h3js/h3 v2.0.1-rc.17

on GitHub

compare changes

🚀 Enhancements

• Add redirectBack utility (#1329)
• Add removeRoute (#1331)

🩹 Fixes

• cors: Preserve CORS headers on error responses (#1352)
• sse: Mark writer as closed on write failure (#1322)
• request: Include Allow header in 405 response (#1314)
• sse: Sanitize carriage returns in event stream data and comments (79cabe3)
• mount: Normalize percent-encoded pathname in requestWithBaseURL (0295f90)
• static: Prevent path traversal via double-encoded dot segments (8e9993f)
• mount: Enforce path segment boundary in startsWith check (7ccc9e2)

📖 Documentation

• Fix typo (#1351)
• Improve security notes about proxy utils (448e7eb)

🏡 Chore

• Enable type-aware linting with oxc-lint (#1349)

❤️ Contributors

• Pooya Parsa (@pi0)
• Wind (@productdevbook)
• Terminal Chai (@terminalchai)
• Nick Spaargaren (@nickspaargaren)
• Gabriel Trzimajewski (@Sn0wye)