6700a8adac
fix(core): add the missed implementation of AxiosError#status property; ( #6573 )
2024-08-23 15:58:38 +03:00
7004707c41
fix(adapter): fix undefined reference to hasBrowserEnv ( #6572 )
2024-08-23 15:23:14 +03:00
6b6b605eaf
fix(sec): CVE-2024-39338 ( #6539 ) ( #6543 )
...
* fix(sec): cve-2024-39338 (#6539 )
* fix(sec): fix test
2024-08-13 20:43:05 +02:00
07a661a2a6
fix(sec): disregard protocol-relative URL to remediate SSRF ( #6539 )
...
* fix(sec): disregard protocol-relative URL to remediate SSRF
Signed-off-by: hainenber <dotronghai96@gmail.com >
* feat(test/unit/regression): add regression test to ensure SNYK-JS-AXIOS-7361793 fixed in future version
Signed-off-by: hainenber <dotronghai96@gmail.com >
* chore: add EoF newline + comments
Signed-off-by: hainenber <dotronghai96@gmail.com >
* chore: fix eslint issues
Signed-off-by: hainenber <dotronghai96@gmail.com >
* Update SNYK-JS-AXIOS-7361793.js
Co-authored-by: tom-reinders <tom-reinders@users.noreply.github.com >
---------
Signed-off-by: hainenber <dotronghai96@gmail.com >
Co-authored-by: tom-reinders <tom-reinders@users.noreply.github.com >
2024-08-13 17:03:25 +02:00
e3c76fc9bd
fix(adapter): fix progress event emitting; ( #6518 )
2024-08-01 16:59:58 +03:00
870e0a76f6
fix(fetch): fix headers getting from a stream response; ( #6401 )
2024-05-19 01:40:21 +03:00
bb5f9a5ab7
fix(fetch): treat fetch-related TypeError as an AxiosError.ERR_NETWORK error; ( #6380 )
2024-05-07 21:26:46 +03:00
81e0455b7b
fix(core/axios): handle un-writable error stack ( #6362 )
...
Co-authored-by: Dmitriy Mozgovoy <robotshara@gmail.com >
2024-05-07 20:57:03 +03:00
a3ff99b59d
feat(adapter): add fetch adapter; ( #6371 )
2024-04-28 22:33:49 +03:00
1a08f90f40
fix: capture async stack only for rejections with native error objects; ( #6203 )
2024-01-25 20:42:38 +02:00
a1938ff073
fix: fixed missed dispatchBeforeRedirect argument ( #5778 )
...
Co-authored-by: Dmitriy Mozgovoy <robotshara@gmail.com >
2024-01-25 00:57:06 +02:00
123f354b92
fix: wrap errors to improve async stack trace ( #5987 )
2024-01-25 00:21:12 +02:00
f4f2b039dd
fix(dns): fixed lookup error handling; ( #6175 )
2024-01-05 01:48:07 +02:00
3c0c11cade
fix(security): fixed formToJSON prototype pollution vulnerability; ( #6167 )
2024-01-03 21:37:32 +02:00
75af1cdff5
fix(security): fixed security vulnerability in follow-redirects ( #6163 )
...
Co-authored-by: Jay <jasonsaayman@gmail.com >
2024-01-03 21:32:50 +02:00
5e7ad38fb0
fix: Regular Expression Denial of Service (ReDoS) ( #6132 )
2023-12-26 22:29:26 +02:00
cff996779b
feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old withCredentials behavior; ( #6046 )
2023-11-14 15:38:25 +02:00
96ee232bd3
fix(CSRF): fixed CSRF vulnerability CVE-2023-45857 ( #6028 )
...
