deno.git - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2020-04-28	BREAKING: Remove Deno.EOF, use null instead (#4953)	Nayeem Rahman

2020-04-06	Drop headers with trailing whitespace in header name (#4642)	Andrew Stucki
	This relates directly to [an issue](https://github.com/denoland/deno_std/issues/620) that I initially raised in `deno_std` awhile back, and was reminded about it today when the `oak` project popped up on my github recommended repos. As of now Deno's http servers are vulnerable to the same underlying issue of go CVE-2019-16276 due to the fact that it's based off of ported go code from their old standard library. [Here's the commit that fixed the CVE.](https://github.com/golang/go/commit/6e6f4aaf70c8b1cc81e65a26332aa9409de03ad8) Long story short, some off the shelf proxies and caching servers allow for passing unaltered malformed headers to backends that they're fronting. When they pass invalid headers that they don't understand this can cause issues with HTTP request smuggling. I believe that to this date, this is the default behavior of AWS ALBs--meaning any server that strips whitespace from the tail end of header field names and then interprets the header, when placed behind an ALB, is susceptible to request smuggling. The current behavior is actually specifically called out in [RFC 7230](https://tools.ietf.org/html/rfc7230#section-3.2.4) as something that MUST result in a rejected message, but the change corresponding to this PR, is more lenient and what both go and nginx currently do, and is better than the current behavior.
2020-04-01	Move encode, decode helpers to /std/encoding/utf8.ts, delete /std/strings/ ↵	Ryan Dahl
	(#4565) also removes std/encoding/mod.ts and std/archive/mod.ts which are useless.
2020-03-28	Update to Prettier 2 and use ES Private Fields (#4498)	Kitson Kelly

2020-03-22	clean up textproto code in std (#4458)	Yusuke Sakurai
	- moved and renamed append() into bytes from ws and textproto - renamed textproto/readder_tests.ts -> textproto/test.ts
2020-03-20	Add require-await lint rule (#4401)	Samrith Shankar

2020-03-19	refactor: rename Deno.TestDefinition.skip to ignore (#4400)	Bartek Iwańczuk

2020-03-15	refactor(std): Uncomment disabled tests, use skip option (#4378)	Nayeem Rahman

2020-03-13	fix(std): Use Deno.errors where possible. (#4356)	Oliver Lenehan

2020-02-23	fix: [ws] sock shouldn't throw eof error when failed to read frame (#4083)	Yusuke Sakurai

2020-02-19	Enable TS strict mode by default (#3899)	Maximilien Mellen
	Fixes #3324 Co-authored-by: Kitson Kelly <me@kitsonkelly.com>
2020-02-11	refactor: rewrite tests in std/ to use Deno.test (#3930)	Bartek Iwańczuk

2020-02-07	remove non-null assertion operator from std (part1) (#3900)	Yusuke Sakurai

2019-11-13	Update to TypeScript 3.7 (#3275)	Kitson Kelly
	and update to prettier 1.19 Also, update `assert()` and remove not null assertions where possibly in `cli`. Closes #3273
2019-10-09	Run deno_std tests in github actions	Ryan Dahl

2019-10-09	Move everything into std subdir	Ryan Dahl