1.2.0 / 2025-03-27¶
- deps:
mime-types@^3.0.1fresh@^2.0.0- removed
destroy
- remove
getHeaderNames()polyfill and refactorclearHeaders()
1.1.0 / 2024-09-10¶
- Changes from 0.19.0
1.0.0 / 2024-07-25¶
- Drop support for Node.js <18.0
statuses@^2.0.1range-parser@^1.2.1on-finished@^2.4.1ms@^2.1.3mime-types@^2.1.35http-errors@^2.0.0fresh@^0.5.2etag@^1.8.1escape-html@^1.0.3encodeurl@^2.0.0destroy@^1.2.0debug@^4.3.5
1.0.0-beta.2 / 2024-03-04¶
- Changes from 0.18.0
1.0.0-beta.1 / 2022-02-04¶
- Drop support for Node.js 0.8
- Remove
hiddenoption -- usedotfilesoption - Remove
fromalias toroot-- userootdirectly - Remove
send.etag()-- useetaginoptions - Remove
send.index()-- useindexinoptions - Remove
send.maxage()-- usemaxAgeinoptions - Remove
send.root()-- userootinoptions - Use
mime-typesfor file to content type mapping -- removedsend.mime - deps: [email protected]
- Add
DEBUG_HIDE_DATEenvironment variable - Change timer to per-namespace instead of global
- Change non-TTY date format
- Remove
DEBUG_FDenvironment variable support - Support 256 namespace colors
- Add
0.19.0 / 2024-09-10¶
- Remove link renderization in html while redirecting
0.18.0 / 2022-03-23¶
- Fix emitted 416 error missing headers property
- Limit the headers removed for 304 response
- deps: [email protected]
- Replace internal
evalusage withFunctionconstructor - Use instance methods on
processto check for listeners
- Replace internal
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
0.17.2 / 2021-12-11¶
- pref: ignore empty http tokens
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
0.17.1 / 2019-05-10¶
- Set stricter CSP header in redirect & error responses
- deps: range-parser@~1.2.1
0.17.0 / 2019-05-03¶
- deps: http-errors@~1.7.2
- Set constructor name when possible
- Use
toidentifiermodule to make class names - deps: depd@~1.1.2
- deps: [email protected]
- deps: statuses@'>= 1.5.0 < 2'
- deps: [email protected]
- Add extensions for JPEG-2000 images
- Add new
font/*types from IANA - Add WASM mapping
- Update
.bdoctoapplication/bdoc - Update
.bmptoimage/bmp - Update
.m4atoaudio/mp4 - Update
.rtftoapplication/rtf - Update
.wavtoaudio/wav - Update
.xmltoapplication/xml - Update generic extensions to
application/octet-stream:.deb,.dll,.dmg,.exe,.iso,.msi - Use mime-score module to resolve extension conflicts
- deps: [email protected]
- Add
week/wsupport - Fix negative number handling
- Add
- deps: statuses@~1.5.0
- perf: remove redundant
path.normalizecall
0.16.2 / 2018-02-07¶
- Fix incorrect end tag in default error & redirects
- deps: depd@~1.1.2
- perf: remove argument reassignment
- deps: encodeurl@~1.0.2
- Fix encoding
%as last character
- Fix encoding
- deps: statuses@~1.4.0
0.16.1 / 2017-09-29¶
- Fix regression in edge-case behavior for empty
path
0.16.0 / 2017-09-27¶
- Add
immutableoption - Fix missing
</html>in default error & redirects - Use instance methods on steam to check for listeners
- deps: [email protected]
- Add 70 new types for file extensions
- Set charset as "UTF-8" for .js and .json
- perf: improve path validation speed
0.15.6 / 2017-09-22¶
- deps: [email protected]
- perf: improve
If-Matchtoken parsing
0.15.5 / 2017-09-20¶
- deps: etag@~1.8.1
- perf: replace regular expression with substring
- deps: [email protected]
- Fix handling of modified headers with invalid dates
- perf: improve ETag match loop
- perf: improve
If-None-Matchtoken parsing
0.15.4 / 2017-08-05¶
- deps: [email protected]
- deps: depd@~1.1.1
- Remove unnecessary
Bufferloading
- Remove unnecessary
- deps: http-errors@~1.6.2
- deps: [email protected]
0.15.3 / 2017-05-16¶
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
0.15.2 / 2017-04-26¶
- deps: [email protected]
- Fix
DEBUG_MAX_ARRAY_LENGTH - deps: [email protected]
- Fix
- deps: [email protected]
0.15.1 / 2017-03-04¶
- Fix issue when
Date.parsedoes not returnNaNon invalid date - Fix strict violation in broken environments
0.15.0 / 2017-02-25¶
- Support
If-MatchandIf-Unmodified-Sinceheaders - Add
resandpatharguments todirectoryevent - Remove usage of
res._headersprivate field- Improves compatibility with Node.js 8 nightly
