1 |
3a515b92
|
cagy
|
1.14.1 / 2019-05-10
|
2 |
|
|
===================
|
3 |
|
|
|
4 |
|
|
* Set stricter CSP header in redirect response
|
5 |
|
|
* deps: send@0.17.1
|
6 |
|
|
- deps: range-parser@~1.2.1
|
7 |
|
|
|
8 |
|
|
1.14.0 / 2019-05-07
|
9 |
|
|
===================
|
10 |
|
|
|
11 |
|
|
* deps: parseurl@~1.3.3
|
12 |
|
|
* deps: send@0.17.0
|
13 |
|
|
- deps: http-errors@~1.7.2
|
14 |
|
|
- deps: mime@1.6.0
|
15 |
|
|
- deps: ms@2.1.1
|
16 |
|
|
- deps: statuses@~1.5.0
|
17 |
|
|
- perf: remove redundant `path.normalize` call
|
18 |
|
|
|
19 |
|
|
1.13.2 / 2018-02-07
|
20 |
|
|
===================
|
21 |
|
|
|
22 |
|
|
* Fix incorrect end tag in redirects
|
23 |
|
|
* deps: encodeurl@~1.0.2
|
24 |
|
|
- Fix encoding `%` as last character
|
25 |
|
|
* deps: send@0.16.2
|
26 |
|
|
- deps: depd@~1.1.2
|
27 |
|
|
- deps: encodeurl@~1.0.2
|
28 |
|
|
- deps: statuses@~1.4.0
|
29 |
|
|
|
30 |
|
|
1.13.1 / 2017-09-29
|
31 |
|
|
===================
|
32 |
|
|
|
33 |
|
|
* Fix regression when `root` is incorrectly set to a file
|
34 |
|
|
* deps: send@0.16.1
|
35 |
|
|
|
36 |
|
|
1.13.0 / 2017-09-27
|
37 |
|
|
===================
|
38 |
|
|
|
39 |
|
|
* deps: send@0.16.0
|
40 |
|
|
- Add 70 new types for file extensions
|
41 |
|
|
- Add `immutable` option
|
42 |
|
|
- Fix missing `</html>` in default error & redirects
|
43 |
|
|
- Set charset as "UTF-8" for .js and .json
|
44 |
|
|
- Use instance methods on steam to check for listeners
|
45 |
|
|
- deps: mime@1.4.1
|
46 |
|
|
- perf: improve path validation speed
|
47 |
|
|
|
48 |
|
|
1.12.6 / 2017-09-22
|
49 |
|
|
===================
|
50 |
|
|
|
51 |
|
|
* deps: send@0.15.6
|
52 |
|
|
- deps: debug@2.6.9
|
53 |
|
|
- perf: improve `If-Match` token parsing
|
54 |
|
|
* perf: improve slash collapsing
|
55 |
|
|
|
56 |
|
|
1.12.5 / 2017-09-21
|
57 |
|
|
===================
|
58 |
|
|
|
59 |
|
|
* deps: parseurl@~1.3.2
|
60 |
|
|
- perf: reduce overhead for full URLs
|
61 |
|
|
- perf: unroll the "fast-path" `RegExp`
|
62 |
|
|
* deps: send@0.15.5
|
63 |
|
|
- Fix handling of modified headers with invalid dates
|
64 |
|
|
- deps: etag@~1.8.1
|
65 |
|
|
- deps: fresh@0.5.2
|
66 |
|
|
|
67 |
|
|
1.12.4 / 2017-08-05
|
68 |
|
|
===================
|
69 |
|
|
|
70 |
|
|
* deps: send@0.15.4
|
71 |
|
|
- deps: debug@2.6.8
|
72 |
|
|
- deps: depd@~1.1.1
|
73 |
|
|
- deps: http-errors@~1.6.2
|
74 |
|
|
|
75 |
|
|
1.12.3 / 2017-05-16
|
76 |
|
|
===================
|
77 |
|
|
|
78 |
|
|
* deps: send@0.15.3
|
79 |
|
|
- deps: debug@2.6.7
|
80 |
|
|
|
81 |
|
|
1.12.2 / 2017-04-26
|
82 |
|
|
===================
|
83 |
|
|
|
84 |
|
|
* deps: send@0.15.2
|
85 |
|
|
- deps: debug@2.6.4
|
86 |
|
|
|
87 |
|
|
1.12.1 / 2017-03-04
|
88 |
|
|
===================
|
89 |
|
|
|
90 |
|
|
* deps: send@0.15.1
|
91 |
|
|
- Fix issue when `Date.parse` does not return `NaN` on invalid date
|
92 |
|
|
- Fix strict violation in broken environments
