SVR.JS on Node.JS 8.x and 9.x moving to LTS

SVR.JS 3.4.x will be last of supported SVR.JS versions for Node.JS 8.x and 9.x. If you are using these versions of Node.JS you will be able to use only SVR.JS LTS branch. SVR.JS will provide security updates and bug fixes for servers running those Node.JS versions until February 2024. No updates will be provided after that date.

Why has SVR.JS ended support for Node.JS 8.x and 9.x?

OpenJS Foundation ended official support for Node.JS 8.x in December 2019 and Node.JS 9.x in June 2018. Unsupported Node.JS versions receive no security updates and may have known vulnerabilities. With no official support from OpenJS Foundation, maintaining SVR.JS for obsolete Node.JS versions needs many constriants for SVR.JS authors and becomes dangerous for users.

Will switching to a different Node.JS-based server software keep me protected?

No. Most active Node.JS-based server software, including http-server (requires at least Node.JS 12.6.0), serve (requires at least Node.JS 14.0.0), and server.js (requires at least Node.JS 10.0.0) have already ended support for Node.JS 8.x and 9.x. Many other Node.JS-based server software, like svr (not SVR.JS; HTTP developement server), or ecstatic are no longer maintained, and may have unfixed security vulnerabilties.

Read More

How to create static HTTP server in Node.JS?

If you want to serve static files on your Node.JS web application, you can create a simple static HTTP server in Node.JS.
Node.JS is a event-driven server-side JavaScript runtime, that uses V8 JS engine (same as Chromium) and executes code outside a web browser.
In this article we will cover basics of implementation of HTTP server in Node.JS and build a simple static HTTP server.

Prerequisities

  • Node.JS installed on your development machine

Built-in HTTP module

Node.JS has built-in http module, which allows Node.JS to communicate over HyperText Transfer Protocol (HTTP).
To include that module, we use require() method:

Read More

IMPORTANT! Future versions of SVR.JS may drop support for Node.JS 8.x and 9.x

IMPORTANT! Future versions of SVR.JS may drop support for Node.JS 8.x and 9.x

Because Node.JS 8.x and 9.x are long EOL, we have decided, that future versions of SVR.JS may drop support for these versions.

If you want to still have up to date SVR.JS, you will need to get Node.JS 10.0.0 or newer.

Older versions of Node.JS also have various security vulnerabilities. Newer versions should be more secure.

Read More

We have released new version of RedBrick CGI engine!

RedBrick 2.0.0 is released!

When we checked RedBrick 1.0.0, it was old, non-compliant, fits only with SVR.JS 2.x… This is why we renewed RedBrick CGI engine. RedBrick 2.0.0 now uses SVR.JS 3.x methods (it’s still compatible with SVR.JS 2.x) and it’s more compliant with CGI standard.
We tried YaBB 2.5.2 on RedBrick. It works, but you need old version of Perl to make it fully work…

You can get RedBrick mod here.

Read More

SVR.JS 3.4.2 released!

We have just released SVR.JS 3.4.2!
In new version, we fixed bugs with regex-based non-standard HTTP status code settings. These bug have appeared since release of SVR.JS 3.0.0.
We encountered this bug, when we set redirect to YaBB (Perl and CGI-based forum software) forum page, when we developed new version of RedBrick CGI engine. It was redirect loop. Now with SVR.JS 3.4.2, this issue is gone!

You can download new version of SVR.JS here.

Read More

Exploring The Book of ZSOiE...

The Book of ZSOiE

The Book of ZSOiE reflects what students at ZSOiE (or rather its CyberSkiller Challenge Poland participants) has done, and also history of SVR.JS 3.x release.

In this quote shown in the picture, one of three CyberSkiller Challenge Poland participants used SVR.JS (more specifically SVR.JS 3.0.0-beta4) along with Node.JS to solve some challenges. Two other participants has helped him.

You can visit ZSOiE article here (it’s in Polish!). You can access The Book of ZSOiE by going to /zsoiebook.svr in web server running SVR.JS. SVR.JS even hosts The Book of ZSOiE here! SVR.JS website no longer hosts “The Book of ZSOiE”.

Read More