472 lines
10 KiB
Markdown
472 lines
10 KiB
Markdown
|
1.15.0 / 2022-03-24
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: send@0.18.0
|
||
|
|
- Fix emitted 416 error missing headers property
|
||
|
|
- Limit the headers removed for 304 response
|
||
|
|
- deps: depd@2.0.0
|
||
|
|
- deps: destroy@1.2.0
|
||
|
|
- deps: http-errors@2.0.0
|
||
|
|
- deps: on-finished@2.4.1
|
||
|
|
- deps: statuses@2.0.1
|
||
|
|
|
||
|
|
1.14.2 / 2021-12-15
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: send@0.17.2
|
||
|
|
- deps: http-errors@1.8.1
|
||
|
|
- deps: ms@2.1.3
|
||
|
|
- pref: ignore empty http tokens
|
||
|
|
|
||
|
|
1.14.1 / 2019-05-10
|
||
|
|
===================
|
||
|
|
|
||
|
|
* Set stricter CSP header in redirect response
|
||
|
|
* deps: send@0.17.1
|
||
|
|
- deps: range-parser@~1.2.1
|
||
|
|
|
||
|
|
1.14.0 / 2019-05-07
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: parseurl@~1.3.3
|
||
|
|
* deps: send@0.17.0
|
||
|
|
- deps: http-errors@~1.7.2
|
||
|
|
- deps: mime@1.6.0
|
||
|
|
- deps: ms@2.1.1
|
||
|
|
- deps: statuses@~1.5.0
|
||
|
|
- perf: remove redundant `path.normalize` call
|
||
|
|
|
||
|
|
1.13.2 / 2018-02-07
|
||
|
|
===================
|
||
|
|
|
||
|
|
* Fix incorrect end tag in redirects
|
||
|
|
* deps: encodeurl@~1.0.2
|
||
|
|
- Fix encoding `%` as last character
|
||
|
|
* deps: send@0.16.2
|
||
|
|
- deps: depd@~1.1.2
|
||
|
|
- deps: encodeurl@~1.0.2
|
||
|
|
- deps: statuses@~1.4.0
|
||
|
|
|
||
|
|
1.13.1 / 2017-09-29
|
||
|
|
===================
|
||
|
|
|
||
|
|
* Fix regression when `root` is incorrectly set to a file
|
||
|
|
* deps: send@0.16.1
|
||
|
|
|
||
|
|
1.13.0 / 2017-09-27
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: send@0.16.0
|
||
|
|
- Add 70 new types for file extensions
|
||
|
|
- Add `immutable` option
|
||
|
|
- Fix missing `</html>` in default error & redirects
|
||
|
|
- Set charset as "UTF-8" for .js and .json
|
||
|
|
- Use instance methods on steam to check for listeners
|
||
|
|
- deps: mime@1.4.1
|
||
|
|
- perf: improve path validation speed
|
||
|
|
|
||
|
|
1.12.6 / 2017-09-22
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: send@0.15.6
|
||
|
|
- deps: debug@2.6.9
|
||
|
|
- perf: improve `If-Match` token parsing
|
||
|
|
* perf: improve slash collapsing
|
||
|
|
|
||
|
|
1.12.5 / 2017-09-21
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: parseurl@~1.3.2
|
||
|
|
- perf: reduce overhead for full URLs
|
||
|
|
- perf: unroll the "fast-path" `RegExp`
|
||
|
|
* deps: send@0.15.5
|
||
|
|
- Fix handling of modified headers with invalid dates
|
||
|
|
- deps: etag@~1.8.1
|
||
|
|
- deps: fresh@0.5.2
|
||
|
|
|
||
|
|
1.12.4 / 2017-08-05
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: send@0.15.4
|
||
|
|
- deps: debug@2.6.8
|
||
|
|
- deps: depd@~1.1.1
|
||
|
|
- deps: http-errors@~1.6.2
|
||
|
|
|
||
|
|
1.12.3 / 2017-05-16
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: send@0.15.3
|
||
|
|
- deps: debug@2.6.7
|
||
|
|
|
||
|
|
1.12.2 / 2017-04-26
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: send@0.15.2
|
||
|
|
- deps: debug@2.6.4
|
||
|
|
|
||
|
|
1.12.1 / 2017-03-04
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: send@0.15.1
|
||
|
|
- Fix issue when `Date.parse` does not return `NaN` on invalid date
|
||
|
|
- Fix strict violation in broken environments
|
||
|
|
|
||
|
|
1.12.0 / 2017-02-25
|
||
|
|
===================
|
||
|
|
|
||
|
