RW
db62f9c218
🐛 [Bug]: Naming of routes works wrong after mount #2688 ( #2689 )
2023-10-23 13:58:00 +02:00
M. Efe Çetin
94acde8fe5
🐛 bug: fix method validation on route naming ( #2686 )
...
* 🐛 bug: fix route naming issue when using same path for different methods
* fix linter
* add new testcase for HEAD route
* add comments to tests
* fix tests
2023-10-23 09:12:52 +02:00
dependabot[bot]
37ad7c7990
build(deps): bump github.com/mattn/go-isatty from 0.0.19 to 0.0.20 ( #2679 )
...
Bumps [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty ) from 0.0.19 to 0.0.20.
- [Commits](https://github.com/mattn/go-isatty/compare/v0.0.19...v0.0.20 )
---
updated-dependencies:
- dependency-name: github.com/mattn/go-isatty
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-18 15:53:32 +02:00
RW
6f0d34d39e
Update csrf.md
2023-10-16 14:31:28 +02:00
René Werner
af3999835f
Add more description to GetClientInfo
v2.50.0
2023-10-16 10:35:42 +02:00
RW
c864da091d
prepare release v2.50.0
...
prepare release v2.50.0
2023-10-16 09:59:55 +02:00
Jason McNeil
8c3916dbf4
Merge pull request from GHSA-94w9-97p3-p368
...
* feat: improved csrf with session support
* fix: double submit cookie
* feat: add warning cookie extractor without session
* feat: add warning CsrfFromCookie SameSite
* fix: use byes.Equal instead
* fix: Overriden CookieName KeyLookup cookie:<name>
* feat: Create helpers.go
* feat: use compareTokens (constant time compare)
* feat: validate cookie to prevent token injection
* refactor: clean up csrf.go
* docs: update comment about Double Submit Cookie
* docs: update docs for CSRF changes
* feat: add DeleteToken
* refactor: no else
* test: add more tests
* refactor: re-order tests
* docs: update safe methods RCF add note
* test: add CSRF_Cookie_Injection_Exploit
* feat: add SingleUseToken config
* test: check for new token
* docs: use warning
* fix: always register type Token
* feat: use UUIDv4
* test: swap in UUIDv4 here too
* fix: raw token injection
* fix: merege error
* feat: Sentinel errors
* chore: rename test
* fix: url parse
* test: add path to referer
* test: add expiration tests
* docs: add cookie prefix note
* docs: fix typo
* docs: add warning for refer checks
* test: add referer edge cases
And call ctx.Request.Reset() and
ctx.Response.Reset() before re-using ctx.
2023-10-16 09:06:30 +02:00
M. Efe Çetin
d736d3a644
🐛 bug: fix path checking on route naming ( #2676 )
...
* 🐛 bug: fix path checking on route naming
* fix several tests
* fix several tests
2023-10-16 09:02:53 +02:00
Jason McNeil
cb89cce4ca
Merge pull request #2675 from jscappini/patch-1
...
🩹 Fix: Typo in requestid.md
2023-10-13 11:55:19 -03:00
Javier Scappini
d974cf3c99
Fix typo in requestid.md
...
Minor typo fix in requestid.md.
2023-10-13 11:37:06 +00:00
joey1123455
e70b2e28d6
Cookie parser ( #2656 )
...
* prep for branching
* feature: added a cookie parser and tests appropriate tests
* ✨ feature: added a cookie parser and appropriate tests
* made correction to docs
* linted using gofumpt
* ctx_test linted, cookieParser schema added
* fix lint errors (Cookie parser #2656 )
* removed extra lines, tested return values
---------
Co-authored-by: René Werner <rene.werner@verivox.com>
2023-10-12 10:44:15 +02:00
René Werner
bb90fc1187
fix lint errors
2023-10-11 15:16:35 +02:00
Jason McNeil
b50d91d58e
Merge pull request from GHSA-94w9-97p3-p368
...
* feat: improved csrf with session support
* fix: double submit cookie
* feat: add warning cookie extractor without session
* feat: add warning CsrfFromCookie SameSite
* fix: use byes.Equal instead
* fix: Overriden CookieName KeyLookup cookie:<name>
* feat: Create helpers.go
* feat: use compareTokens (constant time compare)
* feat: validate cookie to prevent token injection
* refactor: clean up csrf.go
* docs: update comment about Double Submit Cookie
* docs: update docs for CSRF changes
* feat: add DeleteToken
* refactor: no else
* test: add more tests
* refactor: re-order tests
* docs: update safe methods RCF add note
* test: add CSRF_Cookie_Injection_Exploit
* feat: add SingleUseToken config
* test: check for new token
* docs: use warning
* fix: always register type Token
* feat: use UUIDv4
* test: swap in UUIDv4 here too
2023-10-11 14:41:42 +02:00
M. Efe Çetin
9292a36e28
🐛 bug: fix nil pointer dereference issue on idempotency middleware ( #2668 )
2023-10-10 08:23:23 +02:00
Josh Larsen
8c69065e83
📚 [Doc] fix incorrect status code source ( #2667 )
...
* fix incorrect status code source
* fix typo
2023-10-10 08:11:18 +02:00
RW
ada2d4affd
Update hooks.md
2023-10-09 08:58:49 +02:00
Jiun Lee
fc2ab3387a
🩹 Fix incorrect log depth when use log.WithContext ( #2666 )
...
fix withContext caller
2023-10-08 13:45:11 +02:00
dependabot[bot]
6ecd607d97
build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 ( #2665 )
...
Bumps [golang.org/x/sys](https://github.com/golang/sys ) from 0.12.0 to 0.13.0.
- [Commits](https://github.com/golang/sys/compare/v0.12.0...v0.13.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sys
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-06 20:08:01 +03:00
Michael Bell
8228da91fc
[filesystem middleware] improve status for SendFile ( #2664 )
...
SendFile response code for success
2023-10-06 13:10:20 +02:00
René Werner
59409f3841
improve sendFile documentation
2023-10-06 11:43:10 +02:00
Tiago Peczenyj
0d3354675b
Fix loop variable captured by func literal ( #2660 )
...
* fix loop variable xxx captured by func literal
* fix middleware/pprof tests
2023-10-05 13:49:57 +02:00
Tiago Peczenyj
ab4e731607
Run gofumpt and goimports ( #2662 )
...
* run goimports -w -local github.com/gofiber/fiber .
* run gofumpt -w -extra .
2023-10-05 13:14:30 +02:00
Tiago Peczenyj
d25dfa4ce7
apply go fix ./... with latest version of go in repository ( #2661 )
...
apply go fix ./...
2023-10-05 12:24:59 +02:00
Tiago Peczenyj
9230be3649
Fix jsonp ignoring custom json encoder ( #2658 )
...
* add unit test to trigger the bug #2675
* implement solution
2023-10-05 10:09:29 +02:00
René Werner
5171f6b505
improve compress middleware documentation
2023-10-05 09:00:11 +02:00
KaptinLin
d00f0b8348
✨ feat: add Reset method to Session struct in session middleware ( #2654 )
2023-10-02 15:19:35 +02:00
KaptinLin
d86c257c89
✨ feat: add Delete method to Store struct in session middleware ( #2655 )
...
* ✨ feat: add Delete method to Store struct in session middleware
* ♻ refactor: enhance Delete method and test cases in session middleware
2023-10-02 15:19:18 +02:00
M. Efe Çetin
fa88733218
🐛 bug: fix PassLocalsToView when bind parameter is nil ( #2651 )
...
* 🐛 bug: fix PassLocalsToView when bind parameter is nil
* fix linter
2023-09-28 14:40:59 +02:00
M. Efe Çetin
6e443f6026
refactor: use utils.AssertEqual instead of t.Fatal on some tests ( #2653 )
2023-09-28 14:40:42 +02:00
M. Efe Çetin
a9447a5b49
ctx: change signatures of GetReqHeaders and GetRespHeaders ( #2650 )
...
* ctx: change signatures of GetReqHeaders and GetRespHeaders
* fix middlewares
2023-09-28 08:31:31 +02:00
Jimmy Li
c0988de91e
📝 middleware: cors: update docs to better explain AllowOriginsFunc ( #2652 )
2023-09-28 08:28:35 +02:00
M. Efe Çetin
e6d6fbe5a8
✨ middleware: cors: allow disabling caching in preflight requests ( #2649 )
2023-09-27 15:06:24 +02:00
dairlair
c89184c155
♻️ Refactor Ctx.Method func to improve code readability ( #2647 )
...
* Refactor Ctx.Method func to improve code readability
* Fix the lint issue with extra tab on blank line
2023-09-26 08:15:33 +02:00
huykn
640fd1f7c7
🐛 fix parse ips return invalid in abnormal case ( #2642 )
...
