Improvements
- Add addtional overloading of read_file_yaml taking a buffer by @YanzhaoW in #2698
- Document the JSON body precondition on repe to_jsonrpc conversion by @stephenberry in #2700
Fixes
- RFC 9112: validate request-line in HTTP server parser by @annihilatorq in #2693
- escape method in repe to_jsonrpc_request by @uwezkhan in #2699
- guard structs_as_arrays beve object reader against end of input by @uwezkhan in #2686
- reject ".." traversal (/ and ) in route param and wildcard captures by @uwezkhan in #2701
- error on truncated content-length body in async http_client by @stephenberry in #2685
- fix signed overflow in jsonb_to_json int5 hex conversion by @uwezkhan in #2702
- reject out-of-range variant type index in beve and cbor readers by @uwezkhan in #2682
- File I/O correctness fixes: binary write, non-throwing directory read, TOCTOU-safe read by @stephenberry in #2703
- Use ephemeral ports for test servers by @annihilatorq in #2705
- reject truncated bitset payload in msgpack reader by @uwezkhan in #2706
- RFC 9112: fix HTTP/1.0 Host header field validation by @annihilatorq in #2704
- guard lazy json scans against end of non-null-terminated input by @uwezkhan in #2708
Full Changelog: v7.9.0...v7.9.1
Contributors
stephenberry, YanzhaoW, and 2 other contributors