|
* Send complete HTML document in redirect response
|
||
|
|
* Set default CSP header in redirect response
|
||
|
|
* deps: send@0.15.0
|
||
|
|
- Fix false detection of `no-cache` request directive
|
||
|
|
- Fix incorrect result when `If-None-Match` has both `*` and ETags
|
||
|
|
- Fix weak `ETag` matching to match spec
|
||
|
|
- Remove usage of `res._headers` private field
|
||
|
|
- Support `If-Match` and `If-Unmodified-Since` headers
|
||
|
|
- Use `res.getHeaderNames()` when available
|
||
|
|
- Use `res.headersSent` when available
|
||
|
|
- deps: debug@2.6.1
|
||
|
|
- deps: etag@~1.8.0
|
||
|
|
- deps: fresh@0.5.0
|
||
|
|
- deps: http-errors@~1.6.1
|
||
|
|
|
||
|
|
1.11.2 / 2017-01-23
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: send@0.14.2
|
||
|
|
- deps: http-errors@~1.5.1
|
||
|
|
- deps: ms@0.7.2
|
||
|
|
- deps: statuses@~1.3.1
|
||
|
|
|
||
|
|
1.11.1 / 2016-06-10
|
||
|
|
===================
|
||
|
|
|
||
|
|
* Fix redirect error when `req.url` contains raw non-URL characters
|
||
|
|
* deps: send@0.14.1
|
||
|
|
|
||
|
|
1.11.0 / 2016-06-07
|
||
|
|
===================
|
||
|
|
|
||
|
|
* Use status code 301 for redirects
|
||
|
|
* deps: send@0.14.0
|
||
|
|
- Add `acceptRanges` option
|
||
|
|
- Add `cacheControl` option
|
||
|
|
- Attempt to combine multiple ranges into single range
|
||
|
|
- Correctly inherit from `Stream` class
|
||
|
|
- Fix `Content-Range` header in 416 responses when using `start`/`end` options
|
||
|
|
- Fix `Content-Range` header missing from default 416 responses
|
||
|
|
- Ignore non-byte `Range` headers
|
||
|
|
- deps: http-errors@~1.5.0
|
||
|
|
- deps: range-parser@~1.2.0
|
||
|
|
- deps: statuses@~1.3.0
|
||
|
|
- perf: remove argument reassignment
|
||
|
|
|
||
|
|
1.10.3 / 2016-05-30
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: send@0.13.2
|
||
|
|
- Fix invalid `Content-Type` header when `send.mime.default_type` unset
|
||
|
|
|
||
|
|
1.10.2 / 2016-01-19
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: parseurl@~1.3.1
|
||
|
|
- perf: enable strict mode
|
||
|
|
|
||
|
|
1.10.1 / 2016-01-16
|
||
|
|
===================
|
||
|
|
|
||
|
|
* deps: escape-html@~1.0.3
|
||
|
|
- perf: enable strict mode
|
||
|
|
- perf: optimize string replacement
|
||
|
|
- perf: use faster string coercion
|
||
|
|
* deps: send@0.13.1
|
||
|
|
- deps: depd@~1.1.0
|
||
|
|
- deps: destroy@~1.0.4
|
||
|
|
- deps: escape-html@~1.0.3
|
||
|
|
- deps: range-parser@~1.0.3
|
||
|
|
|
||
|
|
1.10.0 / 2015-06-17
|
||
|
|
===================
|
||
|
|
|
||
|
|
* Add `fallthrough` option
|
||
|
|
- Allows declaring this middleware is the final destination
|
||
|
|
- Provides better integration with Express patterns
|
||
|
|
* Fix reading options from options prototype
|
||
|
|
* Improve the default redirect response headers
|
||
|
|
* deps: escape-html@1.0.2
|
||
|
|
* deps: send@0.13.0
|
||
|
|
- Allow Node.js HTTP server to set `Date` response header
|
||
|
|
- Fix incorrectly removing `Content-Location` on 304 response
|
||
|
|
- Improve the default redirect response headers
|
||
|
|
- Send appropriate headers on default error response
|
||
|
|
- Use `http-errors` for standard emitted errors
|
||
|
|
- Use `statuses` instead of `http` module for status messages
|
||
|
|
- deps: escape-html@1.0.2
|
||
|
|
- deps: etag@~1.7.0
|
||
|
|
- deps: fresh@0.3.0
|
||
|
|
- deps: on-finished@~2.3.0
|
||
|
|
- perf: enable strict mode
