GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Comparing v6.27.0...v6.28.0 · nodejs/undici
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: nodejs/undici
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading

Uh oh!

There was an error while loading. Please reload this page.
base: v6.27.0
Loading
Loading
...
head repository: nodejs/undici
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading

Uh oh!

There was an error while loading. Please reload this page.
compare: v6.28.0
Loading
Loading
  • 7 commits
  • 13 files changed
  • 5 contributors

Commits on Jul 23, 2026

  1. fix: harden cookie domain, path, and unparsed attribute validation 

    Signed-off-by: Matteo Collina <[email protected]>
    @KhafraDev @mcollina
    KhafraDev authored and mcollina committed Jul 23, 2026
    Configuration menu
    • View commit details
    • Copy full SHA for af74840
    • Browse repository at this point
    Copy the full SHA
    af74840 View commit details
    Browse the repository at this point in the history

  2. fix(retry): reject partial content length mismatch 

    Signed-off-by: Matteo Collina <[email protected]>
    @mcollina
    mcollina committed Jul 23, 2026
    Configuration menu
    • View commit details
    • Copy full SHA for cba3a52
    • Browse repository at this point
    Copy the full SHA
    cba3a52 View commit details
    Browse the repository at this point in the history

  3. test(retry): correct broken content-range fixtures in retry-handler.js 

    Signed-off-by: Ulises Gascon <[email protected]>
    @UlisesGascon @mcollina
    UlisesGascon authored and mcollina committed Jul 23, 2026
    Configuration menu
    • View commit details
    • Copy full SHA for 4fd5a0c
    • Browse repository at this point
    Copy the full SHA
    4fd5a0c View commit details
    Browse the repository at this point in the history

Commits on Jul 24, 2026

  1. fix: validate coerced header values for CRLF (#5579) 

    Functions bypassed the object guard in processHeader() and were
coerced via template literals without isValidHeaderValue(), allowing
CRLF injection when toString/Symbol.toPrimitive returned embedded
newlines. Validate after coercion on both scalar and array paths.

Signed-off-by: Matteo Collina <[email protected]>
(cherry picked from commit 354a151)
    @mcollina
    mcollina committed Jul 24, 2026
    Configuration menu
    • View commit details
    • Copy full SHA for 2698e49
    • Browse repository at this point
    Copy the full SHA
    2698e49 View commit details
    Browse the repository at this point in the history

  2. fix: validate blob body content type

    @mcollina
    mcollina committed Jul 24, 2026
    Configuration menu
    • View commit details
    • Copy full SHA for 740a0b7
    • Browse repository at this point
    Copy the full SHA
    740a0b7 View commit details
    Browse the repository at this point in the history

  3. Use Node 22 and npm 11 to release 

    Signed-off-by: Matteo Collina <[email protected]>
    @mcollina
    mcollina committed Jul 24, 2026
    Configuration menu
    • View commit details
    • Copy full SHA for 481ecfc
    • Browse repository at this point
    Copy the full SHA
    481ecfc View commit details
    Browse the repository at this point in the history

  4. Bumped v6.28.0 (#5591) 

    Co-authored-by: github-actions <[email protected]>
    @github-actions @mcollina
    2 people authored and mcollina committed Jul 24, 2026
    Configuration menu
    • View commit details
    • Copy full SHA for 01a912e
    • Browse repository at this point
    Copy the full SHA
    01a912e View commit details
    Browse the repository at this point in the history
Loading

This comparison is taking too long to generate.

Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.

You can try running this command locally to see the comparison on your machine:
git diff v6.27.0...v6.28.0

Uh oh!

There was an error while loading. Please reload this page.
You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.