koa

Koa v3.1.1

Fixes

• Only destroy original value if new value is not a stream (fixes potential resource leak in stream handling)

What's Changed

• feat: fixes mem leak relating to issue-1834 by @yowainwright in https://github.com/koajs/koa/pull/1893
• fix: adds steam clean up by @yowainwright in https://github.com/koajs/koa/pull/1910

Full Changelog: https://github.com/koajs/koa/compare/v3.0.3...v3.1.0

What's Changed

• fix: normalize referer before redirect by @fengmk2 in https://github.com/koajs/koa/pull/1909

Full Changelog: https://github.com/koajs/koa/compare/v2.16.2...v2.16.3

What's Changed

• fix: normalize referer before redirect by @fengmk2 in https://github.com/koajs/koa/pull/1908

Full Changelog: https://github.com/koajs/koa/compare/v3.0.2...v3.0.3

What's Changed

• fix: fixes response.attachment behaviour leads to Content-Type Sniffing by @yowainwright in https://github.com/koajs/koa/pull/1904
• chore: use NPM trusted publishing with semver tag triggers by @Copilot in https://github.com/koajs/koa/pull/1907

New Contributors

• @Copilot made their first contribution in https://github.com/koajs/koa/pull/1907

Full Changelog: ht...

What's Changed

• fix: only allow back redirect to the same origin referer by @fengmk2 in https://github.com/koajs/koa/pull/1898

Full Changelog: https://github.com/koajs/koa/compare/v2.16.1...v2.16.2

What's Changed

• fix(security): only allow same origin referer on response back https://github.com/koajs/koa/commit/422c551c63d00f24e2bbbdf492f262a5935bb1f0
• chore: adds initial doc text refresh; migration guide [CHORE-1870] by @yowainwright in https://github.com/koajs/koa/pull/1877
• build(deps-dev): bump formidable from 3.5.2 to 3.5.4 by @dependabot[bot] in https://github.com/koajs/koa/p...

This is a major release.

Breaking

• Minimum node v18
• Removes .redirect('back'), adds .back(fallback_url) @fl0w https://github.com/koajs/koa/pull/1115
• For .redirect(), don't render redirect values in anchor ref https://github.com/koajs/koa/commit/ff25eb4a7f2392df46481fe86355161067687312
• req.origin should display the origin header if it exists, not the current hostname htt...

fix: don't render redirect values in anchor ref

fix: don't render redirect values in anchor ref