A
actix-files: v0.7.3
Fix stored XSS vulnerability when Files::show_files_listing() is explicitly enabled. GHSA-5rrw-whjq-pmhh
A
actix-http: v3.20.0
Release oversized HTTP/1 write buffers after flushing to reduce memory retained by idle connections. Minimum supported Rust version (MSRV) is now 1.89.
A
actix-test: v0.1.6
Add TestServer::query() method for issuing HTTP QUERY requests. Minimum supported Rust version (MSRV) is now 1.89.
A
actix-web: v4.18.1
Add TestRequest::query() method for constructing HTTP QUERY test requests.
A
awc: v3.11.0
Add Client::query() method for constructing HTTP QUERY requests. Minimum supported Rust version (MSRV) is now 1.89.
A
actix-http-test: v3.4.0
Add TestServer::{query, squery}() methods for constructing HTTP QUERY requests. Minimum supported Rust version (MSRV) is now 1.89.
A
actix-web: v4.18.0
Add #[query] route handler macro. Add support for method = "QUERY" in #[route]. Add guard::Query() method guard. Document that HttpServer::on_connect() must be called before bind(). Minimum supported Rust version (MSRV) is now 1.89.
A
actix-web-codegen: v4.5.0
Add #[query] route handler macro Add support for method = "QUERY" in #[route]. Minimum supported Rust version (MSRV) is now 1.89.
A
actix-files: v0.7.2
Evaluate request preconditions before processing Range headers when serving a NamedFile. Ignore Range headers for methods other than GET when serving a NamedFile. Ignore If-Unmodified-Since when If-Match is present when serving a NamedFile. Respond with 412 Precondition Failed for matching If-None-Match on methods other than GET and HEAD when serving a NamedFile. Ignore If-Modified-Since on method…
A
actix-files: v0.7.1
Honor If-Range headers when serving a NamedFile. Use the Windows file index in NamedFile ETags to distinguish different files with the same size and modification time. Minimum supported Rust version (MSRV) is now 1.89.
A
actix-web: v4.17.0
Fix Accept parsing and preference selection for quality parameters before media type parameters and for quoted parameter values containing semicolons. Update zstd dependency to 0.14. Update brotli dependency to 9.
A
awc: v3.10.0
Parse all Connection header options when validating WebSocket handshakes. Update zstd dependency to 0.14. Update brotli dependency to 9.
A
actix-http: v3.19.0
Fix QualityItem parsing to recognize quality parameters before other parameters and ignore semicolons inside quoted values. Parse header quality values as exact decimals and reject invalid numeric syntax. Round float quality conversions to the nearest thousandth to preserve all three decimal places. Reject WebSocket frames whose 64-bit payload length has the most significant bit set, or whose leng…
A
actix-web: v4.16.0
The TLS crate features no longer enable the http2 crate feature. Prevent TestRequest app data retention by disabling its request pooling.
A
actix-http: v3.18.13
Emit required Connection options for HTTP/1 response upgrade advertisements without changing connection state. Parse all HTTP/1 Connection header options consistently. Only treat Expect: 100-continue as a continue expectation in HTTP/1.1 requests. Reject WebSocket handshakes with a Sec-WebSocket-Key value that is not valid Base64 or does not decode to 16 bytes. Reject WebSocket Close frames with p…
A
actix-http: v3.18.12
Flush compressed response bodies when the source is pending.
A
actix-http: v3.18.11
Reject requests with a missing or duplicate Host header in HTTP/1.1 requests.
A
actix-http: v3.18.10
Allow trailer fields after chunked bodies.
A
actix-http: v3.18.9
Reject empty chunked size lines.
A
actix-multipart: v0.8.5
No significant changes since 0.8.4.
A
actix-http: v3.13.8
Ensure "chunked" declaration is final part of Transfer-Encoding header.
A
awc: v3.9.0
Add camel-case header controls to WebsocketsRequest via camel_case_headers() and set_camel_case_headers(). Update hickory-resolver dependency to 0.26.
A
actix-http: v3.13.7
Fix Removed::len() panicking when inserting a new header or removing an absent header.
A
actix-http-test: v3.3.0
Remove unused direct actix-tls dependency. Minimum supported Rust version (MSRV) is now 1.88.
A
actix-web-codegen: v4.4.0
Update syn dependency to 3. Minimum supported Rust version (MSRV) is now 1.88.
A
actix-multipart: v0.8.4
No significant changes since 0.8.3.
A
actix-multipart-derive: v0.8.1
Update syn dependency to 0.3. Update darling dependency to 0.24.
A
actix-multipart: v0.8.3
Field data that is similar to boundaries is now yielded in the Field stream before returning an incomplete error.
A
actix-multipart: v0.8.2
Fix multipart field parsing hanging at EOF with missing or incomplete boundaries by returning MultipartError::Incomplete.
A
actix-http: v3.13.6
Removes h2 from the TLS ALPN offer list when http2 crate feature is disabled.