res.headersSent when availableRegExpDEBUG_MAX_ARRAY_LENGTH</html> in HTML documentDEBUG_FD environment variable set to 3 or highererr cannot be converted to a stringContent-Security-Policy: default-src 'self' headererr.headers is not an objecterr.statusCode if err.status is invaliderr.headers objectstatuses instead of http module for status messagesstatusCode property on Error objectsunpipe module for unpiping requests:// in the pathDEBUG_FD env variable supporton-finished to determine request statusX-Content-Type-Options: nosniff headerRegExptry blockfinalhandler for final response handlingproto exportconnect.createServer() methodconnect.utils functionshasOwnPropertystatusCode property on Errors, in addition to statustype default to application/json for JSON parsertype default to application/x-www-form-urlencoded for urlencoded parserrequire analysishttp-errors module to generate errors.end and .write after endContent-LengthsessionKey optionContent-Type headerstatusCode property on Error objectssecret option for key rotationstatusCode property on Error objectsunpipe module for unpiping requestsETag matching supportmorgan.compile(format) exportdev formatresponse-time token to not include response latencystatus token incorrectly displaying before response in dev formatundefined or a stringreq and res tokensres.getHeader in res tokendev formatskip optionOPTIONSfunction value for template optionOPTIONSDate.prototype.toLocaleDateString to format datefallthrough optionnext() instead of 400constructorres.end(str, encoding)hasOwnProperty is presentcontent-type to parse Content-Type headersdebug messagestype optionextended: true depth limit infinitycontent-type to parse Content-Type headersgzip over deflate on the serverCSRF-Token and XSRF-Token request headerscookie.path to '/', if using cookiescreateErrorname property on constructed errorshasBody Transfer-Encoding check*/*)extended: true array limit dynamicfilter function for wrappinglog optionstore.touch interface for session storesMemoryStore expiration with resave: falseclf, iso, and webbuffer optioncommon and combined formats".end to only proxy to .endreq.sessionID contains a non-string valuearguments.callee usagearrayLimit behaviorObject.prototype:// in the pathhttp-errors module for creating errorsutils-merge module for merging objectshttp-errorsDEBUG_FD env variable supporton-finished to determine request statusdebug messagesheader option for custom header namesuffix optiondigits argument to an options argumentdir argument to filter functionhttp-errorscookie: trueloggerreq.ip integration when immediate: falsecrc instead of buffer-crc32 for speedbytes dependencyparameterLimit option to urlencoded parserurlencoded extended array limit to 100parameterLimit in urlencodedignoreMethods optioncode property on CSRF token errorsutil.inspect if no other representationX-Content-Type-Options: nosniff headerformat is not a function or stringmaxAge (converted by ms)etag to generate ETag headerdebug messageslastModified optionhasbody to be true for content-length: 0res.end(null) callsloggerquery middleware breaking with argument
req.originalUrl valuesreq.session after csurf middlewareres.csrfToken() after req.session.destroy() will now workres.end patch to call correct upstream res.writeextensions optionError.stackTraceLimit is too lowdebug messagestime (converted by ms)TRACE_DEPRECATION environment variable--no-deprecation argument--trace-deprecation argument:remote-user tokencombined log formatcommon log formatdev formatRegExpdotfiles optioncookie.signed option to actually sign cookieres.end patch to return correct valueres.end patch to handle multiple res.end callsmaxAge (converted by ms)setHeaders optionconnect(middleware) -- use app.use(middleware) insteadconnect.createServer() -- use connect() insteadres.setHeader() patch to work with get -> append -> set patterncookie-parser middlewarereq.secretcookie-parser no longer requiredres.cookie no longer requireduid-safe, faster and even less collisionsverify option to json -- use body-parser npm module insteadverify option to urlencoded -- use body-parser npm module insteaddepd modulefinalhandler for final response handlingmedia-typer to parse content-type for charseturlencoded() without provided extended optioninflate: false to turn officonv-litereq.cookies and req.signedCookies are now plain objectsthrowX-Content-Type-Options: nosniff headergenid option to generate custom session IDssaveUninitialized option to control saving uninitialized sessionsunset option to control unsetting req.sessionrand-token by default; reduce collisionsRegExp object for hostnamereq.vhost objectHost headerVary behaviormime to mime-types@1.0.0Vary behaviorETag headerstream.pipe(res) situationsVary when value stored as arrayres.endutils.escapemethodOverride() -- use method-override npm module insteadextended option to urlencoded parserVary headerdigits argumentX-Response-Time headerescape-html