HISTORY.md
9.85 KB
1.14.1 / 2019-05-10
- Set stricter CSP header in redirect response
- deps: send@0.17.1
- deps: range-parser@~1.2.1
1.14.0 / 2019-05-07
- deps: parseurl@~1.3.3
- deps: send@0.17.0
- deps: http-errors@~1.7.2
- deps: mime@1.6.0
- deps: ms@2.1.1
- deps: statuses@~1.5.0
- perf: remove redundant
path.normalize
call
1.13.2 / 2018-02-07
- Fix incorrect end tag in redirects
- deps: encodeurl@~1.0.2
- Fix encoding
%
as last character
- Fix encoding
- deps: send@0.16.2
- deps: depd@~1.1.2
- deps: encodeurl@~1.0.2
- deps: statuses@~1.4.0
1.13.1 / 2017-09-29
- Fix regression when
root
is incorrectly set to a file - deps: send@0.16.1
1.13.0 / 2017-09-27
- deps: send@0.16.0
- Add 70 new types for file extensions
- Add
immutable
option - Fix missing
</html>
in default error & redirects - Set charset as "UTF-8" for .js and .json
- Use instance methods on steam to check for listeners
- deps: mime@1.4.1
- perf: improve path validation speed
1.12.6 / 2017-09-22
- deps: send@0.15.6
- deps: debug@2.6.9
- perf: improve
If-Match
token parsing
- perf: improve slash collapsing
1.12.5 / 2017-09-21
- deps: parseurl@~1.3.2
- perf: reduce overhead for full URLs
- perf: unroll the "fast-path"
RegExp
- deps: send@0.15.5
- Fix handling of modified headers with invalid dates
- deps: etag@~1.8.1
- deps: fresh@0.5.2
1.12.4 / 2017-08-05
- deps: send@0.15.4
- deps: debug@2.6.8
- deps: depd@~1.1.1
- deps: http-errors@~1.6.2
1.12.3 / 2017-05-16
- deps: send@0.15.3
- deps: debug@2.6.7
1.12.2 / 2017-04-26
- deps: send@0.15.2
- deps: debug@2.6.4
1.12.1 / 2017-03-04
- deps: send@0.15.1
- Fix issue when
Date.parse
does not returnNaN
on invalid date - Fix strict violation in broken environments
- Fix issue when
1.12.0 / 2017-02-25
- Send complete HTML document in redirect response
- Set default CSP header in redirect response
- deps: send@0.15.0
- Fix false detection of
no-cache
request directive - Fix incorrect result when
If-None-Match
has both*
and ETags - Fix weak
ETag
matching to match spec - Remove usage of
res._headers
private field - Support
If-Match
andIf-Unmodified-Since
headers - Use
res.getHeaderNames()
when available - Use
res.headersSent
when available - deps: debug@2.6.1
- deps: etag@~1.8.0
- deps: fresh@0.5.0
- deps: http-errors@~1.6.1
- Fix false detection of
1.11.2 / 2017-01-23
- deps: send@0.14.2
- deps: http-errors@~1.5.1
- deps: ms@0.7.2
- deps: statuses@~1.3.1
1.11.1 / 2016-06-10
- Fix redirect error when
req.url
contains raw non-URL characters - deps: send@0.14.1
1.11.0 / 2016-06-07
- Use status code 301 for redirects
- deps: send@0.14.0
- Add
acceptRanges
option - Add
cacheControl
option - Attempt to combine multiple ranges into single range
- Correctly inherit from
Stream
class - Fix
Content-Range
header in 416 responses when usingstart
/end
options - Fix
Content-Range
header missing from default 416 responses - Ignore non-byte
Range
headers - deps: http-errors@~1.5.0
- deps: range-parser@~1.2.0
- deps: statuses@~1.3.0
- perf: remove argument reassignment
- Add
1.10.3 / 2016-05-30
- deps: send@0.13.2
- Fix invalid
Content-Type
header whensend.mime.default_type
unset
- Fix invalid
1.10.2 / 2016-01-19
- deps: parseurl@~1.3.1
- perf: enable strict mode
1.10.1 / 2016-01-16
- deps: escape-html@~1.0.3
- perf: enable strict mode
- perf: optimize string replacement
- perf: use faster string coercion
- deps: send@0.13.1
- deps: depd@~1.1.0
- deps: destroy@~1.0.4
- deps: escape-html@~1.0.3
- deps: range-parser@~1.0.3
1.10.0 / 2015-06-17
- Add
fallthrough
option- Allows declaring this middleware is the final destination
- Provides better integration with Express patterns
- Fix reading options from options prototype
- Improve the default redirect response headers
- deps: escape-html@1.0.2
- deps: send@0.13.0
- Allow Node.js HTTP server to set
Date
response header - Fix incorrectly removing
Content-Location
on 304 response - Improve the default redirect response headers
- Send appropriate headers on default error response
- Use
http-errors
for standard emitted errors - Use
statuses
instead ofhttp
module for status messages - deps: escape-html@1.0.2
- deps: etag@~1.7.0
- deps: fresh@0.3.0
