Skip to content

Releases: expressjs/express

4.7.1

26 Jul 23:03
Compare
Choose a tag to compare

4.7.0

26 Jul 00:30
Compare
Choose a tag to compare
  • fix req.protocol for proxy-direct connections
  • configurable query parser with app.set('query parser', parser)
    • app.set('query parser', 'extended') parse with "qs" module
    • app.set('query parser', 'simple') parse with "querystring" core module
    • app.set('query parser', false) disable query string parsing
    • app.set('query parser', true) enable simple parsing
  • deprecate res.json(status, obj) -- use res.status(status).json(obj) instead
  • deprecate res.jsonp(status, obj) -- use res.status(status).jsonp(obj) instead
  • deprecate res.send(status, body) -- use res.status(status).send(body) instead
  • deps: [email protected]
  • deps: [email protected]
    • Add TRACE_DEPRECATION environment variable
    • Remove non-standard grey color from color output
    • Support --no-deprecation argument
    • Support --trace-deprecation argument
  • deps: [email protected]
  • deps: parseurl@~1.2.0
    • Cache URLs based on original value
    • Remove no-longer-needed URL mis-parse work-around
    • Simplify the "fast-path" RegExp
  • deps: [email protected]
  • deps: serve-static@~1.4.0
  • perf: prevent multiple Buffer creation in res.send

3.15.1

26 Jul 23:03
Compare
Choose a tag to compare

3.15.0

23 Jul 04:54
Compare
Choose a tag to compare

4.6.1

13 Jul 02:21
Compare
Choose a tag to compare
  • fix subapp.mountpath regression for app.use(subapp)

4.6.0

12 Jul 03:35
Compare
Choose a tag to compare
  • accept multiple callbacks to app.use()
  • add explicit "Rosetta Flash JSONP abuse" protection
    • previous versions are not vulnerable; this is just explicit protection
  • catch errors in multiple req.param(name, fn) handlers
  • deprecate res.redirect(url, status) -- use res.redirect(status, url) instead
  • fix res.send(status, num) to send num as json (not error)
  • remove unnecessary escaping when res.jsonp returns JSON response
  • support non-string path in app.use(path, fn)
    • supports array of paths
    • supports RegExp
  • router: fix optimization on router exit
  • router: refactor location of try blocks
  • router: speed up standard app.use(fn)
  • deps: [email protected]
    • Add support for multiple wildcards in namespaces
  • deps: [email protected]
  • deps: [email protected]
    • add CONNECT
  • deps: parseurl@~1.1.3
    • faster parsing of href-only URLs
  • deps: [email protected]
  • deps: [email protected]
  • deps: serve-static@~1.3.2
  • perf: fix arguments reassign deopt in some res methods

3.14.0

11 Jul 17:33
Compare
Choose a tag to compare
  • add explicit "Rosetta Flash JSONP abuse" protection
    • previous versions are not vulnerable; this is just explicit protection
  • deprecate res.redirect(url, status) -- use res.redirect(status, url) instead
  • fix res.send(status, num) to send num as json (not error)
  • remove unnecessary escaping when res.jsonp returns JSON response
  • deps: [email protected]
    • support empty password
    • support empty username
  • deps: [email protected]
    • deps: [email protected]
    • deps: express-session@~1.6.4
    • deps: method-override@~2.1.0
    • deps: parseurl@~1.1.3
    • deps: serve-static@~1.3.1
    • deps: [email protected]
      • Add support for multiple wildcards in namespaces
    • deps: [email protected]
      • add CONNECT
    • deps: parseurl@~1.1.3
      • faster parsing of href-only URLs

4.5.1

06 Jul 23:51
Compare
Choose a tag to compare
  • fix routing regression when altering req.method

4.5.0

05 Jul 01:03
Compare
Choose a tag to compare
  • add deprecation message to non-plural req.accepts*
  • add deprecation message to res.send(body, status)
  • add deprecation message to res.vary()
  • add headers option to res.sendfile
    • use to set headers on successful file transfer
  • add mergeParams option to Router
    • merges req.params from parent routes
  • add req.hostname -- correct name for what req.host returns
  • deprecate things with depd module
  • deprecate req.host -- use req.hostname instead
  • fix behavior when handling request without routes
  • fix handling when route.all is only route
  • invoke router.param() only when route matches
  • restore req.params after invoking router
  • use finalhandler for final response handling
  • use media-typer to alter content-type charset
  • deps: accepts@~1.0.7
  • deps: [email protected]
    • Accept string for maxage (converted by ms)
    • Include link in default redirect response
  • deps: serve-static@~1.3.0
    • Accept string for maxAge (converted by ms)
    • Add setHeaders option
    • Include HTML link in redirect response
    • deps: [email protected]
  • deps: type-is@~1.3.2

3.13.0

04 Jul 21:17
Compare
Choose a tag to compare
  • add deprecation message to app.configure
  • add deprecation message to req.auth
  • use basic-auth to parse Authorization header
  • deps: [email protected]
    • deps: csurf@~1.3.0
    • deps: express-session@~1.6.1
    • deps: [email protected]
    • deps: serve-static@~1.3.0
  • deps: [email protected]
    • Accept string for maxage (converted by ms)
    • Include link in default redirect response