for escapingAccept headerENAMETOOLONG as code 414resave such that resave: true worksnext(err) after request fully readreq.body key referencing array or objectres.charset appending charset when content-type has oneresave option to control saving unmodified sessions:response-time token is now empty when immediate used:response-time token is now monotonic:response-time token has precision to 1 μs:status + immediate output in node.js 0.8buffer option to prevent indefinite event loop holdingres.appendHeader that would append in wrong orderres.headerSent from coreres.headerSent -- use res.headersSentres.on("header") -- use on-headers module insteadconnect.version to reflect the actual versiontype optiontype optionname option; replacement for key optionsetImmediate in MemoryStore for node.js >= 0.10res.cookie supportres.appendHeaderres.headerSent to return Booleanres.headersSent for node.js 0.8res.writeHeadreq.timedout propertyrespond option to constructorenable() methodsetImmediateres.cookie() instead of res.setHeader()Buffer of icon as first argumentpath argument is directorysend moduleres.setHeader() instead of res.writeHead() #949 @lo1tumares.flush() for flushing responses\ns with <br/>s in error handlerthreshold option to compress() to prevent compression of small responsesnext(status[, msg])"; makes composition hardnext(status[, msg]) backtimeout() 408 to 503req.ip when present:-delimited stringdebug() for disconnected session storeconnect.timeout() errors to next()defer option to multipart() [Blake Miner]logger(), now utf8. Closes #293err.status = 400 to multipart() errorscompress(). Closes #659:url log tokenstatic() pause regression from "send" integration.write() encoding for zlib inconstancy. Closes #561urlencoded()json()multipart()cookieSession() clear cookie path / domain bug. Closes #636options mutation in static()connect.timeout()directory(). Closes #634connect.static() 404 regression, pass next(). Closes #629json() utf-8 illustration test. Closes #621connect.static() internals to use "send"session() req.session generation with pathname mismatchcookieSession() req.session generation with pathname mismatchlogger() mount checkstaticCache() dont cache responses with set-cookie. Closes #607staticCache() when Cookie is presenterr.buf to urlencoded() and json()static() [timkuijsten]utils.parseRange() with range-parser moduleutils.parseBytes() with bytes moduleutils.modified() with fresh modulecookieSession() regression with invalid cookie signing [shtylman]secret option to cookieSession middleware [shtylman]secret option to session middleware [shtylman]req.remoteUser back to basicAuth() as alias of req.usercookie dependency [shtylman]json()urlencoded()multipart()static middlewareengines to allow newer version of nodestatic() redirect when mounted. Closes #554make benchmarkconnect(fn, fn2, ...). Closes #549reviver function to be passed to JSON.parse [jed]req.cookies regressionsession() browser-session length cookies & examplesquery() "self-aware" [jed]debug() calls to .use() (DEBUG=connect:displatcher)urlencoded() support for GETjson() support for GET. Closes #497strict option to json()session() only set-cookie when modifiedSession#lastAccess property. Closes #399cookieSession() only sets cookie on change. Closes #442connect:dispatcher debug() probesvhost() middlewarecookieParser() signed cookie support to use SHA-2 [senotrusov]static() Range: respond with 416 when unsatisfiablevhost() middleware. Closes #494cookieSession() middleware for cookie-only sessionscompress() middleware for gzip / deflate supportsession() "proxy" setting to trust X-Forwarded-Protojson() middleware to parse "application/json"urlencoded() middleware to parse "application/x-www-form-urlencoded"multipart() middleware to parse "multipart/form-data"cookieParser(secret) support so anything using this middleware may access signed cookiescookieParser()cookieParser()err.status support in Connect's default end-pointstaticCache()res.headerSent checking nodes res._headerSent until node doesbasicAuth() req.remoteUser to req.usersession() to a browser-session cookie. Closes #475bodyParser() to use json(), urlencoded(), and multipart()errorHandler() is now a development-only middlewarenext() errors when possible so applications can unify logging / handlinghttp[s].Server inheritance, now just a function, making it easy to have an app providing both http and https.createServer() (use connect())secret option from session(), use cookieParser(secret)connect.session.ignore array supportrouter() middleware. Closes #262static() index.html support on windowsbodyParser() using formidablereq.body, always default to {}static() redirect option. Closes #398limit(): respond with 413 when content-length exceeds the limitstaticCache() Age header fieldStore inherit from EventEmitterStore#load(sess, fn) to fetch a Session instancestaticCache()res.socket.destroy() to req.socket.destroy()staticCache() middleware, a