Co-authored-by: DigitalBrainJS <robotshara@gmail.com >
2023-10-26 22:54:06 +03:00
7d45ab2e2a
chore(tests): fixed tests to pass in node v19 and v20 with keep-alive enabled; ( #6021 )
2023-10-22 18:20:44 +03:00
5aaff532a6
fix(dns): fixed lookup function decorator to work properly in node v20; ( #6011 )
2023-10-22 17:12:33 +03:00
e4107797a7
fix(adapters): improved adapters loading logic to have clear error messages; ( #5919 )
2023-09-26 19:43:25 +03:00
4c89f25196
fix(headers): allow content-encoding header to handle case-insensitive values ( #5890 ) ( #5892 )
2023-09-12 15:23:03 +03:00
ca73eb878d
feat: export getAdapter function ( #5324 )
2023-08-26 20:42:25 +03:00
8fda2766b1
fix(headers): fixed common Content-Type header merging; ( #5832 )
2023-08-26 16:26:50 +03:00
d8b4ca0ea5
fix(headers): added support for setting header names that overlap with class methods; ( #5831 )
2023-08-25 21:07:51 +03:00
e18fdd893d
refactor: remove deprecated url-search-params polyfill for URLSearchParams ( #5670 )
2023-04-28 00:58:07 +03:00
2701911260
feat(dns): added support for a custom lookup function; ( #5339 )
2023-04-26 02:04:59 +03:00
df38c949f2
fix(package): export package internals with unsafe path prefix; ( #5677 )
2023-04-26 00:17:21 +03:00
aa372f7306
fix(utils): make isFormData detection logic stricter to avoid unnecessary calling of the toString method on the target; ( #5661 )
2023-04-19 20:14:32 +03:00
a56c866120
fix(params): re-added the ability to set the function as paramsSerializer config; ( #5633 )
2023-04-05 19:44:36 +03:00
a3b246c9de
fix(http): fixed regression bug when handling synchronous errors inside the adapter; ( #5564 )
2023-02-22 21:50:31 +02:00
ea87ebfe6d
fix(headers): fixed the filtering logic of the clear method; ( #5542 )
2023-02-11 16:31:03 +02:00
96d336f527
fix(formdata): add hotfix to use the asynchronous API to compute the content-length header value; ( #5521 )
2023-02-02 00:55:05 +02:00
9263473154
chore(ci): fixed contributors avatar rendering for CHANGELOG.md; ( #5514 )
2023-01-31 17:56:09 +02:00
6ac574e00a
feat(fomdata): added support for spec-compliant FormData & Blob types; ( #5316 )
2023-01-31 01:10:39 +02:00
65e8d1e28c
fix(http): add zlib headers if missing ( #5497 )
2023-01-31 00:49:37 +02:00
9915635c69
fix(headers): fixed & optimized clear method; ( #5507 )
2023-01-31 00:35:06 +02:00
580f1e8033
fix(types): fixed AxiosHeaders to handle spread syntax by making all methods non-enumerable; ( #5499 )
2023-01-26 16:01:06 +02:00
2a71f49bc6
fix(types): renamed RawAxiosRequestConfig back to AxiosRequestConfig; ( #5486 )
2023-01-23 01:09:18 +02:00
6486929f70
Fix AxiosRequestHeaders & AxiosHeaders types; ( #5482 )
2023-01-21 17:31:24 +02:00
08119634a2
fix(types): fixed AxiosRequestConfig header interface by refactoring it to RawAxiosRequestConfig; ( #5420 )
2023-01-06 02:02:08 +02:00
7a2f901f42
Fix/typescript tests ( #5375 )
...
* chore(ci): Add release-it script;
* chore(ci): add `release:no-npm` script to release the package without making an npm release;
* fix(test): fixed `d.ts` typings;
refactor(test): refactor typescript tests;
2022-12-14 22:49:49 +02:00
1e58a659ec
fix: fixed Brotli decompression; ( #5353 )
...
test: added decompression tests;
fix: added legacy `x-gzip` & `x-compress` encoding types;
2022-12-07 20:57:02 +02:00
56e9ca1a86
fix: Add missing HttpStatusCode ( #5345 )
2022-12-06 22:34:48 +02:00
26874603b3
feat: export mergeConfig ( #5151 )
...
Co-authored-by: Jay <jasonsaayman@gmail.com >
2022-12-01 20:41:57 +02:00
9041c7d272
Fixed decompression for responses without Content-Length header ( #5306 )
...
* Fixed decompression for responses without `content-length` header;
* Add Brotli encoding to the `Accept-Encoding` header only if it is supported.
* `content-length` header transformation moved up;
Co-authored-by: Jay <jasonsaayman@gmail.com >
2022-12-01 16:22:20 +02:00
786b113a40
fix: removing multiple/trailing/leading whitespaces ( #5022 )
...
* fix: removing multiple/trailing/leading whitespaces
* Reverting changes in the dist directory
Co-authored-by: Jay <jasonsaayman@gmail.com >
2022-11-25 15:56:31 +02:00
d032edda08
Refactored adapters loader; ( #5277 )
...
Co-authored-by: Jay <jasonsaayman@gmail.com >
2022-11-22 20:53:56 +02:00
a3d901777b
Fixed Z_BUF_ERROR when content-encoding is set but the response body is empty; ( #5250 )
...
Fixed download progress capturing for compressed responses;
Co-authored-by: Jay <jasonsaayman@gmail.com >
2022-11-22 20:49:26 +02:00
b7ee49f637
Added toJSONObject util; ( #5247 )
...
Fixed AxiosError.toJSON method to avoid circular references;
Co-authored-by: Jay <jasonsaayman@gmail.com >
2022-11-22 20:44:24 +02:00
Dmitriy Mozgovoy