Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Working #227

Merged
merged 57 commits into from
May 21, 2021
Merged

Working #227

merged 57 commits into from
May 21, 2021

Conversation

brettz9
Copy link
Collaborator

@brettz9 brettz9 commented May 21, 2021

Incorporates various other PRs and refactoring/improvements as per #224

Although this adds some noise in my scope change and reversion, I think it may nevertheless be useful to preserve rather than doing as one huge merge, so doing in this manner.

User-facing

  • Breaking change (npm): Set engines to 10.11.0+
  • Security: Fix dependency vulnerabilities by switching from optimist to
    neodoc (@fidian)
  • Security: Update mime and colors (@fidian)
  • Security Update/fix: Use URL constructor over deprecated url.parse;
    should fix Open Redirect issue https://www.npmjs.com/advisories/1207
  • Security Update/fix: Protect fs.stat calls from bad path arguments; fixes
    Denial of Service issue https://www.npmjs.com/advisories/1208
    (@brpvieira)
  • Security fix?: The Unauthorized File Access issue
    https://www.npmjs.com/advisories/1206 does not appear to be an issue
    per testing (if it ever was); if you can provide a test case where it
    fails, please report
  • Fix: Support bytes=0-0 Range header (@prajwalkman)
  • Fix: Avoid octal (@bgao / @Ilrilan)
  • Fix: For spa, allow dots after path (@gjuchault)
  • Enhancement: Allow access with local ip (@flyingsky)
  • Enhancement: Allow serverInfo to be null (@martindale)
  • Enhancement: Time display logging with leading 0 (@mauris)
  • Enhancement: Respect static --cache 0 (@matthew-andrews)
  • Enhancement: New option: defaultExtension (@fmalk)
  • Enhancement: Added glob matching for setting cache headers (@lightswitch05)
  • Optimization: 'use strict' directive
  • Docs: For examples (and internally) avoid static reserved word
  • Docs: Fix header example (@emmanouil)
  • Docs: Sp. (@EdwardBetts)
  • Docs: Add CHANGES.md

Dev-facing

  • Linting: Prefer const, no-var, fix indent, comment-out unused,
    prefer startsWith and includes
  • Refactoring: Use safer non-prototype version of colors
  • Maintenance: Add .editorconfig
  • Testing: Add checks for supposed direct node-static vulnerabilities
  • Testing: Add test for null and non-null serverInfo
  • Testing: Allow tests to end (@fmalk)
  • Testing: Add nyc for coverage
  • npm: Add eslint devDep. and script
  • npm: Add lock file

matthew-andrews and others added 30 commits October 26, 2014 10:48
* Keep backwards compatibility with previous cache options
* Add tests to ensure glob matching with defined cache values
* Updated README with instructions for new cache feature
Switched to a different option parser to keep things simple
Prevents uncaught exception:
TypeError [ERR_INVALID_ARG_VALUE]: The argument 'path' must be a string or Uint8Array without null bytes.
- Maintenance: Add `.editorconfig`
- Linting: Prefer const, no-var, fix indent, comment-out unused
- npm: Add eslint devDep. and script
- npm: Set engines to 10.11.0+
- npm: Add lock file
* commit '9c9389b30caa43c3e2c6f64d5adcad47780b2cde':
  Protect fs.stats calls from bad path arguments

# Conflicts:
#	lib/node-static.js
#	test/integration/node-static-test.js
- npm: Change to 0.1.0 version
* commit '6617149b4c9f8c30251f5adceba0942c5ff2d097':
   allow access with local ip
  make sure ip/localhost/127.0.0.1 all work
* commit 'bd5d0444b2ef0d9709920f87e34f0a02c6411bdc':
  Small fix
  Test added: default extension does not interfere with folders Updated README
  Test validation of new option "defaultExtension"
  New fileServer option: defaultExtension Tests added
  Test bugfix
  Trying to finish the run

# Conflicts:
#	.gitignore
#	lib/node-static.js
#	test/integration/node-static-test.js
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants