1.9.0

版本发布时间: 2017-03-27 12:28:53

expressjs/csurf最新发布版本:1.11.0(2020-01-19 12:28:13)

Pass invalid csrf token error to next() instead of throwing
Pass misconfigured error to next() instead of throwing
Provide misconfigured error when using cookies without cookie-parser
deps: cookie@0.3.1
- Add sameSite option
- Fix cookie Max-Age to never be a floating point number
- Improve error message when expires is not a Date
- Throw better error for invalid argument to parse
- Throw on invalid values provided to serialize
- perf: enable strict mode
- perf: hoist regular expression
- perf: use for loop in parse
- perf: use string concatination for serialization
deps: csrf@~3.0.3
- Use tsscmp module for timing-safe token verification
- deps: base64-url@1.2.2
- deps: rndm@1.2.0
- deps: uid-safe@2.1.1
deps: http-errors@~1.5.0
- Add HttpError export, for err instanceof createError.HttpError
- Support new code 421 Misdirected Request
- Use setprototypeof module to replace __proto__ setting
- deps: inherits@2.0.1
- deps: statuses@'>= 1.3.0 < 2'
- perf: enable strict mode
perf: enable strict mode
perf: remove argument reassignment