summaryrefslogtreecommitdiff
path: root/std
AgeCommit message (Collapse)Author
2020-04-12add copyFile & copyFileSync to std/node/fs (#4726)Ali Hasani
2020-04-12refactor(std/multipart): make readForm() return value more type safe (#4710)Yusuke Sakurai
2020-04-10remove unnecessary delay in std/signal tests (#4703)Chris Knight
2020-04-10fix(std/http): verify cookie name & update SameSite type (#4685)木杉
2020-04-10fix(std/testing/asserts): change left/right to actual/expected (#4697)Chris Knight
2020-04-10feat(std/signal): add utility for listening to signal events (#4696)Chris Knight
2020-04-10BREAKING: Make fetch API more web compatible (#4687)Ryan Dahl
- Removes the __fetch namespace from `deno types` - Response.redirect should be a static. - Response.body should not be AsyncIterable. - Disables the deno_proxy benchmark - Makes std/examples/curl.ts buffer the body before printing to stdout
2020-04-09Fix build - 2becae broke CI (#4686)Ryan Dahl
2020-04-09feat(std/log): improvements and new log handler (#4674)Chris Knight
2020-04-08feat(std/node): add isPrimitive (#4673)Ali Hasani
2020-04-08feat(std/node): add fs.mkdir functions and fs.exists tests (#4660)Ali Hasani
2020-04-07BREAKING: Rename 'deno fetch' subcommand to 'deno cache' (#4656)Akshat Agarwal
2020-04-07file_server: use text/typescript instead of application/typescript (#4620)木杉
I just tried it and found that using application/typescript, the browser will download the file directly, I think that .ts should be mapped to application/javascript or text/typescript
2020-04-07feat(std/http/server): Respond with 400 on request parse failure (#4614)Nayeem Rahman
2020-04-06Add exists and existsSync to std/node (#4655)Ali Hasani
2020-04-06Remove media_types from std/README.md (#4650)Ali Hasani
2020-04-06remove std/testing/runner.ts (#4649)Bartek Iwańczuk
2020-04-06Drop headers with trailing whitespace in header name (#4642)Andrew Stucki
This relates directly to [an issue](https://github.com/denoland/deno_std/issues/620) that I initially raised in `deno_std` awhile back, and was reminded about it today when the `oak` project popped up on my github recommended repos. As of now Deno's http servers are vulnerable to the same underlying issue of go CVE-2019-16276 due to the fact that it's based off of ported go code from their old standard library. [Here's the commit that fixed the CVE.](https://github.com/golang/go/commit/6e6f4aaf70c8b1cc81e65a26332aa9409de03ad8) Long story short, some off the shelf proxies and caching servers allow for passing unaltered malformed headers to backends that they're fronting. When they pass invalid headers that they don't understand this can cause issues with HTTP request smuggling. I believe that to this date, this is the default behavior of AWS ALBs--meaning any server that strips whitespace from the tail end of header field names and then interprets the header, when placed behind an ALB, is susceptible to request smuggling. The current behavior is actually specifically called out in [RFC 7230](https://tools.ietf.org/html/rfc7230#section-3.2.4) as something that MUST result in a rejected message, but the change corresponding to this PR, is more lenient and what both go and nginx currently do, and is better than the current behavior.
2020-04-06feat(std/flags): pass key and value to unknown (#4637)Andreas
2020-04-04fix(std/testing): formatting bigint (#4626)Khải
2020-04-04doc: Improve the style guide (#4627)Nayeem Rahman
2020-04-03fix erroneous assert (#4608)dubiousjim
2020-04-03Remove /std/media_types (#4594)Ryan Dahl
2020-04-02Revert "Respond with 400 on request parse failure" (#4593)Ryan Dahl
readRequest should not write a response. This reverts commit 017a611131a35ccf5dbfce6a2a665fa569e32ec1.
2020-04-01Move encode, decode helpers to /std/encoding/utf8.ts, delete /std/strings/ ↵Ryan Dahl
(#4565) also removes std/encoding/mod.ts and std/archive/mod.ts which are useless.
2020-04-01std(media_types): change .ts content type to application/typescript (#4563)木杉
2020-04-01Remove std/strings/pad.ts because String.prototype.padStart exists (#4564)Ryan Dahl
2020-04-01fix(file_server): use media_types for Content-Type header (#4555)Khải
2020-04-01fix(#4550): setCookie should append cookies (#4558)木杉
2020-04-01refactor(cli/js/testing): Reduce testing interfaces (#4451)Nayeem Rahman
* Reduce "testing" interfaces * Use a callback instead of a generator for Deno.runTests() * Default RunTestsOptions::reportToConsole to true * Compose TestMessage into a single interface
2020-04-01feat(std/http/server): Respond with 400 on request parse failure (#4551)Nayeem Rahman
2020-03-31used native padStart/End where possible (#4537)Ondřej Žára
2020-03-30fix(std/encoding/csv): enable skipped tests (#4520)uki00a
2020-03-30feat: Add common to std/path (#4527)Kitson Kelly
2020-03-29doc: Fix some typos and improve a few sentences in the std manual (#4522)Niklas Eicker
2020-03-28Update to Prettier 2 and use ES Private Fields (#4498)Kitson Kelly
2020-03-28upgrade: rusty_v8 to v0.3.9 (#4505)Ryan Dahl
2020-03-24Revert "avoid using same port number for test (#4147)"Bartek Iwańczuk
Ref #4467 This reverts commit 60cee4f045778777a16b6fffd6d5b9a1400d7246.
2020-03-24docs: update manual about how to run tests for std (#4462)uki00a
2020-03-22clean up textproto code in std (#4458)Yusuke Sakurai
- moved and renamed append() into bytes from ws and textproto - renamed textproto/readder_tests.ts -> textproto/test.ts
2020-03-22re-enable a test (#4461)uki00a
2020-03-21BREAKING CHANGE Rename Deno.run's args to cmd (#4444)Akshat Agarwal
This is to avoid confusion with Deno.args which does not include the executable to be run.
2020-03-21avoid using same port number for test (#4147)Yusuke Sakurai
2020-03-20Remove DENO_BUILD_MODE and DENO_BUILD_PATH (#4431)Ryan Dahl
* Remove DENO_BUILD_MODE and DENO_BUILD_PATH Also remove outdated docs related to ninja/gn. * fix * remove parameter to build_mode() * remove arg parsing from benchmark.py
2020-03-20refactor(std/http/server): Remove bad error handling (#4435)Nayeem Rahman
2020-03-20use prebuilt "not implemented" error (#4442)dubiousjim
2020-03-20Add require-await lint rule (#4401)Samrith Shankar
2020-03-20fix(std/http): Properly await ops in a server test (#4436)Nayeem Rahman
2020-03-19fix(std/http): Fix respond error test on Windows (#4408)Nayeem Rahman
2020-03-19std(http/server): close open connections on server close (#3679)Bartek Iwańczuk
Due to structure of "Server" for each open connection there's a pending "read" op. Because connection owned by "Server" are not tracked, calling "Server.close()" doesn't close open connections. This commit introduces simple tracking of connections for server and ensures owned connections are closed on "Server.close()".
generated by cgit v1.2.3 (git 2.25.1) at 2025-07-17 08:44:26 +0000