HTTP.jl Files

HTTP v2.14.0

Diff since v2.13.5

Changed

• Router matches routes against the percent-decoded request path, one segment at a time, so /%61dmin takes the route /admin. Before, routes compared the raw text while fileserver read the decoded path, so a route that guarded /admin/** did not cover other spellings of the same files. getparam and getparams still return segments as sent. fileserver and servefile answer 400 for a path with an encoded slash (%2F) or a name ending in a dot or space. (#1538)
• A URL host that ends in a number must be a dotted-decimal IPv4 address, such as 127.0.0.1. Other numeric forms, such as 127.1, 0x7f.1, 2130706433 or 010.0.0.1, now throw an ArgumentError, also in a redirect Location. System resolvers read them differently on each platform, while URL parsers such as URIs.jl read a host name. (#1537)

See CHANGELOG.md for details.

(Release notes generated via AI.)

Merged pull requests:

• Require dotted-decimal IPv4 addresses in URL hosts (#1537) (@quinnj-bot[bot])
• Match router paths on percent-decoded segments (#1538) (@quinnj-bot[bot])
• Release 2.14.0 (#1546) (@quinnj-bot[bot])