Repository navigation

All pull requests

Labels (53)Milestones (2)New pull request

Open

(128)

Closed

(2,532)

perf: cache trust proxy lookups in req.ip, protocol and host
#7519Abdel-Monaam-Aouini opened Oct 9, 2026Contributor
perf: cache parsed req.query per request
#7517Abdel-Monaam-Aouini opened Oct 9, 2026Contributor
perf: set default html and json content types directly
#7516Abdel-Monaam-Aouini opened Oct 9, 2026Contributor
perf: skip content-type re-parse in setCharset for utf-8
#7515Abdel-Monaam-Aouini opened Oct 9, 2026Contributor
fix(res.send): preserve DataView byte ranges
#7511nikhiljangid120 opened Oct 7, 2026
1
fix(res.redirect): avoid Content-Length with Transfer-Encoding
#75080d00ciallo0721 opened Oct 6, 2026
test: cover res.status boundaries and validation
#7504renanmpimentel opened Oct 5, 2026
2
fix(app.listen): remove the listen error handler after a successful start
#7501gophersg opened Oct 2, 2026
4
fix(security): Prototype-pollution write via __proto__ route param in route-separation user loader
#7496failsafesecurity opened Sep 29, 2026
2
fix(security): Stored XSS in online example via unescaped User-Agent rendered into the visitor list
#7495failsafesecurity opened Sep 29, 2026
fix(res.send): add Content-Length only if Transfer-Encoding is not present
#7485hktitof opened Sep 24, 20261 of 2 tasks
4
perf: memoise the Content-Type resolution in res.set, res.type and setCharset
#7481nigrosimone opened Sep 20, 2026
fix: acceptParams truncates quoted values containing a semicolon
#7479mdalikadar opened Sep 19, 2026
2
docs: fix parameter name in req.acceptsLanguages JSDoc
#7470hxperl opened Sep 15, 2026
fix(res.sendFile): treat the app etag setting as a default, not an override
#7467NgoQuocViet2001 opened Sep 12, 2026
4
Make it clear what arguments req.accepts* functions accept
#7452krzysdz opened Sep 2, 2026Contributor1 task
fix: restore req/res prototypes when a mounted app hands control back
#7428lazerg opened Aug 25, 2026Contributor
5
test: add test cases for null, string, and NaN status codes in res.sendStatus
#7423aoright opened Aug 19, 2026
fix: support raw ArrayBuffer in res.send (#7362)
#7410OubaidaAwaw opened Aug 7, 2026
feat(res.send): add BigInt support
#7408spellsaif opened Aug 6, 2026Contributor
fix(res.redirect): fallback to 'Redirecting' for non-standard status …
#7407spellsaif opened Aug 6, 2026Contributor
feat: add app-aware router creation
#7396armanmikoyan opened Jul 27, 2026
1
fix(req.get): perform case-insensitive header lookup
#7395armanmikoyan opened Jul 25, 2026
2
fix(view): avoid opaque TypeError for view names ending in "."
#7393Errr0rr404 opened Jul 23, 20261 task done
Fix view engine resolution for view names ending in a dot
#7392aryamirani opened Jul 23, 2026

Navigation Menu

Repository navigation

All pull requests

perf: cache trust proxy lookups in req.ip, protocol and host

perf: cache parsed req.query per request

perf: set default html and json content types directly

perf: skip content-type re-parse in setCharset for utf-8

fix(res.send): preserve DataView byte ranges

fix(res.redirect): avoid Content-Length with Transfer-Encoding

test: cover res.status boundaries and validation

fix(app.listen): remove the listen error handler after a successful start

fix(security): Prototype-pollution write via proto route param in route-separation user loader

fix(security): Stored XSS in online example via unescaped User-Agent rendered into the visitor list

fix(res.send): add Content-Length only if Transfer-Encoding is not present

perf: memoise the Content-Type resolution in res.set, res.type and setCharset

fix: acceptParams truncates quoted values containing a semicolon

docs: fix parameter name in req.acceptsLanguages JSDoc

fix(res.sendFile): treat the app etag setting as a default, not an override

Make it clear what arguments `req.accepts*` functions accept

fix: restore req/res prototypes when a mounted app hands control back

test: add test cases for null, string, and NaN status codes in res.sendStatus

fix: support raw ArrayBuffer in res.send (#7362)

feat(res.send): add BigInt support

fix(res.redirect): fallback to 'Redirecting' for non-standard status …

feat: add app-aware router creation

fix(req.get): perform case-insensitive header lookup

fix(view): avoid opaque TypeError for view names ending in "."

Fix view engine resolution for view names ending in a dot

Pull requests