v1.9.0
This is a SECURITY and feature release for the 1.x series of ReactPHP's HTTP component.
-
Security fix: This release fixes a medium severity security issue in ReactPHP's HTTP server component that affects all versions between
v0.8.0andv1.8.0. All users are encouraged to upgrade immediately. (CVE-2023-26044 reported and fixed by @WyriHaximus) -
Feature: Support HTTP keep-alive for HTTP client (reusing persistent connections). (#481, #484, #486 and #495 by @clue)
This feature offers significant performance improvements when sending many requests to the same host as it avoids recreating the underlying TCP/IP connection and repeating the TLS handshake for secure HTTPS requests.
$browser = new React\Http\Browser(); // Up to 300% faster! HTTP keep-alive is enabled by default $response = React\Async\await($browser->get('https://httpbingo.org/redirect/6')); assert($response instanceof Psr\Http\Message\ResponseInterface); -
Feature: Add
Requestclass to represent outgoing HTTP request message. (#480 by @clue) -
Feature: Preserve request method and body for and . (#442 by @dinooo13)