v2.0.1-rc.28

compare changes

🩹 Fixes

• static: Keep a leading separator run from bypassing a route guard (f3e4c46)
• proxy: Strip tab/LF/CR from internal proxy targets (ffd9620)
• proxy: Do not include upstream failure message in gateway error (936f14b)
• response: Normalize values thrown from the onError hook (2d6a10a)
• response: Detect HTTPResponse by brand instead of constructor.name (0bbcbc4)
• fromNodeHandler: Don't hang the event when a piped client disconnects (373e32a)
• handler: Run middleware for object syntax with fetch (cf7e585)
• response: Call the onError hook again (f176b35)
• static: Refuse a non-canonical pathname instead of resolving it (baef4b9)

📖 Documentation

• Rewrite route rules (abd4d77)
• request: Add security caveat for getRequestIP's xForwardedFor (b09eda1)