|
93 |
|
|
|
94 |
|
|
1.12.0 / 2017-02-25
|
95 |
|
|
===================
|
96 |
|
|
|
97 |
|
|
* Send complete HTML document in redirect response
|
98 |
|
|
* Set default CSP header in redirect response
|
99 |
|
|
* deps: send@0.15.0
|
100 |
|
|
- Fix false detection of `no-cache` request directive
|
101 |
|
|
- Fix incorrect result when `If-None-Match` has both `*` and ETags
|
102 |
|
|
- Fix weak `ETag` matching to match spec
|
103 |
|
|
- Remove usage of `res._headers` private field
|
104 |
|
|
- Support `If-Match` and `If-Unmodified-Since` headers
|
105 |
|
|
- Use `res.getHeaderNames()` when available
|
106 |
|
|
- Use `res.headersSent` when available
|
107 |
|
|
- deps: debug@2.6.1
|
108 |
|
|
- deps: etag@~1.8.0
|
109 |
|
|
- deps: fresh@0.5.0
|
110 |
|
|
- deps: http-errors@~1.6.1
|
111 |
|
|
|
112 |
|
|
1.11.2 / 2017-01-23
|
113 |
|
|
===================
|
114 |
|
|
|
115 |
|
|
* deps: send@0.14.2
|
116 |
|
|
- deps: http-errors@~1.5.1
|
117 |
|
|
- deps: ms@0.7.2
|
118 |
|
|
- deps: statuses@~1.3.1
|
119 |
|
|
|
120 |
|
|
1.11.1 / 2016-06-10
|
121 |
|
|
===================
|
122 |
|
|
|
123 |
|
|
* Fix redirect error when `req.url` contains raw non-URL characters
|
124 |
|
|
* deps: send@0.14.1
|
125 |
|
|
|
126 |
|
|
1.11.0 / 2016-06-07
|
127 |
|
|
===================
|
128 |
|
|
|
129 |
|
|
* Use status code 301 for redirects
|
130 |
|
|
* deps: send@0.14.0
|
131 |
|
|
- Add `acceptRanges` option
|
132 |
|
|
- Add `cacheControl` option
|
133 |
|
|
- Attempt to combine multiple ranges into single range
|
134 |
|
|
- Correctly inherit from `Stream` class
|
135 |
|
|
- Fix `Content-Range` header in 416 responses when using `start`/`end` options
|
136 |
|
|
- Fix `Content-Range` header missing from default 416 responses
|
137 |
|
|
- Ignore non-byte `Range` headers
|
138 |
|
|
- deps: http-errors@~1.5.0
|
139 |
|
|
- deps: range-parser@~1.2.0
|
140 |
|
|
- deps: statuses@~1.3.0
|
141 |
|
|
- perf: remove argument reassignment
|
142 |
|
|
|
143 |
|
|
1.10.3 / 2016-05-30
|
144 |
|
|
===================
|
145 |
|
|
|
146 |
|
|
* deps: send@0.13.2
|
147 |
|
|
- Fix invalid `Content-Type` header when `send.mime.default_type` unset
|
148 |
|
|
|
149 |
|
|
1.10.2 / 2016-01-19
|
150 |
|
|
===================
|
151 |
|
|
|
152 |
|
|
* deps: parseurl@~1.3.1
|
153 |
|
|
- perf: enable strict mode
|
154 |
|
|
|
155 |
|
|
1.10.1 / 2016-01-16
|
156 |
|
|
===================
|
157 |
|
|
|
158 |
|
|
* deps: escape-html@~1.0.3
|
159 |
|
|
- perf: enable strict mode
|
160 |
|
|
- perf: optimize string replacement
|
161 |
|
|
- perf: use faster string coercion
|
162 |
|
|
* deps: send@0.13.1
|
163 |
|
|
- deps: depd@~1.1.0
|
164 |
|
|
- deps: destroy@~1.0.4
|
165 |
|
|
- deps: escape-html@~1.0.3
|
166 |
|
|
- deps: range-parser@~1.0.3
|
167 |
|
|
|
168 |
|
|
1.10.0 / 2015-06-17
|
169 |
|
|
===================
|
170 |
|
|
|
171 |
|
|
* Add `fallthrough` option
|
172 |
