- deps: escape-html@~1.0.3
- perf: enable strict mode
- perf: optimize string replacement
- perf: use faster string coercion
- Add
fallthrough
option- Allows declaring this middleware is the final destination
- Provides better integration with Express patterns
- Fix reading options from options prototype
- Improve the default redirect response headers
- deps: [email protected]
- deps: [email protected]
- Allow Node.js HTTP server to set
Date
response header - Fix incorrectly removing
Content-Location
on 304 response - Improve the default redirect response headers
- Send appropriate headers on default error response
- Use
http-errors
for standard emitted errors - Use
statuses
instead ofhttp
module for status messages - deps: [email protected]
- deps: etag@~1.7.0
- deps: [email protected]
- deps: on-finished@~2.3.0
- perf: enable strict mode
- perf: remove unnecessary array allocations
- Allow Node.js HTTP server to set
- perf: enable strict mode
- perf: remove argument reassignment
- deps: [email protected]
- deps: debug@~2.2.0
- deps: depd@~1.0.1
- deps: etag@~1.6.0
- deps: [email protected]
- deps: on-finished@~2.2.1
- deps: [email protected]
- Throw errors early for invalid
extensions
orindex
options - deps: debug@~2.1.3
- Throw errors early for invalid
- deps: [email protected]
- Fix regression sending zero-length files
- deps: [email protected]
- Always read the stat size from the file
- Fix mutating passed-in
options
- deps: [email protected]
- Fix redirect loop in Node.js 0.11.14
- deps: [email protected]
- Fix root path disclosure
- deps: [email protected]
- deps: debug@~2.1.1
- deps: etag@~1.5.1
- deps: [email protected]
- deps: on-finished@~2.2.0
- Fix potential open redirect when mounted at root
- deps: [email protected]
- deps: on-finished@~2.1.1
- deps: [email protected]
- deps: debug@~2.1.0
- deps: depd@~1.0.0
- deps: etag@~1.5.0
- Fix potential open redirect when mounted at root
- Back-ported from v1.7.2
- Fix redirect loop when index file serving disabled
- deps: [email protected]
- deps: etag@~1.4.0
- deps: [email protected]
- deps: [email protected]
- deps: etag@~1.3.1
- deps: range-parser@~1.0.2
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- Add
lastModified
option - Use
etag
to generateETag
header - deps: debug@~2.0.0
- Add
- deps: [email protected]
- Fix a path traversal issue when using
root
- Fix malicious path detection for empty string path
- Fix a path traversal issue when using
- deps: [email protected]
- deps: [email protected]
- Work around
fd
leak in Node.js 0.10 forfs.ReadStream
- Work around
- Fix parsing of weird
req.originalUrl
values - deps: parseurl@~1.3.0
- deps: [email protected]
- deps: [email protected]
- Add
extensions
option
- Add
- deps: [email protected]
- Fix serving index files without root dir
- deps: [email protected]
- Fix incorrect 403 on Windows and Node.js 0.11
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: parseurl@~1.2.0
- Cache URLs based on original value
- Remove no-longer-needed URL mis-parse work-around
- Simplify the "fast-path"
RegExp
- deps: [email protected]
- Add
dotfiles
option - deps: [email protected]
- deps: [email protected]
- Add
- deps: [email protected]
- Cap
maxAge
value to 1 year - deps: [email protected]
- Cap
- deps: parseurl@~1.1.3
- faster parsing of href-only URLs
- Add
setHeaders
option - Include HTML link in redirect response
- deps: [email protected]
- Accept string for
maxAge
(converted byms
)
- Accept string for
- deps: [email protected]
- Do not throw un-catchable error on file open race condition
- Use
escape-html
for HTML escaping - deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- deps: [email protected]
- fix "event emitter leak" warnings
- deps: [email protected]
- deps: [email protected]
- use
escape-html
for escaping - deps: [email protected]
- Send
max-age
inCache-Control
in correct format
- Send
- deps: [email protected]
- Calculate ETag with md5 for reduced collisions
- Fix wrong behavior when index file matches directory
- Ignore stream errors after request ends
- Skip directories in index file search
- deps: [email protected]
- Accept options directly to
send
module - deps: [email protected]
- Resolve relative paths at middleware setup
- Use parseurl to parse the URL from request
- Do not rely on connect-like environments
- deps: [email protected]
- Add mime export for back-compat
- Genesis from
connect