Page MenuHomePhabricator

Upgrade express / connect or move to something else
Closed, ResolvedPublic

Description

We have recently encountered several bugs in the old connect / express version we are using:

  • error reporting recursion when setting headers after they are sent -- worked around in ParsoidService

We should consider upgrading either to a newer express version, or use another similar framework like restify.

Things to consider / ensure:

  • form data handling needs to support both urlencoded and multipart/form-data, and should not create temporary files
  • need continued support for gzip encoding etc
  • would be nice to have consistent JSON-based error reporting built in, but could also be implemented as a logging backend (although that might not handle errors in the framework)

Version: unspecified
Severity: normal
Whiteboard: techdebt

Details

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 3:05 AM
bzimport added a project: Parsoid.
bzimport set Reference to bz62326.

Rashomon is using restify and busboy, which seems to be working fine.

http://expressjs.com/2x/ now has a big red banner on it which says, "nown and unknown security and performance issues in 2.x have not been addressed since the last update (29 June, 2012). It is highly recommended to upgrade to Express 3.x or to Express 4.x."

See also bug 73395.

Change 173481 had a related patch set uploaded by Arlolra:
(Bug 62326) WIP: Upgrade express

https://gerrit.wikimedia.org/r/173481

Change 173481 had a related patch set uploaded (by Arlolra):
Upgrade express to 4.x

https://gerrit.wikimedia.org/r/173481

Change 173481 merged by jenkins-bot:
Upgrade express to 4.x

https://gerrit.wikimedia.org/r/173481