2.5.0
·
5885 commits
to main
since this release
baa6804
This commit was signed with the committer’s verified signature.
darrachequesne
Damien Arrachequesne
The default value of the maxHttpBufferSize option has been decreased from 100 MB to 1 MB, in order to prevent attacks by denial of service.
Security advisory: GHSA-j4f2-536g-r55m
Bug Fixes
- fix race condition in dynamic namespaces (05e1278)
- ignore packet received after disconnection (22d4bdf)
- only set 'connected' to true after middleware execution (226cc16)
- prevent the socket from joining a room after disconnection (f223178)
Links:
- Diff: 2.4.1...2.5.0
- Client release: 2.5.0
- engine.io version:
~3.6.0(diff) - ws version:
~7.4.2