toxiproxy

Toxiproxy Toxiproxy 是一个用于模拟网络条件的框架。它专门为测试、持续集成和开发环境而设计，支持对连接进行确定性篡改，同时也支持随机故障注入和自定义场景。Toxiproxy 是你需要的工具，可以通过测试证明你的应用不存在单点故障。 自 2014 年 10 月以来，我们已在 Shopify 的所有开发和测试环境中成功使用它。更多信息请参阅我们关于弹性（resiliency）的博客文章blog。 Toxiproxy 的使用由两部分组成：一个用 Go 编写的 TCP 代理（即本仓库的内容），以及一个通过 HTTP 与该代理通信的客户端。你可以将应用配置为让所有测试连接都经过...

Malicious code in toxiproxy (npm)

The package toxiproxy was found to contain malicious code...

MAL-2025-37116 Malicious code in toxiproxy (npm)

The package toxiproxy was found to contain malicious code...

Fedora: Security Advisory for golang-github-shopify-toxiproxy (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-shopify-toxiproxy-2.1.4-11.fc36

Toxiproxy is a framework for simulating network conditions. It's made specifically to work in testing, CI and development environments, supporting deterministic tampering with connections, but with support for randomized chaos and customization. Toxiproxy is the tool you need to prove with tests...

Fedora: Security Advisory for golang-github-shopify-toxiproxy (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-github-shopify-toxiproxy-2.1.4-10.fc35

Toxiproxy is a framework for simulating network conditions. It's made specifically to work in testing, CI and development environments, supporting deterministic tampering with connections, but with support for randomized chaos and customization. Toxiproxy is the tool you need to prove with tests...

Same-Origin Policy Bypass

github.com/shopify/toxiproxy is vulnerable to same-origin policy bypass. A malicious user can use the library to bypass web browsers same origin policy and obtain sensitive information...

Shopify: [out-of-scope] toxiproxy: Lack of CSRF protection allows an attacker to gain access to internal Shopify network

Disclaimer In case this report ever becomes public I wanted to start it out with a disclaimer so it doesn't become referenced an example for out-of-scope/policy violating submissions in the future: At the time of submission this report is out-of-scope and as such I have no expectations of reward...