0.19.0 / 2024-09-10

• Remove link renderization in html while redirecting

0.18.0 / 2022-03-23

• Fix emitted 416 error missing headers property
• Limit the headers removed for 304 response
• deps: depd@2.0.0
  • Replace internal eval usage with Function constructor
  • Use instance methods on process to check for listeners
• deps: destroy@1.2.0
• deps: http-errors@2.0.0
  • deps: depd@2.0.0
  • deps: statuses@2.0.1
• deps: on-finished@2.4.1
• deps: statuses@2.0.1

0.17.2 / 2021-12-11

• pref: ignore empty http tokens
• deps: http-errors@1.8.1
  • deps: inherits@2.0.4
  • deps: toidentifier@1.0.1
  • deps: setprototypeof@1.2.0
• deps: ms@2.1.3

0.17.1 / 2019-05-10

• Set stricter CSP header in redirect & error responses
• deps: range-parser@~1.2.1

0.17.0 / 2019-05-03

• deps: http-errors@~1.7.2
  • Set constructor name when possible
  • Use toidentifier module to make class names
  • deps: depd@~1.1.2
  • deps: setprototypeof@1.1.1
  • deps: statuses@’>= 1.5.0 < 2’
• deps: mime@1.6.0
  • Add extensions for JPEG-2000 images
  • Add new font/* types from IANA
  • Add WASM mapping
  • Update .bdoc to application/bdoc
  • Update .bmp to image/bmp
  • Update .m4a to audio/mp4
  • Update .rtf to application/rtf
  • Update .wav to audio/wav
  • Update .xml to application/xml
  • Update generic extensions to application/octet-stream: .deb, .dll, .dmg, .exe, .iso, .msi
  • Use mime-score module to resolve extension conflicts
• deps: ms@2.1.1
  • Add week/w support
  • Fix negative number handling
• deps: statuses@~1.5.0
• perf: remove redundant path.normalize call

0.16.2 / 2018-02-07

• Fix incorrect end tag in default error & redirects
• deps: depd@~1.1.2
  • perf: remove argument reassignment
• deps: encodeurl@~1.0.2
  • Fix encoding % as last character
• deps: statuses@~1.4.0

0.16.1 / 2017-09-29

• Fix regression in edge-case behavior for empty path

0.16.0 / 2017-09-27

• Add immutable option
• Fix missing </html> in default error & redirects
• Use instance methods on steam to check for listeners
• deps: mime@1.4.1
  • Add 70 new types for file extensions
  • Set charset as “UTF-8” for .js and .json
• perf: improve path validation speed

0.15.6 / 2017-09-22

• deps: debug@2.6.9
• perf: improve If-Match token parsing

0.15.5 / 2017-09-20

• deps: etag@~1.8.1
  • perf: replace regular expression with substring
• deps: fresh@0.5.2
  • Fix handling of modified headers with invalid dates
  • perf: improve ETag match loop
  • perf: improve If-None-Match token parsing

0.15.4 / 2017-08-05

• deps: debug@2.6.8
• deps: depd@~1.1.1
  • Remove unnecessary Buffer loading
• deps: http-errors@~1.6.2
  • deps: depd@1.1.1

0.15.3 / 2017-05-16

• deps: debug@2.6.7
  • deps: ms@2.0.0
• deps: ms@2.0.0

0.15.2 / 2017-04-26

• deps: debug@2.6.4
  • Fix DEBUG_MAX_ARRAY_LENGTH
  • deps: ms@0.7.3
• deps: ms@1.0.0

0.15.1 / 2017-03-04

• Fix issue when Date.parse does not return NaN on invalid date
• Fix strict violation in broken environments

0.15.0 / 2017-02-25

• Support If-Match and If-Unmodified-Since headers
• Add res and path arguments to directory event
• Remove usage of res._headers private field
  • Improves compatibility with Node.js 8 nightly
• Send complete HTML document in redirect & error responses
• Set default CSP header in redirect & error responses
• Use res.getHeaderNames() when available
• Use res.headersSent when available
• deps: debug@2.6.1
  • Allow colors in workers
  • Deprecated DEBUG_FD environment variable set to 3 or higher
  • Fix error when running under React Native
  • Use same color for same namespace
  • deps: ms@0.7.2
• deps: etag@~1.8.0
• deps: fresh@0.5.0
  • Fix false detection of no-cache request directive
  • Fix incorrect result when If-None-Match has both * and ETags
  • Fix weak ETag matching to match spec
  • perf: delay reading header values until needed
  • perf: enable strict mode
  • perf: hoist regular expressions
  • perf: remove duplicate conditional
  • perf: remove unnecessary boolean coercions
  • perf: skip checking modified time if ETag check failed
  • perf: skip parsing If-None-Match when no ETag header
  • perf: use Date.parse instead of new Date
• deps: http-errors@~1.6.1
  • Make message property enumerable for HttpErrors
  • deps: setprototypeof@1.0.3