|
|
- Allows declaring this middleware is the final destination
|
173 |
|
|
- Provides better integration with Express patterns
|
174 |
|
|
* Fix reading options from options prototype
|
175 |
|
|
* Improve the default redirect response headers
|
176 |
|
|
* deps: escape-html@1.0.2
|
177 |
|
|
* deps: send@0.13.0
|
178 |
|
|
- Allow Node.js HTTP server to set `Date` response header
|
179 |
|
|
- Fix incorrectly removing `Content-Location` on 304 response
|
180 |
|
|
- Improve the default redirect response headers
|
181 |
|
|
- Send appropriate headers on default error response
|
182 |
|
|
- Use `http-errors` for standard emitted errors
|
183 |
|
|
- Use `statuses` instead of `http` module for status messages
|
184 |
|
|
- deps: escape-html@1.0.2
|
185 |
|
|
- deps: etag@~1.7.0
|
186 |
|
|
- deps: fresh@0.3.0
|
187 |
|
|
- deps: on-finished@~2.3.0
|
188 |
|
|
- perf: enable strict mode
|
189 |
|
|
- perf: remove unnecessary array allocations
|
190 |
|
|
* perf: enable strict mode
|
191 |
|
|
* perf: remove argument reassignment
|
192 |
|
|
|
193 |
|
|
1.9.3 / 2015-05-14
|
194 |
|
|
==================
|
195 |
|
|
|
196 |
|
|
* deps: send@0.12.3
|
197 |
|
|
- deps: debug@~2.2.0
|
198 |
|
|
- deps: depd@~1.0.1
|
199 |
|
|
- deps: etag@~1.6.0
|
200 |
|
|
- deps: ms@0.7.1
|
201 |
|
|
- deps: on-finished@~2.2.1
|
202 |
|
|
|
203 |
|
|
1.9.2 / 2015-03-14
|
204 |
|
|
==================
|
205 |
|
|
|
206 |
|
|
* deps: send@0.12.2
|
207 |
|
|
- Throw errors early for invalid `extensions` or `index` options
|
208 |
|
|
- deps: debug@~2.1.3
|
209 |
|
|
|
210 |
|
|
1.9.1 / 2015-02-17
|
211 |
|
|
==================
|
212 |
|
|
|
213 |
|
|
* deps: send@0.12.1
|
214 |
|
|
- Fix regression sending zero-length files
|
215 |
|
|
|
216 |
|
|
1.9.0 / 2015-02-16
|
217 |
|
|
==================
|
218 |
|
|
|
219 |
|
|
* deps: send@0.12.0
|
220 |
|
|
- Always read the stat size from the file
|
221 |
|
|
- Fix mutating passed-in `options`
|
222 |
|
|
- deps: mime@1.3.4
|
223 |
|
|
|
224 |
|
|
1.8.1 / 2015-01-20
|
225 |
|
|
==================
|
226 |
|
|
|
227 |
|
|
* Fix redirect loop in Node.js 0.11.14
|
228 |
|
|
* deps: send@0.11.1
|
229 |
|
|
- Fix root path disclosure
|
230 |
|
|
|
231 |
|
|
1.8.0 / 2015-01-05
|
232 |
|
|
==================
|
233 |
|
|
|
234 |
|
|
* deps: send@0.11.0
|
235 |
|
|
- deps: debug@~2.1.1
|
236 |
|
|
- deps: etag@~1.5.1
|
237 |
|
|
- deps: ms@0.7.0
|
238 |
|
|
- deps: on-finished@~2.2.0
|
239 |
|
|
|
240 |
|
|
1.7.2 / 2015-01-02
|
241 |
|
|
==================
|
242 |
|
|
|
243 |
|
|
* Fix potential open redirect when mounted at root
|
244 |
|
|
|
245 |
|
|
1.7.1 / 2014-10-22
|
246 |
|
|
==================
|
247 |
|
|
|
248 |
|
|
* deps: send@0.10.1
|
249 |
|
|
- deps: on-finished@~2.1.1
|
250 |
|
|
|
251 |
|
|
1.7.0 / 2014-10-15
|
252 |
|
|
==================
|
253 |
|
|
|
254 |
|
|
* deps: send@0.10.0
|
255 |
|
|
- deps: debug@~2.1.0
|
256 |
|
|
