1.20.8

  • Same code base as 1.20.7. This was created to test the new release process.

1.20.7

  • deps: qs@~6.16.0

1.20.6

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit

1.20.5

  • refactor(json): simplify strict mode error string construction
  • fix: extended urlencoded parsing of arrays with >100 elements (#716)
  • deps: qs@~6.15.1

1.20.4

  • deps: qs@~6.14.0
  • deps: use tilde notation for dependencies
  • deps: http-errors@~2.0.1
  • deps: raw-body@~2.5.3

1.20.3

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2

  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: raw-body@2.5.2

1.20.1

  • deps: qs@6.11.0
  • perf: remove unnecessary object clone

1.20.0

1.19.2

1.19.1

1.19.0

1.18.3

1.18.2

1.18.1

1.18.0

  • Fix JSON strict violation error to match native parse error
  • Include the body property on verify errors
  • Include the type property on all generated errors
  • Use http-errors to set status code on errors
  • deps: bytes@3.0.0
  • deps: debug@2.6.8
  • deps: depd@~1.1.1
    • Remove unnecessary Buffer loading
  • deps: http-errors@~1.6.2
  • deps: iconv-lite@0.4.18
    • Add support for React Native
    • Add a warning if not loaded as utf-8
    • Fix CESU-8 decoding in Node.js 8
    • Improve speed of ISO-8859-1 encoding
  • deps: qs@6.5.0
  • deps: raw-body@2.3.1
  • perf: prevent internal throw when missing charset

1.17.2

  • deps: debug@2.6.7
    • Fix DEBUG_MAX_ARRAY_LENGTH
    • deps: ms@2.0.0
  • deps: type-is@~1.6.15
    • deps: mime-types@~2.1.15

1.17.1

  • deps: qs@6.4.0
    • Fix regression parsing keys starting with [

1.17.0

1.16.1

  • deps: debug@2.6.1
    • Fix deprecation messages in WebStorm and other editors
    • Undeprecate DEBUG_FD set to 1 or 2

1.16.0

  • deps: debug@2.6.0
    • Allow colors in workers
    • Deprecated DEBUG_FD environment variable
    • Fix error when running under React Native
    • Use same color for same namespace
    • deps: ms@0.7.2
  • deps: http-errors@~1.5.1
  • deps: iconv-lite@0.4.15
    • Added encoding MS-31J
    • Added encoding MS-932
    • Added encoding MS-936
    • Added encoding MS-949
    • Added encoding MS-950
    • Fix GBK/GB18030 handling of Euro character
  • deps: qs@6.2.1
    • Fix array parsing from skipping empty values
  • deps: raw-body@~2.2.0
  • deps: type-is@~1.6.14
    • deps: mime-types@~2.1.13

1.15.2

  • deps: bytes@2.4.0
  • deps: content-type@~1.0.2
    • perf: enable strict mode
  • deps: http-errors@~1.5.0
    • Use setprototypeof module to replace __proto__ setting
    • deps: statuses@‘>= 1.3.0 < 2’
    • perf: enable strict mode
  • deps: qs@6.2.0
  • deps: raw-body@~2.1.7
    • deps: bytes@2.4.0
    • perf: remove double-cleanup on happy path
  • deps: type-is@~1.6.13
    • deps: mime-types@~2.1.11

1.15.1

  • deps: bytes@2.3.0
    • Drop partial bytes on all parsed units
    • Fix parsing byte string that looks like hex
  • deps: raw-body@~2.1.6
  • deps: type-is@~1.6.12
    • deps: mime-types@~2.1.10

1.15.0

  • deps: http-errors@~1.4.0
    • Add HttpError export, for err instanceof createError.HttpError
    • deps: inherits@2.0.1
    • deps: statuses@‘>= 1.2.1 < 2’
  • deps: qs@6.1.0
  • deps: type-is@~1.6.11
    • deps: mime-types@~2.1.9