0.14.2 / 2017-01-23

• deps: http-errors@~1.5.1
  • deps: inherits@2.0.3
  • deps: setprototypeof@1.0.2
  • deps: statuses@’>= 1.3.1 < 2’
• deps: ms@0.7.2
• deps: statuses@~1.3.1

0.14.1 / 2016-06-09

• Fix redirect error when path contains raw non-URL characters
• Fix redirect when path starts with multiple forward slashes

0.14.0 / 2016-06-06

• Add acceptRanges option
• Add cacheControl option
• Attempt to combine multiple ranges into single range
• Correctly inherit from Stream class
• Fix Content-Range header in 416 responses when using start/end options
• Fix Content-Range header missing from default 416 responses
• Ignore non-byte Range headers
• deps: http-errors@~1.5.0
  • Add HttpError export, for err instanceof createError.HttpError
  • Support new code 421 Misdirected Request
  • Use setprototypeof module to replace __proto__ setting
  • deps: inherits@2.0.1
  • deps: statuses@’>= 1.3.0 < 2’
  • perf: enable strict mode
• deps: range-parser@~1.2.0
  • Fix incorrectly returning -1 when there is at least one valid range
  • perf: remove internal function
• deps: statuses@~1.3.0
  • Add 421 Misdirected Request
  • perf: enable strict mode
• perf: remove argument reassignment

0.13.2 / 2016-03-05

• Fix invalid Content-Type header when send.mime.default_type unset

0.13.1 / 2016-01-16

• deps: depd@~1.1.0
  • Support web browser loading
  • perf: enable strict mode
• deps: destroy@~1.0.4
  • perf: enable strict mode
• deps: escape-html@~1.0.3
  • perf: enable strict mode
  • perf: optimize string replacement
  • perf: use faster string coercion
• deps: range-parser@~1.0.3
  • perf: enable strict mode

0.13.0 / 2015-06-16

• Allow Node.js HTTP server to set Date response header
• Fix incorrectly removing Content-Location on 304 response
• Improve the default redirect response headers
• Send appropriate headers on default error response
• Use http-errors for standard emitted errors
• Use statuses instead of http module for status messages
• deps: escape-html@1.0.2
• deps: etag@~1.7.0
  • Improve stat performance by removing hashing
• deps: fresh@0.3.0
  • Add weak ETag matching support
• deps: on-finished@~2.3.0
  • Add defined behavior for HTTP CONNECT requests
  • Add defined behavior for HTTP Upgrade requests
  • deps: ee-first@1.1.1
• perf: enable strict mode
• perf: remove unnecessary array allocations

0.12.3 / 2015-05-13

• deps: debug@~2.2.0
  • deps: ms@0.7.1
• deps: depd@~1.0.1
• deps: etag@~1.6.0
• Improve support for JXcore
• Support “fake” stats objects in environments without fs
• deps: ms@0.7.1
  • Prevent extraordinarily long inputs
• deps: on-finished@~2.2.1

0.12.2 / 2015-03-13

• Throw errors early for invalid extensions or index options
• deps: debug@~2.1.3
  • Fix high intensity foreground color for bold
  • deps: ms@0.7.0

0.12.1 / 2015-02-17

• Fix regression sending zero-length files

0.12.0 / 2015-02-16

• Always read the stat size from the file
• Fix mutating passed-in options
• deps: mime@1.3.4

0.11.1 / 2015-01-20

• Fix root path disclosure

0.11.0 / 2015-01-05

• deps: debug@~2.1.1
• deps: etag@~1.5.1
  • deps: crc@3.2.1
• deps: ms@0.7.0
  • Add milliseconds
  • Add msecs
  • Add secs
  • Add mins
  • Add hrs
  • Add yrs
• deps: on-finished@~2.2.0

