1.3.1

github-actions released this 30 Mar 19:16

· 9 commits to master since this release

9535b52

Fixes

header: prevent prototype pollution
- belt: use Object.create instead of {}
- suspenders: add guards for proto, constructor, and prototype
header: switch from recursion to iteration in parser
- prevents stack exhaustion vulnerabilities
body: added max_mime_depth, default 100
body: disallow empty boundaries

Changes

dep(message-stream): update to v2
test: added vulnerability test suite
test: added additional test coverage
test: ES2024, table driven

Assets 2