Update dependency express to v3.21.0 #53
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![uriel-mend-app[bot]](https://avatars.githubusercontent.com/u/99661840?s=60&v=4){kind=small}
uriel-mend-app
bot
changed the title
uriel-mend-app
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.0.0->3.21.0This PR resolves the vulnerability described in Issue #16
Version 3.0.0
Version 3.21.0
Version 3.21.2
Mend ensures you have the greatest risk reduction ("Recommended Fix"-highlighted in green) by removing as many vulnerabilities as possible. Click to see how we calculate risk reduction.
Release Notes
expressjs/express
v3.21.0Compare Source
===================
ETagmatching supportDateresponse headerContent-Locationon 304 responsehttp-errorsfor standard emitted errorsstatusesinstead ofhttpmodule for status messagesv3.20.3Compare Source
===================
v3.20.2Compare Source
===================
extensionsorindexoptionsv3.20.1Compare Source
===================
req.hostwhen using "trust proxy" hops countreq.protocol/req.securewhen using "trust proxy" hops countv3.20.0Compare Source
===================
"trust proxy"setting to inherit when app is mountedETags for all request responsesGETandHEADrequestscontent-typeto parseContent-Typeheaderscontent-typeto parseContent-Typeheadersoptionsv3.19.2Compare Source
===================
v3.19.1Compare Source
===================
v3.19.0Compare Source
===================
OPTIONSresponses to include theHEADmethod propertyreadlinefor prompt inexpress(1)v3.18.6Compare Source
===================
req.fresh/req.stalewithout response headersv3.18.5Compare Source
===================
v3.18.4Compare Source
===================
v3.18.3Compare Source
===================
v3.18.2Compare Source
===================
://in the pathv3.18.1Compare Source
===================
utils.mergedeprecation warningsv3.18.0Compare Source
===================
content-dispositionmodule forres.attachment/res.downloadContent-Dispositionheaderetagmodule to generateETagheadershttp-errorsmodule for creating errorsutils-mergemodule for merging objectsDEBUG_FDenv variable supportv3.17.8Compare Source
===================
v3.17.7Compare Source
===================
loggerv3.17.6Compare Source
===================
v3.17.5Compare Source
===================
forwardednpm modulev3.17.4Compare Source
===================
v3.17.3Compare Source
===================
v3.17.2Compare Source
===================
crcinstead ofbuffer-crc32for speedv3.17.1Compare Source
===================
req.subdomainson empty hostv3.17.0Compare Source
===================
X-Forwarded-Hostinreq.subdomainsreq.subdomainslastModifiedoptionetagto generateETagheaderVaryheader string asfieldv3.16.10Compare Source
====================
rootv3.16.9Compare Source
===================
v3.16.8Compare Source
===================
v3.16.7Compare Source
===================
v3.16.6Compare Source
===================
fdleak in Node.js 0.10 forfs.ReadStreamv3.16.5Compare Source
===================
loggerv3.16.4Compare Source
===================
res.locationquerymiddleware breaking with argumentv3.16.3Compare Source
===================
v3.16.2Compare Source
===================
v3.16.1Compare Source
====================
rootv3.16.0Compare Source
===================
extensionsoptionv3.15.3Compare Source
===================
res.sendfileregression for serving directory index filesv3.15.2Compare Source
===================
v3.15.1Compare Source
===================
Error.stackTraceLimitis too lowv3.15.0Compare Source
===================
req.protocolfor proxy-direct connectionsres.sendfiletosendTRACE_DEPRECATIONenvironment variable--no-deprecationargument--trace-deprecationargumentRegExpdotfilesoptionmaxAgevalue to 1 yearv3.14.0Compare Source
===================
res.redirect(url, status)-- useres.redirect(status, url)insteadres.send(status, num)to sendnumas json (not error)res.jsonpreturns JSON responseCONNECTv3.13.0Compare Source
===================
app.configurereq.authbasic-authto parseAuthorizationheadermaxage(converted byms)v3.12.1Compare Source
===================
v3.12.0Compare Source
===================