- deps: depd@~1.0.0
|
257 |
|
|
- deps: etag@~1.5.0
|
258 |
|
|
|
259 |
|
|
1.6.5 / 2015-02-04
|
260 |
|
|
==================
|
261 |
|
|
|
262 |
|
|
* Fix potential open redirect when mounted at root
|
263 |
|
|
- Back-ported from v1.7.2
|
264 |
|
|
|
265 |
|
|
1.6.4 / 2014-10-08
|
266 |
|
|
==================
|
267 |
|
|
|
268 |
|
|
* Fix redirect loop when index file serving disabled
|
269 |
|
|
|
270 |
|
|
1.6.3 / 2014-09-24
|
271 |
|
|
==================
|
272 |
|
|
|
273 |
|
|
* deps: send@0.9.3
|
274 |
|
|
- deps: etag@~1.4.0
|
275 |
|
|
|
276 |
|
|
1.6.2 / 2014-09-15
|
277 |
|
|
==================
|
278 |
|
|
|
279 |
|
|
* deps: send@0.9.2
|
280 |
|
|
- deps: depd@0.4.5
|
281 |
|
|
- deps: etag@~1.3.1
|
282 |
|
|
- deps: range-parser@~1.0.2
|
283 |
|
|
|
284 |
|
|
1.6.1 / 2014-09-07
|
285 |
|
|
==================
|
286 |
|
|
|
287 |
|
|
* deps: send@0.9.1
|
288 |
|
|
- deps: fresh@0.2.4
|
289 |
|
|
|
290 |
|
|
1.6.0 / 2014-09-07
|
291 |
|
|
==================
|
292 |
|
|
|
293 |
|
|
* deps: send@0.9.0
|
294 |
|
|
- Add `lastModified` option
|
295 |
|
|
- Use `etag` to generate `ETag` header
|
296 |
|
|
- deps: debug@~2.0.0
|
297 |
|
|
|
298 |
|
|
1.5.4 / 2014-09-04
|
299 |
|
|
==================
|
300 |
|
|
|
301 |
|
|
* deps: send@0.8.5
|
302 |
|
|
- Fix a path traversal issue when using `root`
|
303 |
|
|
- Fix malicious path detection for empty string path
|
304 |
|
|
|
305 |
|
|
1.5.3 / 2014-08-17
|
306 |
|
|
==================
|
307 |
|
|
|
308 |
|
|
* deps: send@0.8.3
|
309 |
|
|
|
310 |
|
|
1.5.2 / 2014-08-14
|
311 |
|
|
==================
|
312 |
|
|
|
313 |
|
|
* deps: send@0.8.2
|
314 |
|
|
- Work around `fd` leak in Node.js 0.10 for `fs.ReadStream`
|
315 |
|
|
|
316 |
|
|
1.5.1 / 2014-08-09
|
317 |
|
|
==================
|
318 |
|
|
|
319 |
|
|
* Fix parsing of weird `req.originalUrl` values
|
320 |
|
|
* deps: parseurl@~1.3.0
|
321 |
|
|
* deps: utils-merge@1.0.0
|
322 |
|
|
|
323 |
|
|
1.5.0 / 2014-08-05
|
324 |
|
|
==================
|
325 |
|
|
|
326 |
|
|
* deps: send@0.8.1
|
327 |
|
|
- Add `extensions` option
|
328 |
|
|
|
329 |
|
|
1.4.4 / 2014-08-04
|
330 |
|
|
==================
|
331 |
|
|
|
332 |
|
|
* deps: send@0.7.4
|
333 |
|
|
- Fix serving index files without root dir
|
334 |
|
|
|
335 |
|
|
1.4.3 / 2014-07-29
|
336 |
|
|
==================
|
337 |
|
|
|
338 |
|
|
* deps: send@0.7.3
|
339 |
|
|
- Fix incorrect 403 on Windows and Node.js 0.11
|
340 |
|
|
|
341 |
|
|
1.4.2 / 2014-07-27
|
342 |
|
|
==================
|
343 |
|
|
|
344 |
|
|
* deps: send@0.7.2
|
345 |
|
|
- deps: depd@0.4.4
|
346 |
|
|
|
347 |
|
|
1.4.1 / 2014-07-26
|
348 |
|
|
==================
|
349 |
|
|
|
350 |
|
|
* deps: send@0.7.1
|
351 |
|
|
- deps: depd@0.4.3
|
352 |
|
|
|
353 |
|
|
1.4.0 / 2014-07-21
|
354 |
|
|
==================
|
355 |
|
|
|
356 |
|
|
* deps: parseurl@~1.2.0
|
357 |
|
|
- Cache URLs based on original value
|
358 |
|
|
