Home Original page

Bump the npm_and_yarn group across 44 directories with 4 updates by dependabot[bot] 路 Pull Request #1420 路 Web3Auth/web3auth-examples

Bumps the npm_and_yarn group with 1 update in the /custom-authentication/grouped-connection/auth0-google-implicit-grouped-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/grouped-connection/auth0-google-jwt-grouped-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/grouped-connection/firebase-google-jwt-grouped-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/grouped-connection/modal-google-email-passwordless-grouped-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/single-connection/auth0-implicit-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/single-connection/auth0-jwt-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/single-connection/cognito-implicit-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/single-connection/custom-jwt-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/single-connection/discord-implicit-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/single-connection/facebook-implicit-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/single-connection/firebase-jwt-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/single-connection/google-implicit-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/single-connection/google-one-tap-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/single-connection/modal-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/single-connection/twitch-implicit-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /custom-authentication/single-connection/worldcoin-implicit-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /other/algorand-example directory: h3.
Bumps the npm_and_yarn group with 2 updates in the /other/aptos-example directory: h3 and flatted.
Bumps the npm_and_yarn group with 1 update in the /other/bitcoin-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /other/cosmos-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /other/multi-chain-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /other/polkadot-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /other/polymesh-example directory: h3.
Bumps the npm_and_yarn group with 3 updates in the /other/server-side-verification-example directory: h3, flatted and next.
Bumps the npm_and_yarn group with 2 updates in the /other/sign-protocol-example directory: h3 and flatted.
Bumps the npm_and_yarn group with 2 updates in the /other/smart-account-example directory: h3 and flatted.
Bumps the npm_and_yarn group with 1 update in the /other/sns-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /other/solana-pay-example directory: h3.
Bumps the npm_and_yarn group with 2 updates in the /other/starknet-example directory: h3 and flatted.
Bumps the npm_and_yarn group with 1 update in the /other/sui-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /other/tezos-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /other/ton-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /other/tron-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /other/xmtp-example directory: h3.
Bumps the npm_and_yarn group with 1 update in the /other/xrpl-example directory: h3.
Bumps the npm_and_yarn group with 2 updates in the /quick-starts/angular-quick-start directory: h3 and flatted.
Bumps the npm_and_yarn group with 4 updates in the /quick-starts/nextjs-quick-start directory: h3, flatted, next and hono.
Bumps the npm_and_yarn group with 1 update in the /quick-starts/react-no-modal-quick-start directory: h3.
Bumps the npm_and_yarn group with 1 update in the /quick-starts/react-quick-start directory: h3.
Bumps the npm_and_yarn group with 1 update in the /quick-starts/react-solana-quick-start directory: h3.
Bumps the npm_and_yarn group with 1 update in the /quick-starts/vanillajs-quick-start directory: h3.
Bumps the npm_and_yarn group with 2 updates in the /quick-starts/vue-quick-start directory: h3 and flatted.
Bumps the npm_and_yarn group with 2 updates in the /quick-starts/vue-solana-quick-start directory: h3 and flatted.
Bumps the npm_and_yarn group with 2 updates in the /react-playground directory: h3 and flatted.

Updates h3 from 1.15.1 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • 51ca9b3 fix: preserve percent-encoded req.url in app event handler (#1355)
  • 4e8d43a chore(release): v1.15.9
  • 23045df chore: update deps
  • ba3c3fe fix(sse): sanitize carriage returns in event stream data and comments
  • c56683d fix(static): prevent path traversal via double-encoded dot segments (`%252e%2...
  • e3b9c9e chore(release): v1.15.8
  • 1103df6 fix: preserve %25 in pathname
  • Additional commits viewable in compare view

Updates h3 from 1.15.5 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • 51ca9b3 fix: preserve percent-encoded req.url in app event handler (#1355)
  • 4e8d43a chore(release): v1.15.9
  • 23045df chore: update deps
  • ba3c3fe fix(sse): sanitize carriage returns in event stream data and comments
  • c56683d fix(static): prevent path traversal via double-encoded dot segments (`%252e%2...
  • e3b9c9e chore(release): v1.15.8
  • 1103df6 fix: preserve %25 in pathname
  • Additional commits viewable in compare view

Updates h3 from 1.15.1 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • 51ca9b3 fix: preserve percent-encoded req.url in app event handler (#1355)
  • 4e8d43a chore(release): v1.15.9
  • 23045df chore: update deps
  • ba3c3fe fix(sse): sanitize carriage returns in event stream data and comments
  • c56683d fix(static): prevent path traversal via double-encoded dot segments (`%252e%2...
  • e3b9c9e chore(release): v1.15.8
  • 1103df6 fix: preserve %25 in pathname
  • Additional commits viewable in compare view

Updates h3 from 1.15.5 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • 51ca9b3 fix: preserve percent-encoded req.url in app event handler (#1355)
  • 4e8d43a chore(release): v1.15.9
  • 23045df chore: update deps
  • ba3c3fe fix(sse): sanitize carriage returns in event stream data and comments
  • c56683d fix(static): prevent path traversal via double-encoded dot segments (`%252e%2...
  • e3b9c9e chore(release): v1.15.8
  • 1103df6 fix: preserve %25 in pathname
  • Additional commits viewable in compare view