1.14.2

1.14.1

  • Fix issue where invalid charset results in 400 when verify used
  • deps: iconv-lite@0.4.12
    • Fix CESU-8 decoding in Node.js 4.x
  • deps: raw-body@~2.1.4
  • deps: type-is@~1.6.9
    • deps: mime-types@~2.1.7

1.14.0

  • Fix JSON strict parse error to match syntax errors
  • Provide static require analysis in urlencoded parser
  • deps: depd@~1.1.0
    • Support web browser loading
  • deps: qs@5.1.0
  • deps: raw-body@~2.1.3
    • Fix sync callback when attaching data listener causes sync read
  • deps: type-is@~1.6.8
    • Fix type error when given invalid type to match against
    • deps: mime-types@~2.1.6

1.13.3

  • deps: type-is@~1.6.6
    • deps: mime-types@~2.1.4

1.13.2

  • deps: iconv-lite@0.4.11
  • deps: qs@4.0.0
    • Fix dropping parameters like hasOwnProperty
    • Fix user-visible incompatibilities from 3.1.0
    • Fix various parsing edge cases
  • deps: raw-body@~2.1.2
  • deps: type-is@~1.6.4
    • deps: mime-types@~2.1.2
    • perf: enable strict mode
    • perf: remove argument reassignment

1.13.1

  • deps: qs@2.4.2
    • Downgraded from 3.1.0 because of user-visible incompatibilities

1.13.0

  • Add statusCode property on Errors, in addition to status
  • Change type default to application/json for JSON parser
  • Change type default to application/x-www-form-urlencoded for urlencoded parser
  • Provide static require analysis
  • Use the http-errors module to generate errors
  • deps: bytes@2.1.0
    • Slight optimizations
  • deps: iconv-lite@0.4.10
    • The encoding UTF-16 without BOM now defaults to UTF-16LE when detection fails
    • Leading BOM is now removed when decoding
  • deps: on-finished@~2.3.0
    • Add defined behavior for HTTP CONNECT requests
    • Add defined behavior for HTTP Upgrade requests
    • deps: ee-first@1.1.1
  • deps: qs@3.1.0
    • Fix dropping parameters like hasOwnProperty
    • Fix various parsing edge cases
    • Parsed object now has null prototype
  • deps: raw-body@~2.1.1
  • deps: type-is@~1.6.3
    • deps: mime-types@~2.1.1
    • perf: reduce try block size
    • perf: remove bitwise operations
  • perf: enable strict mode
  • perf: remove argument reassignment
  • perf: remove delete call

1.12.4

  • deps: debug@~2.2.0
  • deps: qs@2.4.2
    • Fix allowing parameters like constructor
  • deps: on-finished@~2.2.1
  • deps: raw-body@~2.0.1
    • Fix a false-positive when unpiping in Node.js 0.8
    • deps: bytes@2.0.1
  • deps: type-is@~1.6.2
    • deps: mime-types@~2.0.11

1.12.3

1.12.2

  • deps: qs@2.4.1
    • Fix error when parameter hasOwnProperty is present

1.12.1

  • deps: debug@~2.1.3
    • Fix high intensity foreground color for bold
    • deps: ms@0.7.0
  • deps: type-is@~1.6.1
    • deps: mime-types@~2.0.10

1.12.0

  • add debug messages
  • accept a function for the type option
  • use content-type to parse Content-Type headers
  • deps: iconv-lite@0.4.7
    • Gracefully support enumerables on Object.prototype
  • deps: raw-body@1.3.3
  • deps: type-is@~1.6.0
    • fix argument reassignment
    • fix false-positives in hasBody Transfer-Encoding check
    • support wildcard for both type and subtype (*/*)
    • deps: mime-types@~2.0.9

1.11.0

  • make internal extended: true depth limit infinity
  • deps: type-is@~1.5.6
    • deps: mime-types@~2.0.8

1.10.2

1.10.1

  • deps: on-finished@~2.2.0
  • deps: type-is@~1.5.5
    • deps: mime-types@~2.0.7