0.10.1 / 2014-10-22

• deps: on-finished@~2.1.1
  • Fix handling of pipelined requests

0.10.0 / 2014-10-15

• deps: debug@~2.1.0
  • Implement DEBUG_FD env variable support
• deps: depd@~1.0.0
• deps: etag@~1.5.0
  • Improve string performance
  • Slightly improve speed for weak ETags over 1KB

0.9.3 / 2014-09-24

• deps: etag@~1.4.0
  • Support “fake” stats objects

0.9.2 / 2014-09-15

• deps: depd@0.4.5
• deps: etag@~1.3.1
• deps: range-parser@~1.0.2

0.9.1 / 2014-09-07

• deps: fresh@0.2.4

0.9.0 / 2014-09-07

• Add lastModified option
• Use etag to generate ETag header
• deps: debug@~2.0.0

0.8.5 / 2014-09-04

• Fix malicious path detection for empty string path

0.8.4 / 2014-09-04

• Fix a path traversal issue when using root

0.8.3 / 2014-08-16

• deps: destroy@1.0.3
  • renamed from dethroy
• deps: on-finished@2.1.0

0.8.2 / 2014-08-14

• Work around fd leak in Node.js 0.10 for fs.ReadStream
• deps: dethroy@1.0.2

0.8.1 / 2014-08-05

• Fix extensions behavior when file already has extension

0.8.0 / 2014-08-05

• Add extensions option

0.7.4 / 2014-08-04

• Fix serving index files without root dir

0.7.3 / 2014-07-29

• Fix incorrect 403 on Windows and Node.js 0.11

0.7.2 / 2014-07-27

• deps: depd@0.4.4
  • Work-around v8 generating empty stack traces

0.7.1 / 2014-07-26

• deps: depd@0.4.3
  • Fix exception when global Error.stackTraceLimit is too low

0.7.0 / 2014-07-20

• Deprecate hidden option; use dotfiles option
• Add dotfiles option
• deps: debug@1.0.4
• deps: depd@0.4.2
  • Add TRACE_DEPRECATION environment variable
  • Remove non-standard grey color from color output
  • Support --no-deprecation argument
  • Support --trace-deprecation argument

0.6.0 / 2014-07-11

• Deprecate from option; use root option
• Deprecate send.etag() – use etag in options
• Deprecate send.hidden() – use hidden in options
• Deprecate send.index() – use index in options
• Deprecate send.maxage() – use maxAge in options
• Deprecate send.root() – use root in options
• Cap maxAge value to 1 year
• deps: debug@1.0.3
  • Add support for multiple wildcards in namespaces

0.5.0 / 2014-06-28

• Accept string for maxAge (converted by ms)
• Add headers event
• Include link in default redirect response
• Use EventEmitter.listenerCount to count listeners

0.4.3 / 2014-06-11

• Do not throw un-catchable error on file open race condition
• Use escape-html for HTML escaping
• deps: debug@1.0.2
  • fix some debugging output colors on node.js 0.8
• deps: finished@1.2.2
• deps: fresh@0.2.2

0.4.2 / 2014-06-09

• fix “event emitter leak” warnings
• deps: debug@1.0.1
• deps: finished@1.2.1

0.4.1 / 2014-06-02

• Send max-age in Cache-Control in correct format

0.4.0 / 2014-05-27

• Calculate ETag with md5 for reduced collisions
• Fix wrong behavior when index file matches directory
• Ignore stream errors after request ends
  • Goodbye EBADF, read
• Skip directories in index file search
• deps: debug@0.8.1

0.3.0 / 2014-04-24

• Fix sending files with dots without root set
• Coerce option types
• Accept API options in options object
• Set etags to “weak”
• Include file path in etag
• Make “Can’t set headers after they are sent.” catchable
• Send full entity-body for multi range requests
• Default directory access to 403 when index disabled
• Support multiple index paths
• Support “If-Range” header
• Control whether to generate etags
• deps: mime@1.2.11

0.2.0 / 2014-01-29

• update range-parser and fresh

0.1.4 / 2013-08-11

• update fresh

0.1.3 / 2013-07-08

• Revert “Fix fd leak”

0.1.2 / 2013-07-03

• Fix fd leak

0.1.0 / 2012-08-25

• add options parameter to send() that is passed to fs.createReadStream() [kanongil]

0.0.4 / 2012-08-16

• allow custom “Accept-Ranges” definition

0.0.3 / 2012-07-16

• fix normalization of the root directory. Closes #3

0.0.2 / 2012-07-09

• add passing of req explicitly for now (YUCK)

0.0.1 / 2010-01-03

• Initial release