test-request-aborted.js

#!/usr/bin/env node
/* eslint-disable no-console */
const superagent = require('superagent');
const stream = require('stream');

// Tests if the server is not vulnerable for this issue
// https://github.com/expressjs/body-parser/blob/master/README.md#request-aborted
const main = async () => {
  const request = superagent.post('http://localhost:8001/v1/rexio')
    .set('Content-Type', 'application/octet-stream');

  const s = new stream.Transform({
    transform(data, encoding, callback) {
      this.push(data);
      callback();
    },
  });

  setInterval(() => {
    s.write('f');
  }, 10);

  s.pipe(request);

  setTimeout(() => {
    request.abort();
    process.exit(0);
  }, 1000);
};

main();