1.10.0

  • make internal extended: true array limit dynamic

1.9.3

1.9.2

  • deps: qs@2.3.2
    • Fix parsing of mixed objects and values

1.9.1

  • deps: on-finished@~2.1.1
    • Fix handling of pipelined requests
  • deps: qs@2.3.0
    • Fix parsing of mixed implicit and explicit arrays
  • deps: type-is@~1.5.2
    • deps: mime-types@~2.0.2

1.9.0

  • include the charset in “unsupported charset” error message
  • include the encoding in “unsupported content encoding” error message
  • deps: depd@~1.0.0

1.8.4

  • fix content encoding to be case-insensitive

1.8.3

  • deps: qs@2.2.4
    • Fix issue with object keys starting with numbers truncated

1.8.2

1.8.1

1.8.0

  • make empty-body-handling consistent between chunked requests
    • empty json produces {}
    • empty raw produces new Buffer(0)
    • empty text produces ''
    • empty urlencoded produces {}
  • deps: qs@2.2.3
    • Fix issue where first empty value in array is discarded
  • deps: type-is@~1.5.0
    • fix hasbody to be true for content-length: 0

1.7.0

  • add parameterLimit option to urlencoded parser
  • change urlencoded extended array limit to 100
  • respond with 413 when over parameterLimit in urlencoded

1.6.7

  • deps: qs@2.2.2
    • Remove unnecessary cloning

1.6.6

  • deps: qs@2.2.0
    • Array parsing fix
    • Performance improvements

1.6.5

1.6.4

1.6.3

1.6.2

  • deps: qs@1.2.0
    • Fix parsing array of objects

1.6.1

  • deps: qs@1.1.0
    • Accept urlencoded square brackets
    • Accept empty values in implicit array notation

1.6.0

  • deps: qs@1.0.2
    • Complete rewrite
    • Limits array length to 20
    • Limits object depth to 5
    • Limits parameters to 1,000

1.5.2

  • deps: depd@0.4.4
    • Work-around v8 generating empty stack traces

1.5.1

  • deps: depd@0.4.3
    • Fix exception when global Error.stackTraceLimit is too low

1.5.0

  • deps: depd@0.4.2
    • Add TRACE_DEPRECATION environment variable
    • Remove non-standard grey color from color output
    • Support --no-deprecation argument
    • Support --trace-deprecation argument
  • deps: iconv-lite@0.4.4
    • Added encoding UTF-7
  • deps: raw-body@1.3.0
    • deps: iconv-lite@0.4.4
    • Added encoding UTF-7
    • Fix Cannot switch to old mode now error on Node.js 0.10+
  • deps: type-is@~1.3.2

1.4.3

1.4.2

1.4.1

  • fix urlencoded extended deprecation message

1.4.0

  • add text parser
  • add raw parser
  • check accepted charset in content-type (accepts utf-8)
  • check accepted encoding in content-encoding (accepts identity)
  • deprecate bodyParser() middleware; use .json() and .urlencoded() as needed
  • deprecate urlencoded() without provided extended option
  • lazy-load urlencoded parsers
  • parsers split into files for reduced mem usage
  • support gzip and deflate bodies
    • set inflate: false to turn off
  • deps: raw-body@1.2.2
    • Support all encodings from iconv-lite

1.3.1

1.3.0

  • add extended option to urlencoded parser

1.2.2

  • deps: raw-body@1.1.6
    • assert stream encoding on node.js 0.8
    • assert stream encoding on node.js < 0.10.6
    • deps: bytes@1

1.2.1

  • invoke next(err) after request fully read
    • prevents hung responses and socket hang ups

1.2.0

1.1.2

  • improve json parser speed

1.1.1

  • fix repeated limit parsing with every request

1.1.0

  • add type option
  • deps: pin for safety and consistency

1.0.2

  • use type-is module

1.0.1

  • lower default limits to 100kb