node-ecstatic
node-ecstatic copied to clipboard
jfhbrook
A static file server middleware that works with core http, express or on the CLI!
Bumps [minimist](https://github.com/substack/minimist) from 1.2.0 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR aeb3e27 1.2.5...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
TL;DR - [The most valuable thing ecstatic can do for the JavaScript ecosystem](https://github.com/request/request/issues/3142) is to self-destruct, never to cut a new release again. # 2009 I once had a friend...
Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.7.1 to 2.8.9. Changelog Sourced from hosted-git-info's changelog. 2.8.9 (2021-04-07) Bug Fixes backport regex fix from #76 (29adfe5), closes #84 2.8.8 (2020-02-29) Bug Fixes #61 & #65...
Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.1.2 to 4.7.7. Changelog Sourced from handlebars's changelog. v4.7.7 - February 15th, 2021 fix weird error in integration tests - eb860c0 fix: check prototype property access in...
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...
https://github.com/jfhbrook/node-ecstatic/blob/ae7a39b1ecdbe3aa8c0162ab2c3f7365bf9a6d75/lib/ecstatic.js#L23-L31 Windows pathname parsing is incorrect https://github.com/jfhbrook/node-ecstatic/blob/ae7a39b1ecdbe3aa8c0162ab2c3f7365bf9a6d75/lib/ecstatic.js#L393-L399 Or modify here to ```js if (!parsed.pathname.match(/\/$/)) { res.statusCode = 302; const q = parsed.query ? `?${parsed.query}` : ''; res.setHeader('location', `${parsed.pathname}/${q}`); res.end(); return;...
Thank you for fixing Backport Open Redirect vulnerability, but it breaks on Windows machines. `path.normalize("/path/to/file")` returns `\path\to\file` on Windows, and it doesn't work in browsers.
I just found out that currently only the latest version of ecstatic is available via npm: ``` $ npm view ecstatic versions --json [ "4.1.2" ] ``` Could you make...
#247 flagged an issue where many (non-404) status codes aren't respecting handleError=false and always respond with an ecstatic-served error page. I think error handling in ecstatic is a little bizarre...
https://github.com/jfhbrook/pickleback This will allow us to test ecstatic without spinning up real servers on real ports. This could be part of a greater effort to refactor the tests, which cover...