- Remove no-longer-needed URL mis-parse work-around
|
359 |
|
|
- Simplify the "fast-path" `RegExp`
|
360 |
|
|
* deps: send@0.7.0
|
361 |
|
|
- Add `dotfiles` option
|
362 |
|
|
- deps: debug@1.0.4
|
363 |
|
|
- deps: depd@0.4.2
|
364 |
|
|
|
365 |
|
|
1.3.2 / 2014-07-11
|
366 |
|
|
==================
|
367 |
|
|
|
368 |
|
|
* deps: send@0.6.0
|
369 |
|
|
- Cap `maxAge` value to 1 year
|
370 |
|
|
- deps: debug@1.0.3
|
371 |
|
|
|
372 |
|
|
1.3.1 / 2014-07-09
|
373 |
|
|
==================
|
374 |
|
|
|
375 |
|
|
* deps: parseurl@~1.1.3
|
376 |
|
|
- faster parsing of href-only URLs
|
377 |
|
|
|
378 |
|
|
1.3.0 / 2014-06-28
|
379 |
|
|
==================
|
380 |
|
|
|
381 |
|
|
* Add `setHeaders` option
|
382 |
|
|
* Include HTML link in redirect response
|
383 |
|
|
* deps: send@0.5.0
|
384 |
|
|
- Accept string for `maxAge` (converted by `ms`)
|
385 |
|
|
|
386 |
|
|
1.2.3 / 2014-06-11
|
387 |
|
|
==================
|
388 |
|
|
|
389 |
|
|
* deps: send@0.4.3
|
390 |
|
|
- Do not throw un-catchable error on file open race condition
|
391 |
|
|
- Use `escape-html` for HTML escaping
|
392 |
|
|
- deps: debug@1.0.2
|
393 |
|
|
- deps: finished@1.2.2
|
394 |
|
|
- deps: fresh@0.2.2
|
395 |
|
|
|
396 |
|
|
1.2.2 / 2014-06-09
|
397 |
|
|
==================
|
398 |
|
|
|
399 |
|
|
* deps: send@0.4.2
|
400 |
|
|
- fix "event emitter leak" warnings
|
401 |
|
|
- deps: debug@1.0.1
|
402 |
|
|
- deps: finished@1.2.1
|
403 |
|
|
|
404 |
|
|
1.2.1 / 2014-06-02
|
405 |
|
|
==================
|
406 |
|
|
|
407 |
|
|
* use `escape-html` for escaping
|
408 |
|
|
* deps: send@0.4.1
|
409 |
|
|
- Send `max-age` in `Cache-Control` in correct format
|
410 |
|
|
|
411 |
|
|
1.2.0 / 2014-05-29
|
412 |
|
|
==================
|
413 |
|
|
|
414 |
|
|
* deps: send@0.4.0
|
415 |
|
|
- Calculate ETag with md5 for reduced collisions
|
416 |
|
|
- Fix wrong behavior when index file matches directory
|
417 |
|
|
- Ignore stream errors after request ends
|
418 |
|
|
- Skip directories in index file search
|
419 |
|
|
- deps: debug@0.8.1
|
420 |
|
|
|
421 |
|
|
1.1.0 / 2014-04-24
|
422 |
|
|
==================
|
423 |
|
|
|
424 |
|
|
* Accept options directly to `send` module
|
425 |
|
|
* deps: send@0.3.0
|
426 |
|
|
|
427 |
|
|
1.0.4 / 2014-04-07
|
428 |
|
|
==================
|
429 |
|
|
|
430 |
|
|
* Resolve relative paths at middleware setup
|
431 |
|
|
* Use parseurl to parse the URL from request
|
432 |
|
|
|
433 |
|
|
1.0.3 / 2014-03-20
|
434 |
|
|
==================
|
435 |
|
|
|
436 |
|
|
* Do not rely on connect-like environments
|
437 |
|
|
|
438 |
|
|
1.0.2 / 2014-03-06
|
439 |
|
|
==================
|
440 |
|
|
|
441 |
|
|
* deps: send@0.2.0
|
442 |
|
|
|
443 |
|
|
1.0.1 / 2014-03-05
|
444 |
|
|
==================
|
445 |
|
|
|
446 |
|
|
* Add mime export for back-compat
|
447 |
|
|
|
448 |
|
|
1.0.0 / 2014-03-05
|
449 |
|
|
==================
|
450 |
|
|
|
451 |
|
|
* Genesis from `connect`
|