topic Inquiry on how Javascript integration works with Cortex XSOAR in Cortex XSOAR Discussions

Inquiry on how Javascript integration works with Cortex XSOAR

JoviTan — Tue, 23 May 2023 07:15:19 GMT

Hi Support,

We have a special setup on our cortex xsoar which allows podman to use a Proxy A for pulling images from docker repositories (via http_proxy and http_proxy) and a Proxy B for python integration (Via python.extra.keys) to access internet.

However with this setup, Javascript integrations are not working as by default it references http_proxy and https_proxy which uses Proxy A. Proxy A can only access docker repositories and not the internet. We need to set it to Proxy B.

Is there any configuration key we can use to allow Javascript integrations to use a specify proxy.

If not, does anyone have any idea how Javascript Integration is executed by XSOAR?

What type of Javascript Engine is used? (Nodejs, deno, etc)

Your help is greatly appreciated.

Thanks!

Best Regards,

Jovi

Re: Inquiry on how Javascript integration works with Cortex XSOAR

chrking — Tue, 20 Jun 2023 08:04:12 GMT

Javascript doesn't run in containers like the other runtimes, and I don't see any settings for http proxy specific to javascript executions so this is a bit tricky.

One thing I think would be worth trying would be to set a config level (ie /etc/containers/containers.conf or similar) config in podman for proxy A and then set the XSOAR http_proxy to proxy B and see if you can get it to work that way.

Also, having two proxies like this seems confusing and not ideal, but if it's absolutely unavoidable I'd suggest saving yourself some pain and using tinyproxy (or similar) with conditional upstreams (eg, upstream http proxyA:8000 ".docker.io") then pointing everything at the local tinyproxy. This gives you even more control if you need to add additional domains to proxyA, or some other, third proxy in the future.