fix: lazy-load xmlhttprequest

Author: aminya

lib/ws-kernel-picker.ts

@@ -5,7 +5,6 @@ import isEmpty from "lodash/isEmpty";
 import tildify from "tildify";
 import { v4 } from "uuid";
 import ws from "ws";
-import { XMLHttpRequest as NodeXMLHttpRequest } from "xmlhttprequest"; // TODO use @aminya/xmlhttprequest
 import { URL } from "url";
 import { Kernel, Session, ServerConnection } from "@jupyterlab/services";
 import Config from "./config";
@@ -198,7 +197,9 @@ export default class WSKernelPicker {
     options.requestHeaders.Cookie = cookie;
 
     options.xhrFactory = () => {
-      const request = new NodeXMLHttpRequest();
+      // we use xmlhttprequest because it allows disabling header protection
+      const { XMLHttpRequest } = require("xmlhttprequest"); // TODO use @aminya/xmlhttprequest
+      const request = new XMLHttpRequest();
       // Disable protections against setting the Cookie header
       request.setDisableHeaderCheck(true);
       return request as XMLHttpRequest; // TODO fix the types

package.json

@@ -159,7 +159,8 @@
         "mobx-react": false,
         "@nteract/plotly": false,
         "refractor": false,
-        "highlight.js": false
+        "highlight.js": false,
+        "xmlhttprequest": false
       },
       "isLibrary": true
     }