4.10.7

expressjs/express4.10.7Jan 5, 2015by dougwilson

AI Summary

Express 4.10.7 is a patch release focused on bug fixes and dependency updates. Key fixes include resolving duplicate methods in the `Allow` header for OPTIONS requests and correcting an incorrect 'Request aborted' message for `res.sendFile` with HEAD or 304 responses. The release also addresses a potential open redirect vulnerability in serve-static when mounted at root.

Key Highlights

Fixed `Allow` header for OPTIONS requests to not contain duplicate methods
Fixed incorrect 'Request aborted' message for `res.sendFile` when handling HEAD or 304 responses
Fixed potential open redirect vulnerability in serve-static when mounted at root
Updated debug dependency to ~2.1.1
Updated on-finished dependency to ~2.2.0

Full Release Notes

- Fix `Allow` header for `OPTIONS` to not contain duplicate methods
- Fix incorrect "Request aborted" for `res.sendFile` when `HEAD` or 304
- deps: debug@~2.1.1
- deps: finalhandler@0.3.3
  - deps: debug@~2.1.1
  - deps: on-finished@~2.2.0
- deps: methods@~1.1.1
- deps: on-finished@~2.2.0
- deps: serve-static@~1.7.2
  - Fix potential open redirect when mounted at root
- deps: type-is@~1.5.5
  - deps: mime-types@~2.0.7