* 🐛 fix parse ips return invalid in abnormal case
* ♻️ change benchmark to test cases
---------
Co-authored-by: Khúc Ngọc Huy <huykn0710@gmail.com>
2023-09-21 11:06:02 +02:00
RW
e547bea49e
Update cache.md
2023-09-20 09:14:58 +02:00
huykn
59d3eb0762
🐛 fix bug parse custom header ( #2638 )
...
* 🐛 fix bug parse custom header
* 🚨 fix lint when request merge https://github.com/gofiber/fiber/pull/2638
---------
Co-authored-by: Khúc Ngọc Huy <huykn0710@gmail.com>
2023-09-19 18:00:26 +02:00
Juan Calderon-Perez
5d6552e42d
🐛 fix(middleware/adaptor): Reduce memory usage by replacing io.ReadAll() with io.Copy() ( #2637 )
...
* Replace io.ReadAll with io.Copy for Adaptor Middleware
* Add nolint to Close() during benchmark
2023-09-19 08:08:51 +02:00
dependabot[bot]
52f1eb9ddf
build(deps): bump github.com/valyala/fasthttp from 1.49.0 to 1.50.0 ( #2634 )
...
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp ) from 1.49.0 to 1.50.0.
- [Release notes](https://github.com/valyala/fasthttp/releases )
- [Commits](https://github.com/valyala/fasthttp/compare/v1.49.0...v1.50.0 )
---
updated-dependencies:
- dependency-name: github.com/valyala/fasthttp
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-14 14:53:16 +02:00
CuiPeiyu
d0d5e9ee99
[middleware/filesystem]: Set response code ( #2632 )
...
Specified response code
2023-09-14 14:46:34 +02:00
RW
2af907d98d
Update app.go
...
prepare release v2.49.2
v2.49.2
2023-09-14 08:00:10 +02:00
Akarshit Joshi
6d34e23815
[Bug]: Logger Middleware: Enabling color changes padding for some fields #2604 ( #2616 )
...
🐛 Removes extra padding for response code, method
2023-09-11 08:45:00 +02:00
dependabot[bot]
fe65ff8dff
build(deps): bump actions/checkout from 3 to 4 ( #2618 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-06 13:24:24 +02:00
René Werner
b8c9ede6ef
IsFromLocal corrected
2023-09-06 13:20:33 +02:00
dependabot[bot]
d570d95e84
build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 ( #2617 )
...
Bumps [golang.org/x/sys](https://github.com/golang/sys ) from 0.11.0 to 0.12.0.
- [Commits](https://github.com/golang/sys/compare/v0.11.0...v0.12.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sys
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-04 15:40:10 +03:00
)`(-@_.+_^*__*^
328411a06b
Replaced double quotes with backticks in all route parameter strings ( #2591 )
...
* 11-aryan
* Removed the backticks where no special characters is used
* added backticks to path parameters where special characters are escaped
* Replaced double quotes with backticks in all route parameter strings #2591
* Replaced double quotes with backticks in all route parameter strings #2591
---------
Co-authored-by: René Werner <rene@gofiber.io>
2023-09-04 05:40:44 +02:00
RW
b932bf12fc
Update app.go
...
prepare release v2.49.1
v2.49.1
2023-09-02 18:27:18 +02:00
Kacper Soczko
e85ceda999
📚 Add Polish translation - README_pl.md ( #2613 )
...
Add polish translation of github readme
Co-authored-by: Kacper Soczko <kacpersoczko@bluerider.software>
2023-09-02 18:26:34 +02:00
dependabot[bot]
8bb5e21e39
build(deps): bump github.com/valyala/fasthttp from 1.48.0 to 1.49.0 ( #2615 )
...
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp ) from 1.48.0 to 1.49.0.
- [Release notes](https://github.com/valyala/fasthttp/releases )
- [Commits](https://github.com/valyala/fasthttp/compare/v1.48.0...v1.49.0 )
---
updated-dependencies:
- dependency-name: github.com/valyala/fasthttp
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-02 18:26:21 +02:00
Juan Calderon-Perez
8761d948ba
Rollback changes to go.mod file ( #2614 )
...
* Rollback changes to go.mod file
* Format workflow files with prettier, use go1.20 for go.mod file
2023-09-02 07:41:54 +02:00
Jian Lim
d44b03e60a
📝 docs: update README_ko.md ( #2605 )
...
Modifying sentences that are awkward to translate
Translating an untranslated sentence
2023-08-28 08:00:12 +02:00