COMMITS
April 1, 2026
P
chore: update deps
Pooya Parsa committed
March 27, 2026
P
chore(release): v2.0.1-rc.20
Pooya Parsa committed
P
chore: update deps
Pooya Parsa committed
P
refactor: mark `new TextEncoder` as pure
Pooya Parsa committed
P
chore: update cookie-es
Pooya Parsa committed
March 26, 2026
P
refactor: pass single obj to `serializeCookie`
Pooya Parsa committed
March 25, 2026
P
build: upgrade mdzilla to 0.2
Pooya Parsa committed
March 23, 2026
P
chore(release): v2.0.1-rc.19
Pooya Parsa committed
P
refactor: upgrade cookie-es to v3
Pooya Parsa committed
P
chore: remove unused import
Pooya Parsa committed
P
fix(body): enforce stream-based body size check regardless of content-length header
Pooya Parsa committed
March 22, 2026
N
docs: remove `await-thenable` lint rule and fix invalid `await` usage (#1353)
Nick Spaargaren committed
P
chore: update deps
Pooya Parsa committed
P
build: move docs to dist
Pooya Parsa committed
March 21, 2026
P
chore(release): v2.0.1-rc.18
Pooya Parsa committed
P
fix(cookie): prevent unbounded chunked cookie count
Pooya Parsa committed
P
fix(utils): prevent open redirect via protocol-relative path in `redirectBack()`
Pooya Parsa committed
March 19, 2026
P
chore(release): v2.0.1-rc.17
Pooya Parsa committed
P
chore: update deps
Pooya Parsa committed
P
docs: improve security notes about proxy utils
Pooya Parsa committed
P
fix(mount): enforce path segment boundary in `startsWith` check
Pooya Parsa committed
P
fix(static): prevent path traversal via double-encoded dot segments
Pooya Parsa committed
P
fix(mount): normalize percent-encoded pathname in `requestWithBaseURL`
Pooya Parsa committed
P
rm extra dir
Pooya Parsa committed
P
fix(sse): sanitize carriage returns in event stream data and comments
Pooya Parsa committed
W
feat: add `removeRoute` (#1331)
Wind committed
W
feat: add redirectBack utility (#1329)
Wind committed
T
fix(request): include `Allow` header in 405 response (#1314)
Terminal Chai committed