[fix] Obfuscate ActiveXObject occurrences (#509)

Some corporate firewalls/proxies such as Blue Coat prevent JavaScript files from being downloaded if they contain the word "ActiveX".
socketio · Oct 23, 2016 · 7acae3d · 7acae3d
1 parent 6187585
commit 7acae3d
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/lib/xmlhttprequest.js b/lib/xmlhttprequest.js
@@ -1,8 +1,5 @@
 // browser shim for xmlhttprequest module
 
-// Indicate to eslint that ActiveXObject is global
-/* global ActiveXObject */
-
 var hasCORS = require('has-cors');
 
 module.exports = function (opts) {
@@ -34,7 +31,7 @@ module.exports = function (opts) {
 
   if (!xdomain) {
     try {
-      return new ActiveXObject('Microsoft.XMLHTTP');
+      return new global[['Active'].concat('Object').join('X')]('Microsoft.XMLHTTP');
     } catch (e) { }
   }
 };