Updates h3 from 1.15.1 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • 51ca9b3 fix: preserve percent-encoded req.url in app event handler (#1355)
  • 4e8d43a chore(release): v1.15.9
  • 23045df chore: update deps
  • ba3c3fe fix(sse): sanitize carriage returns in event stream data and comments
  • c56683d fix(static): prevent path traversal via double-encoded dot segments (`%252e%2...
  • e3b9c9e chore(release): v1.15.8
  • 1103df6 fix: preserve %25 in pathname
  • Additional commits viewable in compare view

Updates h3 from 1.15.1 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • 51ca9b3 fix: preserve percent-encoded req.url in app event handler (#1355)
  • 4e8d43a chore(release): v1.15.9
  • 23045df chore: update deps
  • ba3c3fe fix(sse): sanitize carriage returns in event stream data and comments
  • c56683d fix(static): prevent path traversal via double-encoded dot segments (`%252e%2...
  • e3b9c9e chore(release): v1.15.8
  • 1103df6 fix: preserve %25 in pathname
  • Additional commits viewable in compare view

Updates h3 from 1.15.1 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • 51ca9b3 fix: preserve percent-encoded req.url in app event handler (#1355)
  • 4e8d43a chore(release): v1.15.9
  • 23045df chore: update deps
  • ba3c3fe fix(sse): sanitize carriage returns in event stream data and comments
  • c56683d fix(static): prevent path traversal via double-encoded dot segments (`%252e%2...
  • e3b9c9e chore(release): v1.15.8
  • 1103df6 fix: preserve %25 in pathname
  • Additional commits viewable in compare view

Updates h3 from 1.15.1 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • 51ca9b3 fix: preserve percent-encoded req.url in app event handler (#1355)
  • 4e8d43a chore(release): v1.15.9
  • 23045df chore: update deps
  • ba3c3fe fix(sse): sanitize carriage returns in event stream data and comments
  • c56683d fix(static): prevent path traversal via double-encoded dot segments (`%252e%2...
  • e3b9c9e chore(release): v1.15.8
  • 1103df6 fix: preserve %25 in pathname
  • Additional commits viewable in compare view

Updates h3 from 1.15.1 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • 51ca9b3 fix: preserve percent-encoded req.url in app event handler (#1355)
  • 4e8d43a chore(release): v1.15.9
  • 23045df chore: update deps
  • ba3c3fe fix(sse): sanitize carriage returns in event stream data and comments
  • c56683d fix(static): prevent path traversal via double-encoded dot segments (`%252e%2...
  • e3b9c9e chore(release): v1.15.8
  • 1103df6 fix: preserve %25 in pathname
  • Additional commits viewable in compare view

Updates h3 from 1.15.1 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • 51ca9b3 fix: preserve percent-encoded req.url in app event handler (#1355)
  • 4e8d43a chore(release): v1.15.9
  • 23045df chore: update deps
  • ba3c3fe fix(sse): sanitize carriage returns in event stream data and comments
  • c56683d fix(static): prevent path traversal via double-encoded dot segments (`%252e%2...
  • e3b9c9e chore(release): v1.15.8
  • 1103df6 fix: preserve %25 in pathname
  • Additional commits viewable in compare view

Updates h3 from 1.15.1 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • 51ca9b3 fix: preserve percent-encoded req.url in app event handler (#1355)
  • 4e8d43a chore(release): v1.15.9
  • 23045df chore: update deps
  • ba3c3fe fix(sse): sanitize carriage returns in event stream data and comments
  • c56683d fix(static): prevent path traversal via double-encoded dot segments (`%252e%2...
  • e3b9c9e chore(release): v1.15.8
  • 1103df6 fix: preserve %25 in pathname
  • Additional commits viewable in compare view

Updates h3 from 1.15.1 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • 51ca9b3 fix: preserve percent-encoded req.url in app event handler (#1355)
  • 4e8d43a chore(release): v1.15.9
  • 23045df chore: update deps
  • ba3c3fe fix(sse): sanitize carriage returns in event stream data and comments
  • c56683d fix(static): prevent path traversal via double-encoded dot segments (`%252e%2...
  • e3b9c9e chore(release): v1.15.8
  • 1103df6 fix: preserve %25 in pathname
  • Additional commits viewable in compare view

Updates h3 from 1.15.5 to 1.15.10

Release notes

Sourced from h3's releases.

v1.15.10

compare changes

馃┕ Fixes

  • Preserve percent-encoded req.url in app event handler (#1355)

鉂わ笍 Contributors

v1.15.9

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

compare changes

馃┕ Fixes

  • Preserve %25 in pathname (1103df6)

v1.15.7

compare changes

馃┕ Fixes

  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)

馃拝 Refactors

  • Remove implicit event handler conversion warning (#1340)

鉂わ笍 Contributors

v1.15.6

compare changes

馃┕ Fixes

  • sse: Sanitize newlines in event stream fields to prevent SSE injection (840ac5c)

... (truncated)

Changelog

Sourced from h3's changelog.

Commits
  • b72bb57 chore(release): v1.15.10
  • d8ef318 remove resolutions for h3
  • 26fec6f chore: update deps
  • ...

    Description has been truncated