|
||
|
|
- perf: remove unnecessary array allocations
|
||
|
|
* perf: enable strict mode
|
||
|
|
* perf: remove argument reassignment
|
||
|
|
|
||
|
|
1.9.3 / 2015-05-14
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.12.3
|
||
|
|
- deps: debug@~2.2.0
|
||
|
|
- deps: depd@~1.0.1
|
||
|
|
- deps: etag@~1.6.0
|
||
|
|
- deps: ms@0.7.1
|
||
|
|
- deps: on-finished@~2.2.1
|
||
|
|
|
||
|
|
1.9.2 / 2015-03-14
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.12.2
|
||
|
|
- Throw errors early for invalid `extensions` or `index` options
|
||
|
|
- deps: debug@~2.1.3
|
||
|
|
|
||
|
|
1.9.1 / 2015-02-17
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.12.1
|
||
|
|
- Fix regression sending zero-length files
|
||
|
|
|
||
|
|
1.9.0 / 2015-02-16
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.12.0
|
||
|
|
- Always read the stat size from the file
|
||
|
|
- Fix mutating passed-in `options`
|
||
|
|
- deps: mime@1.3.4
|
||
|
|
|
||
|
|
1.8.1 / 2015-01-20
|
||
|
|
==================
|
||
|
|
|
||
|
|
* Fix redirect loop in Node.js 0.11.14
|
||
|
|
* deps: send@0.11.1
|
||
|
|
- Fix root path disclosure
|
||
|
|
|
||
|
|
1.8.0 / 2015-01-05
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.11.0
|
||
|
|
- deps: debug@~2.1.1
|
||
|
|
- deps: etag@~1.5.1
|
||
|
|
- deps: ms@0.7.0
|
||
|
|
- deps: on-finished@~2.2.0
|
||
|
|
|
||
|
|
1.7.2 / 2015-01-02
|
||
|
|
==================
|
||
|
|
|
||
|
|
* Fix potential open redirect when mounted at root
|
||
|
|
|
||
|
|
1.7.1 / 2014-10-22
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.10.1
|
||
|
|
- deps: on-finished@~2.1.1
|
||
|
|
|
||
|
|
1.7.0 / 2014-10-15
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.10.0
|
||
|
|
- deps: debug@~2.1.0
|
||
|
|
- deps: depd@~1.0.0
|
||
|
|
- deps: etag@~1.5.0
|
||
|
|
|
||
|
|
1.6.5 / 2015-02-04
|
||
|
|
==================
|
||
|
|
|
||
|
|
* Fix potential open redirect when mounted at root
|
||
|
|
- Back-ported from v1.7.2
|
||
|
|
|
||
|
|
1.6.4 / 2014-10-08
|
||
|
|
==================
|
||
|
|
|
||
|
|
* Fix redirect loop when index file serving disabled
|
||
|
|
|
||
|
|
1.6.3 / 2014-09-24
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.9.3
|
||
|
|
- deps: etag@~1.4.0
|
||
|
|
|
||
|
|
1.6.2 / 2014-09-15
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.9.2
|
||
|
|
- deps: depd@0.4.5
|
||
|
|
- deps: etag@~1.3.1
|
||
|
|
- deps: range-parser@~1.0.2
|
||
|
|
|
||
|
|
1.6.1 / 2014-09-07
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.9.1
|
||
|
|
- deps: fresh@0.2.4
|
||
|
|
|
||
|
|
1.6.0 / 2014-09-07
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.9.0
|
||
|
|
- Add `lastModified` option
|
||
|
|
- Use `etag` to generate `ETag` header
|
||
|
|
- deps: debug@~2.0.0
|
||
|
|
|
||
|
|
1.5.4 / 2014-09-04
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.8.5
|
||
|
|
- Fix a path traversal issue when using `root`
|
||
|
|
- Fix malicious path detection for empty string path
|
||
|
|
|
||
|
|
1.5.3 / 2014-08-17
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.8.3
|
||
|
|
|
||
|
|
1.5.2 / 2014-08-14
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.8.2
|
||
|
|
- Work around `fd` leak in Node.js 0.10 for `fs.ReadStream`
|
||
|
|
|
||
|
|
1.5.1 / 2014-08-09
|
||
|
|
==================
|
||
|
|
|
||
|
|
* Fix parsing of weird `req.originalUrl` values
|
||
|
|
* deps: parseurl@~1.3.0
|
||
|
|
* deps: utils-merge@1.0.0
|
||
|
|
|
||
|
|
