Sourced from path-to-regexp's releases.
Backtrack protection
Fixed
- Add backtrack protection to parameters 29b96b4
- This will break some edge cases but should improve performance
https://github.com/pillarjs/path-to-regexp/compare/v0.1.9...v0.1.10
Support non-lookahead regex output
Added
- Allow a non-lookahead regex (#312) c4272e4
https://github.com/component/path-to-regexp/compare/v0.1.8...v0.1.9
Support named matching groups in
RegExpAdded
- Add support for named matching groups (#301) 114f62d
https://github.com/pillarjs/path-to-regexp/compare/v0.1.7...v0.1.8
Sourced from express's releases.
4.20.0
What's Changed
Important
- IMPORTANT: The default
depthlevel for parsing URL-encoded data is now32(previously wasInfinity)- Remove link renderization in html while using
res.redirectOther Changes
- 4.19.2 Staging by
@wesleytoddin expressjs/express#5561- remove duplicate location test for data uri by
@wesleytoddin expressjs/express#5562- feat: document beta releases expectations by
@marco-ippolitoin expressjs/express#5565- Cut down on duplicated CI runs by
@jonchurchin expressjs/express#5564- Add a Threat Model by
@UlisesGasconin expressjs/express#5526- Assign captain of encodeurl by
@blakeembreyin expressjs/express#5579- Nominate jonchurch as repo captain for
http-errors,expressjs.com,morgan,cors,body-parserby@jonchurchin expressjs/express#5587- docs: update Security.md by
@inigomarquinezin expressjs/express#5590- docs: update triage nomination policy by
@UlisesGasconin expressjs/express#5600- Add CodeQL (SAST) by
@UlisesGasconin expressjs/express#5433- docs: add UlisesGascon as triage initiative captain by
@UlisesGasconin expressjs/express#5605- deps: encodeurl@~2.0.0 by
@blakeembreyin expressjs/express#5569- skip QUERY method test by
@jonchurchin expressjs/express#5628- ignore ETAG query test on 21 and 22, reuse skip util by
@jonchurchin expressjs/express#5639- add support Node.js@22 in the CI by
@mertcanaltinin expressjs/express#5627- doc: add table of contents, tc/triager lists to readme by
@mertcanaltinin expressjs/express#5619- List and sort all projects, add captains by
@blakeembreyin expressjs/express#5653- docs: add
@UlisesGasconas captain for cookie-parser by@UlisesGasconin expressjs/express#5666- ✨ bring back query tests for node 21 by
@ctcpipin expressjs/express#5690- [v4] Deprecate
res.clearCookieacceptingoptions.maxAgeandoptions.expiresby@jonchurchin expressjs/express#5672- skip QUERY tests for Node 21 only, still not supported by
@jonchurchin expressjs/express#5695- 📝 update people, add ctcpip to TC by
@ctcpipin expressjs/express#5683- remove minor version pinning from ci by
@jonchurchin expressjs/express#5722- Fix link variable use in attribution section of CODE OF CONDUCT by
@IamLizuin expressjs/express#5762- Replace Appveyor windows testing with GHA by
@jonchurchin expressjs/express#5599- Add OSSF Scorecard badge by
@UlisesGasconin expressjs/express#5436- update scorecard link by
@bjohansebasin expressjs/express#5814- Nominate
@IamLizuto the triage team by@UlisesGasconin expressjs/express#5836- deps: path-to-regexp@0.1.8 by
@blakeembreyin expressjs/express#5603- docs: specify new instructions for
questionanddiscussby@IamLizuin expressjs/express#5835- 4.x: Upgrade
merge-descriptorsdependency by@RobinTailin expressjs/express#5781- path-to-regexp@0.1.10 by
@blakeembreyin expressjs/express#5902New Contributors
@marco-ippolitomade their first contribution in expressjs/express#5565@inigomarquinezmade their first contribution in expressjs/express#5590@mertcanaltinmade their first contribution in expressjs/express#5627@ctcpipmade their first contribution in expressjs/express#5690@bjohansebasmade their first contribution in expressjs/express#5814Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.20.0
Sourced from express's changelog.
4.20.0 / 2024-09-10
- deps: serve-static@0.16.0
- Remove link renderization in html while redirecting
- deps: send@0.19.0
- Remove link renderization in html while redirecting
- deps: body-parser@0.6.0
- add
depthoption to customize the depth level in the parser- IMPORTANT: The default
depthlevel for parsing URL-encoded data is now32(previously wasInfinity)- Remove link renderization in html while using
res.redirect- deps: path-to-regexp@0.1.10
- Adds support for named matching groups in the routes using a regex
- Adds backtracking protection to parameters without regexes defined
- deps: encodeurl@~2.0.0
- Removes encoding of
\,|, and^to align better with URL spec- Deprecate passing
options.maxAgeandoptions.expirestores.clearCookie
- Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
21df421
4.20.04c9ddc1
feat: upgrade to serve-static@0.16.09ebe5d5
feat: upgrade to send@0.19.0 (#5928)ec4a01b
feat: upgrade to body-parser@1.20.3 (#5926)54271f6
fix: don't render redirect values in anchor href125bb74
path-to-regexp@0.1.10 (#5902)2a980ad
merge-descriptors@1.0.3 (#5781)a3e7e05
docs: specify new instructions for question and
discussc5addb9
deps: path-to-regexp@0.1.8 (#5603)e35380a
docs: add @IamLizu to the
triage team (#5836)Sourced from send's releases.
0.19.0
What's Changed
- Remove link renderization in html while redirecting (pillarjs/send#235)
New Contributors
@UlisesGasconmade their first contribution in pillarjs/send#235Full Changelog: https://github.com/pillarjs/send/compare/0.18.0...0.19.0
Sourced from send's changelog.
0.19.0 / 2024-09-10
- Remove link renderization in html while redirecting
9d2db99
0.19.0ae4f298
Merge commit from forkThis version was pushed to npm by ulisesgascon, a new releaser for send since your current version.
Sourced from express's releases.
4.21.0
What's Changed
- Deprecate
"back"magic string in redirects by@blakeembreyin expressjs/express#5935- finalhandler@1.3.1 by
@wesleytoddin expressjs/express#5954- fix(deps): serve-static@1.16.2 by
@wesleytoddin expressjs/express#5951- Upgraded dependency qs to 6.13.0 to match qs in body-parser by
@agadzinski93in expressjs/express#5946New Contributors
@agadzinski93made their first contribution in expressjs/express#5946Full Changelog: https://github.com/expressjs/express/compare/4.20.0...4.21.0
Sourced from express's changelog.
4.21.0 / 2024-09-11
- Deprecate
res.location("back")andres.redirect("back")magic string- deps: serve-static@1.16.2
- includes send@0.19.0
- deps: finalhandler@1.3.1
- deps: qs@6.13.0