media-typerto alter content-type charsetconnect(middleware)-- useapp.use(middleware)insteadconnect.createServer()-- useconnect()insteadres.setHeader()patch to work with get -> append -> set patternv3.11.0Compare Source
===================
depdmoduleverifyoption tojson-- usebody-parsernpm module insteadverifyoption tourlencoded-- usebody-parsernpm module insteaddepdmodulefinalhandlerfor final response handlingmedia-typerto parsecontent-typefor charsetv3.10.5Compare Source
===================
escape-htmlfor HTML escapingv3.10.4Compare Source
===================
v3.10.3Compare Source
===================
varymodule forres.varyv3.10.2Compare Source
===================
v3.10.1Compare Source
===================
v3.10.0Compare Source
===================
methodOverride()-- usemethod-overridenpm module insteadmax-ageinCache-Controlin correct formatv3.9.0Compare Source
==================
app.set('etag', val)app.set('etag', function(body, encoding){ return '"etag"' })custom etag generationapp.set('etag', 'weak')weak tagapp.set('etag', 'strong')strong etagapp.set('etag', false)turn offapp.set('etag', true)standard etagres.sendETag as weak and reduce collisionsv3.8.1Compare Source
==================
v3.8.0Compare Source
==================
Content-Typeforres.jsonpcharsetinContent-Typeforres.sendres.charsetappending charset whencontent-typehas onev3.7.0Compare Source
==================
app.set('trust proxy', trust)app.set('trust proxy', 1)trust first hopapp.set('trust proxy', 'loopback')trust loopback addressesapp.set('trust proxy', '10.0.0.1')trust single IPapp.set('trust proxy', '10.0.0.1/16')trust subnetapp.set('trust proxy', '10.0.0.1, 10.0.0.2')trust listapp.set('trust proxy', false)turn offapp.set('trust proxy', true)trust everythingres.headerSent-- useres.headersSentres.on("header")-- use on-headers module insteadres.appendHeaderthat would append in wrong orderv3.6.0Compare Source
==================
app.del()-- useapp.delete()insteadres.json(obj, status)-- useres.json(status, obj)insteadres.json(status, num)requiresres.status(status).json(num)res.jsonp(obj, status)-- useres.jsonp(status, obj)insteadres.jsonp(status, num)requiresres.status(status).jsonp(num)app.purgerouter.purgeapp.allres.appendHeaderres.headerSentto return Booleanres.headersSentfor node.js 0.8enable()methodv3.5.3Compare Source
==================
req.hostfor IPv6 literalsres.jsonperror if callback param is objectv3.5.2Compare Source
==================
v3.5.1Compare Source
==================
v3.5.0Compare Source
==================
v3.4.8Compare Source
==================
v3.4.7Compare Source
==================
v3.4.6Compare Source
==================
v3.4.5Compare Source
==================
v3.4.4Compare Source
==================
v3.4.3Compare Source
==================
v3.4.2Compare Source
==================
v3.4.1Compare Source
==================
v3.4.0Compare Source
==================
v3.3.8Compare Source
==================
v3.3.7Compare Source
==================
v3.3.6Compare Source
==================
v3.3.5Compare Source
v3.3.4Compare Source
==================
v3.3.3Compare Source
==================
v3.3.2Compare Source
==================
v3.3.1Compare Source
==================
v3.3.0Compare Source
==================
v3.2.6Compare Source
==================
v3.2.5Compare Source
==================
v3.2.4Compare Source
==================
req.subdomainswhen no Host is presentreq.hostwhen no Host is present, return undefinedv3.2.3Compare Source
==================
v3.2.2Compare Source
==================
v3.2.1Compare Source
==================
v3.2.0Compare Source
==================
v3.1.2Compare Source
==================
v3.1.1Compare Source
==================
req.hostv3.1.0Compare Source
==================
res.set()req.subdomainsres.location(url)implementingres.redirect()-like setting of Locationreq.authv3.0.6Compare Source
==================
res.cookie()options objectv3.0.5Compare Source
==================
v3.0.4Compare Source
==================
res.send()Etagsres.redirect()for old browsers interpreting as html
v3.0.3Compare Source
==================
v3.0.2Compare Source
==================
v3.0.1==================