- deps: on-finished@~2.3.0
- perf: enable strict mode
- perf: remove unnecessary array allocations
- Allow Node.js HTTP server to set
- perf: enable strict mode
- perf: remove argument reassignment
1.9.3 / 2015-05-14
- deps: send@0.12.3
- deps: debug@~2.2.0
- deps: depd@~1.0.1
- deps: etag@~1.6.0
- deps: ms@0.7.1
- deps: on-finished@~2.2.1
1.9.2 / 2015-03-14
- deps: send@0.12.2
- Throw errors early for invalid
extensions
orindex
options - deps: debug@~2.1.3
- Throw errors early for invalid
1.9.1 / 2015-02-17
- deps: send@0.12.1
- Fix regression sending zero-length files
1.9.0 / 2015-02-16
- deps: send@0.12.0
- Always read the stat size from the file
- Fix mutating passed-in
options
- deps: mime@1.3.4
1.8.1 / 2015-01-20
- Fix redirect loop in Node.js 0.11.14
- deps: send@0.11.1
- Fix root path disclosure
1.8.0 / 2015-01-05
- deps: send@0.11.0
- deps: debug@~2.1.1
- deps: etag@~1.5.1
- deps: ms@0.7.0
- deps: on-finished@~2.2.0
1.7.2 / 2015-01-02
- Fix potential open redirect when mounted at root
1.7.1 / 2014-10-22
- deps: send@0.10.1
- deps: on-finished@~2.1.1
1.7.0 / 2014-10-15
- deps: send@0.10.0
- deps: debug@~2.1.0
- deps: depd@~1.0.0
- deps: etag@~1.5.0
1.6.5 / 2015-02-04
- Fix potential open redirect when mounted at root
- Back-ported from v1.7.2
1.6.4 / 2014-10-08
- Fix redirect loop when index file serving disabled
1.6.3 / 2014-09-24
- deps: send@0.9.3
- deps: etag@~1.4.0
1.6.2 / 2014-09-15
- deps: send@0.9.2
- deps: depd@0.4.5
- deps: etag@~1.3.1
- deps: range-parser@~1.0.2
1.6.1 / 2014-09-07
- deps: send@0.9.1
- deps: fresh@0.2.4
1.6.0 / 2014-09-07
- deps: send@0.9.0
- Add
lastModified
option - Use
etag
to generateETag
header - deps: debug@~2.0.0
- Add
1.5.4 / 2014-09-04
- deps: send@0.8.5
- Fix a path traversal issue when using
root
- Fix malicious path detection for empty string path
- Fix a path traversal issue when using
1.5.3 / 2014-08-17
- deps: send@0.8.3
1.5.2 / 2014-08-14
- deps: send@0.8.2
- Work around
fd
leak in Node.js 0.10 forfs.ReadStream
- Work around
1.5.1 / 2014-08-09
- Fix parsing of weird
req.originalUrl
values - deps: parseurl@~1.3.0
- deps: utils-merge@1.0.0
1.5.0 / 2014-08-05
- deps: send@0.8.1
- Add
extensions
option
- Add
1.4.4 / 2014-08-04
- deps: send@0.7.4
- Fix serving index files without root dir
1.4.3 / 2014-07-29
- deps: send@0.7.3
- Fix incorrect 403 on Windows and Node.js 0.11
1.4.2 / 2014-07-27
- deps: send@0.7.2
- deps: depd@0.4.4
1.4.1 / 2014-07-26
- deps: send@0.7.1
- deps: depd@0.4.3
1.4.0 / 2014-07-21
- deps: parseurl@~1.2.0
- Cache URLs based on original value
- Remove no-longer-needed URL mis-parse work-around
- Simplify the "fast-path"
RegExp
- deps: send@0.7.0
- Add
dotfiles
option - deps: debug@1.0.4
- deps: depd@0.4.2
- Add
1.3.2 / 2014-07-11
- deps: send@0.6.0
- Cap
maxAge
value to 1 year - deps: debug@1.0.3
- Cap
1.3.1 / 2014-07-09
- deps: parseurl@~1.1.3
- faster parsing of href-only URLs
1.3.0 / 2014-06-28
- Add
setHeaders
option - Include HTML link in redirect response
- deps: send@0.5.0
- Accept string for
maxAge
(converted byms
)
- Accept string for
1.2.3 / 2014-06-11
- deps: send@0.4.3
- Do not throw un-catchable error on file open race condition
- Use
escape-html
for HTML escaping - deps: debug@1.0.2
- deps: finished@1.2.2
- deps: fresh@0.2.2
1.2.2 / 2014-06-09
- deps: send@0.4.2
- fix "event emitter leak" warnings
- deps: debug@1.0.1
- deps: finished@1.2.1
1.2.1 / 2014-06-02
- use
escape-html
for escaping - deps: send@0.4.1
- Send
max-age
inCache-Control
in correct format
- Send
1.2.0 / 2014-05-29
- deps: send@0.4.0
- Calculate ETag with md5 for reduced collisions
- Fix wrong behavior when index file matches directory
- Ignore stream errors after request ends
- Skip directories in index file search
- deps: debug@0.8.1
1.1.0 / 2014-04-24
- Accept options directly to
send
module - deps: send@0.3.0
1.0.4 / 2014-04-07
- Resolve relative paths at middleware setup
- Use parseurl to parse the URL from request
1.0.3 / 2014-03-20
- Do not rely on connect-like environments
1.0.2 / 2014-03-06
- deps: send@0.2.0
1.0.1 / 2014-03-05
- Add mime export for back-compat
1.0.0 / 2014-03-05
- Genesis from
connect