, I'm note sure it works at all.
I guess it's just checking for some header,like express has a special header... by the way, framework authors, please refrain from doing stuffs like that. The framework i use is nobody's business but mine.
Re: Test if a URL uses Node.js
#4If you can't tell if airbnb uses node, I'm note sure it works at all.
I guess it's just checking for some header,like express has a special header... by the way, framework authors, please refrain from doing stuffs like that. The framework i use is nobody's business but mine.
Exactly the same sentiment, making me put in extra effort to hide underlying technology seems ridiculous to me.
Re: Test if a URL uses Node.js
#5If you can't tell if airbnb uses node, I'm note sure it works at all.
I guess it's just checking for some header,like express has a special header... by the way, framework authors, please refrain from doing stuffs like that. The framework i use is nobody's business but mine.
Yeh, just looks at the header; node activity detected
Found x-powered-by: Express header in response
Re: Test if a URL uses Node.js
#6If you can't tell if airbnb uses node, I'm note sure it works at all.
I guess it's just checking for some header,like express has a special header... by the way, framework authors, please refrain from doing stuffs like that. The framework i use is nobody's business but mine.
+1, its the most horrible form of advertising.
And also, yes.. it checks headers (just threw up an Express project and got this: http://i.imgur.com/xpyfv0C.png)
Re: Test if a URL uses Node.js
#7Pretty pointless since all this does is check the x-powered-by HTTP response header (which can be turned off[1]). If this captured other web frameworks as well (eg PHP also outputs to x-powered-by in it's default config) then this might be a little less pointless - but even then, most production sites should have those information leaks sealed anyway (you don't actually improve security, but at least it slows the attacker down a little as you're not spoon-feeding them information about your server build)
[1] http://stackoverflow.com/questions/5867199/cant-get-rid-of-h...
Re: Test if a URL uses Node.js
#8nodejs.org
"Maybe, but we cannot tell"
Re: Test if a URL uses Node.js
#9Pretty pointless since all this does is check the x-powered-by HTTP response header (which can be turned off[1]). If this captured other web frameworks as well (eg PHP also outputs to x-powered-by in it's default config) then this might be a little less pointless - but even then, most production sites should have those information leaks sealed anyway (you don't actually improve security, but at least it slows the att…
Does node even have an x-powered-by response header by default?
I thought you need a framework (like Express.js) and then to not have turned off the header.
Re: Test if a URL uses Node.js
#10Just a heads up, there's already a handful of private staging/demo server URLs @ http://dotheyusenode.herokuapp.com/cache - you may want to reconsider exposing that for the publicly available instance.