memory cache for static()res.headerSent checking nodes res._headerSent (remove when node adds this)next() reportingimmediate option to logger(). Closes #321qs >= 0.3.1connect.static() null byte vulnerabilityconnect.directory() null byte vulnerabilitystatic() to postfix "/" on directory. Closes #289== null from logger callback to ignore linegetOnly option to connect.static.send()X-CSRF-Token header field checkqs >= 0.3.0csrf() middleware. Closes #315res._headers logger regression. Closes #318.use()filter function option to directory() [David Rio Deiros]logger() middleware, with extensible tokens and formatsstatic.send() ".." in path without root considered maliciousdirectory(), use originalUrl [Daniel Dickison]directory() middlewareutils.forbidden(res)connect.query() middlewareconnect.directory() middleware for serving directory listingsconnect.static() root with ..connect.static() EBADFconnect.static(). Closes #297connect.static() to check resolved dirname. Closes #294connect.static() when the socket is closedbodyParser() ignoring GET/HEAD. Closes #285devDependenciesstatic() HEAD request. [Andreas Lind Petersen]static()static(). ignores hidden files by default. Closes * Added; expose connect.static.mime.define(). Closes #251Fixed errorHandler middleware for missing stack traces. [aseemk]
next('route') support to jump passed the route itselflimit()store.generate per requeststatic() does not set Content-Type when explicitly set [nateps]errorHandler() {error} contentsrouter will be removed in 2.0router.remove(path[, method]) to remove a routebasicAuth(username, password) supporterrorHandler.title defaulting to "Connect"errorHandler csslogger() https remoteAddress logging [Alexander Simmerl]router.lookup(path[, method])router.match(url[, method])logger() callback function to return an empty string to ignore loggingmime.charsets.lookup() for static(). Closes 245logger() support for format functionlogger() to support mess of writeHead()/progressive api for node 0.4.xlimit() now calls req.destroy()limit() middlewarelimit() middleware will next(err) on failureSession#reload(fn)res.setHeader() patch, preserve casinglogger() using req.originalUrl instead of req.urlres.charsetsession.ignore to be replaced. Closes #227Cache-Control delimiters. Closes #228static.send() invokes callback with connection errorSession#save(fn). Closes #213connect.static.send() for expressconnect.static.send() "path" optionstatic() for index.htmlstack, message, and dump errorHandler option aliasesreq.originalMethod to methodOverridefavicon() maxAge option supportconnect() alternative to connect.createServer()static()cookieParser() will not parse cookies more./examples directorystaticProvider to staticbodyDecoder to bodyParsercookieDecoder to cookieParserstatic(). Closes #123res.end() to commit session datastaticProvider. Closes #198qs dependencynext()ing to one or more routes with parallelonvhost() call so Express (and others) can know when they areServer#listen() to allow regular http.Server#listen() args to work properlyutils.uid() length error [Jxck]compilernext(err) on cookie parse exception instead of ignoringutils.pathname(), memoized url.parse(str).pathnamesession.id issue. Closes #183staticProvider maxAge to 0 not 1 year. Closes #179req.session.id mirroring req.sessionIDconnect.router.methodsX-Powered-By, Server, etcbasicAuth middlewarerouter middlewareconnect.utils to expose utilsconnect.session.Sessionconnect.session.Storeconnect.session.MemoryStoreconnect.middleware to expose the middleware gettersbuffer option to logger for performance increaseServer instances now have the route property exposed for reflectionServer#use()next(true) in router to bypass match attemptsServer#listen() host supportServer#route when Server#use() is called with a route on a Server instancelifetime option to maxAge in staticProviderObject.prototype forEach() and map() methodsconnect.createApp()res.simpleBody()params.{captures,splat} in router middleware, params is an arrayMemoryStoreServer#use() preventing Server instances as the first argnext() to continue calling matched routes#get(), and #set()utils.find() backSession() casts the given object as a Session instancenext() to router callbacks. Closes #46MemoryStore#destroy() removes req.sessionres.redirect("back") to default to "/" when Referr?er is not presentAccept header check. Closes #43connect.Server#use()req.originalUrlreq.url mutation bug when matching connect.Server#use() routesmkdir -p implementation used in bin/connect. Closes #39make install installing lib to $LIB_PREFIX aka $HOME/.node_librariesutil.merge()Object#forEach() remainsutils.htmlEscape()utils.base64Decode()utils.base64Encode()utils.uid()utils.mime, ex utils.mime.types, and utils.mime.type()net.Server support to bin/connectenv.pidfile-V, --version to bin/connectutils.parseCookie()utils.serializeCookie()utils.toBoolean()handleError() supportprocess.connectEnv