- Send complete HTML document in redirect & error responses
- Set default CSP header in redirect & error responses
- Use
res.getHeaderNames()when available - Use
res.headersSentwhen available - deps: [email protected]
- Allow colors in workers
- Deprecated
DEBUG_FDenvironment variable set to3or higher - Fix error when running under React Native
- Use same color for same namespace
- deps: [email protected]
- deps: etag@~1.8.0
- deps: [email protected]
- Fix false detection of
no-cacherequest directive - Fix incorrect result when
If-None-Matchhas both*and ETags - Fix weak
ETagmatching to match spec - perf: delay reading header values until needed
- perf: enable strict mode
- perf: hoist regular expressions
- perf: remove duplicate conditional
- perf: remove unnecessary boolean coercions
- perf: skip checking modified time if ETag check failed
- perf: skip parsing
If-None-Matchwhen noETagheader - perf: use
Date.parseinstead ofnew Date
- Fix false detection of
- deps: http-errors@~1.6.1
- Make
messageproperty enumerable forHttpErrors - deps: [email protected]
- Make
0.14.2 / 2017-01-23¶
- deps: http-errors@~1.5.1
- deps: [email protected]
- deps: [email protected]
- deps: statuses@'>= 1.3.1 < 2'
- deps: [email protected]
- deps: statuses@~1.3.1
0.14.1 / 2016-06-09¶
- Fix redirect error when
pathcontains raw non-URL characters - Fix redirect when
pathstarts with multiple forward slashes
0.14.0 / 2016-06-06¶
- Add
acceptRangesoption - Add
cacheControloption - Attempt to combine multiple ranges into single range
- Correctly inherit from
Streamclass - Fix
Content-Rangeheader in 416 responses when usingstart/endoptions - Fix
Content-Rangeheader missing from default 416 responses - Ignore non-byte
Rangeheaders - deps: http-errors@~1.5.0
- Add
HttpErrorexport, forerr instanceof createError.HttpError - Support new code
421 Misdirected Request - Use
setprototypeofmodule to replace__proto__setting - deps: [email protected]
- deps: statuses@'>= 1.3.0 < 2'
- perf: enable strict mode
- Add
- deps: range-parser@~1.2.0
- Fix incorrectly returning -1 when there is at least one valid range
- perf: remove internal function
- deps: statuses@~1.3.0
- Add
421 Misdirected Request - perf: enable strict mode
- Add
- perf: remove argument reassignment
0.13.2 / 2016-03-05¶
- Fix invalid
Content-Typeheader whensend.mime.default_typeunset
0.13.1 / 2016-01-16¶
- deps: depd@~1.1.0
- Support web browser loading
- perf: enable strict mode
- deps: destroy@~1.0.4
- perf: enable strict mode
- deps: escape-html@~1.0.3
- perf: enable strict mode
- perf: optimize string replacement
- perf: use faster string coercion
- deps: range-parser@~1.0.3
- perf: enable strict mode
0.13.0 / 2015-06-16¶
- Allow Node.js HTTP server to set
Dateresponse header - Fix incorrectly removing
Content-Locationon 304 response - Improve the default redirect response headers
- Send appropriate headers on default error response
- Use
http-errorsfor standard emitted errors - Use
statusesinstead ofhttpmodule for status messages - deps: [email protected]
- deps: etag@~1.7.0
- Improve stat performance by removing hashing
- deps: [email protected]
- Add weak
ETagmatching support
- Add weak
- deps: on-finished@~2.3.0
- Add defined behavior for HTTP
CONNECTrequests - Add defined behavior for HTTP
Upgraderequests - deps: [email protected]
- Add defined behavior for HTTP
- perf: enable strict mode
- perf: remove unnecessary array allocations
0.12.3 / 2015-05-13¶
- deps: debug@~2.2.0
- deps: [email protected]
- deps: depd@~1.0.1
- deps: etag@~1.6.0
- Improve support for JXcore
- Support "fake" stats objects in environments without
fs - deps: [email protected]
- Prevent extraordinarily long inputs
- deps: on-finished@~2.2.1
0.12.2 / 2015-03-13¶
- Throw errors early for invalid
extensionsorindexoptions - deps: debug@~2.1.3
- Fix high intensity foreground color for bold
- deps: [email protected]
0.12.1 / 2015-02-17¶
- Fix regression sending zero-length files
0.12.0 / 2015-02-16¶
- Always read the stat size from the file
- Fix mutating passed-in
options - deps: [email protected]
0.11.1 / 2015-01-20¶
- Fix
rootpath disclosure