1.5.0 / 2014-08-05
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.8.1
|
||
|
|
- Add `extensions` option
|
||
|
|
|
||
|
|
1.4.4 / 2014-08-04
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.7.4
|
||
|
|
- Fix serving index files without root dir
|
||
|
|
|
||
|
|
1.4.3 / 2014-07-29
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.7.3
|
||
|
|
- Fix incorrect 403 on Windows and Node.js 0.11
|
||
|
|
|
||
|
|
1.4.2 / 2014-07-27
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.7.2
|
||
|
|
- deps: depd@0.4.4
|
||
|
|
|
||
|
|
1.4.1 / 2014-07-26
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.7.1
|
||
|
|
- deps: depd@0.4.3
|
||
|
|
|
||
|
|
1.4.0 / 2014-07-21
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: parseurl@~1.2.0
|
||
|
|
- Cache URLs based on original value
|
||
|
|
- Remove no-longer-needed URL mis-parse work-around
|
||
|
|
- Simplify the "fast-path" `RegExp`
|
||
|
|
* deps: send@0.7.0
|
||
|
|
- Add `dotfiles` option
|
||
|
|
- deps: debug@1.0.4
|
||
|
|
- deps: depd@0.4.2
|
||
|
|
|
||
|
|
1.3.2 / 2014-07-11
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.6.0
|
||
|
|
- Cap `maxAge` value to 1 year
|
||
|
|
- deps: debug@1.0.3
|
||
|
|
|
||
|
|
1.3.1 / 2014-07-09
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: parseurl@~1.1.3
|
||
|
|
- faster parsing of href-only URLs
|
||
|
|
|
||
|
|
1.3.0 / 2014-06-28
|
||
|
|
==================
|
||
|
|
|
||
|
|
* Add `setHeaders` option
|
||
|
|
* Include HTML link in redirect response
|
||
|
|
* deps: send@0.5.0
|
||
|
|
- Accept string for `maxAge` (converted by `ms`)
|
||
|
|
|
||
|
|
1.2.3 / 2014-06-11
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.4.3
|
||
|
|
- Do not throw un-catchable error on file open race condition
|
||
|
|
- Use `escape-html` for HTML escaping
|
||
|
|
- deps: debug@1.0.2
|
||
|
|
- deps: finished@1.2.2
|
||
|
|
- deps: fresh@0.2.2
|
||
|
|
|
||
|
|
1.2.2 / 2014-06-09
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.4.2
|
||
|
|
- fix "event emitter leak" warnings
|
||
|
|
- deps: debug@1.0.1
|
||
|
|
- deps: finished@1.2.1
|
||
|
|
|
||
|
|
1.2.1 / 2014-06-02
|
||
|
|
==================
|
||
|
|
|
||
|
|
* use `escape-html` for escaping
|
||
|
|
* deps: send@0.4.1
|
||
|
|
- Send `max-age` in `Cache-Control` in correct format
|
||
|
|
|
||
|
|
1.2.0 / 2014-05-29
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.4.0
|
||
|
|
- Calculate ETag with md5 for reduced collisions
|
||
|
|
- Fix wrong behavior when index file matches directory
|
||
|
|
- Ignore stream errors after request ends
|
||
|
|
- Skip directories in index file search
|
||
|
|
- deps: debug@0.8.1
|
||
|
|
|
||
|
|
1.1.0 / 2014-04-24
|
||
|
|
==================
|
||
|
|
|
||
|
|
* Accept options directly to `send` module
|
||
|
|
* deps: send@0.3.0
|
||
|
|
|
||
|
|
1.0.4 / 2014-04-07
|
||
|
|
==================
|
||
|
|
|
||
|
|
* Resolve relative paths at middleware setup
|
||
|
|
* Use parseurl to parse the URL from request
|
||
|
|
|
||
|
|
1.0.3 / 2014-03-20
|
||
|
|
==================
|
||
|
|
|
||
|
|
* Do not rely on connect-like environments
|
||
|
|
|
||
|
|
1.0.2 / 2014-03-06
|
||
|
|
==================
|
||
|
|
|
||
|
|
* deps: send@0.2.0
|
||
|
|
|
||
|
|
1.0.1 / 2014-03-05
|
||
|
|
==================
|
||
|
|
|
||
|
|
* Add mime export for back-compat
|
||
|
|
|
||
|
|
1.0.0 / 2014-03-05
|
||
|
|
==================
|
||
|
|
|
||
|
|
* Genesis from `connect`
|