| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| 7.15.2 source code.tar.gz | 2026-07-26 | 150.9 kB | |
| 7.15.2 source code.zip | 2026-07-26 | 177.9 kB | |
| README.md | 2026-07-26 | 611 Bytes | |
| Totals: 3 Items | 329.5 kB | 2 | |
Security
- Reject non-printable-ASCII and percent-escaped URI hosts and
Hostheaders (GHSA-v5mv-p594-2x33) - Reject request URI hosts that contain a URI authority delimiter (GHSA-v5mv-p594-2x33)
- Reject numeric-looking URI hosts with trailing dots, read as IPv4 addresses (GHSA-v5mv-p594-2x33)
- Treat numeric-in-any-base and percent-escaped cookie domains as exact-match-only (GHSA-f7vp-7xgx-4w4r)
- Regenerate a derived
Hostheader after client URI rewrites (GHSA-v5mv-p594-2x33)
Fixed
- Preserve
RequestExceptionwhen the stream handler rejects a request before opening a stream