0.11.0 / 2015-01-05¶
- deps: debug@~2.1.1
- deps: etag@~1.5.1
- deps: [email protected]
- deps: [email protected]
- Add
milliseconds - Add
msecs - Add
secs - Add
mins - Add
hrs - Add
yrs
- Add
- deps: on-finished@~2.2.0
0.10.1 / 2014-10-22¶
- deps: on-finished@~2.1.1
- Fix handling of pipelined requests
0.10.0 / 2014-10-15¶
- deps: debug@~2.1.0
- Implement
DEBUG_FDenv variable support
- Implement
- deps: depd@~1.0.0
- deps: etag@~1.5.0
- Improve string performance
- Slightly improve speed for weak ETags over 1KB
0.9.3 / 2014-09-24¶
- deps: etag@~1.4.0
- Support "fake" stats objects
0.9.2 / 2014-09-15¶
- deps: [email protected]
- deps: etag@~1.3.1
- deps: range-parser@~1.0.2
0.9.1 / 2014-09-07¶
- deps: [email protected]
0.9.0 / 2014-09-07¶
- Add
lastModifiedoption - Use
etagto generateETagheader - deps: debug@~2.0.0
0.8.5 / 2014-09-04¶
- Fix malicious path detection for empty string path
0.8.4 / 2014-09-04¶
- Fix a path traversal issue when using
root
0.8.3 / 2014-08-16¶
- deps: [email protected]
- renamed from dethroy
- deps: [email protected]
0.8.2 / 2014-08-14¶
- Work around
fdleak in Node.js 0.10 forfs.ReadStream - deps: [email protected]
0.8.1 / 2014-08-05¶
- Fix
extensionsbehavior when file already has extension
0.8.0 / 2014-08-05¶
- Add
extensionsoption
0.7.4 / 2014-08-04¶
- Fix serving index files without root dir
0.7.3 / 2014-07-29¶
- Fix incorrect 403 on Windows and Node.js 0.11
0.7.2 / 2014-07-27¶
- deps: [email protected]
- Work-around v8 generating empty stack traces
0.7.1 / 2014-07-26¶
- deps: [email protected]
- Fix exception when global
Error.stackTraceLimitis too low
0.7.0 / 2014-07-20¶
- Deprecate
hiddenoption; usedotfilesoption - Add
dotfilesoption - deps: [email protected]
- deps: [email protected]
- Add
TRACE_DEPRECATIONenvironment variable - Remove non-standard grey color from color output
- Support
--no-deprecationargument - Support
--trace-deprecationargument
0.6.0 / 2014-07-11¶
- Deprecate
fromoption; userootoption - Deprecate
send.etag()-- useetaginoptions - Deprecate
send.hidden()-- usehiddeninoptions - Deprecate
send.index()-- useindexinoptions - Deprecate
send.maxage()-- usemaxAgeinoptions - Deprecate
send.root()-- userootinoptions - Cap
maxAgevalue to 1 year - deps: [email protected]
- Add support for multiple wildcards in namespaces
0.5.0 / 2014-06-28¶
- Accept string for
maxAge(converted byms) - Add
headersevent - Include link in default redirect response
- Use
EventEmitter.listenerCountto count listeners
0.4.3 / 2014-06-11¶
- Do not throw un-catchable error on file open race condition
- Use
escape-htmlfor HTML escaping - deps: [email protected]
- fix some debugging output colors on node.js 0.8
- deps: [email protected]
- deps: [email protected]
0.4.2 / 2014-06-09¶
- fix "event emitter leak" warnings
- deps: [email protected]
- deps: [email protected]
0.4.1 / 2014-06-02¶
- Send
max-ageinCache-Controlin correct format
0.4.0 / 2014-05-27¶
- Calculate ETag with md5 for reduced collisions
- Fix wrong behavior when index file matches directory
- Ignore stream errors after request ends
- Goodbye
EBADF, read - Skip directories in index file search
- deps: [email protected]
0.3.0 / 2014-04-24¶
- Fix sending files with dots without root set
- Coerce option types
- Accept API options in options object
- Set etags to "weak"
- Include file path in etag
- Make "Can't set headers after they are sent." catchable
- Send full entity-body for multi range requests
- Default directory access to 403 when index disabled
- Support multiple index paths
- Support "If-Range" header
- Control whether to generate etags
- deps: [email protected]
0.2.0 / 2014-01-29¶
- update range-parser and fresh
0.1.4 / 2013-08-11¶
- update fresh
0.1.3 / 2013-07-08¶
- Revert "Fix fd leak"
0.1.2 / 2013-07-03¶
- Fix fd leak
0.1.0 / 2012-08-25¶
- add options parameter to send() that is passed to fs.createReadStream() [kanongil]
0.0.4 / 2012-08-16¶
- allow custom "Accept-Ranges" definition
0.0.3 / 2012-07-16¶
- fix normalization of the root directory. Closes #3
0.0.2 / 2012-07-09¶
- add passing of req explicitly for now (YUCK)
0.0.1 / 2010-01-03¶
- Initial release