Commit Graph

23 Commits

Author SHA1 Message Date
Miroslav Bajtoš d17d2a9551
2.3.1
* Escape strings in HTML output (XSS fix) (Zachery Metcalf)
 * Update LICENSE.md (Diana Lau)
2018-01-25 14:38:01 +01:00
Zachery Metcalf 35328be26b
Escape strings in HTML output (XSS fix)
Modify the template producing HTML error responses to correctly
escape all strings that are possibly coming from the client making the
request. Before this change, the error responses were vulnerable to XSS
(cross-site scripting) attacks.
2018-01-25 14:16:24 +01:00
Miroslav Bajtoš 1117948629
2.3.0
* update strong-globalize to 3.1.0 (shimks)
 * CODEOWNERS: add zbarbuto (Miroslav Bajtoš)
 * Update Issue and PR Templates (#59) (Sakib Hasan)
 * fixed json typo of server/middleware.json (karanssj4)
 * Add CODEOWNER file (Diana Lau)
2017-10-13 13:15:58 +02:00
shimks b4ec4e7645 update strong-globalize to 3.1.0 2017-10-12 22:54:27 -04:00
Miroslav Bajtoš 3bf59a7d17
2.2.0
* Add new option: negotiateContentType (Raj)
2017-07-20 10:27:02 +02:00
Miroslav Bajtoš 323cd4dfbf
2.1.0
* Bump js2xmlparser dependency to version 3.0.0 (Matthew O'Donoghue)
2017-04-18 15:34:51 +02:00
Matthew O'Donoghue 24ece6d9d5 Bump js2xmlparser dependency to version 3.0.0 2017-04-13 11:21:08 +01:00
Miroslav Bajtoš 7fbb7e6439
2.0.0
* Fix markdown formatting in README (Miroslav Bajtoš)
 * Fix the order of arguments in the jsdoc comment. (Charlie Schliesser)
 * Update readme with added XML support (David Cheung)
 * Add a machine-readable "code" property (Zak Barbuto)
 * Upgrade dependencies to their latest versions (Miroslav Bajtoš)
 * Describe "safeFields" option in README (Zak Barbuto)
 * Drop support for Node v0.10/v0.12 (Miroslav Bajtoš)
2017-03-22 10:05:23 +01:00
Miroslav Bajtoš 461867de1d Upgrade dependencies to their latest versions
Also:

 - fix linting errors after upgrading eslint-config-loopback
 - fix a bug discovered by eslint where uknown `?_format`
   was throwing an unhandled error
2017-02-01 09:24:21 +01:00
Miroslav Bajtoš 05d8844399 Drop support for Node v0.10/v0.12
Also add Node 7 to .travis.yml.
2017-01-31 09:31:51 +01:00
Miroslav Bajtoš c8845ff448 1.2.1
* Stop adding safeFields to original options arg (Miroslav Bajtoš)
2017-01-30 15:05:14 +01:00
Miroslav Bajtoš e6126d1548 1.2.0
* Support options.safeFields (Zak Barbuto)
 * Readme cleanup (#36) (Rand McKinney)
 * xml support added (Ahmet Ozisik)
 * Update paid support URL (Siddhi Pai)
 * Downstream ignore dashboard-controller (Simon Ho)
 * Update pt translation file (Candy)
 * Make the examples more clear (Amir Jafarian)
 * Fix readme (Amir Jafarian)
2017-01-30 14:16:24 +01:00
Ahmet Ozisik 06c53d1f73 xml support added 2017-01-09 19:01:52 +03:00
Simon Ho 1bf1bdf6e9 Downstream ignore dashboard-controller 2016-12-09 11:17:57 -08:00
Candy 66173e8fd8 1.1.1
* Update pt translation file (Candy)
 * Update translation files - round#2 (Candy)
 * globalization: add translated strings (gunjpan)
2016-10-07 14:15:16 -04:00
Miroslav Bajtoš 006d281db1 1.1.0
* Fix minor Syntax error (Loay)
 * Globalize strong-error-handler (David Cheung)
 * Update eslint infrastructure (Loay)
 * Add documentation (Loay)
 * Improve grammar in readme. (Richard Pringle)
 * Test with express instead of http server (David Cheung)
 * HTML response for accepted headers (David Cheung)
2016-09-05 15:02:46 +02:00
David Cheung 6c056a09a3 Globalize strong-error-handler 2016-08-17 19:16:14 -04:00
Loay 3c3df0aab5 Update eslint infrastructure 2016-08-17 17:04:07 -04:00
David Cheung 4b29acdcb0 Test with express instead of http server 2016-06-14 12:04:32 -04:00
David Cheung 5646680e5e HTML response for accepted headers 2016-06-14 12:04:32 -04:00
Miroslav Bajtoš 8da15ea4d7 1.0.1
* Remove statusCode from details in Array errors (David Cheung)
2016-05-26 09:24:35 +02:00
Miroslav Bajtoš 225d35994b Initial implementation
The response is always JSON
Options supported: log, debug
2016-05-13 13:10:53 +02:00
Miroslav Bajtoš 5a8c01c2f4 Add project infrastructure
- add license
 - scaffold basic package.json
 - setup eslint linter
 - setup Travis CI
2016-05-13 12:58:28 +02:00